Function at 0x1006bc50
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword [0x100fa040]
xor eax, esp
mov dword [esp + 0xf8], eax
cmp dword [0xe609e8], 5
push ebx
push esi
push edi
jne 0x1006bcb0
cmp dword [0x10886fb8], 1
je 0x1006bcb0
cmp dword [0x102c7254], 1
jne 0x1006bca6
cmp dword [0x107e1c58], 1
je 0x1006bca6
push 0
push 0
push 0
push 0x1004a370
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10886fb8], 1
mov eax, dword [0x8128ac8]
mov dword [0x107e7d48], eax
mov ecx, dword [0x7bc4f04]
mov dword [0x107e7d4c], ecx
mov eax, dword [0x879340c]
mov dword [0x107e7d5c], eax
mov eax, dword [0x8793410]
mov dword [0x107e7d64], eax
mov eax, dword [0xe61e18]
mov dword [0x107e7d58], eax
cmp byte [ecx + 0x31f], 1
mov esi, dword [0x8128ac4]
jne 0x1006bd1d
mov eax, dword [ecx + 0x2fc]
test eax, eax
je 0x1006bd1d
push eax
mov eax, 0x9cea6c
call eax
mov eax, dword [0x107e7d4c]
add esp, 4
mov dword [eax + 0x2fc], 0
mov ecx, dword [0x107e7d4c]
mov eax, 0x1f5b
cmp word [ecx + 0x22c], ax
jl 0x1006bd36
mov al, byte [esi + 0x15ae]
mov byte [0x812a072], al
call fcn.1004ef20
call fcn.10011800
mov ecx, 0x1084a760
call fcn.100241d0
call fcn.100b57c0
mov ecx, 0x1010b528
call fcn.100219c0
mov ecx, 0x102a22b0
call fcn.1006d370
mov ecx, 0x102a22b0
call fcn.100720d0
mov ecx, 0x102a22b0
call fcn.1006d7d0
call fcn.100239d0
mov ecx, 0x10869d78
call fcn.10032d60
call fcn.100a0c20
mov ecx, 0x10869f78
call fcn.10044560
call fcn.1001fad0
mov ecx, 0x10848388
call fcn.1001fe30
call fcn.1004b7b0
call fcn.1004b390
mov ecx, 0x1088f148
call fcn.100b7490
call fcn.100bc8c0
mov ecx, 0x10887f38
call fcn.10064b90
call fcn.100665b0
mov ecx, 0x10128904
call fcn.1002dc20
call fcn.10030ec0
call fcn.1002c010
mov ecx, 0x10865d80
call fcn.1002c5d0
call fcn.1000af90
mov ecx, 0x10837d98
call fcn.1000b430
call fcn.10010290
call fcn.10010920
call fcn.100129d0
mov ecx, 0x100fc058
call fcn.10012df0
mov ecx, 0x102a22b0
call fcn.100723d0
mov ecx, 0x10869de0
call fcn.10034120
call fcn.10037550
mov ecx, 0x1084837c
call fcn.1001eff0
call fcn.100570c0
mov ecx, 0x102c6f5c
call fcn.100aa610
mov ecx, 0x1088dcb8
call fcn.100a7cf0
call fcn.100a9b40
call fcn.10026300
mov ecx, 0x10858248
call fcn.10026f00
mov ecx, 0x10887158
call fcn.10051820
call fcn.1004a0a0
mov ecx, 0x10246758
call fcn.1004a860
mov esi, dword [0x1024675c]
mov ecx, 0x635fd0
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
test esi, esi
je 0x1006bfe8
push 1
call ecx
movd xmm0, dword [0x879340c]
add esp, 4
cvtdq2ps xmm0, xmm0
push 0
push 0
push 0
addss xmm0, dword [0x100f1f04]
push esi
call fcn.100e1650
xor ecx, ecx
or ecx, 0x8c
push ecx
push eax
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f4ccccd
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
movd xmm0, dword [0x879340c]
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
push 0
sub esp, 0x14
mov eax, 0x6378a0
mov dword [esp + 0x10], 0
addss xmm0, xmm1
mov dword [esp + 0xc], 0x42c80000
mov dword [esp + 8], 0x42820000
mov dword [esp + 4], 0x43200000
movss dword [esp], xmm0
call eax
mov eax, 0x636070
call eax
push 1
mov eax, 0x635fd0
call eax
movsx eax, byte [esi + 0x17]
add esp, 0x18
movd xmm0, dword [0x879340c]
movsx ecx, word [esi]
mov edx, dword [esi + 2]
movss xmm1, dword [0x100f1f8c]
push 0
push eax
movsx eax, byte [esi + 0x44]
cvtdq2ps xmm0, xmm0
movd xmm3, eax
movsx eax, byte [esi + 0x43]
addss xmm0, dword [0x100f1d2c]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
call fcn.10071da0
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push ecx
mov dword [esp], 0x3f800000
call edi
push 0
mov esi, 0x635fd0
call esi
add esp, 4
call ebx
mov ecx, dword [0x10246764]
add ecx, 0x64
cmp ecx, eax
jae 0x1006bfea
mov dword [0x1024675c], 0
jmp 0x1006bfea
mov esi, ecx
mov eax, dword [0x101ad4bc]
test eax, eax
je 0x1006c089
movd xmm0, dword [0x879340c]
cvtdq2ps xmm0, xmm0
push 0
push 0
push 1
push eax
subss xmm0, dword [0x100f1f04]
call fcn.100e1650
xor ecx, ecx
or ecx, 0x28
push ecx
push eax
mov ecx, 0x102c64b4
call fcn.100857c0
mov eax, 0x7dd0f0
call eax
test eax, eax
je 0x1006c075
call ebx
sub eax, dword [0x101ad534]
cmp eax, 0x32
jbe 0x1006c089
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0xffffffff
push eax
push dword [0x8793410]
mov eax, 0x861110
push dword [0x879340c]
call eax
mov edx, 0x861260
mov ecx, eax
call edx
mov edx, 0x83c7b0
mov ecx, eax
call edx
test eax, eax
jne 0x1006c089
mov dword [0x101ad4bc], 0
mov dword [0x101ad538], 0xffffffff
mov ecx, 0x10109b78
call fcn.1001a140
call fcn.10019530
call fcn.1005c280
mov ecx, 0x102a2220
call fcn.1005d910
mov ecx, 0x102a2220
call fcn.10062960
call fcn.10058760
mov ecx, 0x108871c0
call fcn.10058be0
call fcn.1005b230
call fcn.1005b8a0
cmp dword [0x102c73bc], 1
jne 0x1006c125
call ebx
mov ecx, dword [0x1050c990]
add ecx, 0x3e8
cmp eax, ecx
jb 0x1006c125
call fcn.100141d0
test al, al
je 0x1006c11e
xor eax, eax
mov ecx, 0xebb848
mov dword [esp + 0x11], eax
mov eax, 0x79dea0
mov word [esp + 0x10], 0x8c1
mov byte [esp + 0x12], 0x88
call eax
mov edx, 8
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x10]
call fcn.100b5120
call ebx
mov dword [0x1050c990], eax
cmp dword [0x102c7350], 1
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
jne 0x1006c22b
cmp dword [0xe61728], 0xffffffff
je 0x1006c22b
push 0x12
call edi
test ax, ax
jns 0x1006c22b
mov eax, dword [0xe61728]
cmp eax, 0x3e7
ja 0x1006c22b
lea eax, [eax + eax*4]
cmp byte [eax*4 + 0x10699450], 1
jne 0x1006c22b
push 1
call esi
mov eax, dword [0xe61728]
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x10699451]
push eax
lea eax, [esp + 0x94]
push eax
call fcn.1004e710
mov esi, eax
lea edi, [esp + 0x20]
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push 0
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0xe61728]
lea eax, [eax + eax*4]
mov eax, dword [eax*4 + 0x10699460]
mov dword [esp + 0x8f], eax
lea eax, [esp + 0x2c]
mov ecx, dword [0x879340c]
push eax
xor eax, eax
sub ecx, 0x3c
or eax, 0x64
push eax
push ecx
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0
mov eax, 0x635fd0
call eax
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 4
push 9
mov eax, 0x861110
call eax
mov esi, 0x85ec20
mov ecx, eax
call esi
test al, al
je 0x1006c26a
push 0x4d
mov eax, 0x861110
call eax
mov ecx, eax
call esi
test al, al
jne 0x1006c26a
cmp byte [0x106992c5], al
jbe 0x1006c26a
push 0x4d
mov eax, 0x861110
call eax
lea edx, [esi + 0x30]
mov ecx, eax
call edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0xe8c578]
jne 0x1006c6f7
push 0x2c
call edi
test ax, ax
jns 0x1006c291
push 1
mov ecx, 0x102a22b0
call fcn.1006cfa0
push 0x23
call edi
bt ax, 0xe
jae 0x1006c302
call ebx
sub eax, dword [0x102a2f98]
cmp eax, 0x12c
jbe 0x1006c302
push 0x21
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, esi
call eax
test al, al
jne 0x1006c302
cmp byte [0x102a2f9d], al
je 0x1006c2e0
call ebx
mov dword [0x102a2f98], eax
mov byte [0x102a2f9d], 0
mov dword [0xe8cb3c], 0
jmp 0x1006c302
call ebx
mov ecx, 0x102a22b0
mov dword [0x102a2f98], eax
call fcn.10071a40
mov byte [0x102a2f9d], 1
mov dword [0xe8cb3c], 1
push 0x48
call edi
bt ax, 0xe
jae 0x1006c312
call fcn.100256a0
push 0x4a
call edi
bt ax, 0xe
jae 0x1006c322
call fcn.10033d90
push 0x4b
call edi
bt ax, 0xe
jae 0x1006c332
call fcn.100649f0
push 0x77
call edi
bt ax, 0xe
jae 0x1006c342
call fcn.1004f800
push 9
call edi
test ax, ax
jns 0x1006c35f
call ebx
sub eax, dword [0x10865d7c]
cmp eax, 0x64
jbe 0x1006c35f
call ebx
mov dword [0x10865d7c], eax
push 0xd
call edi
test ax, ax
jns 0x1006c3c1
call ebx
cmp byte [0x102a527d], 0
je 0x1006c3c1
sub eax, dword [0x102a52d8]
mov byte [0x102a52dc], 0
cmp eax, 0x1f4
jb 0x1006c3c1
call ebx
mov dword [0x102a52d8], eax
mov eax, dword [0x10109c3c]
cmp eax, 6
je 0x1006c3b0
cmp eax, 7
je 0x1006c3b0
push dword [0x10109c4c]
push eax
call fcn.1001a080
call ebx
mov dword [0x10869f70], eax
mov byte [0x102a527d], 0
mov dword [0xe8cb3c], 0
push 0x1b
call edi
test ax, ax
jns 0x1006c61f
cmp byte [0x102a42bd], 1
jne 0x1006c3e8
mov byte [0x102a42bd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2bdd], 1
jne 0x1006c402
mov byte [0x102a2bdd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a34dd], 1
jne 0x1006c41c
mov byte [0x102a34dd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5abd], 1
jne 0x1006c436
mov byte [0x102a5abd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2c3d], 1
jne 0x1006c450
mov byte [0x102a2c3d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2c9d], 1
jne 0x1006c46a
mov byte [0x102a2c9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2cfd], 1
jne 0x1006c4a2
mov byte [0x102a2cfd], 0
mov dword [0xe8cb3c], 0
mov dword [0x10128910], 0
mov dword [0x10128908], 0xffffffff
mov dword [0x1012890c], 0
cmp byte [0x102a527d], 1
jne 0x1006c4bc
mov byte [0x102a527d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2f9d], 0
je 0x1006c4d6
mov byte [0x102a2f9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a3add], 0
je 0x1006c4fa
mov byte [0x102a3add], 0
mov dword [0xe8cb3c], 0
mov dword [0x102a22b8], 0
cmp byte [0x102a6bfd], 1
jne 0x1006c514
mov byte [0x102a6bfd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a767d], 1
jne 0x1006c52e
mov byte [0x102a767d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2dbd], 1
jne 0x1006c54f
mov byte [0x102a2dbd], 0
mov dword [0xe8cb3c], 0
mov byte [0x1088f16c], 0
cmp byte [0x102a2e1d], 1
jne 0x1006c570
mov byte [0x102a2e1d], 0
mov dword [0xe8cb3c], 0
mov byte [0x1088a4dc], 0
cmp byte [0x102a7b5d], 1
jne 0x1006c58a
mov byte [0x102a7b5d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a893d], 1
jne 0x1006c5a4
mov byte [0x102a893d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a809d], 1
jne 0x1006c5be
mov byte [0x102a809d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2d5d], 1
jne 0x1006c5d8
mov byte [0x102a2d5d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5f3d], 1
jne 0x1006c5f2
mov byte [0x102a5f3d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5f9d], 1
jne 0x1006c60c
mov byte [0x102a5f9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a8cfd], 1
jne 0x1006c61f
mov dword [0x102a2224], 5
cmp dword [0x107e1c68], 1
je 0x1006c6f7
push 0x11
mov eax, 0x791090
call eax
add esp, 4
cmp al, 1
je 0x1006c6f7
cmp dword [0x1088f13c], 0
je 0x1006c667
call ebx
sub eax, dword [0x1088f140]
cmp eax, 0x4b0
jbe 0x1006c667
mov dword [0x1088f13c], 0
jmp 0x1006c6f7
push 0x11
call edi
test ax, ax
jns 0x1006c6f7
cmp dword [0x1088f13c], 0
jle 0x1006c6e6
call ebx
sub eax, dword [0x1088f140]
cmp eax, 0x64
jbe 0x1006c6e6
mov eax, dword [0x1088f13c]
mov ecx, eax
inc eax
mov dword [0x1088f13c], eax
cmp ecx, 2
jl 0x1006c6f0
cmp byte [0x1088f138], 0
mov dword [0x1088f13c], 0
jne 0x1006c6bd
mov byte [0x1088f138], 1
mov eax, 0x80
jmp 0x1006c6c9
mov byte [0x1088f138], 0
mov eax, 0x81
push eax
mov ecx, 0x101b3888
call fcn.10042330
push eax
push 2
push 0x1088daa0
call fcn.100a3040
add esp, 0xc
jmp 0x1006c6f7
mov dword [0x1088f13c], 1
call ebx
mov dword [0x1088f140], eax
cmp dword [0x102c7200], 2
mov edx, 0x790b10
jne 0x1006c77e
mov ecx, dword [0x102c724c]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x1006c738
push 6
push 0xc0
push 0x1b6
push 0xdc
call edx
add esp, 0x10
cmp al, 1
je 0x1006c75a
mov ecx, dword [0x102c724c]
mov edx, 0x790b10
cmp ecx, 1
jb 0x1006c742
cmp ecx, 3
jbe 0x1006c77e
push 0xa
push dword [0x100fac74]
push 0x1d6
push 0
call edx
add esp, 0x10
cmp al, 1
jne 0x1006c77e
push 1
call edi
test ax, ax
jns 0x1006c77e
call ebx
sub eax, dword [0x102aa600]
cmp eax, 0xc8
jbe 0x1006c77e
call fcn.10026e80
call ebx
mov dword [0x102aa600], eax
push 0
mov ecx, 0x102a22b0
call fcn.1006cfa0
cmp dword [0x102c7304], 0
je 0x1006c97c
cmp dword [0x102a22b4], 0
je 0x1006c97c
mov eax, dword [0x100fac74]
cdq
sub eax, edx
mov esi, eax
mov eax, 0x637c60
sar esi, 1
push 0
push 1
push 1
movd xmm0, esi
sub esp, 0x20
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f400000
mov dword [esp + 0x18], 0x3f666666
mov dword [esp + 0x14], 0
subss xmm0, dword [0x100f1f44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x43960000
mov dword [esp + 8], 0x43c80000
mov dword [esp + 4], 0x42480000
addss xmm0, dword [0x100f1d20]
movss dword [esp], xmm0
push 0x790b
call eax
movd xmm0, esi
mov eax, 0x790b10
cvtdq2ps xmm0, xmm0
push 0xf
push 0x4b
push 0x104
cvtps2pd xmm0, xmm0
subsd xmm0, qword [0x100f1860]
cvttsd2si ebx, xmm0
movsd qword [esp + 0x54], xmm0
push ebx
call eax
add esp, 0x40
cmp al, 1
jne 0x1006c8ca
mov esi, dword [sym.imp.OPENGL32.dll_glColor3f]
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
call esi
push 1
call edi
test ax, ax
jns 0x1006c8ca
sub esp, 0xc
mov dword [0x102a22b4], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
xor eax, eax
mov dword [0xe8cb3c], 0
mov dword [esp + 0x11], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xebf308c1
mov dword [esp + 0x14], 0x62
lea edx, [eax + 8]
call fcn.100b5120
movsd xmm0, qword [esp + 0x18]
mov eax, 0x637c60
push 0
push 1
push 1
sub esp, 0x20
cvtpd2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f266666
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x42960000
mov dword [esp + 4], 0x43820000
movss dword [esp], xmm0
push 0x7b4b
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0x184
mov eax, 0x402320
mov ecx, 0x8128adc
call eax
push eax
push 3
push 0x4b
push 0x109
push ebx
push 0xff00ffff
push 0x102a22b0
call fcn.1006c9b0
add esp, 0x1c
cmp dword [0x102c724c], 0
jne 0x1006c98c
mov eax, 0x80f8e0
call eax
mov ecx, dword [esp + 0x104]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100c0a54
mov esp, ebp
pop ebp
ret