Function at 0x455dd0
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov ecx, esi
call fcn.0042b4f0
mov ebx, eax
mov dword [esp + 0x1c], ebx
test ebx, ebx
jne 0x455e09
push esi
push eax
push str.Parameter_1_invalid.
mov ecx, edi
call fcn.0044d800
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea eax, [ebx - 1]
cmp eax, 4
ja case.default.0x455e15
jmp dword [eax*4 + 0x4560c8]
mov ecx, dword [ebp + 0xc]
cmp word [ecx], 0
je 0x455e2c
call fcn.0047f130
jmp 0x455e32
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov esi, dword [0x4f99cc]
cmp byte [esi + 0x17], 0
jne 0x455e43
mov esi, dword [esi + 0xc]
mov al, byte [esi + 0x15]
test al, 2
je 0x455e5a
and al, 0x3d
mov byte [esi + 0x15], al
mov eax, dword [esi]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov al, byte [esi + 0x15]
and al, 0x9b
or al, 0x18
mov byte [esi + 0x15], al
mov dword [esi + 4], 0
mov dword [esi], edi
jge 0x45609e
mov ecx, esi
call fcn.00401460
and byte [esi + 0x15], 0x8f
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0xc]
call fcn.0047f130
mov edi, eax
test edi, edi
je case.0x455f44.67
push edi
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je case.0x455f44.67
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x4f99cc]
cmp byte [esi + 0x17], 0
jne 0x455ecc
mov esi, dword [esi + 0xc]
mov cl, byte [esi + 0x15]
test cl, 2
je 0x455ee5
mov eax, dword [esi]
and cl, 0x3d
mov byte [esi + 0x15], cl
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov cl, byte [esi + 0x15]
xor eax, eax
test ebx, ebx
cmovne eax, edi
and cl, 0x9b
mov dword [esi], eax
or cl, 0x18
mov dword [esi + 4], 0
mov byte [esi + 0x15], cl
jmp 0x455e6a
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4cdd08
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebp + 0x10]
movzx eax, word [eax]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towupper]
movzx eax, ax
add esp, 4
add eax, 0xffffffbf
cmp eax, 0x11
ja case.0x455f44.67
movzx eax, byte [eax + 0x4560f8]
jmp dword [eax*4 + 0x4560dc]
mov esi, 0x40
jmp 0x455f73
mov esi, 0x4000
jmp 0x455f73
mov esi, 0x20
jmp 0x455f73
mov esi, 0x8000
jmp 0x455f73
mov esi, 0x80
jmp 0x455f73
mov esi, 0x100
mov ecx, dword [ebp + 0xc]
cmp word [ecx], 0
je 0x455f83
call fcn.0047f130
jmp 0x455f89
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
test edi, edi
je case.0x455f44.67
push edi
push 0
push 0x200
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je case.0x455f44.67
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x4f99cc]
cmp byte [esi + 0x17], 0
jne 0x455fcd
mov esi, dword [esi + 0xc]
mov cl, byte [esi + 0x15]
test cl, 2
je 0x455fe6
mov eax, dword [esi]
and cl, 0x3d
mov byte [esi + 0x15], cl
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov cl, byte [esi + 0x15]
xor eax, eax
cmp dword [esp + 0x18], eax
jmp 0x455ee9
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 0
je 0x45601c
mov byte [esp + 0x13], 0
call fcn.00429a50
mulsd xmm0, qword [0x4f1050]
cvttsd2si edi, xmm0
mov dword [esp + 0x14], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x45602d
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x13], 1
mov dword [esp + 0x14], 0
mov esi, dword fs:[0x24]
mov dword [esp + 0x18], eax
mov ecx, dword [ebp + 0xc]
call fcn.0047f130
mov edi, eax
cmp ebx, 4
jne 0x456051
test edi, edi
jne 0x455e34
jmp 0x456059
test edi, edi
je case.0x455f44.67
cmp byte [esp + 0x13], 0
jne 0x45607d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
sub ecx, eax
cmp ecx, 5
jle 0x455e34
cmp dword [0x4fb2ec], esi
jne 0x456094
mov edx, 1
lea ecx, [edx + 0x63]
call fcn.00401830
jmp 0x456038
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x456038
cmp dword [0x4f99f4], 0
je 0x4560ae
mov ecx, esi
call fcn.00401460
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc