Function at 0x100d30a0
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x254
mov eax, dword [0x1014a018]
xor eax, esp
mov dword [esp + 0x250], eax
mov eax, dword [0x1190acb4]
push ebx
xor bl, bl
push esi
push edi
cmp byte [eax + 0x29], bl
jne 0x100d311f
cmp byte [0x10a76dba], 1
jne 0x100d3d76
lea eax, [esp + 0x38]
mov ecx, 8
push eax
mov dword [esp + 0x3c], 0xb3d308c1
mov dword [esp + 0x40], 0x6f
call fcn.10100800
add esp, 4
mov byte [0x10a76dba], bl
mov byte [0x1190ace9], bl
mov byte [0x1190ace8], bl
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x250]
xor ecx, esp
call fcn.1012db16
mov esp, ebp
pop ebp
ret
cmp byte [0x10a76dba], bl
jne 0x100d312e
mov byte [0x10a76dba], 1
push 0x108e8c08
mov ebx, eax
call fcn.10036b70
mov eax, dword [0x1190acb4]
fld dword [eax]
add esp, 4
fstp dword [esp + 0x30]
push 0x1190acb8
fld dword [eax + 4]
mov ecx, 0x861110
fstp dword [esp + 0x14]
fld dword [eax + 0x18]
fstp dword [esp + 0x48]
fld dword [eax + 0x24]
fstp dword [esp + 0x3c]
call ecx
mov ecx, dword [eax + 0x24]
mov edx, 0x7e1b10
call edx
fld dword [esp + 0x44]
push 0x108e8e60
push 0
mov esi, eax
call fcn.1012e5b0
fld dword [esp + 0x18]
fadd qword [0x1013fa48]
push eax
push 0
push 0xfffc59ff
call fcn.1012e5b0
fld dword [esp + 0x44]
push eax
call fcn.1012e5b0
push eax
mov eax, dword [0x116de53c]
push eax
mov cl, 3
call fcn.1008a600
push 1
mov ecx, 0x635fd0
call ecx
fld dword [esp + 0x54]
fadd qword [0x1013f6c0]
add esp, 0x24
push 0x108e90b8
push 0
fst qword [esp + 0x50]
push 0x6e
fld dword [esp + 0x1c]
push 0
fadd qword [0x1013fe90]
push 0xb8e600ff
call fcn.1012e5b0
push eax
call fcn.1012e5b0
mov edx, dword [0x116de53c]
push eax
push edx
mov cl, 3
call fcn.1008a600
fld dword [0x5ef5a1c]
fmul qword [0x101409d8]
add esp, 0x20
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
call sub.MSVCR100.dll__CIsin
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
movzx eax, word [esi]
fmul qword [0x10140248]
mov ecx, 0x1eff
fadd qword [0x1013f510]
fstp dword [esp + 0x14]
fld dword [0x1013f784]
fst dword [esp + 0x2c]
fst dword [esp + 0x34]
fstp dword [esp + 0x40]
cmp ax, cx
je 0x100d327a
test ax, ax
je 0x100d327a
fld dword [esp + 0x14]
fld qword [0x101412b8]
fmul st(1)
fstp dword [esp + 0x2c]
fld1
fstp dword [esp + 0x34]
fmul qword [0x101412b0]
fstp dword [esp + 0x40]
fld dword [0x1013f674]
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [esp + 0x50]
fstp dword [esp + 8]
fld dword [esp + 0x44]
fstp dword [esp + 4]
fld dword [esp + 0x3c]
fstp dword [esp]
call edi
push 1
mov edx, 0x635fd0
call edx
fld dword [esp + 0x14]
fadd qword [0x1013fb00]
sub esp, 0x18
fst qword [esp + 0x6c]
fld dword [esp + 0x4c]
fadd qword [0x1013f600]
fst qword [esp + 0x34]
fldz
fst dword [esp + 0x18]
fst dword [esp + 0x14]
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x101408cc]
fstp dword [esp + 8]
fxch st(1)
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
call fcn.10038850
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov eax, 0x637a30
call eax
push 0
mov ecx, 0x635fd0
call ecx
fld dword [esp + 0x14]
fadd qword [0x10140200]
mov edx, 0x637c60
fstp dword [esp + 0x18]
fldz
fst dword [esp]
fld dword [0x101412a8]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x101412a4]
fstp dword [esp + 0x18]
fstp dword [esp + 0x14]
fld dword [0x101412a0]
fstp dword [esp + 0x10]
fld dword [0x10140218]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x40]
fstp dword [esp + 4]
fld qword [esp + 0x74]
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
fstp dword [esp]
push 0xf1006
call edx
movzx eax, word [esi]
mov ecx, 0x1eff
add esp, 0x30
cmp ax, cx
je 0x100d3467
test ax, ax
je 0x100d3467
movzx edx, byte [esi + 0x18]
fld1
push ecx
movzx ecx, byte [esi + 0x17]
fstp dword [esp]
fld dword [0x10150fa8]
push edx
mov edx, dword [esi + 2]
push ecx
push edx
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x30]
fadd qword [0x1013f760]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 4]
fld dword [esp + 0x50]
fadd qword [0x1013f7b0]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
call fcn.100c7b80
fld qword [esp + 0x50]
push 0x49
push 0x49
call fcn.1012e5b0
fld qword [esp + 0x20]
push eax
call fcn.1012e5b0
push eax
mov eax, 0x790b10
call eax
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x10
cmp al, 1
jne 0x100d346d
mov dword [0x108c93d4], esi
call edi
add eax, 0x32
push 2
mov dword [0x10a76f64], eax
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x100d346d
push 0
call fcn.100d3050
add esp, 4
jmp 0x100d346d
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x1190acec]
or ebx, 0xffffffff
xor ecx, ecx
mov eax, 0x118d9f70
lea ecx, [ecx]
cmp dword [eax + 4], edx
jne 0x100d3489
test edx, edx
jne 0x100d349b
cmp dword [eax], 0
je 0x100d349b
add eax, 0x14
inc ecx
cmp eax, 0x1190acb0
jl 0x100d3480
jmp 0x100d349d
mov ebx, ecx
cmp byte [0x1190acea], 0xff
je 0x100d3622
cmp ebx, 0xffffffff
je 0x100d3622
push 0x1ff
lea edx, [esp + 0x5d]
push 0
push edx
mov byte [esp + 0x64], 0
call sub.MSVCR100.dll_memset
movzx eax, byte [esi + 6]
add esp, 0xc
call fcn.100d2630
movzx edi, byte [0x1190acea]
lea ecx, [ebx + ebx*4]
mov cl, byte [edi + ecx*4 + 0x118d9f78]
cmp cl, 0xff
jb 0x100d34f2
mov esi, 1
jmp 0x100d34f6
movzx esi, cl
inc esi
mov ebx, eax
call fcn.100d2660
push eax
lea edx, [esp + 0x5c]
push 0x10135e70
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
fldz
fst dword [esp + 8]
add esp, 8
fld dword [0x1013f5d0]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
mov eax, 0x637c60
fld dword [0x1014129c]
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f828]
fstp dword [esp + 0xc]
fld dword [0x1013f6a0]
fstp dword [esp + 8]
fld dword [esp + 0x3c]
fadd qword [0x101407b8]
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
fstp dword [esp + 4]
fld dword [esp + 0x5c]
fadd qword [0x10140200]
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
fstp dword [esp]
push 0x7b34
call eax
fld dword [esp + 0x40]
fadd qword [0x10140f18]
add esp, 0x30
lea ecx, [esp + 0x58]
push ecx
push esi
push 0x108e9310
push 0
push 0xb4
push 0
push 0x8cffd5ff
call fcn.1012e5b0
fld dword [esp + 0x4c]
fadd qword [0x1013f580]
push eax
call fcn.1012e5b0
mov edx, dword [0x116de538]
push eax
push edx
mov cl, 3
call fcn.1008a600
fld dword [0x10140ab4]
fstp dword [esp + 0x24]
mov edi, dword [0x10a8890c]
fld dword [0x1013faf8]
add esp, 0x18
fstp dword [esp + 8]
fld dword [esp + 0x20]
fadd qword [0x1013f958]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fstp dword [esp + 4]
fld dword [esp + 0x40]
fsub qword [0x1013f6d8]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fstp dword [esp]
call fcn.10038a70
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
fld dword [esp + 0x44]
push 0x108e9568
fadd dword [esp + 0x34]
push 0
push 0x32
push 0
fsub qword [0x1013f7b0]
push 0xb8e600ff
fsub qword [0x1013fa40]
fstp dword [esp + 0x24]
fld dword [esp + 0x28]
fstp dword [esp + 0x34]
fld dword [esp + 0x24]
fadd qword [0x1013f6e8]
fst qword [esp + 0x5c]
fld dword [esp + 0x34]
fsub qword [0x1013f6d8]
call fcn.1012e5b0
push eax
call fcn.1012e5b0
push eax
mov eax, dword [0x116de53c]
push eax
mov cl, 3
call fcn.1008a600
fldz
fst dword [esp + 0x1c]
add esp, 0x1c
fld dword [0x1014129c]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
mov ecx, 0x637c60
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6f0]
fstp dword [esp + 0xc]
fld dword [0x1013f7a0]
fstp dword [esp + 8]
fld dword [esp + 0x4c]
fadd qword [0x1013f7b0]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 4]
fld dword [esp + 0x3c]
fsub qword [0x1013f750]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
push 0x7b33
call ecx
add esp, 0x30
push 0x1190acc8
mov edx, 0x861110
call edx
mov ecx, dword [eax + 0x24]
mov edx, 0x7e1b10
call edx
mov esi, eax
movzx eax, word [esi]
mov ecx, 0x1eff
cmp ax, cx
je 0x100d3776
test ax, ax
je 0x100d3776
fld dword [esp + 0x10]
sub esp, 0x20
fadd qword [0x1013f8f0]
fstp dword [esp + 0x34]
fld dword [0x1013f674]
fstp dword [esp + 0x1c]
fld dword [esp + 0x60]
fstp dword [esp + 0x18]
fld dword [esp + 0x54]
fstp dword [esp + 0x14]
fld dword [esp + 0x4c]
fstp dword [esp + 0x10]
fld dword [0x1013fc78]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x40]
fadd qword [0x1013fbb8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
jmp 0x100d37c3
fld dword [esp + 0x10]
sub esp, 0x20
fadd qword [0x1013f8f0]
fstp dword [esp + 0x34]
fld dword [0x1013f674]
fstp dword [esp + 0x1c]
fld dword [0x1013f784]
fst dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013fc78]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x40]
fadd qword [0x1013fbb8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fld dword [esp + 0x34]
fstp dword [esp]
call fcn.100bcd90
fldz
push ecx
fstp dword [esp]
mov edx, 0x637c60
fld dword [0x10141298]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x10141294]
fstp dword [esp + 0x18]
fld dword [0x10141290]
fstp dword [esp + 0x14]
fld dword [0x1014128c]
fstp dword [esp + 0x10]
fld dword [0x1013f548]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x4c]
fstp dword [esp + 4]
fld dword [esp + 0x3c]
fstp dword [esp]
push 0xf1010
call edx
movzx eax, word [esi]
mov ecx, 0x1eff
add esp, 0x30
cmp ax, cx
je 0x100d38ef
test ax, ax
je 0x100d38ef
movzx edx, byte [esi + 0x18]
fld1
push ecx
movzx ecx, byte [esi + 0x17]
fstp dword [esp]
fld dword [0x1013f548]
push edx
mov edx, dword [esi + 2]
push ecx
push edx
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x40]
fsub qword [0x1013f6f8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fld qword [esp + 0x68]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp]
call fcn.100c7b80
fld dword [esp + 0x20]
push 0x32
push 0x32
call fcn.1012e5b0
fld dword [esp + 0x18]
push eax
call fcn.1012e5b0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, 1
jne 0x100d38ef
mov dword [0x108c93d4], esi
call edi
add eax, 0x32
push 2
mov dword [0x10a76f64], eax
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x100d38ef
push 1
call fcn.100d3050
add esp, 4
push 0x1190acd8
mov edx, 0x861110
call edx
mov ecx, dword [eax + 0x24]
mov edx, 0x7e1b10
call edx
mov esi, eax
movzx eax, word [esi]
mov ecx, 0x1eff
cmp ax, cx
je 0x100d3970
test ax, ax
je 0x100d3970
fld dword [esp + 0x20]
sub esp, 0x20
fadd qword [0x1013f6c0]
fadd qword [0x1013f7b0]
fst qword [esp + 0x40]
fld dword [0x1013f674]
fstp dword [esp + 0x1c]
fld dword [esp + 0x60]
fstp dword [esp + 0x18]
fld dword [esp + 0x54]
fstp dword [esp + 0x14]
fld dword [esp + 0x4c]
fstp dword [esp + 0x10]
fld dword [0x1013fc78]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fadd qword [0x1013fbb8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
jmp 0x100d39bf
fld dword [esp + 0x20]
sub esp, 0x20
fadd qword [0x1013f6c0]
fadd qword [0x1013f7b0]
fst qword [esp + 0x40]
fld dword [0x1013f674]
fstp dword [esp + 0x1c]
fld dword [0x1013f784]
fst dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013fc78]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fadd qword [0x1013fbb8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fld dword [esp + 0x34]
fstp dword [esp]
call fcn.100bcd90
fldz
push ecx
fstp dword [esp]
mov edx, 0x637c60
fld dword [0x10141298]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x10141294]
fstp dword [esp + 0x18]
fld dword [0x10141290]
fstp dword [esp + 0x14]
fld dword [0x1014128c]
fstp dword [esp + 0x10]
fld dword [0x1013f548]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld qword [esp + 0x4c]
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 4]
fld dword [esp + 0x3c]
fstp dword [esp]
push 0xf1010
call edx
movzx eax, word [esi]
mov ecx, 0x1eff
add esp, 0x30
cmp ax, cx
je 0x100d3af3
test ax, ax
je 0x100d3af3
movzx edx, byte [esi + 0x18]
fld1
push ecx
movzx ecx, byte [esi + 0x17]
fstp dword [esp]
fld dword [0x1013f548]
push edx
mov edx, dword [esi + 2]
push ecx
push edx
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld qword [esp + 0x40]
fsub qword [0x1013f6f8]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fld qword [esp + 0x68]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp]
call fcn.100c7b80
fld qword [esp + 0x20]
push 0x32
push 0x32
call fcn.1012e5b0
fld dword [esp + 0x18]
push eax
call fcn.1012e5b0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, 1
jne 0x100d3af3
mov dword [0x108c93d4], esi
call edi
add eax, 0x32
push 2
mov dword [0x10a76f64], eax
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x100d3af3
push 2
call fcn.100d3050
add esp, 4
fld dword [0x1013faa8]
push 0x108e97c0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1013f550]
fstp dword [esp + 8]
fld qword [esp + 0x38]
fld qword [0x1013f760]
fadd st(1), st(0)
fxch st(1)
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
fsubr dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x100d3b67
cmp byte [0x1190ace8], 0
je 0x100d3b67
mov byte [0x1190ace9], 1
call edi
add eax, 0x7d0
mov dword [0x1190acf0], eax
call edi
mov ecx, dword [0x1190acf0]
cmp eax, ecx
jbe 0x100d3ba3
test ecx, ecx
je 0x100d3ba3
lea edx, [esp + 0x18]
mov ecx, 8
push edx
mov dword [esp + 0x1c], 0xb4d308c1
mov dword [esp + 0x20], 0x71
call fcn.10100800
add esp, 4
mov dword [0x1190acf0], 0
fld dword [esp + 0x30]
push ecx
fadd qword [0x1013f580]
mov eax, 0x637c60
fstp dword [esp + 0x38]
fld dword [esp + 0x3c]
fsub qword [0x1013f758]
fstp dword [esp + 0x30]
fld dword [esp + 0x48]
fsub qword [0x1013f6d8]
fst qword [esp + 0x4c]
fldz
fst dword [esp]
fld dword [0x10141288]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x10140670]
fstp dword [esp + 0x18]
fstp dword [esp + 0x14]
fld dword [0x10141284]
fstp dword [esp + 0x10]
fld dword [0x101407e4]
fstp dword [esp + 0xc]
fstp dword [esp + 0x64]
fld dword [esp + 0x64]
fstp dword [esp + 8]
fld dword [esp + 0x58]
fstp dword [esp + 4]
fld dword [esp + 0x60]
fstp dword [esp]
push 0xf1010
call eax
fld dword [esp + 0x5c]
fadd qword [0x1013f6c0]
fst qword [esp + 0x68]
fadd qword [0x1013f6d0]
call fcn.1012e5b0
fld qword [esp + 0x78]
mov ebx, eax
call fcn.1012e5b0
fld dword [esp + 0x64]
fadd qword [0x1013f580]
mov esi, eax
call fcn.1012e5b0
mov ecx, dword [0x116de538]
push 0x108e9a18
push 0
push esi
push 0
push 0xd75effff
mov edi, eax
push ebx
push edi
push ecx
mov cl, 1
call fcn.1008a600
fld qword [esp + 0x88]
fadd qword [0x1013f580]
add esp, 0x50
call fcn.1012e5b0
mov edx, dword [0x116de538]
push 0x108e9c70
push 0
push esi
push 0
push 0xffc95eff
push eax
push edi
push edx
mov cl, 1
call fcn.1008a600
fld qword [esp + 0x58]
fadd qword [0x1013f600]
call fcn.1012e5b0
push 0x108e9ec8
push 0
push esi
push 0
push 0xffc95eff
push eax
mov eax, dword [0x116de538]
push edi
push eax
mov cl, 1
call fcn.1008a600
fld qword [esp + 0x78]
fadd qword [0x1013fa48]
add esp, 0x40
call fcn.1012e5b0
mov ecx, dword [0x116de538]
push 0x108ea120
push 0
push esi
push 0
push 0xffc95eff
push eax
push edi
push ecx
mov cl, 1
call fcn.1008a600
fld qword [esp + 0x58]
fadd qword [0x1013f750]
call fcn.1012e5b0
mov edx, dword [0x116de538]
push 0x108ea378
push 0
push esi
push 0
push 0xffc95eff
push eax
push edi
push edx
mov cl, 1
call fcn.1008a600
add esp, 0x40
call fcn.100d2cc0
mov al, byte [0x1190ace9]
test al, al
je 0x100d3d76
fld qword [esp + 0x50]
call fcn.1012e5b0
fld dword [esp + 0x30]
fadd qword [0x1013fa48]
push eax
call fcn.1012e5b0
push eax
call fcn.100d2d70
add esp, 8
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1012db16
mov esp, ebp
pop ebp
ret