Function at 0x100635f0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x102df778], 1
jne 0x10063956
call fcn.1007cde0
test al, al
jne 0x10063956
call fcn.1007cf20
test al, al
jne 0x10063956
push esi
push edi
push 0x41
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10063954
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x10063954
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x10063954
movss xmm1, dword [0x10101720]
xor eax, eax
movss xmm0, dword [0xe7c3d4]
comiss xmm1, xmm0
xorps xmm1, xmm1
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm1
lahf
test ah, 0x44
jnp 0x10063689
movaps xmm2, xmm0
jmp 0x10063691
movss xmm2, dword [0xe7c3d8]
mulss xmm2, dword [0x10101fac]
movaps xmm3, xmm0
mulss xmm3, dword [0x101021f4]
ucomiss xmm4, xmm1
divss xmm2, xmm0
lahf
test ah, 0x44
jnp 0x100636b6
movaps xmm1, xmm0
jmp 0x100636be
movss xmm1, dword [0xe7c3d8]
mulss xmm1, dword [0x10101ee4]
push 0xe
cvttss2si eax, xmm2
addss xmm1, xmm3
push eax
push 2
divss xmm1, xmm0
movd xmm0, dword [0x10824d6c]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
mov eax, 0x790b10
call eax
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
add esp, 0x10
cmp al, 1
jne 0x10063775
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f666666
mov dword [esp + 4], 0x3f666666
mov dword [esp], 0x3f666666
call edi
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x10063775
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x10899c38]
cmp eax, 0x12c
jbe 0x10063775
call fcn.10066c50
call esi
sub esp, 0x10
mov dword [0x10899c38], eax
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call edi
movss xmm0, dword [0x10101720]
xor eax, eax
movss xmm3, dword [0xe7c3d4]
comiss xmm0, xmm3
xorps xmm0, xmm0
setae al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x100637a5
movaps xmm2, xmm3
jmp 0x100637ad
movss xmm2, dword [0xe7c3d8]
mulss xmm2, dword [0x10101f84]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x100637c3
movaps xmm4, xmm3
jmp 0x100637cb
movss xmm4, dword [0xe7c3d8]
movss xmm1, dword [0xe7c3d8]
mov eax, 0x637c60
mulss xmm4, dword [0x10101ee4]
movaps xmm0, xmm1
push 0
mulss xmm0, dword [0x10101e64]
push 1
divss xmm2, xmm3
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f5eb852
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
divss xmm0, xmm1
movaps xmm1, xmm3
mulss xmm1, dword [0x101021f4]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x10824d6c]
addss xmm1, xmm4
movss dword [esp + 8], xmm2
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x3f800000
divss xmm1, xmm3
addss xmm1, xmm0
movss dword [esp], xmm1
push 0xf077
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call edi
movss xmm2, dword [0xe7c3d4]
xor eax, eax
movss xmm0, dword [0x10101720]
xorps xmm1, xmm1
comiss xmm0, xmm2
movss dword [ebp - 0x10], xmm2
setae al
movd xmm3, eax
cvtdq2ps xmm3, xmm3
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x100638b7
movaps xmm0, xmm2
jmp 0x100638bf
movss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x10101fac]
ucomiss xmm3, xmm1
divss xmm0, xmm2
lahf
movss dword [ebp - 8], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x101021f4]
movss dword [ebp - 0xc], xmm0
test ah, 0x44
jnp 0x100638f0
movss dword [ebp - 4], xmm2
jmp 0x100638fd
movss xmm0, dword [0xe7c3d8]
movss dword [ebp - 4], xmm0
push 0x152
mov ecx, 0x101c3ae8
call fcn.10042ad0
movss xmm1, dword [ebp - 4]
mulss xmm1, dword [0x10101ed4]
push eax
movd xmm0, dword [0x10824d6c]
cvttss2si eax, dword [ebp - 8]
push 3
addss xmm1, dword [ebp - 0xc]
cvtdq2ps xmm0, xmm0
push eax
push 4
divss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0xff19bdff
push 0x102ba770
call fcn.10078120
add esp, 0x1c
pop edi
pop esi
mov esp, ebp
pop ebp
ret