Function at 0x432770
Capabilities:
Check for time delay via gettickcount
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, ecx
cmp byte [esi], 0
je 0x432a61
mov al, byte [ebp + 8]
push ebx
mov byte [esi + 2], al
mov eax, dword [esi + 0x248]
xor ebx, ebx
mov byte [esi + 1], 1
cmp eax, ebx
je 0x4327a0
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 8], eax
jmp 0x4327b2
xor ebx, ebx
cmp dword [esi + 0x214], ebx
mov dword [ebp - 4], ebx
mov dword [ebp + 8], ebx
jle 0x43290d
xor edi, edi
jmp 0x4327d0
mov ecx, dword [esi + 0x220]
mov eax, dword [ecx + edi + 8]
add ecx, edi
test eax, eax
je 0x432843
mov ecx, dword [ecx + 0x54]
test ecx, ecx
jne 0x432800
push 0x64
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [esi + 0x220]
mov dword [edx + edi + 0x54], 0x100
jmp 0x432843
cmp ecx, 0xff
jne 0x432813
cmp byte [esi + 2], 0
je 0x432813
inc dword [ebp + 8]
jmp 0x432843
cmp ecx, 0x100
je 0x432843
push 5
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x432838
mov eax, dword [esi + 0x220]
mov dword [eax + edi + 0x54], 0x100
jmp 0x432843
mov eax, 1
add dword [ebp + 8], eax
add dword [ebp - 4], eax
inc ebx
add edi, 0x174
cmp ebx, dword [esi + 0x214]
jl 0x4327d0
cmp dword [ebp - 4], 0
jle 0x432870
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 8]
cmp eax, 0xfa
jb 0x4327b0
cmp dword [ebp + 8], 0
jle 0x43290b
xor ebx, ebx
cmp dword [esi + 0x214], ebx
jle 0x43290b
xor edi, edi
lea ebx, [ebx]
mov ecx, dword [esi + 0x220]
mov eax, dword [ecx + edi + 8]
add ecx, edi
test eax, eax
je 0x4328dd
cmp dword [ecx + 0x54], 0x100
je 0x4328dd
cmp byte [esi + 2], 0
jne 0x4328bc
push 1
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4328dd
mov edx, dword [esi + 0x220]
mov eax, dword [edx + edi + 8]
push 0x64
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ecx, dword [esi + 0x220]
mov dword [ecx + edi + 0x54], 0x100
mov edx, dword [esi + 0x220]
mov eax, dword [edx + edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esi + 0x220]
mov dword [ecx + edi + 8], 0
inc ebx
add edi, 0x174
cmp ebx, dword [esi + 0x214]
jl 0x432890
xor ebx, ebx
cmp dword [esi + 0x214], ebx
mov dword [ebp + 8], ebx
jle 0x432a19
lea esp, [esp]
mov edx, dword [esi + 0x220]
mov eax, dword [edx + ebx + 4]
lea edi, [edx + ebx]
test eax, eax
je 0x43296c
cmp eax, 0xffffffff
je 0x43296c
test eax, eax
je 0x43296c
cmp eax, 0xffffffff
je 0x43296c
push eax
mov dword [edi + 0x54], 0x64
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [edi + 4]
push eax
mov dword [edi + 0x54], 0xc8
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 4], 0
mov dword [edi + 0x54], 0xc9
mov ecx, dword [esi + 0x220]
mov dword [ecx + ebx + 4], 0
mov edx, dword [esi + 0x220]
mov eax, dword [edx + ebx + 0x38]
test eax, eax
je 0x43299d
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x220]
mov dword [eax + ebx + 0x38], 0
mov ecx, dword [esi + 0x220]
mov eax, dword [ecx + ebx + 0x160]
test eax, eax
je 0x4329c8
push eax
call fcn.00441300
mov edx, dword [esi + 0x220]
add esp, 4
mov dword [edx + ebx + 0x160], 0
mov eax, dword [esi + 0x220]
mov eax, dword [eax + ebx + 0x16c]
test eax, eax
je 0x4329fe
mov ecx, dword [esi + 0x23c]
test ecx, ecx
je 0x4329fe
mov edx, dword [esi + 0x244]
push edx
push eax
call ecx
mov eax, dword [esi + 0x220]
mov dword [eax + ebx + 0x16c], 0
mov eax, dword [ebp + 8]
inc eax
add ebx, 0x174
cmp eax, dword [esi + 0x214]
mov dword [ebp + 8], eax
jl 0x432920
xor ebx, ebx
mov eax, dword [esi + 0x24c]
pop edi
cmp eax, ebx
je 0x432a31
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x24c], ebx
mov eax, dword [esi + 0x248]
cmp eax, ebx
je 0x432a48
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x248], ebx
mov ecx, dword [esi + 0x220]
push ecx
call fcn.00441300
add esp, 4
mov dword [esi + 0x220], ebx
mov byte [esi], 0
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 4