Function at 0x435d87
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x8c
mov eax, 0x4ddf74
call fcn.004a941b
mov edi, ecx
mov dword [ebp - 0x38], edi
call fcn.00436033
mov ecx, eax
call fcn.00444740
mov esi, dword [eax + 0x2c]
lea ecx, [ebp - 0x28]
call fcn.00435a7c
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x14], 8
push ecx
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push ecx
xor dl, dl
lea ecx, [ebp - 0x30]
call fcn.0042ec1b
add esp, 0xc
mov ecx, edi
call fcn.00436033
lea ecx, [ebp - 0x28]
push ecx
push ecx
mov ecx, eax
call fcn.004447a2
pop ecx
mov ecx, eax
call fcn.0043a7c0
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x64], 0x4f6e9c
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x3c], bl
lea eax, [ebp - 0x44]
push eax
mov edx, 0x514680
mov ecx, 0x514f7c
mov byte [ebp - 4], 2
call fcn.0040cc30
movzx eax, ax
push eax
push ebx
push ebx
push 0x56000000
push ebx
push 0x511fe0
push ecx
lea ecx, [ebp - 0x64]
call fcn.0043699c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi + 8]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x6c], esi
mov esi, dword [ebp - 0x38]
add eax, 0x4e20
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x68], edi
cmp byte [esi + 0xc], bl
jne 0x435fab
or edx, 0xffffffff
cmp eax, 0xffffffff
je 0x435e89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
cmp eax, dword [ebp - 0x2c]
sbb edx, edx
and edx, ecx
push 6
push 0x5ff
push edx
lea eax, [ebp - 0x70]
push eax
push 3
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
sub eax, ebx
je 0x435f97
dec eax
je 0x435f33
dec eax
je 0x435f2a
dec eax
je 0x435ef8
sub eax, 0xff
jne 0x435f97
mov ecx, esi
call fcn.0043621b
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
jmp 0x435f9e
cmp dword [ebp - 0x94], 0x12
jne 0x435ede
mov byte [esi + 0xc], 1
jmp 0x435ef8
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x435ecf
cmp byte [ebp - 0x3c], al
je 0x435f9b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x7d0
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x3c], bl
jmp 0x435f9e
mov ecx, esi
call fcn.0043612b
jmp 0x435f9b
mov ecx, esi
call fcn.00436033
lea ecx, [ebp - 0x7c]
push ecx
push ecx
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.00444740
pop ecx
mov ecx, eax
call fcn.0044fe81
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
cmp eax, esi
je 0x435f86
mov edi, dword [ebp - 0x34]
lea ebx, [eax + 0x30]
movzx eax, byte [ebx + 0x18]
push eax
push ebx
lea eax, [ebx - 0x18]
push eax
lea eax, [ebx - 0x30]
push eax
mov ecx, edi
call fcn.0044488c
add ebx, 0x4c
lea eax, [ebx - 0x30]
cmp eax, esi
jne 0x435f65
xor ebx, ebx
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.004451be
mov esi, dword [ebp - 0x38]
jmp 0x435f9b
mov byte [esi + 0xc], 1
mov eax, dword [ebp - 0x2c]
cmp byte [esi + 0xc], 0
je 0x435e6f
mov edi, dword [ebp - 0x30]
push dword [ebp - 0x60]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x435fc4
mov dword [esi + 0x2c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, esi
call fcn.00436033
mov ecx, eax
call fcn.004447a2
mov ecx, eax
call fcn.0043ab4b
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x435ff6
mov ecx, eax
call fcn.00444652
push dword [ebp - 0x34]
call fcn.004a295f
pop ecx
mov dword [esi + 0x28], ebx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x40], 0
je 0x43600c
push dword [ebp - 0x40]
call dword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x50], 0
je 0x43601a
push dword [ebp - 0x50]
call fcn.004a2386
test edi, edi
je 0x436025
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x28]
call fcn.00403170
call fcn.004a93ca
ret