Function at 0x5ee628
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffde0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x220], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x5ee8c6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405ea8
mov ebx, 1
lea eax, [ebp - 0x217]
mov edx, dword [0x659f8c]
mov edx, dword [edx]
mov edx, dword [edx + ebx*4 + 0x454]
test edx, edx
je 0x5ee69c
mov ecx, dword [0x659f8c]
cmp dword [edx + 0x14], 0
je 0x5ee69c
mov ecx, dword [0x659f8c]
mov edx, dword [edx + 0x14]
movzx edx, byte [edx + 4]
mov byte [eax], dl
jmp 0x5ee69e
mov byte [eax], bl
inc ebx
inc eax
cmp ebx, 0x100
jne 0x5ee66c
mov eax, dword [0x659f8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1bc]
mov dword [ebp - 0x14], eax
mov eax, 1
call fcn.005edfe0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp + 8]
mov dword [edx - 4], eax
jmp 0x5ee6ed
mov eax, dword [0x659f8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1bc]
cmp eax, dword [ebp - 0x14]
jne 0x5ee6ff
mov eax, dword [0x65a3f4]
mov eax, dword [eax]
call fcn.0048c808
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp + 8]
sub eax, dword [edx - 4]
cmp eax, 0x1f4
jb 0x5ee6cf
mov eax, dword [0x659f8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1bc]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x118]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.00403c80
mov eax, dword [ebp - 8]
call fcn.004060b0
mov esi, eax
test esi, esi
jle 0x5ee8a0
mov ebx, 1
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
movzx eax, word [eax + ebx*2 - 2]
push eax
call sub.user32.dll_VkKeyScanExW
cmp ax, 0xffff
jne 0x5ee765
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
movzx edx, word [edx + ebx*2 - 2]
call fcn.00405fd4
jmp 0x5ee88a
mov edx, eax
and dx, 0xff
movzx edx, dx
movzx edx, byte [ebp + edx - 0x218]
mov ecx, dword [0x659f8c]
mov ecx, dword [ecx]
movzx edx, byte [ecx + edx + 0x853]
mov byte [ebp - 0xd], dl
shr ax, 8
mov byte [ebp - 0xe], al
movzx eax, byte [ebp - 0xe]
and al, 1
cmp al, 1
sete al
xor ecx, ecx
mov edx, 0x81
call fcn.0042fe70
mov byte [ebp - 0x108], al
movzx eax, byte [ebp - 0xe]
and al, 2
cmp al, 2
sete al
xor ecx, ecx
mov edx, 0x81
call fcn.0042fe70
mov byte [ebp - 0x107], al
movzx eax, byte [ebp - 0xe]
and al, 4
cmp al, 4
sete al
xor ecx, ecx
mov edx, 0x81
call fcn.0042fe70
mov byte [ebp - 0x106], al
lea eax, [ebp - 4]
mov edx, 0x5ee8d8
call fcn.00405f0c
mov eax, dword [ebp - 0x18]
push eax
push 0
push 2
mov eax, dword [ebp - 4]
call fcn.004060a0
push eax
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 0x18]
push eax
push 0
movzx edi, byte [ebp - 0xd]
push edi
call sub.user32.dll_MapVirtualKeyExA
push eax
push edi
call sub.user32.dll_ToUnicodeEx
sub eax, 1
jb 0x5ee835
je 0x5ee83f
dec eax
sub eax, 0xfe
jb 0x5ee84e
jmp 0x5ee882
lea eax, [ebp - 4]
call fcn.00405ea8
jmp 0x5ee88a
lea eax, [ebp - 4]
mov edx, 1
call fcn.004062f4
jmp 0x5ee88a
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 4]
call fcn.0040b354
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x21c]
mov edx, 1
call fcn.0044f2fc
mov edx, dword [ebp - 0x21c]
lea eax, [ebp - 4]
call fcn.00405f0c
jmp 0x5ee88a
lea eax, [ebp - 4]
call fcn.00405ea8
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.004060bc
mov eax, dword [ebp - 0xc]
inc ebx
dec esi
jne 0x5ee738
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ee8cd
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.00405ec0
lea eax, [ebp - 4]
call fcn.00405ea8
ret