Function at 0x436720
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28
mov edx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x14]
mov dword [esp + 4], esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0xc], ecx
cmp edx, 0x111
ja 0x436b08
je 0x4368a3
add edx, 0xfffffffb
cmp edx, 0x7f
ja case.default.0x4368b4
movzx eax, byte [edx + 0x436eec]
jmp dword [eax*4 + 0x436ecc]
mov ecx, dword [edi + 0x2a3d8]
test ecx, ecx
je case.default.0x4368b4
cmp dword [edi + 0x2a38c], 0
jne case.default.0x4368b4
cmp dword [edi + 0x2a384], 0
je case.default.0x4368b4
mov eax, dword [ecx]
push 0
push 0
push 0
push 0
push ecx
call dword [eax + 0x3c]
jmp case.default.0x4368b4
mov dword [esi + 0x18], 0x64
mov dword [esi + 0x1c], 0x64
jmp case.default.0x4368b4
cmp ecx, 4
je 0x4367d2
cmp ecx, 1
je 0x4367d2
mov eax, 1
mov dword [edi + 0x2a388], eax
jmp case.default.0x4368b4
xor eax, eax
mov dword [edi + 0x2a388], eax
jmp case.default.0x4368b4
cmp dword [edi + 0x2a388], 0
je case.default.0x4368b4
cmp dword [edi + 0x2a38c], 0
je case.default.0x4368b4
cmp dword [edi + 0x2a384], 0
jne case.default.0x4368b4
push 0
call dword [sym.imp.USER32.dll_SetCursor]
cmp dword [edi + 0x2a5a0], 0
je 0x436825
mov eax, dword [edi + 0x2a3d8]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp dword [edi + 0x2a384], 0
je case.default.0x4368b4
push 0
push dword [ebp + 8]
mov eax, esi
shr eax, 0x10
push eax
movzx eax, si
push eax
push 0x40
push 0
push 0x8e
push 0
call dword [sym.imp.USER32.dll_LoadMenuA]
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenuEx]
jmp case.default.0x4368b4
mov ecx, edi
call fcn.004389b0
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
push esi
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
movzx eax, cx
add eax, 0xffff63be
cmp eax, 4
ja case.default.0x4368b4
jmp dword [eax*4 + 0x436f6c]
mov edx, dword [edi + 0x2a390]
xor eax, eax
test edx, edx
sete al
xor ecx, ecx
test edx, edx
mov dword [edi + 0x2a390], eax
setne cl
inc ecx
call fcn.0043b2a0
jmp case.default.0x4368b4
cmp dword [edi + 0x2a390], 0
jne 0x4369ad
cmp dword [0x501658], 0
jne 0x43692a
lea eax, [esp + 0x10]
mov dword [0x501658], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x501668], eax
test eax, eax
je 0x43697c
mov ecx, dword [esp + 0x10]
mov dword [0x501630], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x501634], ecx
jmp 0x43692f
mov eax, dword [0x501668]
test eax, eax
je 0x43697c
mov esi, dword [0x501648]
mov eax, esi
or eax, dword [0x50164c]
jne 0x436954
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov esi, dword [0x501648]
push 0
push 0xa
push dword [0x501634]
push dword [0x501630]
call fcn.004b8ef0
add esi, eax
mov dword [0x501648], esi
adc dword [0x50164c], edx
jmp 0x436a72
movsd xmm0, qword [0x501670]
ucomisd xmm0, qword [0x4dfdf0]
lahf
test ah, 0x44
jp 0x4369a0
call dword [sym.imp.WINMM.dll_timeGetTime]
movsd xmm0, qword [0x501670]
addsd xmm0, qword [0x4dff08]
jmp 0x436a6a
cmp dword [0x501658], 0
jne 0x4369ea
lea eax, [esp + 0x10]
mov dword [0x501658], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x501668], eax
test eax, eax
je 0x436a32
mov ecx, dword [esp + 0x10]
mov dword [0x501630], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x501634], ecx
jmp 0x4369ef
mov eax, dword [0x501668]
test eax, eax
je 0x436a32
mov ecx, dword [0x501648]
mov eax, ecx
mov edx, dword [0x50164c]
or eax, edx
jne 0x436a18
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [0x501648], ecx
mov dword [0x50164c], edx
mov dword [0x501660], ecx
mov dword [0x501664], edx
jmp 0x436a72
movsd xmm0, qword [0x501670]
ucomisd xmm0, qword [0x4dfdf0]
lahf
test ah, 0x44
jp 0x436a6a
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4e0250]
mulsd xmm0, qword [0x4dfec8]
movsd qword [0x501670], xmm0
mov dword [edi + 0x2a390], 0
mov dword [edi + 0x2a394], 1
jmp case.default.0x4368b4
cmp dword [edi + 0x2a388], 0
je 0x436ae5
cmp dword [edi + 0x2a38c], 0
je 0x436ae5
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x34]
mov ecx, edi
call fcn.00437830
test eax, eax
js 0x436ae5
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x34]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp dword [edi + 0x2a388], 0
je 0x436ae5
cmp dword [edi + 0x2a38c], 0
je 0x436ae5
mov ecx, edi
call fcn.00437540
test eax, eax
js 0x436da3
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp edx, 0x212
ja 0x436bde
je 0x436bd0
mov eax, edx
sub eax, 0x112
je 0x436b89
sub eax, 0xee
je 0x436b41
sub eax, 0x11
jne case.default.0x4368b4
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x34]
jmp case.default.0x4368b4
cmp dword [edi + 0x2a388], 0
je case.default.0x4368b4
cmp dword [edi + 0x2a38c], 0
je case.default.0x4368b4
cmp dword [edi + 0x2a3d8], 0
je case.default.0x4368b4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x10]
push eax
push dword [edi + 0x2a3cc]
call dword [sym.imp.USER32.dll_ScreenToClient]
jmp case.default.0x4368b4
cmp ecx, 0xf030
ja 0x436ba5
je case.0x436763.132
sub ecx, 0xf000
je case.0x436763.132
sub ecx, 0x10
je case.0x436763.132
jmp case.default.0x4368b4
sub ecx, 0xf100
je case.0x436763.132
sub ecx, 0x70
jne case.default.0x4368b4
cmp dword [edi + 0x2a384], 0
jne case.default.0x4368b4
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x34]
jmp case.default.0x4368b4
mov eax, edx
sub eax, 0x218
je 0x436e9e
sub eax, 0x19
je 0x436dca
sub eax, 1
jne case.default.0x4368b4
cmp dword [edi + 0x2a390], eax
je 0x436ce6
cmp dword [0x501658], eax
jne 0x436c45
lea eax, [esp + 0x10]
mov dword [0x501658], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x501668], eax
test eax, eax
je 0x436c96
mov ecx, dword [esp + 0x10]
mov dword [0x501630], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x501634], ecx
jmp 0x436c4a
mov eax, dword [0x501668]
test eax, eax
je 0x436c96
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov esi, dword [esp + 0x10]
xorps xmm0, xmm0
mov edx, dword [esp + 0x14]
mov ecx, esi
sub ecx, dword [0x501648]
mov eax, edx
mov dword [0x501660], esi
sbb eax, dword [0x50164c]
add dword [0x501640], ecx
movlpd qword [0x501648], xmm0
adc dword [0x501644], eax
mov dword [0x501664], edx
jmp 0x436ce6
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4e0250]
mulsd xmm1, qword [0x4dfec8]
movaps xmm0, xmm1
movsd qword [0x501638], xmm1
subsd xmm0, qword [0x501670]
addsd xmm0, qword [0x501650]
movsd qword [0x501650], xmm0
xorps xmm0, xmm0
movsd qword [0x501670], xmm0
cmp dword [edi + 0x2a388], 0
je case.default.0x4368b4
cmp dword [edi + 0x2a384], 0
je case.default.0x4368b4
movups xmm0, xmmword [edi + 0x2a4e8]
lea eax, [edi + 0x2a4d8]
lea esi, [edi + 0x2a4e8]
push eax
push dword [edi + 0x2a3cc]
movaps xmmword [esp + 0x28], xmm0
movaps xmmword [esp + 0x18], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push esi
push dword [edi + 0x2a3cc]
call dword [sym.imp.USER32.dll_GetClientRect]
movaps xmm1, xmmword [esp + 0x20]
mov edx, dword [edi + 0x2a4f0]
movaps xmm0, xmm1
sub edx, dword [esi]
psrldq xmm0, 8
movd ecx, xmm0
movd eax, xmm1
sub ecx, eax
cmp ecx, edx
jne 0x436d76
mov ecx, dword [edi + 0x2a4f4]
mov eax, dword [esp + 0x1c]
sub ecx, dword [edi + 0x2a4ec]
sub eax, dword [esp + 0x14]
cmp eax, ecx
je case.default.0x4368b4
mov eax, dword [edi + 0x2a4f4]
mov ecx, edi
sub eax, dword [edi + 0x2a4ec]
mov dword [edi + 0x2a38c], 0
mov dword [edi + 0x2a398], edx
mov dword [edi + 0x2a39c], eax
call fcn.004372d0
test eax, eax
jns 0x436dbb
push 1
push 0x8200000c
mov ecx, edi
call fcn.00438a10
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov dword [edi + 0x2a38c], 1
jmp case.default.0x4368b4
cmp dword [edi + 0x2a390], 0
je case.default.0x4368b4
cmp dword [0x501658], 0
jne 0x436e14
lea eax, [esp + 0x10]
mov dword [0x501658], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x501668], eax
test eax, eax
je 0x436e5c
mov ecx, dword [esp + 0x10]
mov dword [0x501630], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x501634], ecx
jmp 0x436e19
mov eax, dword [0x501668]
test eax, eax
je 0x436e5c
mov ecx, dword [0x501648]
mov eax, ecx
mov edx, dword [0x50164c]
or eax, edx
jne 0x436e42
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [0x501648], ecx
mov dword [0x50164c], edx
mov dword [0x501660], ecx
mov dword [0x501664], edx
jmp case.default.0x4368b4
movsd xmm0, qword [0x501670]
ucomisd xmm0, qword [0x4dfdf0]
lahf
test ah, 0x44
jp 0x436e94
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4e0250]
mulsd xmm0, qword [0x4dfec8]
movsd qword [0x501670], xmm0
jmp case.default.0x4368b4
test ecx, ecx
je 0x436825
cmp ecx, 7
je 0x436825
push dword [esp + 8]
push dword [esp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10