Function at 0x1002c010
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x10865ed8], 0
je 0x1002c5c9
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push edi
call ebx
sub eax, dword [0x10865ec0]
cmp eax, 0x3d4
jbe 0x1002c157
call ebx
mov dword [0x10865ec0], eax
xor ebx, ebx
mov edi, 0x10865dc0
nop dword [eax]
mov eax, dword [edi - 4]
cmp eax, dword [edi]
je 0x1002c069
mov ecx, dword [eax + 0xc]
test ecx, ecx
jle 0x1002c062
dec ecx
mov dword [eax + 0xc], ecx
add eax, 0x10
cmp eax, dword [edi]
jne 0x1002c057
cmp dword [edi - 0x34], 0xffffffff
je 0x1002c141
mov eax, dword [edi - 0x10]
test eax, eax
jle 0x1002c083
dec eax
mov dword [edi - 0x10], eax
jmp 0x1002c141
cmp ebx, 4
jge 0x1002c0e8
lea esi, [edi + 0x2c]
nop dword [eax + eax]
mov eax, dword [esi - 0x24]
lea ecx, [esi - 0x5c]
mov dword [esi - 0x60], eax
mov edx, 0x20
nop
mov al, byte [ecx + 0x3c]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
sub edx, 1
jne 0x1002c0a0
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [esi - 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esi - 0x38], eax
mov eax, dword [esi + 8]
mov dword [esi - 0x34], eax
lea eax, [esi - 0x30]
cmp eax, ecx
je 0x1002c0dd
mov ecx, dword [ecx]
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 4
push eax
push ecx
lea ecx, [esi - 0x30]
call fcn.1002d8f0
add esi, 0x3c
cmp esi, 0x10865edc
jl 0x1002c090
mov eax, dword [0x10865eac]
mov dword [0x10865e7c], 0xffffffff
mov dword [0x10865ea0], 0
mov dword [0x10865ea4], 0xffffffff
mov dword [0x10865ea8], 0
cmp eax, dword [0x10865eb0]
je 0x1002c122
mov dword [0x10865eb0], eax
xorps xmm0, xmm0
movups xmmword [0x10865e80], xmm0
movups xmmword [0x10865e90], xmm0
cmp dword [0x10865ee0], ebx
jle 0x1002c141
dec dword [0x10865ee0]
add edi, 0x3c
inc ebx
cmp edi, 0x10865eec
jl 0x1002c050
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, eax
cmp dword [0x10865d8c], 0xffffffff
setne al
cmp dword [0x10865dc8], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x10865e04], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
cmp dword [0x10865e40], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x10865e7c], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
test eax, eax
je 0x1002c5a8
cmp dword [0xe61e18], 0x1e
je 0x1002c5a8
call fcn.100713e0
test al, al
jne 0x1002c5c6
call fcn.10071520
test al, al
jne 0x1002c5c6
push 0x41
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1002c5c6
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002c5c6
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002c5c6
cmp dword [0x10865eb8], 1
mov esi, dword [sym.imp.OPENGL32.dll_glColor4f]
jne 0x1002c25a
call ebx
sub eax, dword [0x10865ebc]
cmp eax, 0x2bc
jae 0x1002c244
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f53d07d
mov dword [esp + 4], 0x3f53d07d
mov dword [esp], 0x3f53d07d
call esi
jmp 0x1002c25a
call ebx
sub eax, dword [0x10865ebc]
cmp eax, 0x578
jbe 0x1002c25a
call ebx
mov dword [0x10865ebc], eax
cmp dword [0x10865d88], 0
xorps xmm3, xmm3
movss xmm5, dword [0x100f1df0]
movss xmm6, dword [0x100f2054]
jne 0x1002c3d0
movss xmm0, dword [0xe7c3d4]
xor eax, eax
movss xmm1, dword [0x100f1590]
comiss xmm1, xmm0
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm3
lahf
test ah, 0x44
jnp 0x1002c2a7
movaps xmm2, xmm0
jmp 0x1002c2af
movss xmm2, dword [0xe7c3d8]
ucomiss xmm4, xmm3
mulss xmm2, xmm5
movaps xmm1, xmm0
lahf
mulss xmm1, xmm6
divss xmm2, xmm0
test ah, 0x44
jnp 0x1002c2cc
movaps xmm3, xmm0
jmp 0x1002c2d4
movss xmm3, dword [0xe7c3d8]
mulss xmm3, dword [0x100f1d4c]
push 0xe
cvttss2si eax, xmm2
subss xmm1, xmm3
push eax
push 2
divss xmm1, xmm0
movd xmm0, dword [0x107e7b70]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, 1
jne 0x1002c3bd
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f666666
mov dword [esp + 4], 0x3f666666
mov dword [esp], 0x3f666666
call esi
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1002c3bd
call ebx
sub eax, dword [0x10865d80]
cmp eax, 0x12c
jbe 0x1002c3bd
cmp dword [0x10865ed4], 0
jne 0x1002c388
movd xmm0, dword [0x107e7b70]
cvtdq2pd xmm0, xmm0
mov dword [0x10865ed4], 1
addsd xmm0, qword [0x100f1ac8]
cvtpd2ps xmm0, xmm0
movss dword [0x10865ec4], xmm0
jmp 0x1002c392
mov dword [0x10865ed4], 0
call ebx
sub esp, 0x10
mov dword [0x10865d80], eax
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
movss xmm6, dword [0x100f2054]
xorps xmm3, xmm3
movss xmm5, dword [0x100f1df0]
movss xmm0, dword [0x100f1590]
xor eax, eax
movss xmm4, dword [0xe7c3d4]
comiss xmm0, xmm4
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jnp 0x1002c3fd
movaps xmm2, xmm4
jmp 0x1002c405
movss xmm2, dword [0xe7c3d8]
ucomiss xmm0, xmm3
mulss xmm2, xmm5
lahf
test ah, 0x44
jnp 0x1002c417
movaps xmm3, xmm4
jmp 0x1002c41f
movss xmm3, dword [0xe7c3d8]
movss xmm1, dword [0xe7c3d8]
mov eax, 0x637c60
mulss xmm3, dword [0x100f1d40]
movaps xmm0, xmm1
push 0
mulss xmm0, dword [0x100f1cc4]
push 1
divss xmm2, xmm4
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f5eb852
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
divss xmm0, xmm1
movaps xmm1, xmm4
mulss xmm1, xmm6
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x107e7b70]
subss xmm1, xmm3
movss dword [esp + 8], xmm2
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x3f800000
divss xmm1, xmm4
addss xmm1, xmm0
movss dword [esp], xmm1
push 0xf077
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call esi
movss xmm1, dword [0xe7c3d4]
xor eax, eax
movss xmm0, dword [0x100f1590]
xorps xmm2, xmm2
comiss xmm0, xmm1
movss dword [ebp - 0x10], xmm1
setae al
movd xmm3, eax
cvtdq2ps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x1002c507
movaps xmm0, xmm1
jmp 0x1002c50f
movss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x100f1e18]
ucomiss xmm3, xmm2
divss xmm0, xmm1
lahf
movss dword [ebp - 8], xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x100f2054]
movss dword [ebp - 0xc], xmm0
test ah, 0x44
jp 0x1002c541
movss xmm1, dword [0xe7c3d8]
push 0x105
mov ecx, 0x101b3888
movss dword [ebp - 4], xmm1
call fcn.10042340
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [0x100f1d4c]
push eax
movss xmm1, dword [ebp - 0xc]
cvttss2si eax, dword [ebp - 8]
push 3
subss xmm1, xmm0
movd xmm0, dword [0x107e7b70]
cvtdq2ps xmm0, xmm0
push eax
push 4
divss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0xff19bdff
push 0x102a22b0
call fcn.1006ca30
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x10865ed4], 0
mov dword [0x10865ed8], 0
mov dword [0x10865ee0], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret