Function at 0x14005d530
Capabilities:
Check for time delay via gettickcount
Check os version
Get keyboard layout

Disassembly:
push rbx
push rbp
push r15
mov eax, 0x8180
call fcn.1400d7ad0
sub rsp, rax
xor ebp, ebp
mov r15, rcx
cmp byte [rcx], 0x3e
jne 0x14005d5fa
mov rcx, qword [0x140115e60]
lea rdx, str.UseErrorLevel
call fcn.1400ba7d0
mov r9, qword [0x140115e58]
test rax, rax
mov rdx, qword [0x140115e50]
mov eax, ebp
setne bl
cmp byte [r15 + 1], 3
movzx ecx, bl
cmova rax, qword [0x140115dc8]
xor cl, 1
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov byte [rsp + 0x40], 1
lea rax, [rsp + 0x60]
mov byte [rsp + 0x38], bl
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e60]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
lea rcx, [0x140116fb0]
call fcn.140058970
test eax, eax
jne 0x14005d5fa
test bl, bl
je 0x14005d5ec
mov rcx, qword [0x140113a28]
lea r8, [rbp - 1]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea rdx, str.ERROR
call fcn.1400befb0
mov ebp, eax
mov eax, ebp
add rsp, 0x8180
pop r15
pop rbp
pop rbx
ret
movzx eax, byte [r15]
mov qword [rsp + 0x8178], rsi
mov qword [rsp + 0x8170], rdi
mov qword [rsp + 0x8168], r12
mov qword [rsp + 0x8160], r13
mov qword [rsp + 0x8158], r14
movaps xmmword [rsp + 0x8140], xmm6
cmp al, 0x5d
jne 0x14005d7ee
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, qword [0x140115e50]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.140021fa0
mov byte [rsp + 0x81b0], al
test al, al
jne 0x14005d6de
mov rcx, qword [0x140115e50]
lea rdx, [rsp + 0x5c]
xor r8d, r8d
call fcn.1400846d0
mov dword [rsp + 0x54], eax
test eax, eax
je 0x14005d683
add eax, 0xfffffff4
cmp eax, 0x1f
jbe 0x14005d6e9
mov rcx, qword [0x140113a28]
lea rdx, [0x1400f11dc]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400befb0
mov r14, qword [rsp + 0x8158]
mov r13, qword [rsp + 0x8160]
mov r12, qword [rsp + 0x8168]
mov rdi, qword [rsp + 0x8170]
mov rsi, qword [rsp + 0x8178]
movaps xmm6, xmmword [rsp + 0x8140]
add rsp, 0x8180
pop r15
pop rbp
pop rbx
ret
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x54], eax
mov rsi, qword [0x140115e58]
mov r13b, 1
mov byte [rsp + 0x81a0], bpl
mov r12d, ebp
mov dword [rsp + 0x50], 1
mov byte [rsp + 0x81a8], r13b
movzx eax, word [rsi]
test ax, ax
je 0x14005d7d2
movsd xmm6, qword [0x1400ff4c8]
lea rbx, [rsi + 2]
nop word [rax + rax]
movzx edi, ax
test edi, 0xffffff80
je 0x14005d73f
mov eax, ebp
jmp 0x14005d74c
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, edi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, edi
cmp ecx, 0x44
je 0x14005d7ad
cmp ecx, 0x4c
je 0x14005d7a7
cmp ecx, 0x54
jne 0x14005d7b5
mov rcx, rbx
xor r13b, r13b
call fcn.1400056a0
mov rcx, rbx
test al, al
je 0x14005d796
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wcstoi64]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
cvttsd2si r12d, xmm0
jmp 0x14005d7b5
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
mulsd xmm0, xmm6
cvttsd2si r12d, xmm0
jmp 0x14005d7b5
mov dword [rsp + 0x50], ebp
jmp 0x14005d7b5
mov byte [rsp + 0x81a0], 1
movzx eax, word [rsi + 2]
add rsi, 2
add rbx, 2
test ax, ax
jne 0x14005d730
mov byte [rsp + 0x81a8], r13b
lea rax, [rsp + 0x130]
mov dword [rsp + 0x120], ebp
mov qword [rsp + 0x110], rax
jmp 0x14005d8e9
mov rcx, qword [0x140115e50]
mov rbx, qword [0x140115e60]
cmp al, 0x3e
je 0x14005d809
cmp al, 0x5c
je 0x14005d811
cmp word [rbx], bp
jne 0x14005d81a
cmp al, 0x5c
jne 0x14005d8a7
cmp word [rcx], bp
je 0x14005d8a7
xor r13b, r13b
cmp al, 0x5c
mov byte [rsp + 0x81a8], r13b
cmove rbx, rcx
mov rcx, rbx
call fcn.1400056a0
mov rcx, rbx
test al, al
je 0x14005d850
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wcstoi64]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
jmp 0x14005d856
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
movzx ecx, byte [rsp + 0x81a0]
movzx r8d, byte [rsp + 0x81a0]
mov edx, dword [rsp + 0x81a0]
mulsd xmm0, qword [0x1400ff4c8]
mov byte [rsp + 0x81a0], cl
mov ecx, dword [rsp + 0x81a0]
mov byte [rsp + 0x81b0], r8b
mov dword [rsp + 0x54], edx
cvttsd2si r12d, xmm0
mov dword [rsp + 0x50], ecx
cmp r12d, 1
jge 0x14005d8e9
mov r12d, 0x1f4
jmp 0x14005d8e9
movzx eax, byte [rsp + 0x81a0]
mov r13b, 1
mov byte [rsp + 0x81b0], al
mov r12d, ebp
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x54], eax
movzx eax, byte [rsp + 0x81a0]
mov byte [rsp + 0x81a0], al
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x50], eax
mov byte [rsp + 0x81a8], r13b
movzx eax, byte [r15]
cmp al, 0x3e
je 0x14005d914
mov rcx, qword [0x140113a28]
lea rdx, [0x1400da884]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400befb0
movzx eax, byte [r15]
cmp al, 0x5c
jne 0x14005d932
mov edx, 1
mov rcx, r15
call fcn.140048130
mov byte [rsp + 0x81b8], 1
cmp eax, 1
je 0x14005d93a
mov byte [rsp + 0x81b8], bpl
lea rdi, [rsp + 0x130]
mov r14d, ebp
lea rdx, [0x1400da7a4]
mov ecx, 0x4001
cmp byte [r15 + 1], bpl
jbe 0x14005d9ec
mov rsi, rbp
lea r13, [0x140000000]
test ecx, ecx
jne 0x14005d970
mov qword [rsp + rsi + 0x70], rdx
jmp 0x14005d9d2
mov rdx, qword [rsi + r13 + 0x115e50]
movsxd rbx, ecx
mov rcx, rdi
mov qword [rsp + rsi + 0x70], rdi
lea r8, [rbx - 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov rax, 0xffffffffffffffff
mov word [rdi + rbx*2 - 2], bp
nop dword [rax]
cmp word [rdi + rax*2 + 2], bp
lea rax, [rax + 1]
jne 0x14005d9a0
lea rdi, [rdi + rax*2]
add rdi, 2
lea rcx, [rsp + 0x130]
mov rax, rdi
lea rdx, [0x1400da7a4]
sub rax, rcx
mov ecx, 0x4001
sar rax, 1
sub ecx, eax
movzx eax, byte [r15 + 1]
inc r14d
add rsi, 8
cmp r14d, eax
jl 0x14005d965
movzx r13d, byte [rsp + 0x81a8]
mov esi, dword gs:[0x48]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14, qword [rsp + 0x60]
xorps xmm6, xmm6
mov edi, eax
mov r11, qword [0x1401101f0]
lea r9, [0x140000000]
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r10, qword [rsp + 0x70]
nop dword [rax]
movzx eax, byte [r15]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x14005da56.69
cdqe
movzx eax, byte [r9 + rax + 0x5de9c]
mov ecx, dword [r9 + rax*4 + 0x5de7c]
add rcx, r9
jmp rcx
movzx eax, byte [r15 + 1]
lea r10, [0x1400da7a4]
cmp al, 4
mov dword [rsp + 0x40], ebp
mov qword [rsp + 0x38], rbp
lea r9, [0x1400da7a4]
cmova r10, rdx
mov byte [rsp + 0x30], 1
cmp al, 3
mov byte [rsp + 0x28], bpl
lea rdx, [0x1400da7a4]
mov qword [rsp + 0x20], r10
cmova r9, r8
mov rcx, r11
cmp al, 1
lea r8, [0x1400da7a4]
cmova r8, rbx
test al, al
cmovne rdx, qword [rsp + 0x70]
call fcn.1400c06c0
test rax, rax
je case.0x14005da56.69
mov rax, qword [0x1401101f0]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14005de42
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140116f80], eax
mov rax, qword [0x1401101f0]
mov ecx, dword [rax + 0x74]
je 0x14005de38
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x14005d6a2
movzx eax, byte [r15 + 1]
lea rcx, [0x1400da7a4]
cmp al, 4
mov dword [rsp + 0x40], ebp
mov qword [rsp + 0x38], rbp
lea r9, [0x1400da7a4]
cmova rcx, rdx
mov byte [rsp + 0x30], bpl
cmp al, 3
mov byte [rsp + 0x28], bpl
mov qword [rsp + 0x20], rcx
lea rdx, [0x1400da7a4]
cmova r9, r8
mov rcx, r11
cmp al, 1
lea r8, [0x1400da7a4]
cmova r8, rbx
test al, al
cmovne rdx, r10
call fcn.1400c06c0
test rax, rax
je 0x14005dabc
jmp case.0x14005da56.69
movzx eax, byte [r15 + 1]
lea rcx, [0x1400da7a4]
cmp al, 4
mov byte [rsp + 0x28], 1
lea r9, [0x1400da7a4]
cmova rcx, rdx
cmp al, 3
mov qword [rsp + 0x20], rcx
lea rdx, [0x1400da7a4]
cmova r9, r8
mov rcx, r11
cmp al, 1
lea r8, [0x1400da7a4]
cmova r8, rbx
test al, al
cmovne rdx, r10
call fcn.1400c04c0
test rax, rax
jne 0x14005dabc
jmp case.0x14005da56.69
movzx eax, byte [r15 + 1]
lea rcx, [0x1400da7a4]
cmp al, 4
mov byte [rsp + 0x28], 1
lea r9, [0x1400da7a4]
cmova rcx, rdx
cmp al, 3
mov qword [rsp + 0x20], rcx
lea rdx, [0x1400da7a4]
cmova r9, r8
mov rcx, r11
cmp al, 1
lea r8, [0x1400da7a4]
cmova r8, rbx
test al, al
cmovne rdx, r10
call fcn.1400c04c0
test rax, rax
jne case.0x14005da56.69
mov rax, qword [0x1401101f0]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14005de42
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140116f80], eax
je 0x14005de2e
mov rax, qword [0x1401101f0]
mov ecx, dword [rax + 0x74]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x14005d6a2
cmp byte [rsp + 0x81b8], bpl
je 0x14005dc67
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x14005de42
jmp case.0x14005da56.69
mov ecx, ntohs
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14005de42
lea ecx, [rax + 0xf]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14005de42
jmp case.0x14005da56.69
movzx eax, byte [rsp + 0x81b0]
test al, al
je 0x14005dcb7
mov edx, dword [rsp + 0x50]
movzx ecx, al
call fcn.140084a20
cmp al, byte [rsp + 0x81a0]
je 0x14005de42
jmp case.0x14005da56.69
mov edx, dword [rsp + 0x5c]
lea r8, [rsp + 0x110]
mov ecx, dword [rsp + 0x54]
xor r9d, r9d
call fcn.140084ad0
ucomisd xmm0, xmm6
jp 0x14005dcdb
jne 0x14005dcdb
xor eax, eax
jmp 0x14005dcdd
mov al, 1
cmp al, byte [rsp + 0x81a0]
je 0x14005de42
jmp case.0x14005da56.69
test r14, r14
je 0x14005de5b
lea rdx, [rsp + 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x58], 0x103
jne 0x14005de4c
cmp dword [0x140116f80], esi
jne 0x14005de04
test r13b, r13b
jne 0x14005dd3e
lea ebx, [rdi + r12]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x14005de0d
mov rbx, qword [rsp + 0x78]
mov edx, 1
mov ecx, 0x8000012f
call fcn.140001b10
mov r11, qword [0x1401101f0]
lea r9, [0x140000000]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r10, qword [rsp + 0x70]
test al, al
je 0x14005da30
cmp byte [r11 + 0x139], bpl
je 0x14005da30
movsxd rcx, dword [0x140114ae0]
lea r9, [0x140000000]
test ecx, ecx
mov eax, 0x190
cmovne eax, ecx
movsxd rdx, eax
cmp qword [r9 + rdx*8 + 0x115128], r15
jne 0x14005ddc0
cmp dword [r9 + rdx*4 + 0x114aec], edi
mov rdx, qword [rsp + 0x90]
je 0x14005da30
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r10, qword [rsp + 0x70]
mov qword [r9 + rcx*8 + 0x115130], r15
mov dword [r9 + rcx*4 + 0x114af0], edi
inc ecx
mov dword [0x140114ae0], ecx
cmp ecx, 0x190
jl 0x14005da30
mov dword [0x140114ae0], ebp
jmp 0x14005da17
lea ebx, [rdi + r12]
test r13b, r13b
jne 0x14005de1e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebx, eax
cmp ebx, 5
jle 0x14005d683
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14005da04
mov rcx, qword [0x1401101f0]
mov ecx, dword [rcx + 0x74]
mov edx, 1
call fcn.140001b10
mov eax, 1
jmp 0x14005d6a2
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, dword [rsp + 0x58]
jmp 0x14005de5f
mov dword [rsp + 0x58], ebp
mov rcx, qword [0x140113a28]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, ebp
call fcn.1400015d0
mov eax, 1
jmp 0x14005d6a2