Function at 0x434620
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x11c
mov esi, eax
mov dword [esp + 0x34], ecx
mov dword [esp + 4], 8
mov dword [esp], 0x67e2b8
mov eax, dword [0x67eb7c]
mov dword [esp + 0x28], edx
call dword [eax + 0x4cc]
mov ebp, eax
mov dword [esp], esi
call fcn.00415e58
mov ebx, eax
test eax, eax
mov edx, dword [esp + 0x28]
je 0x434669
mov edi, dword [eax + 0x14]
test edi, edi
jne 0x434674
add esp, 0x11c
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0xb0]
mov dword [esp + 0x30], eax
mov ecx, 0x60
xor eax, eax
mov edi, dword [esp + 0x30]
rep stosb byte es:[edi], al
mov eax, dword [ebx]
mov ecx, dword [eax + 0x5c]
mov dword [esp + 0xb4], ecx
inc ecx
mov dword [eax + 0x5c], ecx
mov dword [esp + 0xbc], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xc0], eax
cmp edx, 0x102
jbe 0x43472c
cmp edx, 0x109
je 0x434738
jbe 0x4349fc
cmp edx, 0x20a
je 0x434738
cmp edx, 0x307
jne 0x434669
cmp dword [ebp + 4], 1
je 0x434669
mov dword [esp + 0xb0], 0x1d
mov dword [esp + 4], 0x5f1248
mov dword [esp], ebx
call fcn.0047f3a4
mov dword [esp + 0xc4], eax
call fcn.005cdff0
mov dword [esp + 0xc8], eax
nop
mov dword [esp + 4], 0
lea ecx, [esp + 0xb0]
mov dword [esp], ecx
call fcn.004172c4
add esp, 0x11c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp edx, 0x100
jb 0x43494c
mov dword [esp + 0x28], edx
call fcn.004814e0
mov edx, dword [esp + 0x28]
cmp edx, 0x104
je 0x434a84
cmp edx, 0x100
je 0x434a84
cmp edx, 0x105
je 0x434a84
cmp edx, 0x101
je 0x434a84
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], edx
call fcn.005cdff0
mov dword [esp + 0x3c], eax
call sub.USER32.dll_GetMessagePos
movsx edi, ax
mov dword [esp + 0x4c], edi
mov ebp, eax
sar ebp, 0x10
mov dword [esp + 0x50], ebp
lea eax, [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.USER32.dll_ScreenToClient
sub esp, 8
mov eax, dword [ebx]
mov ecx, dword [ebx + 8]
lea ecx, [ecx + ecx*4]
shl ecx, 4
add ecx, dword [eax + 0x88]
mov eax, dword [ecx + 8]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], ebp
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xe0], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xe8], 1
mov edx, dword [esp + 0x28]
cmp edx, 0x104
je 0x434850
ja 0x434b68
cmp edx, 0x101
je 0x434b8c
cmp edx, 0x102
je 0x434ccb
cmp edx, 0x100
jne 0x434708
nop
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xffffffff
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xf0], 0
xor eax, eax
lea ebx, [esp + 0x54]
jmp 0x4348ab
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0x5c]
mov byte [esp + edx + 0xec], cl
lea eax, [edx + 1]
mov dword [esp + 0xf0], eax
cmp cx, 0xff
ja 0x434e04
cmp eax, 3
jg 0x434708
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_PeekMessageA
sub esp, 0x14
test eax, eax
je 0x434708
mov eax, dword [esp + 0x58]
cmp eax, 0x102
je 0x4348fd
cmp eax, 0x106
jne 0x434708
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_GetMessageA
sub esp, 0x10
cmp dword [esp + 0x58], 0x102
jne 0x434884
test byte [esp + 0x63], 0x20
je 0x434884
mov dword [esp + 0xe0], 0
jmp 0x434884
cmp edx, 0xf
je 0x434a10
ja 0x434b04
lea eax, [edx - 7]
cmp eax, 1
ja 0x434669
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 0x28], edx
call fcn.00415e58
mov edx, dword [esp + 0x28]
jmp 0x43498b
mov ebx, dword [ebx + 0x20]
test ebx, ebx
je 0x434669
test byte [ebx + 0x98], 2
je 0x434980
test eax, eax
jne 0x4349a3
jmp 0x4349ac
mov eax, dword [eax + 0x20]
test eax, eax
je 0x4349ac
test byte [eax + 0x98], 2
je 0x43499c
cmp edx, 7
je 0x434dcf
cmp ebx, eax
je 0x434669
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xc0], eax
cmp edx, 7
je 0x434d3f
mov dword [esp + 0xb0], 0xa
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 3
call sub.USER32.dll_DestroyCaret
jmp 0x434708
lea eax, [edx - 0x104]
cmp eax, 1
ja 0x434669
jmp 0x434738
mov dword [esp + 0xb0], 0xc
lea ebx, [esp + 0x70]
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.USER32.dll_BeginPaint
sub esp, 8
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0x80]
sub eax, ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x84]
sub eax, edx
mov dword [esp + 0xd0], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.USER32.dll_EndPaint
sub esp, 8
mov dword [esp + 0xd4], 0
jmp 0x434708
mov ebp, dword [esp + 0x130]
shr ebp, 0x10
mov edi, ebp
and edi, 0x4000
mov ecx, edi
cmp dword [esp + 0x34], 0x12
je 0x434dc5
ja 0x434bb4
cmp dword [esp + 0x34], 0x10
je 0x434d90
cmp dword [esp + 0x34], 0x11
je 0x434afc
xor edi, edi
test ecx, ecx
je 0x434b58
or edi, eax
mov dword [esp + 0x38], edi
and ebp, 0x100
je 0x434779
cmp edx, 0x104
je 0x434cbe
cmp edx, 0x100
je 0x434cbe
and dword [esp + 0x38], 0xfffbffff
jmp 0x434779
mov edi, 4
jmp 0x434abd
cmp edx, 0x10
jne 0x434669
mov dword [esp + 0xb0], 0x21
mov dword [esp + 4], str.WM_PROTOCOLS
mov dword [esp], ebx
call fcn.0047f3a4
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0x20
mov dword [esp + 4], str.WM_DELETE_WINDOW
mov dword [esp], ebx
call fcn.0047f3a4
mov dword [esp + 0xcc], eax
jmp 0x434708
not edi
mov dword [esp + 0x38], edi
and dword [esp + 0x38], eax
jmp 0x434acb
cmp edx, 0x109
je 0x434c3a
cmp edx, 0x20a
je 0x434c06
cmp edx, 0x105
jne 0x434708
mov dword [esp + 0xb0], 3
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xf0], 0
jmp 0x434708
cmp dword [esp + 0x34], 0x90
je 0x434d9a
cmp dword [esp + 0x34], 0x91
je 0x434d65
cmp dword [esp + 0x34], 0x14
jne 0x434abb
cmp edx, 0x104
je 0x434bef
cmp edx, 0x100
jne 0x434abb
mov ecx, eax
and ecx, 2
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 2
jmp 0x434abd
mov dword [esp + 0xb0], 0x26
mov dword [esp + 0xb8], 0xffffffff
mov dword [esp + 0xf0], 0
mov eax, dword [esp + 0x34]
sar eax, 0x10
mov dword [esp + 0xe4], eax
jmp 0x434708
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xfffffffd
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xe4], ecx
lea ebx, [esp + 0x70]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov eax, dword [0x67eb7c]
call dword [eax + 0x518]
mov dword [esp + 0xf0], eax
test eax, eax
jle 0x434c97
xor eax, eax
mov dl, byte [ebx + eax]
mov byte [esp + eax + 0xec], dl
inc eax
cmp dword [esp + 0xf0], eax
jle 0x434c97
cmp eax, 3
jne 0x434c7e
mov dword [esp + 4], 0
lea eax, [esp + 0xb0]
mov dword [esp], eax
call fcn.004172c4
mov dword [esp + 0xb0], 3
jmp 0x434708
or dword [esp + 0x38], 0x40000
jmp 0x434779
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0xffffffff
mov dword [esp + 0xe4], 0
mov dword [esp + 0xf0], 1
mov al, byte [esp + 0x34]
mov byte [esp + 0xec], al
movzx eax, byte [esp + 0x34]
mov dword [esp], eax
call sub.KERNEL32.dll_IsDBCSLeadByte
push ecx
test eax, eax
jne 0x434e1d
mov dword [esp + 4], 0
lea edx, [esp + 0xb0]
mov dword [esp], edx
call fcn.004172c4
mov dword [esp + 0xb0], 3
jmp 0x434708
mov dword [esp + 0xb0], 9
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 3
jmp 0x434708
cmp edx, 0x104
je 0x434d79
cmp edx, 0x100
jne 0x434abb
mov ecx, eax
and ecx, 0x20
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 0x20
jmp 0x434abd
mov edi, 1
jmp 0x434abd
cmp edx, 0x104
je 0x434dae
cmp edx, 0x100
jne 0x434abb
mov ecx, eax
and ecx, 8
cmp edi, ecx
sete cl
movzx ecx, cl
mov edi, 8
jmp 0x434abd
mov edi, 0x20000
jmp 0x434abd
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
call fcn.004344b4
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
jmp 0x4349b5
shr ecx, 8
mov byte [esp + eax + 0xec], cl
lea eax, [edx + 2]
mov dword [esp + 0xf0], eax
jmp 0x4348ab
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea ebx, [esp + 0x54]
mov dword [esp], ebx
call sub.USER32.dll_PeekMessageA
sub esp, 0x14
test eax, eax
je 0x434d18
cmp dword [esp + 0x58], 0x102
jne 0x434d18
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.USER32.dll_GetMessageA
sub esp, 0x10
mov dword [esp + 0xf0], 2
mov eax, dword [esp + 0x5c]
mov byte [esp + 0xed], al
jmp 0x434d18