Function at 0x46b0d0
Capabilities:
Check for time delay via queryperformancecounter
Log keystrokes via polling

Disassembly:
sub esp, 0x58
mov eax, dword [ebx + 0x64]
mov ecx, dword [ebx + 0x60]
push ebp
push esi
mov esi, dword [ebx + 0x34]
push edi
mov edi, dword [ebx + 0x38]
xor ebp, ebp
push eax
push ecx
mov dword [esp + 0x28], ebp
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], ebp
mov dword [ebx + 0x6c], ebp
call fcn.0053b310
add esp, 8
test eax, eax
jne 0x46b152
movsx ecx, word [ebx + 0x68]
movsx eax, word [esp + 0x68]
mov edx, ecx
sub edx, eax
js 0x46b118
mov eax, edx
jmp 0x46b11a
sub eax, ecx
cmp eax, 4
jg 0x46b152
movsx ecx, word [ebx + 0x6a]
movsx eax, word [esp + 0x6a]
mov edx, ecx
sub edx, eax
js 0x46b132
mov eax, edx
jmp 0x46b134
sub eax, ecx
cmp eax, 4
jg 0x46b152
cmp esi, edi
jne 0x46b152
mov dword [esp + 0x20], 1
mov dword [ebx + 0x60], ebp
mov dword [ebx + 0x64], ebp
jmp 0x46b152
xor ebp, ebp
mov ecx, dword [esp + 0x68]
lea edx, [esp + 0x14]
push edx
mov edx, dword [ebx + 0x2c]
lea eax, [esp + 0x20]
push eax
push ecx
sub esp, 0x24
mov edi, esp
mov ecx, 9
mov esi, ebx
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.00467ff0
add esp, 0x34
cmp dword [esp + 0x6c], ebp
je 0x46b1b4
cmp dword [ebx + 0x58], ebp
je 0x46b18b
mov ebp, dword [ebx + 0x34]
jmp 0x46b18e
mov ebp, dword [ebx + 0x38]
mov esi, dword [esp + 0x1c]
cmp ebp, esi
mov eax, ebp
jl 0x46b19a
mov eax, esi
cmp ebp, esi
mov dword [esp + 0xc], eax
mov edi, ebp
jg 0x46b1a6
mov edi, esi
xor ecx, ecx
cmp eax, ebp
sete cl
xor ebp, ebp
mov dword [ebx + 0x58], ecx
jmp 0x46b1c7
mov esi, dword [esp + 0x1c]
mov eax, esi
mov edi, esi
mov dword [esp + 0xc], eax
mov dword [ebx + 0x58], 1
cmp dword [esp + 0x20], ebp
mov dword [esp + 0x10], edi
je 0x46b222
mov edx, dword [esp + 0x14]
mov ecx, dword [ebx + 0x2c]
push edx
lea eax, [esp + 0x10]
push eax
push ebx
push ecx
lea ecx, [esp + 0x20]
mov edx, esi
call fcn.00467d20
add esp, 0x10
cmp dword [esp + 0x18], ebp
je 0x46b20a
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], esi
jmp 0x46b222
cmp esi, dword [esp + 0x24]
jge 0x46b21a
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
jmp 0x46b222
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x10]
push edi
mov ecx, ebx
call fcn.0046aee0
add esp, 4
cmp dword [esp + 0x18], ebp
je 0x46b340
mov eax, dword [0x692a7c]
cmp eax, ebp
mov edx, dword [esp + 0x14]
mov dword [ebx + 0x70], edx
mov dword [esp + 0x18], ebp
jne 0x46b2b7
push 0x685a18
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x46b271
lea eax, [esp + 0x30]
push eax
mov dword [0x692a7c], 1
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x46b289
mov dword [0x692a7c], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ebp
mov edi, 0xfa
lea esi, [esp + 0x30]
call fcn.0053b1d0
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x46b2c9
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ecx, ecx
test ax, ax
setl cl
mov eax, ecx
jmp 0x46b2db
cmp eax, 1
jne 0x46b27b
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x46b289
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
xor edx, edx
test ax, ax
setl dl
mov eax, edx
cmp eax, ebp
je 0x46b310
push ebp
push 0x202
push 0x202
push ebp
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x46b310
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push ecx
push edx
call fcn.0053b310
add esp, 8
test eax, eax
je 0x46b297
call fcn.0050f8f0
mov ebp, eax
test ebp, ebp
je 0x46b325
mov dword [esp + 0x6c], 1
jmp 0x46b347
lea esi, [ebx + 0x60]
call fcn.0053b240
mov edi, 0x1f4
call fcn.0053b1d0
mov eax, dword [esp + 0x68]
mov dword [ebx + 0x68], eax
jmp 0x46b347
call fcn.0050f8f0
mov ebp, eax
mov eax, dword [ebx + 0x90]
test eax, eax
je 0x46b35d
mov ecx, dword [ebx + 0x98]
push ecx
call eax
add esp, 4
lea edi, [esp + 0x3c]
call fcn.004f10c0
test ebp, ebp
mov dx, word [esp + 0x3c]
mov ax, word [esp + 0x40]
mov word [esp + 0x68], dx
mov word [esp + 0x6a], ax
jne 0x46b150
pop edi
pop esi
pop ebp
add esp, 0x58
ret