Function at 0x1006bcd0
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword [0x100fa040]
xor eax, esp
mov dword [esp + 0xf8], eax
cmp dword [0xe609e8], 5
push ebx
push esi
push edi
jne 0x1006bd30
cmp dword [0x10886fb8], 1
je 0x1006bd30
cmp dword [0x102c7254], 1
jne 0x1006bd26
cmp dword [0x107e1c5c], 1
je 0x1006bd26
push 0
push 0
push 0
push 0x1004a390
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10886fb8], 1
mov eax, dword [0x8128ac8]
mov dword [0x107e7d48], eax
mov ecx, dword [0x7bc4f04]
mov dword [0x107e7d4c], ecx
mov eax, dword [0x879340c]
mov dword [0x107e7d5c], eax
mov eax, dword [0x8793410]
mov dword [0x107e7d64], eax
mov eax, dword [0xe61e18]
mov dword [0x107e7d58], eax
cmp byte [ecx + 0x31f], 1
mov esi, dword [0x8128ac4]
jne 0x1006bd9d
mov eax, dword [ecx + 0x2fc]
test eax, eax
je 0x1006bd9d
push eax
mov eax, 0x9cea6c
call eax
mov eax, dword [0x107e7d4c]
add esp, 4
mov dword [eax + 0x2fc], 0
mov ecx, dword [0x107e7d4c]
mov eax, 0x1f5b
cmp word [ecx + 0x22c], ax
jl 0x1006bdb6
mov al, byte [esi + 0x15ae]
mov byte [0x812a072], al
call fcn.1004ef40
call fcn.10011800
mov ecx, 0x1084a760
call fcn.100241d0
call fcn.100b58b0
mov ecx, 0x1010b528
call fcn.100219c0
mov ecx, 0x102a22b0
call fcn.1006d3f0
mov ecx, 0x102a22b0
call fcn.10072140
mov ecx, 0x102a22b0
call fcn.1006d850
call fcn.100239d0
mov ecx, 0x10869d78
call fcn.10032d60
call fcn.100a0ca0
mov ecx, 0x10869f78
call fcn.10044570
call fcn.1001fad0
mov ecx, 0x10848388
call fcn.1001fe30
call fcn.1004b7d0
call fcn.1004b3b0
mov ecx, 0x1088f148
call fcn.100b75a0
call fcn.100bc9d0
mov ecx, 0x10887f38
call fcn.10064c00
call fcn.10066620
mov ecx, 0x10128904
call fcn.1002dc20
call fcn.10030ec0
call fcn.1002c010
mov ecx, 0x10865d80
call fcn.1002c5d0
call fcn.1000af90
mov ecx, 0x10837d98
call fcn.1000b430
call fcn.10010290
call fcn.10010920
call fcn.100129d0
mov ecx, 0x100fc058
call fcn.10012df0
mov ecx, 0x102a22b0
call fcn.10072440
mov ecx, 0x10869de0
call fcn.10034120
call fcn.10037550
mov ecx, 0x1084837c
call fcn.1001eff0
call fcn.10057110
mov ecx, 0x102c6f5c
call fcn.100aa690
mov ecx, 0x1088dcb8
call fcn.100a7d40
call fcn.100a9bb0
call fcn.10026300
mov ecx, 0x10858248
call fcn.10026f00
mov ecx, 0x10887158
call fcn.10051840
call fcn.1004a0c0
mov ecx, 0x10246758
call fcn.1004a880
mov esi, dword [0x1024675c]
mov ecx, 0x635fd0
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
test esi, esi
je 0x1006c068
push 1
call ecx
movd xmm0, dword [0x879340c]
add esp, 4
cvtdq2ps xmm0, xmm0
push 0
push 0
push 0
addss xmm0, dword [0x100f1f04]
push esi
call fcn.100e1760
xor ecx, ecx
or ecx, 0x8c
push ecx
push eax
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f4ccccd
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
movd xmm0, dword [0x879340c]
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
push 0
sub esp, 0x14
mov eax, 0x6378a0
mov dword [esp + 0x10], 0
addss xmm0, xmm1
mov dword [esp + 0xc], 0x42c80000
mov dword [esp + 8], 0x42820000
mov dword [esp + 4], 0x43200000
movss dword [esp], xmm0
call eax
mov eax, 0x636070
call eax
push 1
mov eax, 0x635fd0
call eax
movsx eax, byte [esi + 0x17]
add esp, 0x18
movd xmm0, dword [0x879340c]
movsx ecx, word [esi]
mov edx, dword [esi + 2]
movss xmm1, dword [0x100f1f8c]
push 0
push eax
movsx eax, byte [esi + 0x44]
cvtdq2ps xmm0, xmm0
movd xmm3, eax
movsx eax, byte [esi + 0x43]
addss xmm0, dword [0x100f1d2c]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
call fcn.10071e10
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push ecx
mov dword [esp], 0x3f800000
call edi
push 0
mov esi, 0x635fd0
call esi
add esp, 4
call ebx
mov ecx, dword [0x10246764]
add ecx, 0x64
cmp ecx, eax
jae 0x1006c06a
mov dword [0x1024675c], 0
jmp 0x1006c06a
mov esi, ecx
mov eax, dword [0x101ad4bc]
test eax, eax
je 0x1006c109
movd xmm0, dword [0x879340c]
cvtdq2ps xmm0, xmm0
push 0
push 0
push 1
push eax
subss xmm0, dword [0x100f1f04]
call fcn.100e1760
xor ecx, ecx
or ecx, 0x28
push ecx
push eax
mov ecx, 0x102c64b4
call fcn.10085810
mov eax, 0x7dd0f0
call eax
test eax, eax
je 0x1006c0f5
call ebx
sub eax, dword [0x101ad534]
cmp eax, 0x32
jbe 0x1006c109
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0xffffffff
push eax
push dword [0x8793410]
mov eax, 0x861110
push dword [0x879340c]
call eax
mov edx, 0x861260
mov ecx, eax
call edx
mov edx, 0x83c7b0
mov ecx, eax
call edx
test eax, eax
jne 0x1006c109
mov dword [0x101ad4bc], 0
mov dword [0x101ad538], 0xffffffff
mov ecx, 0x10109b78
call fcn.1001a140
call fcn.10019530
call fcn.1005c2d0
mov ecx, 0x102a2220
call fcn.1005d960
mov ecx, 0x102a2220
call fcn.100629c0
call fcn.100587b0
mov ecx, 0x108871c0
call fcn.10058c30
call fcn.1005b280
call fcn.1005b8f0
cmp dword [0x102c73bc], 1
jne 0x1006c1a5
call ebx
mov ecx, dword [0x1050c990]
add ecx, 0x3e8
cmp eax, ecx
jb 0x1006c1a5
call fcn.100141d0
test al, al
je 0x1006c19e
xor eax, eax
mov ecx, 0xebb848
mov dword [esp + 0x11], eax
mov eax, 0x79dea0
mov word [esp + 0x10], 0x8c1
mov byte [esp + 0x12], 0x88
call eax
mov edx, 8
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x10]
call fcn.100b5210
call ebx
mov dword [0x1050c990], eax
cmp dword [0x102c7350], 1
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
jne 0x1006c2ab
cmp dword [0xe61728], 0xffffffff
je 0x1006c2ab
push 0x12
call edi
test ax, ax
jns 0x1006c2ab
mov eax, dword [0xe61728]
cmp eax, 0x3e7
ja 0x1006c2ab
lea eax, [eax + eax*4]
cmp byte [eax*4 + 0x10699450], 1
jne 0x1006c2ab
push 1
call esi
mov eax, dword [0xe61728]
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x10699451]
push eax
lea eax, [esp + 0x94]
push eax
call fcn.1004e730
mov esi, eax
lea edi, [esp + 0x20]
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push 0
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0xe61728]
lea eax, [eax + eax*4]
mov eax, dword [eax*4 + 0x10699460]
mov dword [esp + 0x8f], eax
lea eax, [esp + 0x2c]
mov ecx, dword [0x879340c]
push eax
xor eax, eax
sub ecx, 0x3c
or eax, 0x64
push eax
push ecx
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, 0x861aa0
call eax
mov ecx, eax
mov eax, 0x7e3e30
call eax
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0
mov eax, 0x635fd0
call eax
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 4
push 9
mov eax, 0x861110
call eax
mov esi, 0x85ec20
mov ecx, eax
call esi
test al, al
je 0x1006c2ea
push 0x4d
mov eax, 0x861110
call eax
mov ecx, eax
call esi
test al, al
jne 0x1006c2ea
cmp byte [0x106992c5], al
jbe 0x1006c2ea
push 0x4d
mov eax, 0x861110
call eax
lea edx, [esi + 0x30]
mov ecx, eax
call edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0xe8c578]
jne 0x1006c777
push 0x2c
call edi
test ax, ax
jns 0x1006c311
push 1
mov ecx, 0x102a22b0
call fcn.1006d020
push 0x23
call edi
bt ax, 0xe
jae 0x1006c382
call ebx
sub eax, dword [0x102a2f98]
cmp eax, 0x12c
jbe 0x1006c382
push 0x21
mov eax, 0x861110
call eax
mov ecx, eax
mov eax, esi
call eax
test al, al
jne 0x1006c382
cmp byte [0x102a2f9d], al
je 0x1006c360
call ebx
mov dword [0x102a2f98], eax
mov byte [0x102a2f9d], 0
mov dword [0xe8cb3c], 0
jmp 0x1006c382
call ebx
mov ecx, 0x102a22b0
mov dword [0x102a2f98], eax
call fcn.10071ab0
mov byte [0x102a2f9d], 1
mov dword [0xe8cb3c], 1
push 0x48
call edi
bt ax, 0xe
jae 0x1006c392
call fcn.100256a0
push 0x4a
call edi
bt ax, 0xe
jae 0x1006c3a2
call fcn.10033d90
push 0x4b
call edi
bt ax, 0xe
jae 0x1006c3b2
call fcn.10064a50
push 0x77
call edi
bt ax, 0xe
jae 0x1006c3c2
call fcn.1004f820
push 9
call edi
test ax, ax
jns 0x1006c3df
call ebx
sub eax, dword [0x10865d7c]
cmp eax, 0x64
jbe 0x1006c3df
call ebx
mov dword [0x10865d7c], eax
push 0xd
call edi
test ax, ax
jns 0x1006c441
call ebx
cmp byte [0x102a527d], 0
je 0x1006c441
sub eax, dword [0x102a52d8]
mov byte [0x102a52dc], 0
cmp eax, 0x1f4
jb 0x1006c441
call ebx
mov dword [0x102a52d8], eax
mov eax, dword [0x10109c3c]
cmp eax, 6
je 0x1006c430
cmp eax, 7
je 0x1006c430
push dword [0x10109c4c]
push eax
call fcn.1001a080
call ebx
mov dword [0x10869f70], eax
mov byte [0x102a527d], 0
mov dword [0xe8cb3c], 0
push 0x1b
call edi
test ax, ax
jns 0x1006c69f
cmp byte [0x102a42bd], 1
jne 0x1006c468
mov byte [0x102a42bd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2bdd], 1
jne 0x1006c482
mov byte [0x102a2bdd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a34dd], 1
jne 0x1006c49c
mov byte [0x102a34dd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5abd], 1
jne 0x1006c4b6
mov byte [0x102a5abd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2c3d], 1
jne 0x1006c4d0
mov byte [0x102a2c3d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2c9d], 1
jne 0x1006c4ea
mov byte [0x102a2c9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2cfd], 1
jne 0x1006c522
mov byte [0x102a2cfd], 0
mov dword [0xe8cb3c], 0
mov dword [0x10128910], 0
mov dword [0x10128908], 0xffffffff
mov dword [0x1012890c], 0
cmp byte [0x102a527d], 1
jne 0x1006c53c
mov byte [0x102a527d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2f9d], 0
je 0x1006c556
mov byte [0x102a2f9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a3add], 0
je 0x1006c57a
mov byte [0x102a3add], 0
mov dword [0xe8cb3c], 0
mov dword [0x102a22b8], 0
cmp byte [0x102a6bfd], 1
jne 0x1006c594
mov byte [0x102a6bfd], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a767d], 1
jne 0x1006c5ae
mov byte [0x102a767d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2dbd], 1
jne 0x1006c5cf
mov byte [0x102a2dbd], 0
mov dword [0xe8cb3c], 0
mov byte [0x1088f16c], 0
cmp byte [0x102a2e1d], 1
jne 0x1006c5f0
mov byte [0x102a2e1d], 0
mov dword [0xe8cb3c], 0
mov byte [0x1088a4dc], 0
cmp byte [0x102a7b5d], 1
jne 0x1006c60a
mov byte [0x102a7b5d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a893d], 1
jne 0x1006c624
mov byte [0x102a893d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a809d], 1
jne 0x1006c63e
mov byte [0x102a809d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a2d5d], 1
jne 0x1006c658
mov byte [0x102a2d5d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5f3d], 1
jne 0x1006c672
mov byte [0x102a5f3d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a5f9d], 1
jne 0x1006c68c
mov byte [0x102a5f9d], 0
mov dword [0xe8cb3c], 0
cmp byte [0x102a8cfd], 1
jne 0x1006c69f
mov dword [0x102a2224], 5
cmp dword [0x107e1c68], 1
je 0x1006c777
push 0x11
mov eax, 0x791090
call eax
add esp, 4
cmp al, 1
je 0x1006c777
cmp dword [0x1088f13c], 0
je 0x1006c6e7
call ebx
sub eax, dword [0x1088f140]
cmp eax, 0x4b0
jbe 0x1006c6e7
mov dword [0x1088f13c], 0
jmp 0x1006c777
push 0x11
call edi
test ax, ax
jns 0x1006c777
cmp dword [0x1088f13c], 0
jle 0x1006c766
call ebx
sub eax, dword [0x1088f140]
cmp eax, 0x64
jbe 0x1006c766
mov eax, dword [0x1088f13c]
mov ecx, eax
inc eax
mov dword [0x1088f13c], eax
cmp ecx, 2
jl 0x1006c770
cmp byte [0x1088f138], 0
mov dword [0x1088f13c], 0
jne 0x1006c73d
mov byte [0x1088f138], 1
mov eax, 0x80
jmp 0x1006c749
mov byte [0x1088f138], 0
mov eax, 0x81
push eax
mov ecx, 0x101b3888
call fcn.10042340
push eax
push 2
push 0x1088daa0
call fcn.100a30a0
add esp, 0xc
jmp 0x1006c777
mov dword [0x1088f13c], 1
call ebx
mov dword [0x1088f140], eax
cmp dword [0x102c7200], 2
mov edx, 0x790b10
jne 0x1006c7fe
mov ecx, dword [0x102c724c]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x1006c7b8
push 6
push 0xc0
push 0x1b6
push 0xdc
call edx
add esp, 0x10
cmp al, 1
je 0x1006c7da
mov ecx, dword [0x102c724c]
mov edx, 0x790b10
cmp ecx, 1
jb 0x1006c7c2
cmp ecx, 3
jbe 0x1006c7fe
push 0xa
push dword [0x100fac74]
push 0x1d6
push 0
call edx
add esp, 0x10
cmp al, 1
jne 0x1006c7fe
push 1
call edi
test ax, ax
jns 0x1006c7fe
call ebx
sub eax, dword [0x102aa600]
cmp eax, 0xc8
jbe 0x1006c7fe
call fcn.10026e80
call ebx
mov dword [0x102aa600], eax
push 0
mov ecx, 0x102a22b0
call fcn.1006d020
cmp dword [0x102c7304], 0
je 0x1006c9fc
cmp dword [0x102a22b4], 0
je 0x1006c9fc
mov eax, dword [0x100fac74]
cdq
sub eax, edx
mov esi, eax
mov eax, 0x637c60
sar esi, 1
push 0
push 1
push 1
movd xmm0, esi
sub esp, 0x20
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f400000
mov dword [esp + 0x18], 0x3f666666
mov dword [esp + 0x14], 0
subss xmm0, dword [0x100f1f44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x43960000
mov dword [esp + 8], 0x43c80000
mov dword [esp + 4], 0x42480000
addss xmm0, dword [0x100f1d20]
movss dword [esp], xmm0
push 0x790b
call eax
movd xmm0, esi
mov eax, 0x790b10
cvtdq2ps xmm0, xmm0
push 0xf
push 0x4b
push 0x104
cvtps2pd xmm0, xmm0
subsd xmm0, qword [0x100f1860]
cvttsd2si ebx, xmm0
movsd qword [esp + 0x54], xmm0
push ebx
call eax
add esp, 0x40
cmp al, 1
jne 0x1006c94a
mov esi, dword [sym.imp.OPENGL32.dll_glColor3f]
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
call esi
push 1
call edi
test ax, ax
jns 0x1006c94a
sub esp, 0xc
mov dword [0x102a22b4], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
xor eax, eax
mov dword [0xe8cb3c], 0
mov dword [esp + 0x11], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xebf308c1
mov dword [esp + 0x14], 0x62
lea edx, [eax + 8]
call fcn.100b5210
movsd xmm0, qword [esp + 0x18]
mov eax, 0x637c60
push 0
push 1
push 1
sub esp, 0x20
cvtpd2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f266666
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x42960000
mov dword [esp + 4], 0x43820000
movss dword [esp], xmm0
push 0x7b4b
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call dword [sym.imp.OPENGL32.dll_glColor4f]
push 0x184
mov eax, 0x402320
mov ecx, 0x8128adc
call eax
push eax
push 3
push 0x4b
push 0x109
push ebx
push 0xff00ffff
push 0x102a22b0
call fcn.1006ca30
add esp, 0x1c
cmp dword [0x102c724c], 0
jne 0x1006ca0c
mov eax, 0x80f8e0
call eax
mov ecx, dword [esp + 0x104]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100c0b64
mov esp, ebp
pop ebp
ret