Function at 0x43ad90
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
mov esi, edx
mov edi, ecx
call fcn.00434e10
mov ebx, eax
test ebx, ebx
jne 0x43adc3
mov ecx, dword [ebp + 8]
push esi
push eax
push str.Parameter_1_invalid.
call fcn.00432e00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx - 1]
cmp eax, 4
ja case.default.0x43adcf
jmp dword [eax*4 + 0x43b004]
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x43ade9
push eax
call fcn.0045ad20
add esp, 4
jmp 0x43adef
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0x18
push 0
push eax
mov eax, dword [0x4bbf74]
call fcn.004010d0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045ad20
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x43ae67
push ebx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x43ae67
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
neg esi
sbb esi, esi
and esi, ebx
mov eax, dword [0x4bbf74]
push 0x18
push 0
push esi
call fcn.004010d0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x4bbf74]
push 1
push 0
push 0xffffffffffffffff
push 0x4a6904
push ecx
call fcn.00481890
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
movsx edx, byte [edi]
push edx
call fcn.00494806
add eax, 0xffffffbf
add esp, 4
cmp eax, 0x11
ja case.0x43aea2.67
movzx eax, byte [eax + 0x43b034]
jmp dword [eax*4 + 0x43b018]
mov esi, 0x40
jmp 0x43aed1
mov esi, 0x4000
jmp 0x43aed1
mov esi, 0x20
jmp 0x43aed1
mov esi, 0x8000
jmp 0x43aed1
mov esi, 0x80
jmp 0x43aed1
mov esi, pe_nt_image_headers32
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x43aee4
push eax
call fcn.0045ad20
add esp, 4
jmp 0x43aeea
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
test ebx, ebx
je 0x43ae67
push ebx
push 0
push 0x200
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x43ae67
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x43ae3b
mov edx, dword [0x4bbf74]
push 1
push 0
push 0xffffffffffffffff
push 0x4a6904
push edx
call fcn.00481890
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp byte [edi], 0
je 0x43af63
mov esi, edi
mov byte [esp + 0xf], 0
call fcn.00416fd0
fmul qword [0x4b0c68]
call fcn.004a11b0
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x10], eax
jmp 0x43af6a
mov byte [esp + 0xf], 1
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045ad20
add esp, 4
mov esi, eax
cmp ebx, 4
jne 0x43af91
test esi, esi
jne 0x43ae4a
jmp 0x43af95
test esi, esi
je 0x43afd7
cmp byte [esp + 0xf], 0
jne 0x43afb3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x10]
add ecx, edi
sub ecx, eax
cmp ecx, 5
jle 0x43ae4a
mov edx, dword [esp + 0x14]
cmp dword [0x4bd780], edx
jne 0x43afcd
push 1
push 0x64
call fcn.00401280
add esp, 8
jmp 0x43af74
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x43af74
mov eax, dword [0x4bbf74]
push 1
push 0
push 0xffffffffffffffff
push 0x4a6904
push eax
call fcn.00481890
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8