Function at 0x1002cda0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x114e8b38], 0
je 0x1002d359
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push edi
call ebx
sub eax, dword [0x114e8b20]
cmp eax, 0x3d4
jbe 0x1002cee7
call ebx
mov dword [0x114e8b20], eax
xor ebx, ebx
mov edi, 0x114e8a20
nop dword [eax]
mov eax, dword [edi - 4]
cmp eax, dword [edi]
je 0x1002cdf9
mov ecx, dword [eax + 0xc]
test ecx, ecx
jle 0x1002cdf2
dec ecx
mov dword [eax + 0xc], ecx
add eax, 0x10
cmp eax, dword [edi]
jne 0x1002cde7
cmp dword [edi - 0x34], 0xffffffff
je 0x1002ced1
mov eax, dword [edi - 0x10]
test eax, eax
jle 0x1002ce13
dec eax
mov dword [edi - 0x10], eax
jmp 0x1002ced1
cmp ebx, 4
jge 0x1002ce78
lea esi, [edi + 0x2c]
nop dword [eax + eax]
mov eax, dword [esi - 0x24]
lea ecx, [esi - 0x5c]
mov dword [esi - 0x60], eax
mov edx, 0x20
nop
mov al, byte [ecx + 0x3c]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
sub edx, 1
jne 0x1002ce30
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [esi - 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esi - 0x38], eax
mov eax, dword [esi + 8]
mov dword [esi - 0x34], eax
lea eax, [esi - 0x30]
cmp eax, ecx
je 0x1002ce6d
mov ecx, dword [ecx]
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 4
push eax
push ecx
lea ecx, [esi - 0x30]
call fcn.1002e6e0
add esi, 0x3c
cmp esi, 0x114e8b3c
jl 0x1002ce20
mov eax, dword [0x114e8b0c]
mov dword [0x114e8adc], 0xffffffff
mov dword [0x114e8b00], 0
mov dword [0x114e8b04], 0xffffffff
mov dword [0x114e8b08], 0
cmp eax, dword [0x114e8b10]
je 0x1002ceb2
mov dword [0x114e8b10], eax
xorps xmm0, xmm0
movups xmmword [0x114e8ae0], xmm0
movups xmmword [0x114e8af0], xmm0
cmp dword [0x114e8b40], ebx
jle 0x1002ced1
dec dword [0x114e8b40]
add edi, 0x3c
inc ebx
cmp edi, 0x114e8b4c
jl 0x1002cde0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, eax
cmp dword [0x114e89ec], 0xffffffff
setne al
cmp dword [0x114e8a28], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x114e8a64], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
cmp dword [0x114e8aa0], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x114e8adc], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
test eax, eax
je 0x1002d338
cmp dword [0xe61e18], 0x1e
je 0x1002d338
call fcn.1007e590
test al, al
jne 0x1002d356
call fcn.1007e700
test al, al
jne 0x1002d356
push 0x41
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1002d356
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002d356
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002d356
cmp dword [0x114e8b18], 1
mov esi, dword [sym.imp.OPENGL32.dll_glColor4f]
jne 0x1002cfea
call ebx
sub eax, dword [0x114e8b1c]
cmp eax, 0x2bc
jae 0x1002cfd4
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f53d07d
mov dword [esp + 4], 0x3f53d07d
mov dword [esp], 0x3f53d07d
call esi
jmp 0x1002cfea
call ebx
sub eax, dword [0x114e8b1c]
cmp eax, 0x578
jbe 0x1002cfea
call ebx
mov dword [0x114e8b1c], eax
cmp dword [0x114e89e8], 0
xorps xmm3, xmm3
movss xmm5, dword [0x10102fec]
movss xmm6, dword [0x10103264]
jne 0x1002d160
movss xmm0, dword [0xe7c3d4]
xor eax, eax
movss xmm1, dword [0x10102768]
comiss xmm1, xmm0
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm3
lahf
test ah, 0x44
jnp 0x1002d037
movaps xmm2, xmm0
jmp 0x1002d03f
movss xmm2, dword [0xe7c3d8]
ucomiss xmm4, xmm3
mulss xmm2, xmm5
movaps xmm1, xmm0
lahf
mulss xmm1, xmm6
divss xmm2, xmm0
test ah, 0x44
jnp 0x1002d05c
movaps xmm3, xmm0
jmp 0x1002d064
movss xmm3, dword [0xe7c3d8]
mulss xmm3, dword [0x10102f48]
push 0xe
cvttss2si eax, xmm2
subss xmm1, xmm3
push eax
push 2
divss xmm1, xmm0
movd xmm0, dword [0x11478280]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, 1
jne 0x1002d14d
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f666666
mov dword [esp + 4], 0x3f666666
mov dword [esp], 0x3f666666
call esi
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1002d14d
call ebx
sub eax, dword [0x114e89e0]
cmp eax, 0x12c
jbe 0x1002d14d
cmp dword [0x114e8b34], 0
jne 0x1002d118
movd xmm0, dword [0x11478280]
cvtdq2pd xmm0, xmm0
mov dword [0x114e8b34], 1
addsd xmm0, qword [0x10102ca8]
cvtpd2ps xmm0, xmm0
movss dword [0x114e8b24], xmm0
jmp 0x1002d122
mov dword [0x114e8b34], 0
call ebx
sub esp, 0x10
mov dword [0x114e89e0], eax
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
movss xmm6, dword [0x10103264]
xorps xmm3, xmm3
movss xmm5, dword [0x10102fec]
movss xmm0, dword [0x10102768]
xor eax, eax
movss xmm4, dword [0xe7c3d4]
comiss xmm0, xmm4
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jnp 0x1002d18d
movaps xmm2, xmm4
jmp 0x1002d195
movss xmm2, dword [0xe7c3d8]
ucomiss xmm0, xmm3
mulss xmm2, xmm5
lahf
test ah, 0x44
jnp 0x1002d1a7
movaps xmm3, xmm4
jmp 0x1002d1af
movss xmm3, dword [0xe7c3d8]
movss xmm1, dword [0xe7c3d8]
mov eax, 0x637c60
mulss xmm3, dword [0x10102f3c]
movaps xmm0, xmm1
push 0
mulss xmm0, dword [0x10102ecc]
push 1
divss xmm2, xmm4
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f5eb852
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
divss xmm0, xmm1
movaps xmm1, xmm4
mulss xmm1, xmm6
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x11478280]
subss xmm1, xmm3
movss dword [esp + 8], xmm2
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x3f800000
divss xmm1, xmm4
addss xmm1, xmm0
movss dword [esp], xmm1
push 0xf077
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call esi
movss xmm1, dword [0xe7c3d4]
xor eax, eax
movss xmm0, dword [0x10102768]
xorps xmm2, xmm2
comiss xmm0, xmm1
movss dword [ebp - 0x10], xmm1
setae al
movd xmm3, eax
cvtdq2ps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x1002d297
movaps xmm0, xmm1
jmp 0x1002d29f
movss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x10103014]
ucomiss xmm3, xmm2
divss xmm0, xmm1
lahf
movss dword [ebp - 8], xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x10103264]
movss dword [ebp - 0xc], xmm0
test ah, 0x44
jp 0x1002d2d1
movss xmm1, dword [0xe7c3d8]
push 0x105
mov ecx, 0x101c4a28
movss dword [ebp - 4], xmm1
call fcn.10043140
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [0x10102f48]
push eax
movss xmm1, dword [ebp - 0xc]
cvttss2si eax, dword [ebp - 8]
push 3
subss xmm1, xmm0
movd xmm0, dword [0x11478280]
cvtdq2ps xmm0, xmm0
push eax
push 4
divss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0xff19bdff
push 0x102bb6b0
call fcn.100798d0
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x114e8b34], 0
mov dword [0x114e8b38], 0
mov dword [0x114e8b40], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret