Function at 0x140066060
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push rbx
push r14
push r15
mov eax, 0x8180
call fcn.1400ecec0
sub rsp, rax
xor r14d, r14d
mov r15, rcx
cmp byte [rcx], 0x3e
jne 0x140066130
mov rcx, qword [0x140129e70]
lea rdx, str.UseErrorLevel
call fcn.1400ce7b0
mov r9, qword [0x140129e68]
test rax, rax
mov rdx, qword [0x140129e60]
mov eax, r14d
setne bl
cmp byte [r15 + 1], 3
movzx ecx, bl
cmova rax, qword [0x140129dd8]
xor cl, 1
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov byte [rsp + 0x40], 1
lea rax, [rsp + 0x68]
mov byte [rsp + 0x38], bl
mov qword [rsp + 0x30], rax
mov rax, qword [0x140129e70]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
lea rcx, [0x14012afc0]
call fcn.1400612f0
test eax, eax
jne 0x140066130
test bl, bl
je 0x140066120
mov rcx, qword [0x140127a38]
lea r8, [r14 - 1]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea rdx, [0x14010d2b8]
call fcn.1400d3350
mov r14d, eax
mov eax, r14d
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret
movzx eax, byte [r15]
mov qword [rsp + 0x8170], rsi
mov qword [rsp + 0x8168], rdi
mov qword [rsp + 0x8160], r12
mov qword [rsp + 0x8158], r13
movaps xmmword [rsp + 0x8140], xmm6
cmp al, 0x5d
jne 0x1400662a8
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, qword [0x140129e60]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.140024050
mov byte [rsp + 0x81b0], al
test al, al
jne 0x1400661d5
mov rcx, qword [0x140129e60]
lea rdx, [rsp + 0x60]
xor r8d, r8d
call fcn.1400926c0
mov dword [rsp + 0x58], eax
test eax, eax
je 0x1400661b1
add eax, 0xfffffff4
cmp eax, 0x1f
jbe 0x1400661e0
mov rcx, qword [0x140127a38]
lea rdx, [0x14010621c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3350
jmp 0x1400669cb
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
mov rdi, qword [0x140129e68]
mov r13b, 1
mov byte [rsp + 0x81a0], r14b
mov r12d, r14d
mov dword [rsp + 0x54], 1
mov byte [rsp + 0x81a8], r13b
movzx eax, word [rdi]
mov dword [rsp + 0x50], r14d
test ax, ax
je 0x14006628e
movsd xmm6, qword [0x1401144b8]
nop word [rax + rax]
movzx ebx, ax
test ebx, 0xffffff80
jne 0x14006623f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14006623f
and ebx, 0xffffffdf
cmp ebx, 0x44
je 0x14006626c
cmp ebx, 0x4c
je 0x140066265
cmp ebx, 0x54
jne 0x140066274
xor r13b, r13b
lea rcx, [rdi + 2]
call fcn.140031ea0
mulsd xmm0, xmm6
cvttsd2si r12d, xmm0
jmp 0x140066274
mov dword [rsp + 0x54], r14d
jmp 0x140066274
mov byte [rsp + 0x81a0], 1
movzx eax, word [rdi + 2]
add rdi, 2
test ax, ax
jne 0x140066220
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r12d
lea rax, [rsp + 0x130]
mov dword [rsp + 0x120], r14d
mov qword [rsp + 0x110], rax
jmp 0x140066313
cmp al, 0x3e
je 0x1400662cc
mov rdx, qword [0x140129e60]
mov rcx, qword [0x140129e70]
cmp al, 0x5c
je 0x1400663a9
cmp word [rcx], r14w
jne 0x1400663b3
movzx eax, byte [rsp + 0x81a0]
mov r13b, 1
mov byte [rsp + 0x81b0], al
mov r12d, r14d
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x81a0]
mov byte [rsp + 0x81a0], al
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x54], eax
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r14d
movzx eax, byte [r15]
mov qword [rsp + 0x8178], rbp
cmp al, 0x3e
je 0x140066346
mov rcx, qword [0x140127a38]
lea rdx, [0x1400ef8c4]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3350
movzx eax, byte [r15]
cmp al, 0x5c
jne 0x140066364
mov edx, 1
mov rcx, r15
call fcn.14004e7e0
mov byte [rsp + 0x81b8], 1
cmp eax, 1
je 0x14006636c
mov byte [rsp + 0x81b8], r14b
mov ebp, r14d
lea rdi, [rsp + 0x130]
mov ecx, 0x4001
cmp byte [r15 + 1], bpl
jbe 0x1400664ad
mov rsi, r14
lea r13, [0x1400ef7e4]
lea r12, [0x140000000]
test ecx, ecx
jne 0x14006642b
mov qword [rsp + rsi + 0x70], r13
jmp 0x14006648c
cmp word [rdx], r14w
je 0x1400662cc
xor r13b, r13b
cmp al, 0x5c
mov byte [rsp + 0x81a8], r13b
cmove rcx, rdx
call fcn.140031ea0
movzx ecx, byte [rsp + 0x81a0]
movzx r8d, byte [rsp + 0x81a0]
mov edx, dword [rsp + 0x81a0]
mulsd xmm0, qword [0x1401144b8]
mov byte [rsp + 0x81a0], cl
mov ecx, dword [rsp + 0x81a0]
mov byte [rsp + 0x81b0], r8b
mov dword [rsp + 0x58], edx
cvttsd2si r12d, xmm0
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], r12d
cmp r12d, 1
jge 0x140066313
mov r12d, 0x1f4
mov dword [rsp + 0x50], r12d
jmp 0x140066313
mov rdx, qword [rsi + r12 + 0x129e60]
movsxd rbx, ecx
mov rcx, rdi
mov qword [rsp + rsi + 0x70], rdi
lea r8, [rbx - 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov rax, 0xffffffffffffffff
mov word [rdi + rbx*2 - 2], r14w
nop word [rax + rax]
cmp word [rdi + rax*2 + 2], r14w
lea rax, [rax + 1]
jne 0x140066460
lea rdi, [rdi + rax*2]
add rdi, 2
lea rcx, [rsp + 0x130]
mov rax, rdi
sub rax, rcx
mov ecx, 0x4001
sar rax, 1
sub ecx, eax
movzx eax, byte [r15 + 1]
inc ebp
add rsi, 8
cmp ebp, eax
jl 0x140066397
mov r12d, dword [rsp + 0x50]
movzx r13d, byte [rsp + 0x81a8]
mov ebp, dword gs:[0x48]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rsi, qword [rsp + 0x68]
xorps xmm6, xmm6
mov edi, eax
mov r10, qword [0x140124200]
lea r9, [0x140000000]
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
nop dword [rax]
movzx eax, byte [r15]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x140066516.69
cdqe
movzx eax, byte [r9 + rax + 0x66a20]
mov ecx, dword [r9 + rax*4 + 0x66a00]
add rcx, r9
jmp rcx
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006652f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006656d
lea rdx, [0x1400ef7e4]
mov rcx, rdx
cmp al, 3
jbe 0x140066548
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006656d
mov r9, rdx
cmp al, 1
jbe 0x140066557
mov r8, r11
mov rdx, rbx
jmp 0x14006656d
mov r8, rdx
test al, al
je 0x140066563
mov rdx, rbx
jmp 0x14006656d
lea r9, [0x1400ef7e4]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4b30
test rax, rax
je case.0x140066516.69
mov rax, qword [0x140124200]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006696f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x14012af90], eax
mov rax, qword [0x140124200]
mov ecx, dword [rax + 0x74]
je 0x140066965
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x1400669c3
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x1400665eb
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x140066629
lea rdx, [0x1400ef7e4]
mov rcx, rdx
cmp al, 3
jbe 0x140066604
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x140066629
mov r9, rdx
cmp al, 1
jbe 0x140066613
mov r8, r11
mov rdx, rbx
jmp 0x140066629
mov r8, rdx
test al, al
je 0x14006661f
mov rdx, rbx
jmp 0x140066629
lea r9, [0x1400ef7e4]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], r14b
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4b30
test rax, rax
je 0x140066597
jmp case.0x140066516.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006666f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x1400666ad
lea rdx, [0x1400ef7e4]
mov rcx, rdx
cmp al, 3
jbe 0x140066688
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x1400666ad
mov r9, rdx
cmp al, 1
jbe 0x140066697
mov r8, r11
mov rdx, rbx
jmp 0x1400666ad
mov r8, rdx
test al, al
je 0x1400666a3
mov rdx, rbx
jmp 0x1400666ad
lea r9, [0x1400ef7e4]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4930
test rax, rax
jne 0x140066597
jmp case.0x140066516.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x1400666e4
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x140066722
lea rdx, [0x1400ef7e4]
mov rcx, rdx
cmp al, 3
jbe 0x1400666fd
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x140066722
mov r9, rdx
cmp al, 1
jbe 0x14006670c
mov r8, r11
mov rdx, rbx
jmp 0x140066722
mov r8, rdx
test al, al
je 0x140066718
mov rdx, rbx
jmp 0x140066722
lea r9, [0x1400ef7e4]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4930
test rax, rax
jne case.0x140066516.69
mov rax, qword [0x140124200]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006696f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x14012af90], eax
je 0x14006695b
mov rax, qword [0x140124200]
mov ecx, dword [rax + 0x74]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x1400669c3
cmp byte [rsp + 0x81b8], r14b
je 0x140066797
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x14006696f
jmp case.0x140066516.69
mov ecx, ntohs
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006696f
lea ecx, [rax + 0xf]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006696f
jmp case.0x140066516.69
movzx eax, byte [rsp + 0x81b0]
test al, al
je 0x1400667e7
mov edx, dword [rsp + 0x54]
movzx ecx, al
call fcn.140092a00
cmp al, byte [rsp + 0x81a0]
je 0x14006696f
jmp case.0x140066516.69
mov edx, dword [rsp + 0x60]
lea r8, [rsp + 0x110]
mov ecx, dword [rsp + 0x58]
xor r9d, r9d
call fcn.140092ab0
ucomisd xmm0, xmm6
jp 0x14006680b
jne 0x14006680b
xor eax, eax
jmp 0x14006680d
mov al, 1
cmp al, byte [rsp + 0x81a0]
je 0x14006696f
jmp case.0x140066516.69
test rsi, rsi
je 0x140066986
lea rdx, [rsp + 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x5c], 0x103
jne 0x140066976
cmp dword [0x14012af90], ebp
jne 0x140066935
test r13b, r13b
jne 0x14006686e
lea ebx, [rdi + r12]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x14006693e
mov rbx, qword [rsp + 0x70]
mov edx, 1
mov ecx, 0x8000012f
call fcn.140001a20
mov r10, qword [0x140124200]
lea r9, [0x140000000]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
test al, al
je 0x1400664f0
cmp byte [r10 + 0x139], r14b
je 0x1400664f0
movsxd rcx, dword [0x140128af0]
lea r9, [0x140000000]
test ecx, ecx
mov eax, 0x190
cmovne eax, ecx
movsxd rdx, eax
cmp qword [r9 + rdx*8 + 0x129138], r15
jne 0x1400668f0
cmp dword [r9 + rdx*4 + 0x128afc], edi
mov rdx, qword [rsp + 0x90]
je 0x1400664f0
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
mov qword [r9 + rcx*8 + 0x129140], r15
mov dword [r9 + rcx*4 + 0x128b00], edi
inc ecx
mov dword [0x140128af0], ecx
cmp ecx, 0x190
jl 0x1400664f0
mov dword [0x140128af0], r14d
jmp 0x1400664d8
lea ebx, [rdi + r12]
test r13b, r13b
jne 0x14006694b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebx, eax
cmp ebx, 5
jle 0x1400669a4
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400664c5
mov rcx, qword [0x140124200]
mov ecx, dword [rcx + 0x74]
mov edx, 1
call fcn.140001a20
mov eax, 1
jmp 0x1400669c3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, dword [rsp + 0x5c]
jmp 0x14006698b
mov dword [rsp + 0x5c], r14d
mov rcx, qword [0x140127a38]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, r14d
call fcn.140001580
mov eax, 1
jmp 0x1400669c3
mov rcx, qword [0x140127a38]
lea rdx, [0x14010621c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3350
mov rbp, qword [rsp + 0x8178]
mov r12, qword [rsp + 0x8160]
mov rdi, qword [rsp + 0x8168]
mov rsi, qword [rsp + 0x8170]
mov r13, qword [rsp + 0x8158]
movaps xmm6, xmmword [rsp + 0x8140]
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret