Function at 0x436700
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28
mov edx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x14]
mov dword [esp + 4], esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0xc], ecx
cmp edx, 0x111
ja 0x436928
je 0x4366c3
add edx, 0xfffffffb
cmp edx, 0x7f
ja case.default.0x4366d4
movzx eax, byte [edx + 0x436d0c]
jmp dword [eax*4 + 0x436cec]
mov ecx, dword [edi + 0x2a3d8]
test ecx, ecx
je case.default.0x4366d4
cmp dword [edi + 0x2a38c], 0
jne case.default.0x4366d4
cmp dword [edi + 0x2a384], 0
je case.default.0x4366d4
mov eax, dword [ecx]
push 0
push 0
push 0
push 0
push ecx
call dword [eax + 0x3c]
jmp case.default.0x4366d4
mov dword [esi + 0x18], 0x64
mov dword [esi + 0x1c], 0x64
jmp case.default.0x4366d4
cmp ecx, 4
je 0x4365f2
cmp ecx, 1
je 0x4365f2
mov eax, 1
mov dword [edi + 0x2a388], eax
jmp case.default.0x4366d4
xor eax, eax
mov dword [edi + 0x2a388], eax
jmp case.default.0x4366d4
cmp dword [edi + 0x2a388], 0
je case.default.0x4366d4
cmp dword [edi + 0x2a38c], 0
je case.default.0x4366d4
cmp dword [edi + 0x2a384], 0
jne case.default.0x4366d4
push 0
call dword [sym.imp.USER32.dll_SetCursor]
cmp dword [edi + 0x2a5a0], 0
je 0x436645
mov eax, dword [edi + 0x2a3d8]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp dword [edi + 0x2a384], 0
je case.default.0x4366d4
push 0
push dword [ebp + 8]
mov eax, esi
shr eax, 0x10
push eax
movzx eax, si
push eax
push 0x40
push 0
push 0x8e
push 0
call dword [sym.imp.USER32.dll_LoadMenuA]
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenuEx]
jmp case.default.0x4366d4
mov ecx, edi
call fcn.004387c0
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
push esi
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
movzx eax, cx
add eax, 0xffff63be
cmp eax, 4
ja case.default.0x4366d4
jmp dword [eax*4 + 0x436d8c]
mov edx, dword [edi + 0x2a390]
xor eax, eax
test edx, edx
sete al
xor ecx, ecx
test edx, edx
mov dword [edi + 0x2a390], eax
setne cl
inc ecx
call fcn.0043b0b0
jmp case.default.0x4366d4
cmp dword [edi + 0x2a390], 0
jne 0x4367cd
cmp dword [0x500290], 0
jne 0x43674a
lea eax, [esp + 0x10]
mov dword [0x500290], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x5002a0], eax
test eax, eax
je 0x43679c
mov ecx, dword [esp + 0x10]
mov dword [0x500268], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x50026c], ecx
jmp 0x43674f
mov eax, dword [0x5002a0]
test eax, eax
je 0x43679c
mov esi, dword [0x500280]
mov eax, esi
or eax, dword [0x500284]
jne 0x436774
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov esi, dword [0x500280]
push 0
push 0xa
push dword [0x50026c]
push dword [0x500268]
call fcn.004b8bb0
add esi, eax
mov dword [0x500280], esi
adc dword [0x500284], edx
jmp 0x436892
movsd xmm0, qword [0x5002a8]
ucomisd xmm0, qword [0x4ded50]
lahf
test ah, 0x44
jp 0x4367c0
call dword [sym.imp.WINMM.dll_timeGetTime]
movsd xmm0, qword [0x5002a8]
addsd xmm0, qword [0x4dee68]
jmp 0x43688a
cmp dword [0x500290], 0
jne 0x43680a
lea eax, [esp + 0x10]
mov dword [0x500290], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x5002a0], eax
test eax, eax
je 0x436852
mov ecx, dword [esp + 0x10]
mov dword [0x500268], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x50026c], ecx
jmp 0x43680f
mov eax, dword [0x5002a0]
test eax, eax
je 0x436852
mov ecx, dword [0x500280]
mov eax, ecx
mov edx, dword [0x500284]
or eax, edx
jne 0x436838
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [0x500280], ecx
mov dword [0x500284], edx
mov dword [0x500298], ecx
mov dword [0x50029c], edx
jmp 0x436892
movsd xmm0, qword [0x5002a8]
ucomisd xmm0, qword [0x4ded50]
lahf
test ah, 0x44
jp 0x43688a
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4df1b0]
mulsd xmm0, qword [0x4dee28]
movsd qword [0x5002a8], xmm0
mov dword [edi + 0x2a390], 0
mov dword [edi + 0x2a394], 1
jmp case.default.0x4366d4
cmp dword [edi + 0x2a388], 0
je 0x436905
cmp dword [edi + 0x2a38c], 0
je 0x436905
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x34]
mov ecx, edi
call fcn.00437650
test eax, eax
js 0x436905
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x34]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp dword [edi + 0x2a388], 0
je 0x436905
cmp dword [edi + 0x2a38c], 0
je 0x436905
mov ecx, edi
call fcn.00437360
test eax, eax
js 0x436bc3
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
cmp edx, 0x212
ja 0x4369fe
je 0x4369f0
mov eax, edx
sub eax, 0x112
je 0x4369a9
sub eax, 0xee
je 0x436961
sub eax, 0x11
jne case.default.0x4366d4
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x34]
jmp case.default.0x4366d4
cmp dword [edi + 0x2a388], 0
je case.default.0x4366d4
cmp dword [edi + 0x2a38c], 0
je case.default.0x4366d4
cmp dword [edi + 0x2a3d8], 0
je case.default.0x4366d4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x10]
push eax
push dword [edi + 0x2a3cc]
call dword [sym.imp.USER32.dll_ScreenToClient]
jmp case.default.0x4366d4
cmp ecx, 0xf030
ja 0x4369c5
je case.0x436583.132
sub ecx, 0xf000
je case.0x436583.132
sub ecx, 0x10
je case.0x436583.132
jmp case.default.0x4366d4
sub ecx, 0xf100
je case.0x436583.132
sub ecx, 0x70
jne case.default.0x4366d4
cmp dword [edi + 0x2a384], 0
jne case.default.0x4366d4
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x34]
jmp case.default.0x4366d4
mov eax, edx
sub eax, 0x218
je 0x436cbe
sub eax, 0x19
je 0x436bea
sub eax, 1
jne case.default.0x4366d4
cmp dword [edi + 0x2a390], eax
je 0x436b06
cmp dword [0x500290], eax
jne 0x436a65
lea eax, [esp + 0x10]
mov dword [0x500290], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x5002a0], eax
test eax, eax
je 0x436ab6
mov ecx, dword [esp + 0x10]
mov dword [0x500268], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x50026c], ecx
jmp 0x436a6a
mov eax, dword [0x5002a0]
test eax, eax
je 0x436ab6
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov esi, dword [esp + 0x10]
xorps xmm0, xmm0
mov edx, dword [esp + 0x14]
mov ecx, esi
sub ecx, dword [0x500280]
mov eax, edx
mov dword [0x500298], esi
sbb eax, dword [0x500284]
add dword [0x500278], ecx
movlpd qword [0x500280], xmm0
adc dword [0x50027c], eax
mov dword [0x50029c], edx
jmp 0x436b06
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4df1b0]
mulsd xmm1, qword [0x4dee28]
movaps xmm0, xmm1
movsd qword [0x500270], xmm1
subsd xmm0, qword [0x5002a8]
addsd xmm0, qword [0x500288]
movsd qword [0x500288], xmm0
xorps xmm0, xmm0
movsd qword [0x5002a8], xmm0
cmp dword [edi + 0x2a388], 0
je case.default.0x4366d4
cmp dword [edi + 0x2a384], 0
je case.default.0x4366d4
movups xmm0, xmmword [edi + 0x2a4e8]
lea eax, [edi + 0x2a4d8]
lea esi, [edi + 0x2a4e8]
push eax
push dword [edi + 0x2a3cc]
movaps xmmword [esp + 0x28], xmm0
movaps xmmword [esp + 0x18], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push esi
push dword [edi + 0x2a3cc]
call dword [sym.imp.USER32.dll_GetClientRect]
movaps xmm1, xmmword [esp + 0x20]
mov edx, dword [edi + 0x2a4f0]
movaps xmm0, xmm1
sub edx, dword [esi]
psrldq xmm0, 8
movd ecx, xmm0
movd eax, xmm1
sub ecx, eax
cmp ecx, edx
jne 0x436b96
mov ecx, dword [edi + 0x2a4f4]
mov eax, dword [esp + 0x1c]
sub ecx, dword [edi + 0x2a4ec]
sub eax, dword [esp + 0x14]
cmp eax, ecx
je case.default.0x4366d4
mov eax, dword [edi + 0x2a4f4]
mov ecx, edi
sub eax, dword [edi + 0x2a4ec]
mov dword [edi + 0x2a38c], 0
mov dword [edi + 0x2a398], edx
mov dword [edi + 0x2a39c], eax
call fcn.004370f0
test eax, eax
jns 0x436bdb
push 1
push 0x8200000c
mov ecx, edi
call fcn.00438820
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov dword [edi + 0x2a38c], 1
jmp case.default.0x4366d4
cmp dword [edi + 0x2a390], 0
je case.default.0x4366d4
cmp dword [0x500290], 0
jne 0x436c34
lea eax, [esp + 0x10]
mov dword [0x500290], 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [0x5002a0], eax
test eax, eax
je 0x436c7c
mov ecx, dword [esp + 0x10]
mov dword [0x500268], ecx
mov ecx, dword [esp + 0x14]
mov dword [0x50026c], ecx
jmp 0x436c39
mov eax, dword [0x5002a0]
test eax, eax
je 0x436c7c
mov ecx, dword [0x500280]
mov eax, ecx
mov edx, dword [0x500284]
or eax, edx
jne 0x436c62
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [0x500280], ecx
mov dword [0x500284], edx
mov dword [0x500298], ecx
mov dword [0x50029c], edx
jmp case.default.0x4366d4
movsd xmm0, qword [0x5002a8]
ucomisd xmm0, qword [0x4ded50]
lahf
test ah, 0x44
jp 0x436cb4
call dword [sym.imp.WINMM.dll_timeGetTime]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4df1b0]
mulsd xmm0, qword [0x4dee28]
movsd qword [0x5002a8], xmm0
jmp case.default.0x4366d4
test ecx, ecx
je 0x436645
cmp ecx, 7
je 0x436645
push dword [esp + 8]
push dword [esp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10