Function at 0x486d80
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x10024
call fcn.004b5e80
push ebx
push esi
mov dword [esp + 0xc], edx
mov edx, 0x4dc798
push edi
mov edi, dword [ebp + 0x14]
call fcn.00486fc0
mov esi, eax
test esi, esi
jne 0x486dd8
push dword [0x4e9dd4]
mov ecx, 0x4e9ec0
push eax
push 9
push eax
push str.No_StatusBar.
call fcn.0040ca40
neg eax
sbb eax, eax
and eax, 0x80000000
add eax, 0xa0000000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 1
mov eax, 0x32
mov ebx, 1
cmovge eax, edi
cmp dword [esp + 0x10], ebx
mov dword [esp + 0x2c], eax
mov edi, ebx
cmovge edi, dword [esp + 0x10]
lea eax, [esp + 0x20]
push eax
push 0x7d0
push 2
push 0
push 0
push 0x406
push esi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
je 0x486e7d
cmp edi, dword [esp + 0x20]
jle 0x486e33
mov eax, dword [ebp + 0xc]
neg eax
sbb eax, eax
and eax, 2
or eax, 0xa00a0000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x24]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [esp + 0x24]
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x18], eax
test eax, eax
je 0x486e7d
push 4
push 0x3000
push 0x10000
push 0
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x486e89
mov edi, dword [esp + 0x18]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xa0070000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [edi - 1]
mov dword [esp + 0x10], eax
xor eax, eax
mov word [esp + 0x30], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push 0x7d0
push 2
push 0
push dword [esp + 0x20]
push 0x40c
push esi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
je 0x486f34
mov eax, 0x7fff
cmp word [esp + 0x14], ax
ja 0x486f7a
lea eax, [esp + 0x14]
push eax
push 0x7d0
push 2
push dword [esp + 0x28]
push dword [esp + 0x20]
push 0x40d
push esi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
je 0x486f34
movzx eax, word [esp + 0x14]
push 0
lea eax, [eax*2 + 2]
push eax
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x486f73
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x486f7a
mov edx, eax
lea ecx, [esp + 0x30]
call fcn.00485840
test al, al
jne 0x486fae
cmp dword [ebp + 0xc], 0
je 0x486f7a
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x486fb7
cmp dword [ebp + 0x10], 0
jl 0x486f63
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x28]
add ecx, dword [ebp + 0x10]
mov edi, dword [esp + 0x18]
sub ecx, eax
cmp ecx, 5
jle 0x486fb7
mov ecx, dword [esp + 0x2c]
mov edx, ebx
call fcn.00401600
jmp 0x486ea5
xor eax, eax
mov word [esp + 0x30], ax
push 0x8000
push 0
push dword [esp + 0x24]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x486fae
lea eax, [esp + 0x30]
push eax
call fcn.00421b50
test al, al
mov ecx, 0xa00e0001
cmove ebx, ecx
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret