Function at 0x634ba0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x4fe], 1
xor ecx, ecx
push ebp
push 0x634e61
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov byte [ebp - 5], 0
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
lea eax, [ebp - 0xd]
push eax
call sub.user32.dll_GetCursorPos
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0xd]
mov eax, dword [ebp - 4]
call fcn.0044ee34
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xd], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 9], eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x414]
mov eax, dword [ebp - 0xd]
cmp edx, eax
jl 0x634c2b
mov eax, 0xffffffec
call fcn.00656b0c
mov edx, dword [ebp - 4]
push dword [edx + 0x414]
mov edx, dword [ebp - 0xd]
pop ecx
sub edx, ecx
call fcn.00432610
mov dword [ebp - 0x14], eax
jmp 0x634c6c
mov ecx, dword [ebp - 4]
add edx, dword [ecx + 0x41c]
dec edx
cmp eax, edx
jl 0x634c67
mov eax, 0x14
call fcn.00656b0c
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x414]
mov ecx, dword [ebp - 4]
add edx, dword [ecx + 0x41c]
dec edx
push edx
mov edx, dword [ebp - 0xd]
pop ecx
sub edx, ecx
call fcn.004326fc
mov dword [ebp - 0x14], eax
jmp 0x634c6c
xor eax, eax
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x418]
mov eax, dword [ebp - 9]
cmp edx, eax
jl 0x634ca6
mov eax, 0xfffffff1
call fcn.00656b0c
mov edx, dword [ebp - 4]
push dword [edx + 0x418]
mov edx, dword [ebp - 9]
pop ecx
sub edx, ecx
sar edx, 1
jns 0x634c9c
adc edx, 0
call fcn.00432610
mov dword [ebp - 0x18], eax
jmp 0x634cee
mov ecx, dword [ebp - 4]
add edx, dword [ecx + 0x420]
dec edx
cmp eax, edx
jl 0x634ce9
mov eax, 0xf
call fcn.00656b0c
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x418]
mov ecx, dword [ebp - 4]
add edx, dword [ecx + 0x420]
dec edx
push edx
mov edx, dword [ebp - 9]
pop ecx
sub edx, ecx
sar edx, 1
jns 0x634cdf
adc edx, 0
call fcn.004326fc
mov dword [ebp - 0x18], eax
jmp 0x634cee
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x14], 0
jne 0x634cfe
cmp dword [ebp - 0x18], 0
je 0x634e49
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ec]
mov dword [ebp - 0x20], eax
mov eax, 0x1e
call fcn.00656b0c
mov edx, eax
neg edx
cmp eax, dword [ebp - 0x14]
jge 0x634d2c
mov dword [ebp - 0x14], eax
cmp edx, dword [ebp - 0x14]
jle 0x634d34
mov dword [ebp - 0x14], edx
cmp eax, dword [ebp - 0x18]
jge 0x634d3c
mov dword [ebp - 0x18], eax
cmp edx, dword [ebp - 0x18]
jle 0x634d44
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3ec]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3e8]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0062c5e8
xor eax, eax
push ebp
push 0x634d8d
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x44]
push eax
call sub.user32.dll_PeekMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x634d97
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e8]
cmp eax, dword [ebp - 0x1c]
jne 0x634db7
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x3ec]
cmp edx, dword [ebp - 0x20]
je 0x634e49
mov byte [ebp - 5], 1
sub dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ec]
sub dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
add dword [eax + 0x47c], edx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x20]
add dword [eax + 0x480], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10c]
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub eax, dword [ebp - 0x28]
sbb edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
jne 0x634e18
cmp dword [ebp - 0x28], 0
jbe 0x634bc8
jmp 0x634e1e
jle 0x634bc8
cmp dword [ebp - 0x24], 0
jne 0x634e30
cmp dword [ebp - 0x28], 0x19
jae 0x634bc8
jmp 0x634e36
jge 0x634bc8
mov eax, 0x19
sub eax, dword [ebp - 0x28]
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x634bc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x634e68
mov eax, dword [ebp - 4]
mov byte [eax + 0x4fe], 0
ret