Function at 0x403020
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
sub esp, 0x118
push esi
mov esi, dword [esp + 0x120]
lea eax, [esp + 0xc]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x403280
lea ecx, [esp + 4]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x403280
lea edx, [esp + 4]
push edx
push esi
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x403280
mov eax, dword [esp + 4]
cmp eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov dword [0x45f36c], eax
mov dword [0x45f350], ecx
jae 0x403265
cmp ecx, dword [esp + 0x18]
jae 0x403265
push ebx
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
push edi
push 0x17
call ebp
xor ebx, ebx
test eax, eax
sete bl
xor ecx, ecx
inc ebx
test eax, eax
setne cl
inc ecx
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dl, byte [0x45f248]
mov cl, dl
shr eax, 0xf
and al, 1
xor cl, al
movzx esi, cl
movzx edi, al
movzx ecx, dl
mov edx, dword [0x45f398]
mov eax, edi
and eax, esi
and ecx, esi
xor esi, esi
cmp edx, esi
mov dword [0x45f364], eax
mov dword [0x45f244], ecx
mov dword [0x45f248], edi
je 0x40318b
dec edx
je 0x403156
dec edx
je 0x40310e
dec edx
jne 0x403164
mov dword [0x45f374], 1
mov dword [0x45f398], esi
jmp 0x403164
cmp eax, esi
je 0x403164
push 0x24
call ebp
mov edx, dword [0x45f390]
mov ecx, eax
mov eax, dword [0x45f36c]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jg 0x403106
push 0x25
call ebp
mov edx, dword [0x45f394]
mov ecx, eax
mov eax, dword [0x45f350]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jg 0x403106
mov dword [0x45f398], 3
jmp 0x403164
cmp ecx, esi
je 0x403164
mov dword [0x45f398], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x45f38c]
mov ecx, dword [0x45f388]
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jbe 0x403203
mov dword [0x45f398], esi
jmp 0x403203
cmp eax, esi
je 0x403203
mov dword [0x45f398], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x45f38c], eax
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov edx, dword [0x45f36c]
mov dword [0x45f388], eax
mov eax, dword [0x45f350]
push 0x24
mov dword [0x45f390], edx
mov dword [0x45f394], eax
call ebp
mov edx, dword [0x45f390]
mov ecx, eax
mov eax, dword [0x45f36c]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jg 0x4031fd
push 0x25
call ebp
mov edx, dword [0x45f394]
mov ecx, eax
mov eax, dword [0x45f350]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jle 0x403203
mov dword [0x45f374], esi
push ebx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dl, byte [0x45f238]
mov cl, dl
movzx edx, dl
shr eax, 0xf
and al, 1
xor cl, al
movzx eax, al
movzx ecx, cl
mov edi, eax
and edi, ecx
mov dword [0x45f368], edi
pop edi
mov dword [0x45f238], eax
mov eax, dword [0x45f384]
and edx, ecx
cmp eax, esi
pop ebp
mov dword [0x45f354], edx
pop ebx
je 0x403271
mov dword [0x45f354], esi
mov dword [0x45f368], esi
mov dword [0x45f244], esi
mov dword [0x45f364], esi
mov dword [0x45f384], esi
jmp 0x403271
mov dword [0x45f384], 1
xor esi, esi
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetKeyboardState]
test eax, eax
jne 0x40328a
xor eax, eax
pop esi
add esp, 0x118
ret
cmp dword [0x45f240], esi
jne 0x4032f5
mov eax, dword [0x45f380]
cmp eax, esi
je 0x4032de
dec eax
mov dword [0x45f380], eax
mov byte [esp + 0x42], 0
mov byte [esp + 0x44], 0
mov byte [esp + 0x41], 0
mov byte [esp + 0x43], 0
mov byte [esp + 0x29], 0
mov dword [0x45f364], esi
mov dword [0x45f244], esi
mov dword [0x45f248], esi
mov dword [0x45f368], esi
mov dword [0x45f354], esi
mov dword [0x45f238], esi
xor eax, eax
mov dl, 0x80
movsx ecx, byte [eax + 0x45f250]
cmp ecx, 3
ja case.default.0x4032ee
jmp dword [ecx*4 + 0x40335c]
mov dword [0x45f240], esi
mov dword [0x45f380], 0xa
jmp 0x4032a1
test byte [esp + eax + 0x1c], dl
je case.default.0x4032ee
mov byte [eax + 0x45f250], 1
jmp case.default.0x4032ee
mov byte [eax + 0x45f250], 2
jmp case.default.0x4032ee
test byte [esp + eax + 0x1c], dl
jne case.default.0x4032ee
mov byte [eax + 0x45f250], 3
jmp case.default.0x4032ee
mov byte [eax + 0x45f250], 0
inc eax
cmp eax, 0x100
jl 0x4032e2
mov ecx, dword [0x45f358]
mov dword [0x45f358], esi
mov dword [0x45f35c], ecx
mov eax, 1
pop esi
add esp, 0x118
ret