Function at 0x10086620
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword [0x10129040]
xor eax, esp
mov dword [esp + 0xf8], eax
cmp dword [0xe609e8], 5
push ebx
push esi
push edi
jne 0x10086680
cmp dword [0x11514f38], 1
je 0x10086680
cmp dword [0x103037f8], 1
jne 0x10086676
cmp dword [0x1149a4ac], 1
je 0x10086676
push 0
push 0
push 0
push 0x100523d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x11514f38], 1
mov eax, dword [0x8128ac8]
mov dword [0x114a059c], eax
mov ecx, dword [0x7bc4f04]
mov dword [0x114a05a0], ecx
mov eax, dword [0x879340c]
mov dword [0x114a05b0], eax
mov eax, dword [0x8793410]
mov dword [0x114a05b8], eax
mov eax, dword [0xe61e18]
mov dword [0x114a05ac], eax
cmp byte [ecx + 0x31f], 1
mov esi, dword [0x8128ac4]
jne 0x100866ed
mov eax, dword [ecx + 0x2fc]
test eax, eax
je 0x100866ed
push eax
mov eax, 0x9cea6c
call eax
mov eax, dword [0x114a05a0]
add esp, 4
mov dword [eax + 0x2fc], 0
mov ecx, dword [0x114a05a0]
mov eax, 0x1f5b
cmp word [ecx + 0x22c], ax
jl 0x10086706
mov al, byte [esi + 0x15ae]
mov byte [0x812a072], al
call fcn.10057030
call fcn.10010f80
mov ecx, 0x11502f60
call fcn.10025da0
call fcn.100e1f90
mov ecx, 0x1013a740
call fcn.10022ae0
mov ecx, 0x102de7a0
call fcn.10087e20
mov ecx, 0x102de7a0
call fcn.1008cef0
mov ecx, 0x102de7a0
call fcn.10088280
call fcn.10024c10
mov ecx, 0x11514ae8
call fcn.100382c0
call fcn.100cacc0
mov ecx, 0x11514ce8
call fcn.1004a6f0
call fcn.10020bf0
mov ecx, 0x11500b80
call fcn.10020f60
call fcn.10053840
call fcn.10053410
mov ecx, 0x1151d670
call fcn.100e3d50
call fcn.100e91d0
mov ecx, 0x11516220
call fcn.1007df70
call fcn.1007f9a0
mov ecx, 0x10157b1c
call fcn.10033030
call fcn.10036320
call fcn.10031440
mov ecx, 0x11510af0
call fcn.10031a00
call fcn.1000a750
mov ecx, 0x114f0590
call fcn.1000aac0
call fcn.1000f8e0
call fcn.1000ff70
call fcn.10012680
mov ecx, 0x1012aff0
call fcn.10012aa0
mov ecx, 0x102de7a0
call fcn.1008d1f0
mov ecx, 0x102de7a0
call fcn.1008d630
mov ecx, 0x11514b50
call fcn.100396b0
mov ecx, 0x11514b50
call fcn.1003c860
mov ecx, 0x11510ac4
call fcn.1002b320
mov ecx, 0x10570e2c
call fcn.100ec280
mov ecx, 0x11515248
call fcn.10069480
mov ecx, 0x115161f8
call fcn.10078c00
mov ecx, 0x11500b74
call fcn.10020110
call fcn.10067e10
mov ecx, 0x103034ec
call fcn.100d62b0
mov ecx, 0x1151c1e0
call fcn.100d3970
call fcn.100d57e0
call fcn.10027ee0
mov ecx, 0x11510a48
call fcn.10028b50
mov ecx, 0x115150d8
call fcn.10059980
call fcn.10052100
mov ecx, 0x1027f8b0
call fcn.100528d0
mov esi, dword [0x1027f8b4]
mov ecx, 0x635fd0
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
test esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x100869ef
push 1
call ecx
movd xmm0, dword [0x879340c]
add esp, 4
cvtdq2ps xmm0, xmm0
push 0
push 0
push 0
addss xmm0, dword [0x10120590]
push esi
call fcn.1010f1b0
xor ecx, ecx
or ecx, 0x8c
push ecx
push eax
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f4ccccd
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
movd xmm0, dword [0x879340c]
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
push 0
sub esp, 0x14
mov eax, 0x6378a0
mov dword [esp + 0x10], 0
addss xmm0, xmm1
mov dword [esp + 0xc], 0x42c80000
mov dword [esp + 8], 0x42820000
mov dword [esp + 4], 0x43200000
movss dword [esp], xmm0
call eax
mov eax, 0x636070
call eax
push 1
mov eax, 0x635fd0
call eax
movsx eax, byte [esi + 0x17]
add esp, 0x18
movd xmm0, dword [0x879340c]
movsx ecx, word [esi]
mov edx, dword [esi + 2]
movss xmm1, dword [0x1012061c]
push 0
push eax
movzx eax, byte [esi + 0x44]
cvtdq2ps xmm0, xmm0
movd xmm3, eax
movzx eax, byte [esi + 0x43]
addss xmm0, dword [0x101203a8]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
call fcn.1008cbc0
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push ecx
mov dword [esp], 0x3f800000
call edi
push 0
mov esi, 0x635fd0
call esi
add esp, 4
call ebx
mov ecx, dword [0x1027f8bc]
add ecx, 0x64
cmp ecx, eax
jae 0x100869f1
mov dword [0x1027f8b4], 0
jmp 0x100869f1
mov esi, ecx
mov eax, dword [0x101dc6d4]
test eax, eax
je 0x10086a90
movd xmm0, dword [0x879340c]
cvtdq2ps xmm0, xmm0
push 0
push 0
push 1
push eax
subss xmm0, dword [0x10120590]
call fcn.1010f1b0
xor ecx, ecx
or ecx, 0x28
push ecx
push eax
mov ecx, 0x10302a44
call fcn.100a1c50
mov eax, 0x7dd0f0
call eax
test eax, eax
je 0x10086a7c
call ebx
sub eax, dword [0x101dc74c]
cmp eax, 0x32
jbe 0x10086a90
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0xffffffff
push eax
push dword [0x8793410]
mov eax, 0x861110
push dword [0x879340c]
call eax
mov edx, 0x861260
mov ecx, eax
call edx
mov edx, 0x83c7b0
mov ecx, eax
call edx
test eax, eax
jne 0x10086a90
mov dword [0x101dc6d4], 0
mov dword [0x101dc750], 0xffffffff
mov ecx, 0x10138b20
call fcn.1001abd0
mov ecx, 0x10138b20
call fcn.10019dc0
mov ecx, 0x115197c8
call fcn.100a8d90
mov ecx, 0x115197c8
call fcn.100b2e00
call fcn.100705d0
mov ecx, 0x102de710
call fcn.10071d70
mov ecx, 0x102de710
call fcn.10076dc0
call fcn.1006c4e0
mov ecx, 0x11515480
call fcn.1006c850
call fcn.1006f4f0
call fcn.1006fb60
mov ecx, 0x11515108
call fcn.1005b1a0
mov ecx, 0x11515108
call fcn.10062c50
mov ecx, 0x11515108
call fcn.100632c0
cmp dword [0x10303970], 1
jne 0x10086b63
call ebx
mov ecx, dword [0x10572cdc]
add ecx, 0x3e8
cmp eax, ecx
jb 0x10086b63
call fcn.100143a0
test al, al
je 0x10086b5c
xor eax, eax
mov ecx, 0xebb848
mov dword [esp + 0x11], eax
mov eax, 0x79dea0
mov word [esp + 0x10], 0x8c1
mov byte [esp + 0x12], 0x88
call eax
mov edx, 8
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x10]
call fcn.100e16c0
call ebx
mov dword [0x10572cdc], eax
cmp dword [0x10303904], 1
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
jne 0x10086c69
cmp dword [0xe61728], 0xffffffff
je 0x10086c69
push 0x12
call edi
test ax, ax
jns 0x10086c69
mov eax, dword [0xe61728]
cmp eax, 0x3e7
ja 0x10086c69
lea eax, [eax + eax*4]
cmp byte [eax*4 + 0x11351c68], 1
jne 0x10086c69
push 1
call esi
mov eax, dword [0xe61728]
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x11351c69]
push eax
lea eax, [esp + 0x94]
push eax
call fcn.10056810
mov esi, eax
lea edi, [esp + 0x20]
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push 0
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0xe61728]
lea eax, [eax + eax*4]
mov eax, dword [eax*4 + 0x11351c78]
mov dword [esp + 0x8f], eax
lea eax, [esp + 0x2c]
mov ecx, dword [0x879340c]
push eax
xor eax, eax
sub ecx, 0x3c
or eax, 0x64
push eax
push ecx
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0
mov eax, 0x635fd0
call eax
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 4
push 9
mov eax, 0x861110
call eax
mov esi, 0x85ec20
mov ecx, eax
call esi
test al, al
je 0x10086ca8
push 0x4d
mov eax, 0x861110
call eax
mov ecx, eax
call esi
test al, al
jne 0x10086ca8
cmp byte [0x106ff615], al
jbe 0x10086ca8
push 0x4d
mov eax, 0x861110
call eax
lea edx, [esi + 0x30]
mov ecx, eax
call edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0xe8c578]
jne 0x100871aa
push 0x2c
call edi
test ax, ax
jns 0x10086ccf
push 1
mov ecx, 0x102de7a0
call fcn.10087a50
push 0x23
call edi
bt ax, 0xe
jae 0x10086d34
call ebx
sub eax, dword [0x102df488]
cmp eax, 0x12c
jbe 0x10086d34
push 0x21
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, esi
call eax
test al, al
jne 0x10086d34
cmp byte [0x102df48d], al
je 0x10086d1e
call ebx
mov dword [0x102df488], eax
mov byte [0x102df48d], 0
mov dword [0xe8cb3c], 0
jmp 0x10086d34
call ebx
mov ecx, 0x102de7a0
mov dword [0x102df488], eax
call fcn.1008c840
call fcn.10023f00
push 0x48
call edi
bt ax, 0xe
jae 0x10086d44
call fcn.10027250
push 0x4a
call edi
bt ax, 0xe
jae 0x10086d54
call fcn.10039300
push 0x4b
call edi
bt ax, 0xe
jae 0x10086d64
call fcn.1007ddb0
push 0x77
call edi
bt ax, 0xe
jae 0x10086d74
call fcn.10057950
push 9
call edi
test ax, ax
jns 0x10086d91
call ebx
sub eax, dword [0x11510a44]
cmp eax, 0x64
jbe 0x10086d91
call ebx
mov dword [0x11510a44], eax
push 0xd
call edi
test ax, ax
jns 0x10086e02
call ebx
cmp byte [0x102e17cd], 0
je 0x10086e02
sub eax, dword [0x102e1828]
mov byte [0x102e182c], 0
cmp eax, 0x1f4
jb 0x10086e02
call ebx
mov dword [0x102e1828], eax
mov eax, dword [0x10138be4]
cmp eax, 8
jne 0x10086dd4
push 0
push eax
call fcn.1001ab10
jmp 0x10086df1
cmp eax, 6
je 0x10086df1
cmp eax, 7
je 0x10086df1
push dword [0x10138bf4]
push eax
call fcn.1001ab10
call ebx
mov dword [0x11514ce0], eax
mov byte [0x102e17cd], 0
mov dword [0xe8cb3c], 0
push 0x1b
call edi
test ax, ax
jns 0x100870ec
cmp byte [0x102e080d], 1
jne 0x10086e29
mov byte [0x102e080d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df0cd], 1
jne 0x10086e43
mov byte [0x102df0cd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df9cd], 1
jne 0x10086e5d
mov byte [0x102df9cd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e200d], 1
jne 0x10086e77
mov byte [0x102e200d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df12d], 1
jne 0x10086e91
mov byte [0x102df12d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df18d], 1
jne 0x10086eab
mov byte [0x102df18d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df1ed], 1
jne 0x10086ee3
mov byte [0x102df1ed], 0
mov dword [0xe8cb3c], 0
mov dword [0x10157b28], 0
mov dword [0x10157b20], 0xffffffff
mov dword [0x10157b24], 0
cmp byte [0x102e17cd], 1
jne 0x10086efd
mov byte [0x102e17cd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df48d], 0
je 0x10086f17
mov byte [0x102df48d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102dffcd], 0
je 0x10086f3b
mov byte [0x102dffcd], 0
mov dword [0xe8cb3c], 0
mov dword [0x102de7a8], 0
cmp byte [0x102e31ad], 1
jne 0x10086f55
mov byte [0x102e31ad], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e3c2d], 1
jne 0x10086f6f
mov byte [0x102e3c2d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df2ad], 1
jne 0x10086f90
mov byte [0x102df2ad], 0
mov dword [0xe8cb3c], 0
mov byte [0x1151d694], 0
cmp byte [0x102df30d], 1
jne 0x10086fb1
mov byte [0x102df30d], 0
mov dword [0xe8cb3c], 0
mov byte [0x115187c4], 0
cmp byte [0x102e410d], 1
jne 0x10086fcb
mov byte [0x102e410d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e530d], 1
jne 0x10087000
mov byte [0x102e530d], 0
mov eax, 0x861110
push 0
mov dword [0xe8cb3c], 0
call eax
mov edx, 0x860b80
mov ecx, eax
call edx
mov edx, 0x7d44b0
mov ecx, eax
call edx
cmp byte [0x102e4eed], 1
jne 0x1008701a
mov byte [0x102e4eed], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e464d], 1
jne 0x10087034
mov byte [0x102e464d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102df24d], 1
jne 0x10087057
cmp dword [0x11514b50], 0
jg 0x10087057
mov byte [0x102df24d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e248d], 1
jne 0x10087071
mov byte [0x102e248d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e24ed], 1
jne 0x1008708b
mov byte [0x102e24ed], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e52ad], 1
jne 0x1008709e
mov dword [0x102de714], 5
cmp byte [0x102e254d], 1
jne 0x100870b1
mov dword [0x1151510c], 5
cmp byte [0x102e58ad], 1
jne 0x100870cb
mov byte [0x102e58ad], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102e590d], 1
jne 0x100870ec
mov byte [0x102e590d], 0
mov dword [0xe8cb3c], 0
mov byte [0x11519824], 0
cmp dword [0x1149a4b8], 1
je 0x100871aa
push 0x11
mov eax, 0x791090
call eax
add esp, 4
cmp al, 1
je 0x100871aa
cmp dword [0x1151d664], 0
je 0x10087131
call ebx
sub eax, dword [0x1151d668]
cmp eax, 0x3e8
jbe 0x10087131
mov dword [0x1151d664], 0
jmp 0x100871aa
push 0x11
call edi
test ax, ax
jns 0x100871aa
call ebx
sub eax, dword [0x1151d668]
cmp eax, 0x96
jbe 0x100871a3
mov eax, dword [0x1151d664]
inc eax
mov dword [0x1151d664], eax
cmp eax, 2
jle 0x100871a3
cmp byte [0x1151d660], 0
mov dword [0x1151d664], 0
jne 0x1008717a
mov byte [0x1151d660], 1
mov eax, 0x80
jmp 0x10087186
mov byte [0x1151d660], 0
mov eax, 0x81
push eax
mov ecx, 0x101e2dc0
call fcn.10047dc0
push eax
push 2
push 0x1151bfc8
call fcn.100ced60
add esp, 0xc
jmp 0x100871aa
call ebx
mov dword [0x1151d668], eax
cmp dword [0x103037a0], 2
mov edx, 0x790b10
jne 0x10087231
mov ecx, dword [0x103037f0]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x100871eb
push 6
push 0xc0
push 0x1b6
push 0xdc
call edx
add esp, 0x10
cmp al, 1
je 0x1008720d
mov ecx, dword [0x103037f0]
mov edx, 0x790b10
cmp ecx, 1
jb 0x100871f5
cmp ecx, 3
jbe 0x10087231
push 0xa
push dword [0x10129bac]
push 0x1d6
push 0
call edx
add esp, 0x10
cmp al, 1
jne 0x10087231
push 1
call edi
test ax, ax
jns 0x10087231
call ebx
sub eax, dword [0x102e6af0]
cmp eax, 0xc8
jbe 0x10087231
call fcn.10028a10
call ebx
mov dword [0x102e6af0], eax
push 0
mov ecx, 0x102de7a0
call fcn.10087a50
cmp dword [0x103038b8], 0
je 0x1008742f
cmp dword [0x102de7a4], 0
je 0x1008742f
mov eax, dword [0x10129bac]
cdq
sub eax, edx
mov esi, eax
mov eax, 0x637c60
sar esi, 1
push 0
push 1
push 1
movd xmm0, esi
sub esp, 0x20
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f400000
mov dword [esp + 0x18], 0x3f666666
mov dword [esp + 0x14], 0
subss xmm0, dword [0x101205d4]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x43960000
mov dword [esp + 8], 0x43c80000
mov dword [esp + 4], 0x42480000
addss xmm0, dword [0x1012039c]
movss dword [esp], xmm0
push 0x790b
call eax
movd xmm0, esi
mov eax, 0x790b10
cvtdq2ps xmm0, xmm0
push 0xf
push 0x4b
push 0x104
cvtps2pd xmm0, xmm0
subsd xmm0, qword [0x1011feb0]
cvttsd2si ebx, xmm0
movsd qword [esp + 0x54], xmm0
push ebx
call eax
add esp, 0x40
cmp al, 1
jne 0x1008737d
mov esi, dword [sym.imp.OPENGL32.dll_glColor3f]
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
call esi
push 1
call edi
test ax, ax
jns 0x1008737d
sub esp, 0xc
mov dword [0x102de7a4], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
xor eax, eax
mov dword [0xe8cb3c], 0
mov dword [esp + 0x11], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xebf308c1
mov dword [esp + 0x14], 0x62
lea edx, [eax + 8]
call fcn.100e16c0
movsd xmm0, qword [esp + 0x18]
mov eax, 0x637c60
push 0
push 1
push 1
sub esp, 0x20
cvtpd2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f266666
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x42960000
mov dword [esp + 4], 0x43820000
movss dword [esp], xmm0
push 0x7b4b
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0x184
mov eax, 0x402320
mov ecx, 0x8128adc
call eax
push eax
push 3
push 0x4b
push 0x109
push ebx
push 0xff00ffff
push 0x102de7a0
call fcn.10087460
add esp, 0x1c
cmp dword [0x103037f0], 0
jne 0x1008743f
mov eax, 0x80f8e0
call eax
mov ecx, dword [esp + 0x104]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100ee369
mov esp, ebp
pop ebp
ret