Function at 0x42c7d0
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
sub esp, 8
push esi
push edi
mov edi, dword [esp + 0x14]
push edi
mov esi, ecx
call fcn.0040f510
add esp, 4
test eax, eax
mov dword [esp + 0x14], eax
jne 0x42c802
push edi
push eax
push str.Parameter_1_is_not_a_valid_Process_command.__The_current_thread_will_exit.
mov ecx, esi
call fcn.0041e370
pop edi
pop esi
add esp, 8
ret 0xc
dec eax
cmp eax, 4
push ebx
ja case.default.0x42c80d
jmp dword [eax*4 + 0x42ca90]
mov al, byte [0x45f112]
test al, al
je 0x42c83f
mov eax, dword [esp + 0x1c]
push eax
call fcn.00440ba0
mov ecx, dword [0x45de54]
add esp, 4
push eax
call fcn.0043fab0
pop ebx
pop edi
pop esi
add esp, 8
ret 0xc
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00440970
mov ecx, dword [0x45de54]
add esp, 4
push eax
call fcn.0043fab0
pop ebx
pop edi
pop esi
add esp, 8
ret 0xc
mov al, byte [0x45f112]
test al, al
je 0x42c876
mov edx, dword [esp + 0x1c]
push edx
call fcn.00440ba0
jmp 0x42c880
mov eax, dword [esp + 0x1c]
push eax
call fcn.00440970
mov ebx, eax
add esp, 4
test ebx, ebx
je case.0x42c8f5.67
push ebx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.DLL_OpenProcess]
mov edi, eax
test edi, edi
je case.0x42c8f5.67
push 0
push edi
call dword [sym.imp.KERNEL32.DLL_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ecx, dword [0x45de54]
neg esi
sbb esi, esi
and esi, ebx
push esi
call fcn.0043fab0
pop ebx
pop edi
pop esi
add esp, 8
ret 0xc
mov ecx, dword [esp + 0x20]
movsx edx, byte [ecx]
push edx
call fcn.00443ce6
add eax, 0xffffffbf
add esp, 4
cmp eax, 0x11
ja case.0x42c8f5.67
movzx eax, byte [eax + 0x42cac0]
jmp dword [eax*4 + 0x42caa4]
mov esi, 0x40
jmp 0x42c924
mov esi, 0x4000
jmp 0x42c924
mov esi, 0x20
jmp 0x42c924
mov esi, 0x8000
jmp 0x42c924
mov esi, 0x80
jmp 0x42c924
mov esi, 0x100
mov eax, dword [esp + 0x1c]
cmp byte [eax], 0
je 0x42c938
push eax
call fcn.00426f80
add esp, 4
jmp 0x42c93e
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
mov ebx, eax
test ebx, ebx
je case.0x42c8f5.67
push ebx
push 0
push 0x200
call dword [sym.imp.KERNEL32.DLL_OpenProcess]
mov edi, eax
test edi, edi
je case.0x42c8f5.67
mov al, byte [0x45f117]
test al, al
jne 0x42c97e
cmp esi, 0x4000
je 0x42c979
cmp esi, 0x8000
jne 0x42c97e
mov esi, 0x20
push esi
push edi
call dword [sym.imp.KERNEL32.DLL_SetPriorityClass]
jmp 0x42c8ae
mov esi, dword [esp + 0x20]
cmp byte [esi], 0
push ebp
je 0x42c9e2
push esi
mov byte [esp + 0x28], 0
call fcn.00407b50
add esp, 4
test al, al
je 0x42c9c2
push 0x10
push 0
push esi
call fcn.00444f6b
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
fild qword [esp + 0x1c]
add esp, 0xc
jmp 0x42c9cb
push esi
call fcn.00444c99
add esp, 4
fmul qword [0x452eb0]
call fcn.004452f4
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ebp, eax
jmp 0x42c9ed
mov ebp, dword [esp + 0x20]
mov byte [esp + 0x24], 1
xor edi, edi
mov ebx, dword [esp + 0x20]
mov al, byte [0x45f112]
test al, al
push ebx
je 0x42ca02
call fcn.00440ba0
jmp 0x42ca07
call fcn.00440970
mov esi, eax
mov eax, dword [esp + 0x20]
add esp, 4
cmp eax, 4
jne 0x42ca2f
test esi, esi
je 0x42ca33
mov ecx, dword [0x45de54]
push esi
call fcn.0043fab0
pop ebp
pop ebx
pop edi
pop esi
add esp, 8
ret 0xc
test esi, esi
je 0x42ca59
mov al, byte [esp + 0x24]
test al, al
jne 0x42ca4b
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea ecx, [edi + ebp]
sub ecx, eax
cmp ecx, 5
jle 0x42ca19
push 0
push 0x64
call fcn.00401650
add esp, 8
jmp 0x42c9f1
pop ebp
pop ebx
pop edi
pop esi
add esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x44f664
mov ecx, dword [0x45de54]
jmp fcn.0043e8a0
pop ebx
pop edi
xor eax, eax
pop esi
add esp, 8
ret 0xc