Function at 0x10061670
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
sub esp, 8
cmp byte [eax + 0x9c5], 0
je 0x10061c6a
fldz
push ebx
push esi
push edi
sub esp, 0x14
fstp dword [esp + 0x10]
fld dword [0x100b7510]
fstp dword [esp + 0xc]
fld dword [0x100b736c]
fstp dword [esp + 8]
fld dword [0x100b7438]
fstp dword [esp + 4]
fld dword [0x100b7120]
fstp dword [esp]
call fcn.10020d40
fld dword [0x100b734c]
sub esp, 0x10
fstp dword [esp + 0xc]
mov ecx, 0x790b50
fld dword [0x100b7290]
fstp dword [esp + 8]
fld dword [0x100b7438]
fstp dword [esp + 4]
fld dword [0x100b7bcc]
fstp dword [esp]
push 0x7ec5
call ecx
push 0x24
push 0x24
push 0x2d
push 0x18b
mov edx, 0x790b10
call edx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x24
cmp al, 1
jne 0x100617db
call esi
sub eax, dword [0x106895e8]
cmp eax, 0x12c
jbe 0x1006175e
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x1006175e
fldz
sub esp, 0xc
fst dword [esp + 8]
fstp dword [esp + 4]
fld1
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor3f]
xor byte [0x10124655], 1
call esi
mov dword [0x106895e8], eax
push 0x82
push 0x14
push 0xcc
push 0xff
mov edx, 0x412d20
call edx
fldz
add esp, 0x10
push eax
sub esp, 0x18
fst dword [esp + 0x14]
mov eax, 0x790f20
fstp dword [esp + 0x10]
fld dword [0x100b734c]
fstp dword [esp + 0xc]
fld dword [0x100b7290]
fstp dword [esp + 8]
fld dword [0x100b7438]
fstp dword [esp + 4]
fld dword [0x100b7bcc]
fstp dword [esp]
push 0x7ec5
call eax
push str.Close
push 0
mov ebx, 1
push 0x19a
push 0xff19bdff
lea ecx, [ebx + 0x4a]
call fcn.10050e40
add esp, 0x30
mov ecx, dword [0x1073ef30]
push str.Chin_Trng_C
push 0
push 0xe6
push 0
push 0xb8e600ff
push 0x32
push 0xcd
push ecx
mov cl, 3
call fcn.1001c7a0
fld1
fstp dword [esp + 0x1c]
add esp, 0x10
fld dword [0x100b7510]
mov edx, 0x790b50
fstp dword [esp + 8]
fld dword [0x100b71f0]
fstp dword [esp + 4]
fld dword [0x100b7380]
fstp dword [esp]
push 0x11760
call edx
mov esi, dword [0x10689734]
mov eax, 0x91a2b3c5
mul esi
mov ebx, edx
mov eax, 0x88888889
mul esi
mov ecx, edx
shr ecx, 5
mov eax, ecx
xor edx, edx
mov edi, 0x3c
div edi
push str.Thi_gian_cn_li:
push 0
push 0xe6
mov eax, ecx
push 0
shl eax, 4
sub eax, ecx
mov ecx, dword [0x1073ef2c]
push 0xe6fcf7ff
push 0x5a
add eax, eax
push 0xe9
add eax, eax
push ecx
mov cl, 1
shr ebx, 0xb
sub esi, eax
mov edi, edx
call fcn.1001c7a0
mov edx, dword [0x1073ef30]
push esi
push edi
push ebx
push str._02d:_02d:_02d
push 0
push 0xe6
push 0
push 0x16fac1ff
push 0x5a
push 0x12f
push edx
mov cl, 1
call fcn.1001c7a0
mov eax, dword [0x10689738]
mov ecx, dword [0x1073ef2c]
add esp, 0x60
push eax
push str.__Tiu_dit_1_qui_vt_nhn__d_im_Ruud
push 0
push 0xe6
push 0
push 0xffde26ff
push 0x69
push 0xe9
push ecx
mov cl, 1
call fcn.1001c7a0
mov edx, dword [0x1068973c]
mov eax, dword [0x1073ef2c]
push edx
push str.__Cng_Party_nhn__d_im_Ruud
push 0
push 0xe6
push 0
push 0xffde26ff
push 0x78
push 0xe9
push eax
mov cl, 1
call fcn.1001c7a0
mov ecx, dword [0x10689740]
mov edx, dword [0x1073ef2c]
add esp, 0x48
push ecx
push str.__TIu_dit__d_s_rt_Item_ngu_nhin
push 0
push 0xe6
push 0
push 0xffde26ff
push 0x87
push 0xe9
push edx
mov cl, 1
call fcn.1001c7a0
mov eax, dword [0x1073ef2c]
push str.__C_kh_nng_rt_Lng_V__HHHT
push 0
push 0xe6
push 0
push 0x26ffd0ff
push 0x96
push 0xe9
push eax
mov cl, 1
call fcn.1001c7a0
mov ecx, dword [0x1073ef30]
add esp, 0x44
push str.Lu__:_Khu_vc_PK_T_Do__hy_cn_thn
push 0
push 0xe6
push 0
push 0xff7226ff
push 0xa5
push 0xe9
push ecx
mov cl, 1
call fcn.1001c7a0
push 0x13
push 0x5f
push 0xcd
push 0xdf
mov edx, 0x790b10
call edx
mov esi, dword [sym.imp.OPENGL32.dll_glColor3f]
add esp, 0x30
sub esp, 0xc
mov bl, 0x38
cmp al, 1
jne 0x10061a77
fld dword [0x100b73d8]
fstp dword [esp + 8]
fld dword [0x100b7bc8]
fstp dword [esp + 4]
fld1
fstp dword [esp]
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [0x10124650]
cmp eax, 0x12c
jbe 0x10061a8c
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x10061a8c
fld dword [0x100b7bc4]
sub esp, 0xc
fstp dword [esp + 8]
fld dword [0x100b7bc0]
fstp dword [esp + 4]
fld dword [0x100b7bbc]
fstp dword [esp]
call esi
lea edx, [ebp - 8]
push edx
mov ecx, 8
mov word [ebp - 8], 0x8c1
mov byte [ebp - 6], 0xf3
mov byte [ebp - 5], bl
mov dword [ebp - 4], 1
call fcn.1008c360
mov eax, dword [ebp + 8]
add esp, 4
mov byte [eax + 0x9c5], 0
call edi
mov dword [0x10124650], eax
jmp 0x10061a8c
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
fldz
push ecx
fst dword [esp]
mov ecx, 0x637c60
fld dword [0x100b6f6c]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x100b7bb8]
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x100b7310]
fstp dword [esp + 0xc]
fld dword [0x100b7530]
fstp dword [esp + 8]
fld dword [0x100b7120]
fstp dword [esp + 4]
fld dword [0x100b7bb4]
fstp dword [esp]
push 0x7b4b
call ecx
mov edx, dword [0x1073ef2c]
push str.Bc_Vo
push 0
push 0x5f
push 0
push 0xe6fcf7ff
push 0xd1
push 0xdf
push edx
mov cl, 3
call fcn.1001c7a0
add esp, 0x50
push 0x13
push 0x5f
push 0xcd
push 0x143
mov eax, 0x790b10
call eax
add esp, 0x10
sub esp, 0xc
cmp al, 1
jne 0x10061bc2
fld dword [0x100b73d8]
fstp dword [esp + 8]
fld dword [0x100b7bc8]
fstp dword [esp + 4]
fld1
fstp dword [esp]
call esi
call edi
sub eax, dword [0x10124650]
cmp eax, 0x12c
jbe 0x10061bd1
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x10061bd1
fld dword [0x100b7bc4]
sub esp, 0xc
fstp dword [esp + 8]
fld dword [0x100b7bc0]
fstp dword [esp + 4]
fld dword [0x100b7bbc]
fstp dword [esp]
call esi
lea edx, [ebp - 8]
push edx
mov ecx, 8
mov word [ebp - 8], 0x8c1
mov byte [ebp - 6], 0xf3
mov byte [ebp - 5], bl
mov dword [ebp - 4], 2
call fcn.1008c360
add esp, 4
call edi
mov dword [0x10124650], eax
jmp 0x10061bd1
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call esi
fldz
push ecx
fst dword [esp]
mov eax, 0x637c60
fld dword [0x100b6f6c]
push 1
push 1
sub esp, 0x20
fstp dword [esp + 0x1c]
fld dword [0x100b7bb8]
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x100b7310]
fstp dword [esp + 0xc]
fld dword [0x100b7530]
fstp dword [esp + 8]
fld dword [0x100b7120]
fstp dword [esp + 4]
fld dword [0x100b7bb0]
fstp dword [esp]
push 0x7b4b
call eax
mov ecx, dword [0x1073ef2c]
push str.Thm_Thi_Gian
push 0
push 0x5f
push 0
push 0xe6fcf7ff
push 0xd1
push 0x143
push ecx
mov cl, 3
call fcn.1001c7a0
fld1
add esp, 0x44
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4