Function at 0x444660
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x8088
call fcn.004bd970
push ebx
push ebp
push esi
push edi
mov ebp, ecx
cmp byte [ebp], 0x3e
mov dword [esp + 0x28], ebp
jne 0x44470b
mov ecx, dword [0x4eb088]
mov edx, str.UseErrorLevel
call fcn.004a1da0
test eax, eax
mov ecx, 0x4eb990
mov al, 3
setne bl
cmp al, byte [ebp + 1]
mov byte [esp + 0x14], bl
sbb eax, eax
and eax, dword [0x4eb034]
push eax
push 1
push dword [esp + 0x1c]
lea eax, [esp + 0x24]
push eax
push dword [0x4eb088]
mov al, bl
xor al, 1
movzx eax, al
push eax
push dword [0x4eb084]
push 0
push dword [0x4eb080]
call fcn.0043f870
test eax, eax
jne 0x44470b
test bl, bl
je 0x444701
mov ecx, dword [0x4e97f8]
push 1
push eax
push 0xffffffffffffffff
push str.ERROR
call fcn.004a5f40
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp]
cmp al, 0x5d
jne 0x444840
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
mov ecx, dword [0x4eb080]
xor edx, edx
push 0
call fcn.00416200
add esp, 0xc
mov byte [esp + 0x10], al
test al, al
jne 0x444780
mov ecx, dword [0x4eb080]
lea edx, [esp + 0x2c]
push 0
call fcn.0046ba90
mov ecx, eax
add esp, 4
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x444762
cmp ecx, 0xc
jl 0x444762
cmp ecx, 0x2b
jle 0x444788
mov ecx, dword [0x4e97f8]
push 1
push 0
push 0xffffffffffffffff
push 0x4d4eac
call fcn.004a5f40
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov edi, dword [0x4eb084]
mov byte [esp + 0x11], 0
mov dword [esp + 0x24], 1
mov byte [esp + 0x12], 1
movzx eax, word [edi]
mov dword [esp + 0x1c], 0
test ax, ax
je 0x444825
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, eax
nop dword [eax + eax]
movzx esi, cx
test esi, 0xffffff80
jne 0x4447da
push 2
push esi
call ebx
add esp, 8
test eax, eax
je 0x4447da
and esi, 0xffffffdf
cmp esi, 0x44
je 0x444812
cmp esi, 0x4c
je 0x444808
cmp esi, 0x54
jne 0x444817
lea ecx, [edi + 2]
mov byte [esp + 0x12], 0
call fcn.00421920
mulsd xmm0, qword [0x4e1398]
cvttsd2si edx, xmm0
mov dword [esp + 0x1c], edx
jmp 0x444817
mov dword [esp + 0x24], 0
jmp 0x444817
mov byte [esp + 0x11], 1
movzx eax, word [edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x4447c0
lea eax, [esp + 0x90]
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], eax
jmp 0x44488f
cmp al, 0x3e
je 0x444862
mov edx, dword [0x4eb080]
mov ecx, dword [0x4eb088]
cmp al, 0x5c
je 0x444901
cmp word [ecx], 0
jne 0x44490b
mov al, byte [esp + 0x10]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov al, byte [esp + 0x10]
mov byte [esp + 0x11], al
mov eax, dword [esp + 0x20]
mov byte [esp + 0x12], 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], eax
mov al, byte [ebp]
cmp al, 0x3e
je 0x4448af
mov ecx, dword [0x4e97f8]
push 1
push 0
push 0xffffffffffffffff
push 0x4bfc14
call fcn.004a5f40
mov al, byte [ebp]
cmp al, 0x5c
jne 0x4448c6
push 1
mov ecx, ebp
call fcn.00430380
mov byte [esp + 0x13], 1
cmp eax, 1
je 0x4448cb
mov byte [esp + 0x13], 0
xor edi, edi
lea ebx, [esp + 0x90]
cmp byte [ebp + 1], 0
mov ecx, 0x4001
jbe 0x4449be
mov ebp, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
nop dword [eax]
test ecx, ecx
jne 0x444960
mov dword [esp + edi*4 + 0x30], 0x4bfb90
jmp 0x4449a9
cmp word [edx], 0
je 0x444862
cmp al, 0x5c
mov byte [esp + 0x12], 0
cmove ecx, edx
call fcn.00421920
mulsd xmm0, qword [0x4e1398]
mov dl, byte [esp + 0x10]
mov byte [esp + 0x10], dl
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
cmp ecx, 1
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x14], ecx
mov cl, byte [esp + 0x10]
mov byte [esp + 0x11], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ecx
jge 0x44488f
mov dword [esp + 0x1c], 0x1f4
jmp 0x44488f
lea esi, [ecx - 1]
mov dword [esp + edi*4 + 0x30], ebx
push esi
push dword [edi*4 + 0x4eb080]
push ebx
call ebp
mov ecx, ebx
add esp, 0xc
xor eax, eax
mov word [ebx + esi*2], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x444980
sub ecx, edx
sar ecx, 1
lea ebx, [ebx + ecx*2]
add ebx, 2
lea ecx, [esp + 0x90]
mov eax, ebx
sub eax, ecx
mov ecx, 0x4001
sar eax, 1
sub ecx, eax
mov eax, dword [esp + 0x28]
inc edi
movzx eax, byte [eax + 1]
cmp edi, eax
jl 0x4448f0
mov ebp, dword [esp + 0x28]
mov eax, dword fs:[0x24]
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
mov edi, dword [0x4e7024]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
movzx eax, byte [ebp]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x4449f9.63
movzx eax, byte [eax + 0x444e5c]
jmp dword [eax*4 + 0x444e3c]
mov al, byte [ebp + 1]
cmp al, 4
ja 0x444a10
mov ecx, 0x4bfb90
cmp al, 3
jbe 0x444a1c
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x444a4d
mov ecx, 0x4bfb90
mov esi, ecx
cmp al, 1
jbe 0x444a31
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x444a4d
mov edx, 0x4bfb90
mov ecx, edx
mov esi, edx
test al, al
je 0x444a44
mov eax, dword [esp + 0x30]
jmp 0x444a4d
mov eax, 0x4bfb90
mov ecx, eax
mov esi, eax
push 0
push 0
push 1
push 0
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a73b0
add esp, 0x1c
test eax, eax
je case.0x4449f9.63
mov eax, dword [0x4e7024]
cmp dword [eax + 0x54], 0xffffffff
jle 0x444e2d
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x4eb104], eax
je 0x444d97
mov eax, dword [0x4e7024]
push dword [eax + 0x54]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp + 1]
cmp al, 4
ja 0x444ab8
mov ecx, 0x4bfb90
cmp al, 3
jbe 0x444ac4
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x444af5
mov ecx, 0x4bfb90
mov esi, ecx
cmp al, 1
jbe 0x444ad9
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x444af5
mov edx, 0x4bfb90
mov ecx, edx
mov esi, edx
test al, al
je 0x444aec
mov eax, dword [esp + 0x30]
jmp 0x444af5
mov eax, 0x4bfb90
mov ecx, eax
mov esi, eax
push 0
push 0
push 0
push 0
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a73b0
add esp, 0x1c
test eax, eax
je 0x444a6c
jmp case.0x4449f9.63
mov al, byte [ebp + 1]
cmp al, 4
ja 0x444b29
mov ecx, 0x4bfb90
cmp al, 3
jbe 0x444b35
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x444b66
mov ecx, 0x4bfb90
mov esi, ecx
cmp al, 1
jbe 0x444b4a
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x444b66
mov edx, 0x4bfb90
mov ecx, edx
mov esi, edx
test al, al
je 0x444b5d
mov eax, dword [esp + 0x30]
jmp 0x444b66
mov eax, 0x4bfb90
mov ecx, eax
mov esi, eax
push 1
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a7220
add esp, 0x10
test eax, eax
jne 0x444a6c
jmp case.0x4449f9.63
mov al, byte [ebp + 1]
cmp al, 4
ja 0x444b94
mov ecx, 0x4bfb90
cmp al, 3
jbe 0x444ba0
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x444bd1
mov ecx, 0x4bfb90
mov esi, ecx
cmp al, 1
jbe 0x444bb5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x444bd1
mov edx, 0x4bfb90
mov ecx, edx
mov esi, edx
test al, al
je 0x444bc8
mov eax, dword [esp + 0x30]
jmp 0x444bd1
mov eax, 0x4bfb90
mov ecx, eax
mov esi, eax
push 1
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a7220
add esp, 0x10
test eax, eax
je 0x444a6c
jmp case.0x4449f9.63
cmp byte [esp + 0x13], 0
je 0x444c09
call dword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x444e2d
jmp case.0x4449f9.63
mov esi, dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
push 0xd
call esi
test eax, eax
jne 0x444e2d
push 0xf
call esi
test eax, eax
jne 0x444e2d
jmp case.0x4449f9.63
mov al, byte [esp + 0x10]
test al, al
je 0x444c48
mov edx, dword [esp + 0x24]
mov cl, al
call fcn.0046bc50
cmp al, byte [esp + 0x11]
je 0x444e2d
jmp case.0x4449f9.63
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x14]
push 0
push eax
call fcn.0046bcf0
add esp, 8
xorps xmm1, xmm1
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp 0x444c73
mov al, 1
jmp 0x444c75
xor al, al
cmp al, byte [esp + 0x11]
je 0x444e2d
jmp case.0x4449f9.63
test esi, esi
je 0x444dc4
lea eax, [esp + 0x20]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [esp + 0x20], 0x103
jne 0x444db7
mov eax, dword [esp + 0x28]
cmp dword [0x4eb104], eax
jne 0x444d6c
cmp byte [esp + 0x12], 0
jne 0x444cd3
mov esi, dword [esp + 0x1c]
add esi, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
sub ecx, eax
cmp ecx, 5
jle 0x444d79
mov edx, 1
mov ecx, 0x8000012f
call fcn.004016d0
test al, al
je 0x4449d0
mov edi, dword [0x4e7024]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
cmp byte [edi + 0xf9], 0
je 0x4449e2
mov eax, dword [0x4ea3a4]
mov ecx, 0x190
test eax, eax
cmovne ecx, eax
cmp dword [ecx*4 + 0x4ea9e4], ebp
jne 0x444d32
cmp dword [ecx*4 + 0x4ea3a4], ebx
mov ecx, dword [esp + 0x40]
je 0x4449e2
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [eax*4 + 0x4ea9e8], ebp
mov dword [eax*4 + 0x4ea3a8], ebx
inc eax
mov dword [0x4ea3a4], eax
cmp eax, 0x190
jl 0x4449e2
mov dword [0x4ea3a4], 0
jmp 0x4449d6
mov esi, dword [esp + 0x1c]
add esi, ebx
cmp byte [esp + 0x12], 0
jne 0x444d8a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esi, eax
cmp esi, 5
jle 0x444762
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4449d0
mov ecx, dword [0x4e7024]
mov edx, 1
mov ecx, dword [ecx + 0x54]
call fcn.004016d0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x20]
jmp 0x444dca
xor edi, edi
mov dword [esp + 0x20], edi
mov esi, dword [0x4e97f8]
cmp byte [esi + 0x17], 0
jne 0x444dd9
mov esi, dword [esi + 0xc]
mov cl, byte [esi + 0x15]
test cl, 2
je 0x444df2
and cl, 0x3d
mov byte [esi + 0x15], cl
mov ecx, dword [esi]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [esi + 0x15]
mov eax, edi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [esi], eax
mov dword [esi + 4], edx
mov byte [esi + 0x15], cl
jge 0x444e1d
mov ecx, esi
call fcn.00401350
and byte [esi + 0x15], 0x8f
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x4e9820], 0
je 0x444e2d
mov ecx, esi
call fcn.00401350
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret