Function at 0x10029830
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x106b52e8], 0
je 0x10029da9
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push edi
call ebx
sub eax, dword [0x106b52cc]
cmp eax, 0x3e8
jbe 0x10029966
xor ebx, ebx
mov edi, 0x106b51cc
mov eax, dword [edi - 4]
cmp eax, dword [edi]
je 0x10029882
nop dword [eax]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jle 0x1002987b
dec ecx
mov dword [eax + 0xc], ecx
add eax, 0x10
cmp eax, dword [edi]
jne 0x10029870
cmp dword [edi - 0x34], 0xffffffff
je 0x10029949
mov eax, dword [edi - 0x10]
test eax, eax
jle 0x1002989c
dec eax
mov dword [edi - 0x10], eax
jmp 0x10029949
cmp ebx, 4
jge 0x100298fa
lea esi, [edi + 0x2c]
mov eax, dword [esi - 0x24]
lea ecx, [esi - 0x5c]
mov dword [esi - 0x60], eax
mov edx, 0x20
mov al, byte [ecx + 0x3c]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
sub edx, 1
jne 0x100298b2
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [esi - 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esi - 0x38], eax
mov eax, dword [esi + 8]
mov dword [esi - 0x34], eax
lea eax, [esi - 0x30]
cmp eax, ecx
je 0x100298ef
mov ecx, dword [ecx]
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 4
push eax
push ecx
lea ecx, [esi - 0x30]
call fcn.1002b1d0
add esi, 0x3c
cmp esi, 0x106b52e8
jl 0x100298a4
mov eax, dword [0x106b52b8]
mov dword [0x106b5288], 0xffffffff
mov dword [0x106b52ac], 0
mov dword [0x106b52b0], 0xffffffff
cmp eax, dword [0x106b52bc]
je 0x1002992a
mov dword [0x106b52bc], eax
xorps xmm0, xmm0
movups xmmword [0x106b528c], xmm0
movups xmmword [0x106b529c], xmm0
cmp dword [0x106b52f0], ebx
jle 0x10029949
dec dword [0x106b52f0]
add edi, 0x3c
inc ebx
cmp edi, 0x106b52f8
jl 0x10029866
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov dword [0x106b52cc], eax
xor eax, eax
cmp dword [0x106b5198], 0xffffffff
setne al
cmp dword [0x106b51d4], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x106b5210], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
cmp dword [0x106b524c], 0xffffffff
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [0x106b5288], 0xffffffff
lea eax, [ecx + 1]
cmove eax, ecx
test eax, eax
jne 0x100299c0
pop edi
pop esi
mov dword [0x106b52e4], eax
mov dword [0x106b52e8], eax
mov dword [0x106b52f0], eax
pop ebx
mov esp, ebp
pop ebp
ret
push 0x41
mov esi, 0x7fc95b
call esi
mov edi, 0x7fb628
mov ecx, eax
call edi
test al, al
jne 0x10029da6
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x10029da6
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x10029da6
cmp dword [0x106b52c4], 1
mov esi, dword [sym.imp.OPENGL32.dll_glColor4f]
jne 0x10029a54
call ebx
sub eax, dword [0x106b52c8]
cmp eax, 0x2bc
jae 0x10029a3e
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f53d07d
mov dword [esp + 4], 0x3f53d07d
mov dword [esp], 0x3f53d07d
call esi
jmp 0x10029a54
call ebx
sub eax, dword [0x106b52c8]
cmp eax, 0x578
jbe 0x10029a54
call ebx
mov dword [0x106b52c8], eax
cmp dword [0x106b52e0], 0
xorps xmm2, xmm2
movss xmm6, dword [0x100d1cc4]
movss xmm5, dword [0x100d1e74]
jne 0x10029bca
movss xmm0, dword [0x11b3794]
xor eax, eax
movss xmm1, dword [0x100d183c]
comiss xmm1, xmm0
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm2
lahf
test ah, 0x44
jnp 0x10029aa1
movaps xmm2, xmm0
jmp 0x10029aa9
movss xmm2, dword [0x11b3798]
xorps xmm3, xmm3
mulss xmm2, xmm6
ucomiss xmm4, xmm3
movaps xmm1, xmm0
divss xmm2, xmm0
lahf
mulss xmm1, xmm5
test ah, 0x44
jnp 0x10029ac9
movaps xmm3, xmm0
jmp 0x10029ad1
movss xmm3, dword [0x11b3798]
mulss xmm3, dword [0x100d1c34]
push 0xe
cvttss2si eax, xmm2
subss xmm1, xmm3
push eax
push 2
divss xmm1, xmm0
movd xmm0, dword [0x104f9dc8]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
mov eax, 0x799756
call eax
add esp, 0x10
cmp al, 1
jne 0x10029bba
sub esp, 0x10
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f666666
mov dword [esp + 4], 0x3f666666
mov dword [esp], 0x3f666666
call esi
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x10029bba
call ebx
sub eax, dword [0x106b5190]
cmp eax, 0x12c
jbe 0x10029bba
cmp dword [0x106b52e4], 0
jne 0x10029b85
movd xmm0, dword [0x104f9dc8]
cvtdq2pd xmm0, xmm0
mov dword [0x106b52e4], 1
addsd xmm0, qword [0x100d1aa0]
cvtpd2ps xmm0, xmm0
movss dword [0x106b52d0], xmm0
jmp 0x10029b8f
mov dword [0x106b52e4], 0
call ebx
sub esp, 0x10
mov dword [0x106b5190], eax
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
call esi
movss xmm6, dword [0x100d1cc4]
movss xmm5, dword [0x100d1e74]
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm2, dword [0x11b3794]
comiss xmm0, xmm2
xorps xmm0, xmm0
setae al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10029bfa
movaps xmm3, xmm2
jmp 0x10029c02
movss xmm3, dword [0x11b3798]
ucomiss xmm1, xmm0
mulss xmm3, xmm6
movaps xmm4, xmm2
lahf
mulss xmm4, xmm5
divss xmm3, xmm2
test ah, 0x44
jnp 0x10029c1f
movaps xmm5, xmm2
jmp 0x10029c27
movss xmm5, dword [0x11b3798]
movss xmm1, dword [0x11b3798]
mov eax, 0x631289
mulss xmm5, dword [0x100d1c28]
movaps xmm0, xmm1
push ecx
mulss xmm0, dword [0x100d1bd8]
mov dword [esp], 0
subss xmm4, xmm5
push 1
divss xmm0, xmm1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f5eb852
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
divss xmm4, xmm2
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x104f9dc8]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm3
addss xmm4, xmm0
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm4
push 0x787f
call eax
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call esi
movss xmm1, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [0x100d183c]
xorps xmm3, xmm3
comiss xmm0, xmm1
movss dword [ebp - 0x10], xmm1
setae al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
ucomiss xmm2, xmm3
lahf
test ah, 0x44
jnp 0x10029d0a
movaps xmm0, xmm1
jmp 0x10029d12
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1ce4]
ucomiss xmm2, xmm3
divss xmm0, xmm1
lahf
movss dword [ebp - 8], xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x100d1e74]
movss dword [ebp - 0xc], xmm0
test ah, 0x44
jp 0x10029d44
movss xmm1, dword [0x11b3798]
push 0x105
mov ecx, 0x101888b0
movss dword [ebp - 4], xmm1
call fcn.1003ad30
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [0x100d1c34]
push eax
movss xmm1, dword [ebp - 0xc]
cvttss2si eax, dword [ebp - 8]
push 0
push 3
subss xmm1, xmm0
movd xmm0, dword [0x104f9dc8]
cvtdq2ps xmm0, xmm0
push eax
push 4
divss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret