Function at 0x10048c00
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
cmp byte [0x1018826a], 0
push esi
je 0x10048faf
mov dword [ebp - 0x10], 0
call fcn.100261e0
mov ecx, eax
call fcn.1003fbf0
lea edx, [ebp - 0x10]
mov ecx, eax
call fcn.1003fc90
push dword [ebp - 0x10]
call fcn.1003b290
add esp, 4
test al, al
je 0x10048faf
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
call fcn.100261e0
mov ecx, eax
call fcn.1003fbf0
lea edx, [ebp - 0x14]
mov ecx, eax
call fcn.1003fc90
push dword [ebp - 0x14]
lea ecx, [ebp - 4]
call fcn.100289b0
mov eax, dword [ebp - 4]
push eax
mov dword [0x10188398], eax
call fcn.100407e0
add esp, 8
test al, al
je 0x10048faa
push edi
push dword [0x1018839c]
call fcn.10049370
add esp, 4
test al, al
je 0x10048cb5
push dword [0x101883a0]
call fcn.10049370
add esp, 4
test al, al
jne 0x10048e8c
push dword [0x10188390]
call fcn.1004a360
add esp, 4
test al, al
jne 0x10048d35
push ecx
mov edx, 0x10188390
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ecx, 0xb00abe6d
call fcn.10044190
push dword [0x10188390]
call fcn.1004a400
push dword [0x10188390]
xor cl, cl
call fcn.100299b0
mov dword [esp + 8], 0
xorps xmm3, xmm3
mov dword [esp + 4], 0
mov dword [esp], 0
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0
push dword [ebp - 4]
push dword [0x10188390]
call fcn.10043fb0
add esp, 0x1c
xor edi, edi
lea eax, [ebp - 8]
xorps xmm3, xmm3
lea edx, [ebp - 0xc]
xorps xmm2, xmm2
lea ecx, [ebp - 0x10]
push eax
push dword [ebp - 4]
test edi, edi
jne 0x10048d58
movss xmm1, dword [0x1017c1e4]
jmp 0x10048d60
movss xmm1, dword [0x1017c298]
call fcn.10028e70
movss xmm2, dword [ebp - 8]
lea esi, [edi*4 + 0x1018839c]
movss xmm1, dword [ebp - 0xc]
add esp, 8
movss xmm0, dword [ebp - 0x10]
mov ecx, esi
call fcn.100492c0
push dword [esi]
call fcn.10049600
push dword [esi]
xor cl, cl
call fcn.1002b9e0
push dword [esi]
xor cl, cl
call fcn.100280b0
push dword [esi]
call fcn.10049c60
push dword [esi]
movss xmm1, dword [0x1017c240]
call fcn.10049bc0
push dword [esi]
call fcn.1004a5e0
push dword [esi]
call fcn.100498a0
push dword [esi]
call fcn.10049940
push dword [esi]
xor cl, cl
call fcn.10028160
push dword [esi]
mov cl, 1
call fcn.10027de0
push 1
push 1
push 1
push dword [esi]
mov dl, 1
mov cl, dl
call fcn.10027e90
push dword [esi]
call fcn.100497f0
push dword [esi]
call fcn.1004a690
add esp, 0x40
push dword [esi]
call fcn.1004a740
push dword [esi]
call fcn.100499e0
push dword [esi]
call fcn.10049a80
push dword [esi]
call fcn.10049b20
mov edx, 1
push 0
push dword [esi]
lea ecx, [edx + 0x11]
call fcn.10040250
mov eax, dword [esi]
add esp, 0x18
sub esp, 0x14
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
push dword [0x10188390]
push eax
test edi, edi
jne 0x10048e72
movss xmm3, dword [0x1017c1e0]
call fcn.1004a7f0
add esp, 0x1c
inc edi
jmp 0x10048d37
movss xmm3, dword [0x1017c294]
call fcn.1004a7f0
inc edi
add esp, 0x1c
cmp edi, 1
jle 0x10048d37
mov esi, 0x1018839c
push dword [esi]
call fcn.10049370
add esp, 4
test al, al
je 0x10048edd
mov edx, 1
push 0
push dword [esi]
lea ecx, [edx + 0x11]
call fcn.10040250
push dword [esi]
mov ecx, 0x12
call fcn.100404e0
push dword [esi]
mov edx, 1
lea ecx, [edx + 0x11]
call fcn.100496a0
push dword [esi]
mov edx, 1
lea ecx, [edx + 0x11]
call fcn.10049560
add esp, 0x14
add esi, 4
cmp esi, 0x101883a0
jle 0x10048e91
movss xmm2, dword [0x1017c22c]
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
lea edx, [ebp - 0xc]
xorps xmm3, xmm3
lea ecx, [ebp - 0x10]
xorps xmm1, xmm1
call fcn.10028e70
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 8
push 2
call esi
test ax, ax
mov al, byte [0x10187e8c]
jns 0x10048f2e
test al, al
jne 0x10048f2e
mov word [0x10187e8c], 1
jmp 0x10048f52
cmp al, 1
jne 0x10048f44
push 2
call esi
test ax, ax
js 0x10048f44
mov word [0x10187e8c], 0x100
mov edx, 5
call fcn.1002a670
test al, al
je 0x10048fa9
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, dword [0x10186a20]
add ecx, 0x96
cmp ecx, eax
jae 0x10048fa9
mov esi, 0x1018839c
nop
push dword [esi]
call fcn.10049370
add esp, 4
test al, al
je 0x10048f97
push dword [esi]
movss xmm3, dword [ebp - 8]
movss xmm2, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x10]
call fcn.10049410
add esp, 4
add esi, 4
cmp esi, 0x101883a0
jle 0x10048f70
call edi
mov dword [0x10186a20], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov esi, 0x1018839c
push dword [esi]
call fcn.10049370
add esp, 4
test al, al
je 0x10048fc9
mov ecx, esi
call fcn.10043680
add esi, 4
cmp esi, 0x101883a0
jle 0x10048fb4
push dword [0x10188390]
call fcn.1004a360
add esp, 4
test al, al
je 0x10048faa
mov ecx, 0x10188390
call fcn.10044250
pop esi
mov esp, ebp
pop ebp
ret