Function at 0x4513e0
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
mov esi, edx
mov edi, ecx
call fcn.00428840
mov ebx, eax
test ebx, ebx
jne 0x451413
mov ecx, dword [ebp + 8]
push esi
push eax
push str.Parameter_1_invalid.
call fcn.00449ae0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx - 1]
cmp eax, 4
ja case.default.0x45141f
jmp dword [eax*4 + 0x451644]
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x45143a
push eax
call fcn.00473a60
add esp, 4
jmp 0x451440
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0x18
push 0
push eax
mov eax, dword [0x4e86f0]
call fcn.004010e0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
push eax
call fcn.00473a60
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4514b8
push ebx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x4514b8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
neg esi
sbb esi, esi
and esi, ebx
mov eax, dword [0x4e86f0]
push 0x18
push 0
push esi
call fcn.004010e0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x4e86f0]
push 1
push 0
push 0xffffffffffffffff
push 0x4bbb9c
push ecx
call fcn.004a2810
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
movzx edx, word [edi]
push edx
call dword [sym.imp.MSVCR100.dll_towupper]
movzx eax, ax
add eax, 0xffffffbf
add esp, 4
cmp eax, 0x11
ja case.0x4514f7.67
movzx eax, byte [eax + 0x451674]
jmp dword [eax*4 + 0x451658]
mov esi, 0x40
jmp 0x451526
mov esi, 0x4000
jmp 0x451526
mov esi, 0x20
jmp 0x451526
mov esi, 0x8000
jmp 0x451526
mov esi, 0x80
jmp 0x451526
mov esi, 0x100
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x45153a
push eax
call fcn.00473a60
add esp, 4
jmp 0x451540
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
test ebx, ebx
je 0x4514b8
push ebx
push 0
push 0x200
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x4514b8
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x45148c
mov edx, dword [0x4e86f0]
push 1
push 0
push 0xffffffffffffffff
push 0x4bbb9c
push edx
call fcn.004a2810
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp word [edi], 0
je 0x4515ba
mov esi, edi
mov byte [esp + 0xf], 0
call fcn.00426960
fmul qword [0x4de800]
call fcn.004b9c20
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x10], eax
jmp 0x4515c1
mov byte [esp + 0xf], 1
xor edi, edi
mov eax, dword fs:[0x24]
mov dword [esp + 0x14], eax
jmp 0x4515d0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00473a60
add esp, 4
mov esi, eax
cmp ebx, 4
jne 0x4515ed
test esi, esi
jne 0x45149b
jmp 0x4515f5
test esi, esi
je 0x4514b8
cmp byte [esp + 0xf], 0
jne 0x451613
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [esp + 0x10]
add edx, edi
sub edx, eax
cmp edx, 5
jle 0x45149b
mov eax, dword [esp + 0x14]
cmp dword [0x4ea158], eax
jne 0x45162d
push 1
push 0x64
call fcn.00401510
add esp, 8
jmp 0x4515d0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4515d0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8