Function at 0x4ac85c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffb8
mov ebx, eax
lea esi, [ebx + 0x298]
lea edi, [esp + 8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x28]
mov edx, dword [ebx + 0x21c]
mov eax, ebx
call fcn.004aaa20
lea ecx, [esp + 0x38]
mov edx, dword [ebx + 0x218]
mov eax, ebx
call fcn.004aaa20
xor edi, edi
mov esi, dword [0x575150]
mov eax, dword [ebx + 0x21c]
mov ecx, dword [ebx + 0x218]
sub eax, ecx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [ebx + 0x290]
inc edx
imul edx
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x2c]
jge 0x4ac8ec
mov eax, dword [esp + 0x44]
inc eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov edx, eax
inc edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x14], eax
mov edx, ecx
mov eax, ebx
call fcn.004aad84
jmp 0x4ac925
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov al, byte [ebx + 0x318]
cmp al, 1
jne 0x4ac902
inc dword [esp + 0xc]
mov edx, dword [ebx + 0x32c]
mov edx, dword [edx + 8]
dec edx
cmp ecx, edx
jge 0x4ac91d
mov eax, ebx
call fcn.004aaac8
mov dword [esp + 0x14], eax
jmp 0x4ac925
cmp al, 1
jne 0x4ac925
dec dword [esp + 0x14]
mov eax, dword [ebx + 0x1f0]
mov eax, dword [eax + 0x14]
mov edx, dword [ebx + 0x60]
call fcn.00422e78
cmp byte [ebx + 0x318], 1
jne 0x4ac943
inc dword [esp + 8]
push esi
push edi
lea esi, [esp + 0x10]
lea edi, [esp + 0x20]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, dword [ebx + 0x1f0]
mov edx, dword [eax + 0xc]
mov dword [esp + 4], edx
mov edx, dword [ebx + 0x22c]
call fcn.00423cc4
call sub.kernel32.dll_GetTickCount
mov ebp, eax
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x2c]
jge 0x4aca90
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
lea eax, [esp + 0x38]
push eax
call sub.user32.dll_SetRect
jmp 0x4ac9ff
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
push esi
push 0
mov eax, ebx
call fcn.00446828
push eax
call sub.user32.dll_ScrollWindowEx
mov eax, dword [esp + 0x1c]
add eax, esi
mov dword [esp + 0x24], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004ac420
add dword [esp + 0x1c], esi
call sub.kernel32.dll_GetTickCount
mov edx, eax
sub edx, ebp
cmp edx, dword [0x575158]
jle 0x4ac9fd
mov ebp, eax
add esi, dword [0x575154]
add edi, esi
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0xc]
sub eax, dword [esp]
sub eax, esi
cmp edi, eax
jl 0x4ac9a3
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
sub eax, dword [esp]
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004ac420
cmp byte [ebx + 0x318], 1
jne 0x4aca7a
mov edi, dword [ebx + 0x218]
dec edi
mov esi, dword [ebx + 0x21c]
sub esi, edi
jl 0x4aca7a
inc esi
lea ecx, [esp + 0x18]
mov edx, edi
mov eax, ebx
call fcn.004aaa20
mov eax, dword [ebx + 0x60]
call fcn.00421e44
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [ebx + 0x1f0]
call fcn.00423e48
push eax
call sub.gdi32.dll_SetPixel
inc edi
dec esi
jne 0x4aca45
mov dword [ebx + 0x21c], 0xffffffff
mov eax, ebx
call fcn.004ab2b0
jmp 0x4acbaf
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push eax
lea eax, [esp + 0x38]
push eax
call sub.user32.dll_SetRect
jmp 0x4acb12
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], eax
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, esi
neg eax
push eax
push 0
mov eax, ebx
call fcn.00446828
push eax
call sub.user32.dll_ScrollWindowEx
mov eax, dword [esp + 0x14]
sub eax, edi
mov dword [esp + 0x24], eax
sub eax, esi
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004ac420
add edi, esi
call sub.kernel32.dll_GetTickCount
mov edx, eax
sub edx, ebp
cmp edx, dword [0x575158]
jle 0x4acb12
mov ebp, eax
add esi, dword [0x575154]
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0xc]
sub eax, dword [esp]
sub eax, esi
cmp edi, eax
jl 0x4acab0
lea ecx, [esp + 0x28]
mov edx, dword [ebx + 0x21c]
mov eax, ebx
call fcn.004aaa20
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
add eax, dword [esp]
mov dword [esp + 0x24], eax
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.004ac420
cmp byte [ebx + 0x318], 1
jne 0x4acb9e
mov edi, dword [ebx + 0x21c]
mov esi, dword [ebx + 0x218]
dec esi
sub esi, edi
jl 0x4acb9e
inc esi
lea ecx, [esp + 0x18]
mov edx, edi
mov eax, ebx
call fcn.004aaa20
mov eax, dword [ebx + 0x60]
call fcn.00421e44
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [ebx + 0x1f0]
call fcn.00423e48
push eax
call sub.gdi32.dll_SetPixel
inc edi
dec esi
jne 0x4acb69
mov dword [ebx + 0x21c], 0xffffffff
mov eax, ebx
call fcn.004ab13c
cmp byte [ebx + 0x318], 1
jne 0x4acbbf
mov eax, ebx
call fcn.004ac4d0
mov edx, dword [esp + 4]
mov eax, dword [ebx + 0x1f0]
call fcn.00423cc4
add esp, 0x48
pop ebp
pop edi
pop esi
pop ebx
ret