Function at 0x4d709a
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 8
mov eax, 0x5d5ae4
call fcn.005234b0
mov esi, ecx
mov eax, dword [esi + 0x21c]
mov ecx, dword [eax + 0x158]
cmp ecx, 7
jne 0x4d710c
mov edi, dword [eax + 0x2f0]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 8]
add edi, ecx
cmp eax, edi
jb 0x4d72f5
mov eax, dword [esi + 0x2c0]
xor ebx, ebx
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x2c8]
push ebx
mov dword [ebp - 0x14], eax
push 8
lea eax, [ebp - 0x14]
push eax
push 0x65
mov ecx, esi
call fcn.004d088b
mov eax, dword [esi + 0x2c0]
mov dword [esi + 0x2c4], eax
jmp 0x4d72f5
cmp dword [eax + 0x15c], 7
jne 0x4d7229
mov ecx, dword [esi + 0x2c4]
mov edx, dword [esi + 0x2c0]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
cmp ecx, edx
je 0x4d717d
mov eax, dword [eax + 0x24c]
mov dword [ebp - 0x10], eax
call edi
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
add edx, ecx
cmp eax, edx
jb 0x4d717d
mov eax, dword [esi + 0x2c0]
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x2c8]
push ebx
mov dword [ebp - 0x14], eax
push 8
lea eax, [ebp - 0x14]
push eax
push 0x65
mov ecx, esi
call fcn.004d088b
mov eax, dword [esi + 0x2c0]
mov dword [esi + 0x2c4], eax
jmp 0x4d71fa
mov eax, dword [esi + 0x21c]
cmp dword [eax + 0x158], 3
je 0x4d71fa
mov eax, dword [eax + 0x24c]
mov dword [ebp + 8], eax
call edi
mov ecx, dword [ebp + 8]
add ecx, 0x7530
cmp eax, ecx
jb 0x4d71fa
mov eax, dword [esi + 0x21c]
cmp dword [eax + 0x158], 9
je 0x4d71fa
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x1b
mov ecx, esi
call fcn.004d088b
test eax, eax
je 0x4d71fa
push dword [esi + 0x21c]
push dword [esi + 0x2c]
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 8], esp
push ebx
push str.CT.DoKeepAlive.Timeout.BeepFailed2
call fcn.004ac9bc
mov dword [ebp - 4], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [esi + 0x238], bl
mov eax, dword [esi + 0x21c]
mov eax, dword [eax + 0x2f0]
mov dword [ebp + 8], eax
call edi
mov ecx, dword [ebp + 8]
add ecx, 0x88b8
cmp eax, ecx
jb 0x4d72f5
push ebx
mov ecx, esi
call fcn.004fac7b
jmp 0x4d72f5
mov ecx, dword [eax + 0x15c]
cmp ecx, 4
je 0x4d724c
cmp ecx, 5
je 0x4d724c
cmp ecx, 6
je 0x4d724c
cmp ecx, 1
je 0x4d724c
cmp ecx, 2
jne 0x4d72f5
mov ecx, esi
call fcn.004d68ec
test al, al
jne 0x4d72f5
mov eax, dword [esi + 0x21c]
cmp dword [eax + 0x158], 9
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x4d7281
mov edi, dword [eax + 0x24c]
call ebx
mov ecx, dword [ebp + 8]
add edi, ecx
cmp eax, edi
jae 0x4d72a8
mov eax, dword [esi + 0x21c]
cmp dword [eax + 0x15c], 4
jne 0x4d72f5
mov edi, dword [eax + 0x24c]
call ebx
mov ecx, eax
mov eax, dword [ebp + 8]
cdq
sub eax, edx
sar eax, 1
add eax, edi
cmp ecx, eax
jb 0x4d72f5
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x1b
mov ecx, esi
call fcn.004d088b
test eax, eax
je 0x4d72f5
push dword [esi + 0x21c]
push dword [esi + 0x2c]
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 8], esp
push ebx
push 0x678a00
call fcn.004ac9bc
mov dword [ebp - 4], 1
or dword [ebp - 4], 0xffffffff
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [esi + 0x238], bl
call fcn.00523588
ret 4