Function at 0x140057930
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x38
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov rbp, rcx
test rdx, rdx
je 0x140057bfd
cmp word [rdx], 0
je 0x140057bfd
lea rdx, str.Exist
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140057987
cmp word [rdi], ax
je 0x14005797d
mov rcx, rdi
call fcn.140087060
mov edx, eax
jmp 0x1400579e4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
jmp 0x1400579e4
lea rdx, str.Close
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140057a29
mov rcx, rdi
call fcn.140087060
mov edi, eax
test eax, eax
je case.0x140057a68.67
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x140057a68.67
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
test ebx, ebx
cmovne esi, edi
mov edx, esi
mov rcx, qword [0x1401156c0]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001430
mov eax, 1
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rcx, qword [0x1401156c0]
lea rdx, [0x1400e0704]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400c4200
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea rdx, str.Priority
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140057ade
movzx ecx, word [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towupper]
movzx eax, ax
add eax, 0xffffffbf
cmp eax, 0x11
ja case.0x140057a68.67
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x57c1c]
add rcx, rdx
jmp rcx
mov ebx, 0x40
jmp 0x140057a92
mov ebx, 0x4000
jmp 0x140057a92
mov ebx, SafeArrayAllocDescriptor
jmp 0x140057a92
mov ebx, 0x8000
jmp 0x140057a92
mov ebx, 0x80
jmp 0x140057a92
mov ebx, 0x100
cmp word [rdi], 0
je 0x140057aa2
mov rcx, rdi
call fcn.140087060
jmp 0x140057aa8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
test eax, eax
je case.0x140057a68.67
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x140057a68.67
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x1400579d0
lea rdx, str.Wait
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140057af7
lea ebp, [rax + 4]
jmp 0x140057b12
lea rdx, str.WaitClose
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140057bfd
lea ebp, [rax + 5]
cmp word [rsi], 0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x30], r15
je 0x140057b49
mov rcx, rsi
xor r14b, r14b
call fcn.140028e90
mulsd xmm0, qword [0x140103318]
cvttsd2si esi, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
jmp 0x140057b53
mov r12d, dword [rsp + 0x68]
mov r14b, 1
xor esi, esi
mov r15d, dword gs:[0x48]
nop dword [rax]
mov rcx, rdi
call fcn.140087060
mov ebx, eax
cmp ebp, 4
jne 0x140057ba2
test eax, eax
je 0x140057ba6
mov rcx, qword [0x1401156c0]
mov rdx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001430
mov eax, 1
mov r14, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
ret
test eax, eax
je 0x140057bdc
test r14b, r14b
jne 0x140057bbc
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [r12 + rsi]
sub ecx, eax
cmp ecx, 5
jle 0x140057b73
cmp dword [0x140117b88], r15d
mov ecx, 0x64
jne 0x140057bd4
lea edx, [rcx - 0x63]
call fcn.140001880
jmp 0x140057b60
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140057b60
mov rcx, qword [0x1401156c0]
lea rdx, [0x1400e0704]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400c4200
jmp 0x140057b8a
mov r9, rbx
lea rdx, str.Parameter_1_invalid.
xor r8d, r8d
mov rcx, rbp
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.14004d7f0