Function at 0x4a9020
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2fc], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x304], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2bd], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x345], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
cmp word [eax + 0x6a], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
call fcn.004a8e54
test al, al
je 0x4a9091
mov eax, dword [ebp - 4]
call fcn.004c936c
jmp 0x4a93e0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x510], 0
je 0x4a90d6
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x50c]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x508]
cdq
cmp edx, dword [esp + 4]
jne 0x4a90c8
cmp eax, dword [esp]
pop edx
pop eax
jae 0x4a90d6
jmp 0x4a90cc
pop edx
pop eax
jge 0x4a90d6
mov eax, dword [ebp - 4]
mov byte [eax + 0x510], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x510], 0
jne 0x4a93d8
call fcn.00407b30
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x3fc]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x4fc]
jle 0x4a93d8
call fcn.00407b30
mov edx, dword [ebp - 4]
mov dword [edx + 0x3fc], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x504]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x504]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x500]
jle 0x4a9151
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x504], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x510], 1
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
mov dword [edx + 0x50c], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x540], 0
jne 0x4a9344
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c0], 0
jne 0x4a91d3
mov eax, dword [ebp - 4]
cmp dword [eax + 0x378], 0
je 0x4a9196
mov eax, dword [ebp - 4]
mov bx, 0xffeb
call fcn.004030dc
test al, al
je 0x4a91d3
mov eax, dword [ebp - 4]
call fcn.004c936c
jmp 0x4a93e0
mov eax, dword [ebp - 4]
mov dword [eax + 0x538], 0xffffffff
mov eax, dword [ebp - 4]
cmp byte [eax + 0x338], 0
je 0x4a91d3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x538], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov edx, dword [ebp - 4]
mov dword [edx + 0x53c], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x288], 0
je 0x4a937e
mov eax, dword [ebp - 4]
cmp dword [eax + 0x378], 0
jne 0x4a92a5
lea ecx, [ebp - 0xc]
lea edx, [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
call fcn.004b2900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x538]
sub eax, dword [ebp - 8]
cdq
xor eax, edx
sub eax, edx
dec eax
jg 0x4a922f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x53c]
sub eax, dword [ebp - 8]
cdq
xor eax, edx
sub eax, edx
dec eax
jle 0x4a92a5
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x538], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x53c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
sub eax, dword [ebp - 8]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jg 0x4a92a5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
sub eax, dword [ebp - 0xc]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jg 0x4a92a5
push 1
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
call fcn.004b5838
test eax, eax
je 0x4a92a5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 4]
mov dword [edx + 0x538], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp - 4]
mov dword [edx + 0x53c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
cmp byte [eax + 0x2a0], 0
jne 0x4a937e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
mov eax, dword [eax + 0x2f8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2f8]
jne 0x4a9313
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
push dword [eax + 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
pop edx
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x14
jg 0x4a9313
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
push dword [eax + 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
pop edx
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x14
jle 0x4a937e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x53c]
push eax
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x538]
mov eax, dword [ebp - 4]
call fcn.004bcd1c
jmp 0x4a937e
mov eax, dword [ebp - 4]
cmp dword [eax + 0x548], 0
jle 0x4a937e
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x544]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x548]
jbe 0x4a937e
mov eax, dword [ebp - 4]
mov byte [eax + 0x540], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x548], edx
mov eax, dword [ebp - 4]
cmp dword [eax + 0x288], 0
je 0x4a93a6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
cmp byte [eax + 0x2a0], 0
je 0x4a93a6
mov eax, dword [ebp - 4]
call fcn.004c936c
jmp 0x4a93e0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x538], 0xffffffff
je 0x4a93c0
mov eax, dword [ebp - 4]
mov bx, 0xffef
call fcn.004030dc
jmp 0x4a93d8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x378], 0
jne 0x4a93d8
mov eax, dword [ebp - 4]
mov bx, 0xffee
call fcn.004030dc
mov eax, dword [ebp - 4]
call fcn.004c936c
pop ebx
mov esp, ebp
pop ebp
ret