Function at 0x418a30
Capabilities:
Check for time delay via queryperformancecounter
Log keystrokes via polling

Disassembly:
sub esp, 0x38
mov eax, dword [0x68c1cc]
mov ecx, dword [0x68c1c8]
push ebx
push ebp
push esi
mov esi, dword [0x68c1b4]
push edi
mov edi, dword [0x68c1b8]
push eax
xor ebx, ebx
push ecx
mov dword [esp + 0x30], 1
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edi
mov dword [esp + 0x2c], ebx
mov dword [0x68c1a8], ebx
call fcn.0053b310
mov edx, dword [0x68c1cc]
mov eax, dword [0x68c1c8]
push edx
push eax
call fcn.0053b310
add esp, 0x10
test eax, eax
jne 0x418afe
movsx eax, word [0x68c1d0]
movsx ecx, word [esp + 0x4c]
sub eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 4
jg 0x418afe
movsx edx, word [esp + 0x4e]
movsx eax, word [0x68c1d2]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, 4
jg 0x418afe
cmp esi, edi
jne 0x418afe
mov eax, dword [0x68c1d4]
push eax
lea ecx, [esp + 0x1c]
mov dword [0x68c1c8], ebx
mov dword [0x68c1cc], ebx
push ecx
lea ebx, [esp + 0x18]
call fcn.00418830
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x5c]
add esp, 8
call fcn.00418980
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
jmp fcn.00417920
mov ebp, dword [sym.imp.USER32.dll_GetAsyncKeyState]
jmp 0x418b08
xor ebx, ebx
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00416d80
add esp, 8
cmp dword [esp + 0x50], ebx
je 0x418b4f
cmp dword [0x68c1c0], ebx
mov esi, dword [0x68c1b4]
jne 0x418b34
mov esi, dword [0x68c1b8]
cmp esi, eax
mov edx, esi
jl 0x418b40
mov edx, eax
jle 0x418b40
mov eax, esi
xor ecx, ecx
cmp edx, esi
sete cl
mov dword [0x68c1c0], ecx
jmp 0x418b5b
mov edx, eax
mov dword [0x68c1c0], 1
mov ecx, eax
mov eax, edx
mov edx, dword [esp + 0x54]
call fcn.00418980
cmp dword [esp + 0x28], ebx
je 0x418c7a
mov eax, dword [0x692a7c]
cmp eax, ebx
mov edx, dword [esp + 0x24]
mov dword [0x68c1d4], edx
mov dword [esp + 0x28], ebx
jne 0x418bf1
push 0x685a18
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x418baf
lea eax, [esp + 0x18]
push eax
mov dword [0x692a7c], 1
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x418bc7
mov dword [0x692a7c], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
mov edi, 0xfa
lea esi, [esp + 0x18]
call fcn.0053b1d0
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x418c03
push 2
call ebp
xor ecx, ecx
test ax, ax
setl cl
mov eax, ecx
jmp 0x418c11
cmp eax, 1
jne 0x418bb9
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x418bc7
push 1
call ebp
xor edx, edx
test ax, ax
setl dl
mov eax, edx
cmp eax, ebx
je 0x418c46
push ebx
push 0x202
push 0x202
push ebx
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x418c46
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
call fcn.0053b310
add esp, 8
test eax, eax
je 0x418bd5
call fcn.0050f8f0
mov ebx, eax
test ebx, ebx
je 0x418c5b
mov dword [esp + 0x50], 1
jmp 0x418c81
mov esi, 0x68c1c8
call fcn.0053b240
mov edi, 0x1f4
call fcn.0053b1d0
mov eax, dword [esp + 0x4c]
mov dword [0x68c1d0], eax
jmp 0x418c81
call fcn.0050f8f0
mov ebx, eax
test ebx, ebx
je 0x418c90
mov eax, dword [0x68ca60]
test eax, eax
je 0x418c90
call eax
lea edi, [esp + 0x10]
call fcn.004f10c0
test ebx, ebx
mov cx, word [esp + 0x10]
mov dx, word [esp + 0x14]
mov word [esp + 0x4c], cx
mov word [esp + 0x4e], dx
jne 0x418b06
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
jmp fcn.00417920