Function at 0x434d3c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x11c
mov esi, eax
mov dword [esp + 0x34], ecx
mov dword [esp + 4], 8
mov dword [esp], 0x68b2b8
mov eax, dword [0x68bb7c]
mov dword [esp + 0x28], edx
call dword [eax + 0x4cc]
mov ebp, eax
mov dword [esp], esi
call fcn.00416574
mov ebx, eax
test eax, eax
mov edx, dword [esp + 0x28]
je 0x434d85
mov edi, dword [eax + 0x14]
test edi, edi
jne 0x434d90
add esp, 0x11c
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0xb0]
mov dword [esp + 0x30], eax
mov ecx, 0x60
xor eax, eax
mov edi, dword [esp + 0x30]
rep stosb byte es:[edi], al
mov eax, dword [ebx]
mov ecx, dword [eax + 0x5c]
mov dword [esp + 0xb4], ecx
inc ecx
mov dword [eax + 0x5c], ecx
mov dword [esp + 0xbc], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xc0], eax
cmp edx, 0x102
jbe 0x434e48
cmp edx, 0x109
je 0x434e54
jbe 0x435118
cmp edx, 0x20a
je 0x434e54
cmp edx, 0x307
jne 0x434d85
cmp dword [ebp + 4], 1
je 0x434d85
mov dword [esp + 0xb0], 0x1d
mov dword [esp + 4], 0x600928
mov dword [esp], ebx
call fcn.0047fac0
mov dword [esp + 0xc4], eax
call fcn.005da9a0
mov dword [esp + 0xc8], eax
nop
mov dword [esp + 4], 0
lea ecx, [esp + 0xb0]
mov dword [esp], ecx
call fcn.004179e0
add esp, 0x11c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp edx, 0x100
jb 0x435068
mov dword [esp + 0x28], edx
call fcn.00481bfc
mov edx, dword [esp + 0x28]
cmp edx, 0x104
je 0x4351a0
cmp edx, 0x100
je 0x4351a0
cmp edx, 0x105
je 0x4351a0
cmp edx, 0x101
je 0x4351a0
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], edx
call fcn.005da9a0
mov dword [esp + 0x3c], eax
call sub.USER32.dll_GetMessagePos
movsx edi, ax
mov dword [esp + 0x4c], edi
mov ebp, eax
sar ebp, 0x10
mov dword [esp + 0x50], ebp
lea eax, [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.USER32.dll_ScreenToClient
sub esp, 8
mov eax, dword [ebx]
mov ecx, dword [ebx + 8]
lea ecx, [ecx + ecx*4]
shl ecx, 4
add ecx, dword [eax + 0x88]
mov eax, dword [ecx + 8]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], ebp
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xe0], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xe8], 1
mov edx, dword [esp + 0x28]
cmp edx, 0x104
je 0x434f6c
ja 0x435284
cmp edx, 0x101
je 0x4352a8
cmp edx, 0x102
je 0x4353e7
cmp edx, 0x100
jne 0x434e24
nop
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xffffffff
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xf0], 0
xor eax, eax
lea ebx, [esp + 0x54]
jmp 0x434fc7
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0x5c]
mov byte [esp + edx + 0xec], cl
lea eax, [edx + 1]
mov dword [esp + 0xf0], eax
cmp cx, 0xff
ja 0x435520
cmp eax, 3
jg 0x434e24
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_PeekMessageA
sub esp, 0x14
test eax, eax
je 0x434e24
mov eax, dword [esp + 0x58]
cmp eax, 0x102
je 0x435019
cmp eax, 0x106
jne 0x434e24
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_GetMessageA
sub esp, 0x10
cmp dword [esp + 0x58], 0x102
jne 0x434fa0
test byte [esp + 0x63], 0x20
je 0x434fa0
mov dword [esp + 0xe0], 0
jmp 0x434fa0
cmp edx, 0xf
je 0x43512c
ja 0x435220
lea eax, [edx - 7]
cmp eax, 1
ja 0x434d85
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 0x28], edx
call fcn.00416574
mov edx, dword [esp + 0x28]
jmp 0x4350a7
mov ebx, dword [ebx + 0x20]
test ebx, ebx
je 0x434d85
test byte [ebx + 0x98], 2
je 0x43509c
test eax, eax
jne 0x4350bf
jmp 0x4350c8
mov eax, dword [eax + 0x20]
test eax, eax
je 0x4350c8
test byte [eax + 0x98], 2
je 0x4350b8
cmp edx, 7
je 0x4354eb
cmp ebx, eax
je 0x434d85
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xc0], eax
cmp edx, 7
je 0x43545b
mov dword [esp + 0xb0], 0xa
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 3
call sub.USER32.dll_DestroyCaret
jmp 0x434e24
lea eax, [edx - 0x104]
cmp eax, 1
ja 0x434d85
jmp 0x434e54
mov dword [esp + 0xb0], 0xc
lea ebx, [esp + 0x70]
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.USER32.dll_BeginPaint
sub esp, 8
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0x80]
sub eax, ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x84]
sub eax, edx
mov dword [esp + 0xd0], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.USER32.dll_EndPaint
sub esp, 8
mov dword [esp + 0xd4], 0
jmp 0x434e24
mov ebp, dword [esp + 0x130]
shr ebp, 0x10
mov edi, ebp
and edi, 0x4000
mov ecx, edi
cmp dword [esp + 0x34], 0x12
je 0x4354e1
ja 0x4352d0
cmp dword [esp + 0x34], 0x10
je 0x4354ac
cmp dword [esp + 0x34], 0x11
je 0x435218
xor edi, edi
test ecx, ecx
je 0x435274
or edi, eax
mov dword [esp + 0x38], edi
and ebp, 0x100
je 0x434e95
cmp edx, 0x104
je 0x4353da
cmp edx, 0x100
je 0x4353da
and dword [esp + 0x38], 0xfffbffff
jmp 0x434e95
mov edi, 4
jmp 0x4351d9
cmp edx, 0x10
jne 0x434d85
mov dword [esp + 0xb0], 0x21
mov dword [esp + 4], str.WM_PROTOCOLS
mov dword [esp], ebx
call fcn.0047fac0
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0x20
mov dword [esp + 4], str.WM_DELETE_WINDOW
mov dword [esp], ebx
call fcn.0047fac0
mov dword [esp + 0xcc], eax
jmp 0x434e24
not edi
mov dword [esp + 0x38], edi
and dword [esp + 0x38], eax
jmp 0x4351e7
cmp edx, 0x109
je 0x435356
cmp edx, 0x20a
je 0x435322
cmp edx, 0x105
jne 0x434e24
mov dword [esp + 0xb0], 3
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xf0], 0
jmp 0x434e24
cmp dword [esp + 0x34], 0x90
je 0x4354b6
cmp dword [esp + 0x34], 0x91
je 0x435481
cmp dword [esp + 0x34], 0x14
jne 0x4351d7
cmp edx, 0x104
je 0x43530b
cmp edx, 0x100
jne 0x4351d7
mov ecx, eax
and ecx, 2
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 2
jmp 0x4351d9
mov dword [esp + 0xb0], 0x26
mov dword [esp + 0xb8], 0xffffffff
mov dword [esp + 0xf0], 0
mov eax, dword [esp + 0x34]
sar eax, 0x10
mov dword [esp + 0xe4], eax
jmp 0x434e24
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xfffffffd
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
lea ebx, [esp + 0x70]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov eax, dword [0x68bb7c]
call dword [eax + 0x518]
mov dword [esp + 0xf0], eax
test eax, eax
jle 0x4353b3
xor eax, eax
mov dl, byte [ebx + eax]
mov byte [esp + eax + 0xec], dl
inc eax
cmp dword [esp + 0xf0], eax
jle 0x4353b3
cmp eax, 3
jne 0x43539a
mov dword [esp + 4], 0
lea eax, [esp + 0xb0]
mov dword [esp], eax
call fcn.004179e0
mov dword [esp + 0xb0], 3
jmp 0x434e24
or dword [esp + 0x38], 0x40000
jmp 0x434e95
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xffffffff
mov dword [esp + 0xe4], 0
mov dword [esp + 0xf0], 1
mov al, byte [esp + 0x34]
mov byte [esp + 0xec], al
movzx eax, byte [esp + 0x34]
mov dword [esp], eax
call sub.KERNEL32.dll_IsDBCSLeadByte
push ecx
test eax, eax
jne 0x435539
mov dword [esp + 4], 0
lea edx, [esp + 0xb0]
mov dword [esp], edx
call fcn.004179e0
mov dword [esp + 0xb0], 3
jmp 0x434e24
mov dword [esp + 0xb0], 9
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 3
jmp 0x434e24
cmp edx, 0x104
je 0x435495
cmp edx, 0x100
jne 0x4351d7
mov ecx, eax
and ecx, 0x20
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 0x20
jmp 0x4351d9
mov edi, 1
jmp 0x4351d9
cmp edx, 0x104
je 0x4354ca
cmp edx, 0x100
jne 0x4351d7
mov ecx, eax
and ecx, 8
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 8
jmp 0x4351d9
mov edi, 0x20000
jmp 0x4351d9
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
call fcn.00434bd0
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
jmp 0x4350d1
shr ecx, 8
mov byte [esp + eax + 0xec], cl
lea eax, [edx + 2]
mov dword [esp + 0xf0], eax
jmp 0x434fc7
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea ebx, [esp + 0x54]
mov dword [esp], ebx
call sub.USER32.dll_PeekMessageA
sub esp, 0x14
test eax, eax
je 0x435434
cmp dword [esp + 0x58], 0x102
jne 0x435434
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_GetMessageA
sub esp, 0x10
mov dword [esp + 0xf0], 2
mov eax, dword [esp + 0x5c]
mov byte [esp + 0xed], al
jmp 0x435434