Function at 0x4a0a08
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffb8
mov ebx, eax
lea esi, [ebx + 0x298]
lea edi, [esp + 8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x28]
mov edx, dword [ebx + 0x21c]
mov eax, ebx
call fcn.0049ebcc
lea ecx, [esp + 0x38]
mov edx, dword [ebx + 0x218]
mov eax, ebx
call fcn.0049ebcc
xor edi, edi
mov esi, dword [0x5640bc]
mov eax, dword [ebx + 0x21c]
mov ecx, dword [ebx + 0x218]
sub eax, ecx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [ebx + 0x290]
inc edx
imul edx
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x2c]
jge 0x4a0a98
mov eax, dword [esp + 0x44]
inc eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov edx, eax
inc edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x14], eax
mov edx, ecx
mov eax, ebx
call fcn.0049ef30
jmp 0x4a0ad1
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov al, byte [ebx + 0x318]
cmp al, 1
jne 0x4a0aae
inc dword [esp + 0xc]
mov edx, dword [ebx + 0x32c]
mov edx, dword [edx + 8]
dec edx
cmp ecx, edx
jge 0x4a0ac9
mov eax, ebx
call fcn.0049ec74
mov dword [esp + 0x14], eax
jmp 0x4a0ad1
cmp al, 1
jne 0x4a0ad1
dec dword [esp + 0x14]
mov eax, dword [ebx + 0x1f0]
mov eax, dword [eax + 0x14]
mov edx, dword [ebx + 0x60]
call fcn.00422e78
cmp byte [ebx + 0x318], 1
jne 0x4a0aef
inc dword [esp + 8]
push esi
push edi
lea esi, [esp + 0x10]
lea edi, [esp + 0x20]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, dword [ebx + 0x1f0]
mov edx, dword [eax + 0xc]
mov dword [esp + 4], edx
mov edx, dword [ebx + 0x22c]
call fcn.00423cc4
call sub.kernel32.dll_GetTickCount
mov ebp, eax
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x2c]
jge 0x4a0c3c
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
lea eax, [esp + 0x38]
push eax
call sub.user32.dll_SetRect
jmp 0x4a0bab
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
push esi
push 0
mov eax, ebx
call fcn.00445ca8
push eax
call sub.user32.dll_ScrollWindowEx
mov eax, dword [esp + 0x1c]
add eax, esi
mov dword [esp + 0x24], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004a05cc
add dword [esp + 0x1c], esi
call sub.kernel32.dll_GetTickCount
mov edx, eax
sub edx, ebp
cmp edx, dword [0x5640c4]
jle 0x4a0ba9
mov ebp, eax
add esi, dword [0x5640c0]
add edi, esi
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0xc]
sub eax, dword [esp]
sub eax, esi
cmp edi, eax
jl 0x4a0b4f
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
sub eax, dword [esp]
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004a05cc
cmp byte [ebx + 0x318], 1
jne 0x4a0c26
mov edi, dword [ebx + 0x218]
dec edi
mov esi, dword [ebx + 0x21c]
sub esi, edi
jl 0x4a0c26
inc esi
lea ecx, [esp + 0x18]
mov edx, edi
mov eax, ebx
call fcn.0049ebcc
mov eax, dword [ebx + 0x60]
call fcn.00421e44
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [ebx + 0x1f0]
call fcn.00423e48
push eax
call sub.gdi32.dll_SetPixel
inc edi
dec esi
jne 0x4a0bf1
mov dword [ebx + 0x21c], 0xffffffff
mov eax, ebx
call fcn.0049f45c
jmp 0x4a0d5b
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
lea eax, [esp + 0x38]
push eax
call sub.user32.dll_SetRect
jmp 0x4a0cbe
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], eax
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, esi
neg eax
push eax
push 0
mov eax, ebx
call fcn.00445ca8
push eax
call sub.user32.dll_ScrollWindowEx
mov eax, dword [esp + 0x14]
sub eax, edi
mov dword [esp + 0x24], eax
sub eax, esi
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004a05cc
add edi, esi
call sub.kernel32.dll_GetTickCount
mov edx, eax
sub edx, ebp
cmp edx, dword [0x5640c4]
jle 0x4a0cbe
mov ebp, eax
add esi, dword [0x5640c0]
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0xc]
sub eax, dword [esp]
sub eax, esi
cmp edi, eax
jl 0x4a0c5c
lea ecx, [esp + 0x28]
mov edx, dword [ebx + 0x21c]
mov eax, ebx
call fcn.0049ebcc
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
add eax, dword [esp]
mov dword [esp + 0x24], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004a05cc
cmp byte [ebx + 0x318], 1
jne 0x4a0d4a
mov edi, dword [ebx + 0x21c]
mov esi, dword [ebx + 0x218]
dec esi
sub esi, edi
jl 0x4a0d4a
inc esi
lea ecx, [esp + 0x18]
mov edx, edi
mov eax, ebx
call fcn.0049ebcc
mov eax, dword [ebx + 0x60]
call fcn.00421e44
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [ebx + 0x1f0]
call fcn.00423e48
push eax
call sub.gdi32.dll_SetPixel
inc edi
dec esi
jne 0x4a0d15
mov dword [ebx + 0x21c], 0xffffffff
mov eax, ebx
call fcn.0049f2e8
cmp byte [ebx + 0x318], 1
jne 0x4a0d6b
mov eax, ebx
call fcn.004a067c
mov edx, dword [esp + 4]
mov eax, dword [ebx + 0x1f0]
call fcn.00423cc4
add esp, 0x48
pop ebp
pop edi
pop esi
pop ebx
ret