Function at 0x1002c360
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x10895620], 0
je 0x1002c919
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push edi
call ebx
sub eax, dword [0x10895608]
cmp eax, 0x3d4
jbe 0x1002c4a7
call ebx
mov dword [0x10895608], eax
xor ebx, ebx
mov edi, 0x10895508
nop dword [eax]
mov eax, dword [edi - 4]
cmp eax, dword [edi]
je 0x1002c3b9
mov ecx, dword [eax + 0xc]
test ecx, ecx
jle 0x1002c3b2
dec ecx
mov dword [eax + 0xc], ecx
add eax, 0x10
cmp eax, dword [edi]
jne 0x1002c3a7
cmp dword [edi - 0x34], 0xffffffff
je 0x1002c491
mov eax, dword [edi - 0x10]
test eax, eax
jle 0x1002c3d3
dec eax
mov dword [edi - 0x10], eax
jmp 0x1002c491
cmp ebx, 4
jge 0x1002c438
lea esi, [edi + 0x2c]
nop dword [eax + eax]
mov eax, dword [esi - 0x24]
lea ecx, [esi - 0x5c]
mov dword [esi - 0x60], eax
mov edx, 0x20
nop
mov al, byte [ecx + 0x3c]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
sub edx, 1
jne 0x1002c3f0
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [esi - 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esi - 0x38], eax
mov eax, dword [esi + 8]
mov dword [esi - 0x34], eax
lea eax, [esi - 0x30]
cmp eax, ecx
je 0x1002c42d
mov ecx, dword [ecx]
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 4
push eax
push ecx
lea ecx, [esi - 0x30]
call fcn.1002dca0
add esi, 0x3c
cmp esi, 0x10895624
jl 0x1002c3e0
mov eax, dword [0x108955f4]
mov dword [0x108955c4], 0xffffffff
mov dword [0x108955e8], 0
mov dword [0x108955ec], 0xffffffff
mov dword [0x108955f0], 0
cmp eax, dword [0x108955f8]
je 0x1002c472
mov dword [0x108955f8], eax
xorps xmm0, xmm0
movups xmmword [0x108955c8], xmm0
movups xmmword [0x108955d8], xmm0
cmp dword [0x10895628], ebx
jle 0x1002c491
dec dword [0x10895628]
add edi, 0x3c
inc ebx
cmp edi, 0x10895634
jl 0x1002c3a0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, eax
cmp dword [0x108954d4], 0xffffffff
setne al
cmp dword [0x10895510], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x1089554c], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
cmp dword [0x10895588], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x108955c4], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
test eax, eax
je 0x1002c8f8
cmp dword [0xe61e18], 0x1e
je 0x1002c8f8
call fcn.1007cb10
test al, al
jne 0x1002c916
call fcn.1007cc50
test al, al
jne 0x1002c916
push 0x41
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1002c916
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002c916
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x1002c916
cmp dword [0x10895600], 1
mov esi, dword [sym.imp.OPENGL32.dll_glColor4f]
jne 0x1002c5aa
call ebx
sub eax, dword [0x10895604]
cmp eax, 0x2bc
jae 0x1002c594
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f53d07d
mov dword [esp + 4], 0x3f53d07d
mov dword [esp], 0x3f53d07d
call esi
jmp 0x1002c5aa
call ebx
sub eax, dword [0x10895604]
cmp eax, 0x578
jbe 0x1002c5aa
call ebx
mov dword [0x10895604], eax
cmp dword [0x108954d0], 0
xorps xmm3, xmm3
movss xmm5, dword [0x10101f84]
movss xmm6, dword [0x101021fc]
jne 0x1002c720
movss xmm0, dword [0xe7c3d4]
xor eax, eax
movss xmm1, dword [0x10101720]
comiss xmm1, xmm0
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm3
lahf
test ah, 0x44
jnp 0x1002c5f7
movaps xmm2, xmm0
jmp 0x1002c5ff
movss xmm2, dword [0xe7c3d8]
ucomiss xmm4, xmm3
mulss xmm2, xmm5
movaps xmm1, xmm0
lahf
mulss xmm1, xmm6
divss xmm2, xmm0
test ah, 0x44
jnp 0x1002c61c
movaps xmm3, xmm0
jmp 0x1002c624
movss xmm3, dword [0xe7c3d8]
mulss xmm3, dword [0x10101ee0]
push 0xe
cvttss2si eax, xmm2
subss xmm1, xmm3
push eax
push 2
divss xmm1, xmm0
movd xmm0, dword [0x10824d6c]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, 1
jne 0x1002c70d
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f666666
mov dword [esp + 4], 0x3f666666
mov dword [esp], 0x3f666666
call esi
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1002c70d
call ebx
sub eax, dword [0x108954c8]
cmp eax, 0x12c
jbe 0x1002c70d
cmp dword [0x1089561c], 0
jne 0x1002c6d8
movd xmm0, dword [0x10824d6c]
cvtdq2pd xmm0, xmm0
mov dword [0x1089561c], 1
addsd xmm0, qword [0x10101c60]
cvtpd2ps xmm0, xmm0
movss dword [0x1089560c], xmm0
jmp 0x1002c6e2
mov dword [0x1089561c], 0
call ebx
sub esp, 0x10
mov dword [0x108954c8], eax
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
movss xmm6, dword [0x101021fc]
xorps xmm3, xmm3
movss xmm5, dword [0x10101f84]
movss xmm0, dword [0x10101720]
xor eax, eax
movss xmm4, dword [0xe7c3d4]
comiss xmm0, xmm4
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jnp 0x1002c74d
movaps xmm2, xmm4
jmp 0x1002c755
movss xmm2, dword [0xe7c3d8]
ucomiss xmm0, xmm3
mulss xmm2, xmm5
lahf
test ah, 0x44
jnp 0x1002c767
movaps xmm3, xmm4
jmp 0x1002c76f
movss xmm3, dword [0xe7c3d8]
movss xmm1, dword [0xe7c3d8]
mov eax, 0x637c60
mulss xmm3, dword [0x10101ed4]
movaps xmm0, xmm1
push 0
mulss xmm0, dword [0x10101e64]
push 1
divss xmm2, xmm4
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f5eb852
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
divss xmm0, xmm1
movaps xmm1, xmm4
mulss xmm1, xmm6
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x10824d6c]
subss xmm1, xmm3
movss dword [esp + 8], xmm2
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x3f800000
divss xmm1, xmm4
addss xmm1, xmm0
movss dword [esp], xmm1
push 0xf077
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call esi
movss xmm1, dword [0xe7c3d4]
xor eax, eax
movss xmm0, dword [0x10101720]
xorps xmm2, xmm2
comiss xmm0, xmm1
movss dword [ebp - 0x10], xmm1
setae al
movd xmm3, eax
cvtdq2ps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x1002c857
movaps xmm0, xmm1
jmp 0x1002c85f
movss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x10101fac]
ucomiss xmm3, xmm2
divss xmm0, xmm1
lahf
movss dword [ebp - 8], xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x101021fc]
movss dword [ebp - 0xc], xmm0
test ah, 0x44
jp 0x1002c891
movss xmm1, dword [0xe7c3d8]
push 0x105
mov ecx, 0x101c3ae8
movss dword [ebp - 4], xmm1
call fcn.100426f0
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [0x10101ee0]
push eax
movss xmm1, dword [ebp - 0xc]
cvttss2si eax, dword [ebp - 8]
push 3
subss xmm1, xmm0
movd xmm0, dword [0x10824d6c]
cvtdq2ps xmm0, xmm0
push eax
push 4
divss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0xff19bdff
push 0x102ba770
call fcn.10077e60
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x1089561c], 0
mov dword [0x10895620], 0
mov dword [0x10895628], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret