Function at 0x494e90
Capabilities:
Check for time delay via gettickcount
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50bd00
push 0x4cae74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x88
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov esi, ecx
mov dword [ebp - 0x74], esi
xor ebx, ebx
mov eax, dword [ebp + 0xc]
mov byte [eax], bl
mov byte [esi + 0x93d], bl
mov ecx, dword [esi + 0x3d20]
mov dword [ebp - 0x6c], ecx
mov edx, dword [esi + 0x3d08]
mov dword [ebp - 0x68], edx
mov eax, dword [esi + 0x3d0c]
mov dword [ebp - 0x64], eax
mov ecx, dword [esi + 0x960]
mov dword [ebp - 0x60], ecx
mov eax, dword [esi + 0x944]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x48], 5
cmp eax, ebx
jne 0x494f0a
mov dword [ebp - 0x48], 4
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], ebx
mov ecx, dword [0x52fe30]
mov eax, dword [ecx + 0x11620]
mov edx, 0xa
cmp eax, edx
mov dword [ebp - 0x30], edx
jb 0x494f2b
mov dword [ebp - 0x30], eax
mov eax, dword [ecx + 0x11624]
cmp eax, edx
mov dword [ebp - 0x38], edx
jb 0x494f3b
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x19], bl
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x50], ebx
call edi
mov dword [ebp - 0x54], eax
lea ebx, [ebx]
mov eax, dword [esi]
test eax, eax
je 0x494f92
push 0
push eax
call fcn.004b6cc0
add esp, 8
mov byte [ebp - 0x24], al
test al, al
jne 0x494f98
mov eax, dword [esi]
test eax, eax
je 0x494f8e
push eax
mov ecx, dword [0x52fe2c]
call fcn.0040aa90
test al, al
jne 0x494f98
xor bl, bl
jmp 0x494f9a
mov byte [ebp - 0x24], 0
jmp 0x494f78
mov bl, 1
mov byte [ebp - 0x1a], bl
push 0
mov ecx, dword [0x52fe2c]
call fcn.004098e0
movzx eax, al
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x494fc9
mov eax, dword [ebp - 0x38]
cmp eax, 0x3e8
jae 0x494fc5
mov ebx, 0x3e8
jmp 0x494fe7
mov ebx, eax
jmp 0x494fe7
mov edx, dword [0x52fe30]
cmp byte [edx + 0x1162b], 0
mov al, byte [ebp - 0x24]
jne 0x494fdd
mov al, bl
test al, al
mov ebx, dword [ebp - 0x38]
je 0x494fe7
mov ebx, dword [ebp - 0x30]
cmp byte [ebp - 0x24], 0
je 0x494fff
push 1
push 0x57d
mov ecx, dword [0x52fe34]
call fcn.004697f0
cmp dword [ebp - 0x5c], 0
jne 0x495022
mov eax, dword [esi + 0x944]
test eax, eax
je 0x495022
push 0
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4958de
jmp 0x495051
cmp dword [esi + 4], 0
je 0x495051
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [ebp - 0x54]
cmp eax, 0x1f4
jb 0x495051
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4958de
call edi
mov dword [ebp - 0x54], eax
push ebx
push 0
lea ecx, [ebp - 0x6c]
push ecx
mov ebx, dword [ebp - 0x48]
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x2c], eax
cmp eax, 0xffffffff
jne 0x495089
xor edi, edi
test ebx, ebx
jbe 0x495089
push 0
mov edx, dword [ebp + edi*4 - 0x6c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x495084
mov dword [ebp - 0x2c], edi
inc edi
cmp edi, ebx
jb 0x495070
cmp byte [ebp - 0x24], 0
jne 0x4950cd
mov eax, dword [esi]
test eax, eax
je 0x4950c3
push 0
push eax
call fcn.004b6cc0
add esp, 8
mov byte [ebp - 0x24], al
test al, al
jne 0x4950c9
mov eax, dword [esi]
test eax, eax
je 0x4950bd
push eax
mov ecx, dword [0x52fe2c]
call fcn.0040aa90
test al, al
jne 0x4950c9
mov byte [ebp - 0x1a], 0
jmp 0x4950cd
mov byte [ebp - 0x24], 0
jmp 0x4950a7
mov byte [ebp - 0x1a], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4958de
cmp eax, 4
je 0x4958de
cmp eax, 3
je 0x4950ef
cmp byte [esi + 0x968], 0
je 0x49511e
mov ecx, esi
call fcn.0048f270
test al, al
jne 0x49510a
mov byte [esi + 0x968], 1
mov eax, dword [esi + 0x960]
push eax
jmp 0x495118
mov byte [esi + 0x968], 0
mov ecx, dword [esi + 0x964]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, dword [ebp - 0x2c]
cmp ebx, 2
sete al
test al, al
jne 0x49514c
cmp dword [esi + 0x3d10], 0
je 0x495148
push 0
mov edx, dword [esi + 0x3d0c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
sete al
test al, al
je 0x495196
cmp dword [esi + 0x940], 0
je 0x495177
cmp byte [esi + 0x954], 0
je 0x495177
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [esi + 0x3d14], eax
push 1
mov ecx, esi
call fcn.0048b420
jmp 0x49517d
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [esi + 0x3d0c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [esi + 0x3d10], 0
jmp 0x49519c
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp ebx, 1
je 0x4951b1
push 0
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x4951e8
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [ebp - 0x5c], 0
jne 0x4951e8
mov eax, dword [esi + 0x944]
test eax, eax
je 0x4951e8
cmp byte [ebp + 8], 0
jne 0x4951da
cmp dword [esi + 0x3d64], 2
jne 0x4951e8
mov byte [ebp + 8], 0
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x48], 5
mov ebx, dword [ebp + 0xc]
cmp byte [ebx], 0
jne 0x49521e
cmp dword [esi + 0x42b8], 0
jle 0x49521e
call edi
sub eax, dword [ebp - 0x78]
cmp eax, 0x3e8
jbe 0x49521e
mov byte [ebx], 1
mov dword [esi + 0x69e8], 1
push esi
mov ecx, dword [0x52fe2c]
call fcn.0040cf30
cmp dword [esi + 0x4934], 0
jne 0x495252
mov eax, dword [0x52fe30]
cmp byte [eax + 0x11641], 0
jne 0x495252
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x495252
push 1
push 0
mov edx, dword [esi + 4]
push edx
mov ecx, esi
call fcn.00487c20
call edi
mov dword [ebp - 0x40], eax
wait
mov dword [ebp - 4], 0
cmp byte [esi + 0x93d], 0
je 0x495274
mov byte [esi + 0x93d], 0
call sub.KERNEL32.dll_DebugBreak
mov eax, dword [esi + 0x41f0]
cmp eax, dword [ebp - 0x50]
setne bl
mov byte [ebp - 0x27], bl
test bl, bl
je 0x495292
mov byte [ebp - 0x19], 1
mov byte [esi + 0x41f4], 1
cmp dword [esi + 0x41e4], eax
je 0x4952ba
call edi
mov dword [esi + 0x69e0], eax
test bl, bl
jne 0x49548f
mov ecx, dword [esi + 0x41f0]
call fcn.0047b3d0
jmp 0x49548b
cmp dword [esi + 0x44c0], 0
jne 0x495493
cmp dword [esi + 0x5488], 0
je 0x495493
mov byte [ebp - 0x1f], 0
push 1
mov ecx, esi
call fcn.00487110
mov edi, eax
mov dword [ebp - 0x70], edi
xor ebx, ebx
cmp edi, ebx
jne 0x495337
push ebx
mov ecx, esi
call fcn.00487110
cmp eax, ebx
je 0x49531b
xor ecx, ecx
mov dword [ebp - 0x80], ecx
cmp ecx, dword [esi + 0x44bc]
jae 0x49531b
cmp dword [esi + ecx*4 + 0x42bc], eax
jne 0x495379
mov edi, eax
mov dword [ebp - 0x70], edi
push eax
mov ecx, esi
call fcn.0048f3d0
cmp edi, ebx
jne 0x495337
cmp dword [ebp - 0x34], ebx
je 0x495333
push ebx
mov ecx, esi
call fcn.00491600
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x1f], 1
cmp edi, ebx
je 0x49538b
cmp dword [ebp - 0x34], edi
je 0x49538b
mov dword [esi + 0x69e0], ebx
mov dword [ebp - 0x34], edi
mov ecx, esi
call fcn.00494bc0
test eax, eax
jne 0x495387
cmp dword [esi + 0x6b94], edi
jne 0x495387
mov dword [ebp - 0x84], eax
cmp eax, dword [esi + 0x44bc]
jae 0x49537f
cmp dword [esi + eax*4 + 0x42bc], edi
jne 0x495376
mov dword [esi + eax*4 + 0x42bc], ebx
inc eax
jmp 0x495358
inc ecx
jmp 0x4952fa
push ebx
mov ecx, esi
call fcn.0048f3d0
mov byte [ebp - 0x1f], 1
xor bl, bl
test edi, edi
je 0x4953f3
cmp dword [esi + 0x59a8], 0
je 0x4953f3
lea ecx, [esi + 0x4968]
call fcn.004c6550
test eax, eax
je 0x4953f3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [esi + 0x69e0]
test eax, eax
je 0x4953d1
mov ecx, dword [0x52fe30]
mov edx, dword [ecx + 0x1244]
shr edx, 1
mov ecx, edi
sub ecx, eax
cmp ecx, edx
jb 0x4953f3
push 1
push 0
lea ecx, [esi + 0x4968]
call fcn.004c65a0
test eax, eax
jne 0x4953f5
test edi, edi
jne 0x4953ed
mov edi, 1
mov dword [esi + 0x69e0], edi
mov bl, 1
cmp byte [ebp - 0x24], 0
je 0x495433
cmp byte [ebp - 0x25], bl
jne 0x495406
cmp byte [ebp - 0x1e], 0
jne 0x49541a
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x20
mov ecx, esi
call fcn.00488d00
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 0x1e], 1
cmp byte [ebp - 0x1f], 0
je 0x495437
push 0
mov ecx, dword [0x52fe2c]
call fcn.00416000
jmp 0x495437
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x25], bl
push 1
push 0
lea ecx, [esi + 0x5274]
call fcn.004c65a0
test eax, eax
jne 0x495493
cmp dword [esi + 0x4958], eax
je 0x495480
mov eax, dword [esi + 0x944]
test eax, eax
je 0x495480
push 0
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x495480
mov dword [ebp - 0x2c], 4
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x4958de
mov ecx, dword [esi + 0x41e4]
call fcn.00482f80
test eax, eax
je 0x495493
mov byte [ebp - 0x19], 1
xor bl, bl
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x24], bl
je 0x4954a6
cmp dword [ebp - 0x7c], 0
je 0x4954e7
cmp byte [ebp - 0x27], 0
jne 0x4954bb
mov ecx, dword [esi + 0x41f0]
call fcn.0047b3d0
test eax, eax
je 0x4954e7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [esi + 0x41fc]
cmp ecx, 0x1f4
jbe 0x4954e7
mov dword [esi + 0x41fc], eax
mov ecx, dword [esi]
call fcn.004c37d0
test al, al
je 0x4954e7
mov bl, 1
mov byte [ebp - 0x1c], bl
cmp byte [esi + 0x69e4], 0
jne 0x4954f9
cmp byte [esi + 0x4918], 0
je 0x495518
mov byte [ebp - 0x19], 1
mov byte [esi + 0x4918], 0
mov byte [esi + 0x69e4], 0
mov ecx, esi
call fcn.00488280
mov byte [ebp - 0x1c], 1
jmp 0x49553b
test bl, bl
jne 0x49553b
cmp dword [esi + 0x3ce8], 0
jne 0x495531
test dword [esi + 0x4928], 0x60000
je 0x495537
mov byte [ebp - 0x1c], 1
jmp 0x49553b
test bl, bl
je 0x49554d
mov ecx, esi
call fcn.004909c0
mov ecx, dword [esi + 0x41e4]
call fcn.00481bb0
cmp word [esi + 0x3cec], 0
jl 0x4955a5
cmp word [esi + 0x3cee], 0xffff
jne 0x4955a5
cmp dword [esi + 0x3cf0], 0
je 0x4955a5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x3cf0]
cmp eax, 0x5dc
jb 0x4955a5
push 0
push 0xffffffffffffffff
push str.Clearing_console_progress_due_timeout
mov ecx, esi
call fcn.00488730
push 0xffffffffffffffff
mov ecx, esi
call fcn.004887f0
push 1
push 0xffffffffffffffff
mov ecx, esi
call fcn.00488820
mov byte [ebp - 0x1d], 1
lea ebx, [esi + 0x10]
mov eax, dword [ebx]
test eax, eax
je 0x4955cc
cmp byte [ebp - 0x24], 0
je 0x4955cc
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edi, eax
cmp edi, dword [ebp - 0x4c]
je 0x4955cc
mov ecx, esi
call fcn.00488480
mov dword [ebp - 0x4c], edi
mov ecx, esi
call fcn.00488420
test al, al
jne 0x4955dc
cmp dword [ebx], 0
je 0x49560d
mov ecx, ebx
call fcn.00486ac0
test al, al
je 0x4955eb
mov eax, dword [ebx]
jmp 0x4955ee
mov eax, dword [esi + 4]
lea edi, [esi + 0x199a]
push 0x3ff
push edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0x58], eax
test eax, eax
jg 0x49565c
xor edx, edx
mov word [edi], dx
cmp dword [esi + 0x34dc], 0
jne 0x4956c8
cmp byte [ebp - 0x1d], 0
jne 0x4956c8
lea ecx, [esi + 0x199a]
cmp word [ecx], 0
je 0x4956ab
lea eax, [esi + 0x1198]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4956a2
test dx, dx
je 0x495658
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4956a2
add eax, 4
add ecx, 4
test dx, dx
jne 0x495636
xor eax, eax
jmp 0x4956a7
cmp eax, 0x401
jb 0x495674
mov eax, 0x3ff
mov dword [ebp - 0x58], eax
xor ecx, ecx
mov word [esi + 0x219a], cx
mov ecx, 0x20
lea esp, [esp]
test eax, eax
jle 0x49560d
cmp word [esi + eax*2 + 0x1998], cx
jne 0x49560d
dec eax
mov dword [ebp - 0x58], eax
xor edx, edx
mov word [esi + eax*2 + 0x199a], dx
jmp 0x495680
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4956c8
cmp byte [ebp - 0x24], 0
je 0x4956dd
push 0
mov ecx, esi
call fcn.0048ec50
push eax
mov ecx, dword [0x52fe2c]
call fcn.0041aa60
jmp 0x4956dd
mov dword [esi + 0x34dc], 0
mov ecx, esi
call fcn.00490c70
mov byte [ebp - 0x1d], 0
cmp byte [ebp - 0x1a], 0
jne 0x4956fb
cmp byte [ebp - 0x19], 0
je 0x4957b9
push 0
mov ecx, dword [esi]
call fcn.004be070
jmp 0x4957b9
xor bl, bl
mov byte [ebp - 0x1b], bl
cmp dword [ebp - 0x2c], 1
je 0x4957cc
cmp byte [ebp - 0x19], bl
jne 0x4957cc
mov eax, dword [ebp - 0x24]
push eax
push 0
mov ecx, esi
call fcn.0048f6a0
push eax
mov ecx, dword [0x52fe30]
call fcn.0044e860
mov ecx, eax
call fcn.00486ae0
test al, al
je 0x495770
cmp dword [esi + 0x69e8], 0
je 0x495770
mov byte [ebp - 0x20], bl
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi]
call fcn.004bed60
cmp byte [ebp - 0x20], bl
je 0x49579f
cmp byte [esi + 0x4961], 2
jbe 0x49576a
push 0
push str.Invalidating_from_CRealConsole::MonitorThread.1
mov ecx, esi
call fcn.00487400
mov byte [ebp - 0x1b], 1
jmp 0x4957a3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x6b98]
cmp eax, 0x12c
jbe 0x49579f
cmp byte [esi + 0x4961], 2
jbe 0x49579a
push 0
push str.Invalidating_from_CRealConsole::MonitorThread.2
mov ecx, esi
call fcn.00487400
mov bl, 1
mov byte [ebp - 0x1b], bl
test bl, bl
je 0x4957b9
mov ecx, dword [esi]
add ecx, 8
call fcn.004b37a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x6b98], eax
mov edx, dword [esi + 0x41f0]
mov dword [ebp - 0x50], edx
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x49582c
mov byte [ebp - 0x19], 0
cmp byte [esi + 0x4961], 2
jbe 0x4957e7
push 0
push 0x5019f0
mov ecx, esi
call fcn.00487400
push 0
push 0
mov ecx, dword [esi]
call fcn.004c41c0
test al, al
je 0x49579f
mov byte [ebp - 0x1b], 0
jmp 0x4957b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x40]
cmp eax, 0xa
jae 0x49583f
mov eax, 0xa
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
test eax, eax
jge 0x49584f
fadd qword [0x4ee028]
fmul qword [0x5019e8]
mov edx, dword [ebp - 0x30]
fild dword [ebp - 0x30]
test edx, edx
jge 0x495865
fadd qword [0x4ee028]
fmul qword [str.ffffff]
faddp st(1)
fnstcw word [ebp - 0x28]
movzx eax, word [ebp - 0x28]
or eax, 0xc00
mov dword [ebp - 0x40], eax
fldcw word [ebp - 0x40]
fistp qword [ebp - 0x44]
fldcw word [ebp - 0x28]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x30], eax
cmp eax, 0x3e8
jbe 0x495899
mov dword [ebp - 0x30], 0x3e8
cmp dword [ebp - 0x3c], 0
je 0x4958a6
mov dword [ebp - 0x3c], 0
mov eax, dword [esi + 0x4200]
test eax, eax
je 0x494f60
cmp eax, dword [esi + 0x940]
jne 0x494f60
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x4204]
cmp eax, 0x7d0
jb 0x494f60
mov ecx, esi
call fcn.004883a0
mov eax, 4
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8