Function at 0x444db0
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x4088
call fcn.004b4520
push ebx
push ebp
push esi
push edi
mov ebp, ecx
cmp byte [ebp], 0x3e
mov dword [esp + 0x28], ebp
jne 0x444e5b
mov ecx, dword [0x4cbf28]
mov edx, str.UseErrorLevel
call fcn.0049eb30
test eax, eax
mov ecx, 0x4cc848
mov al, 3
setne bl
cmp al, byte [ebp + 1]
mov byte [esp + 0x14], bl
sbb eax, eax
and eax, dword [0x4cbed4]
push eax
push 1
push dword [esp + 0x1c]
lea eax, [esp + 0x24]
push eax
push dword [0x4cbf28]
mov al, bl
xor al, 1
movzx eax, al
push eax
push dword [0x4cbf24]
push 0
push dword [0x4cbf20]
call fcn.0043fab0
test eax, eax
jne 0x444e5b
test bl, bl
je 0x444e51
mov ecx, dword [0x4ca738]
push 1
push eax
push 0xffffffffffffffff
push str.ERROR
call fcn.004a2db0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp]
cmp al, 0x5d
jne 0x444f7c
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
mov ecx, dword [0x4cbf20]
xor edx, edx
push 0
call fcn.00415d30
mov bh, al
add esp, 0xc
mov byte [esp + 0x10], bh
test bh, bh
jne 0x444ed0
mov ecx, dword [0x4cbf20]
lea edx, [esp + 0x2c]
push 0
call fcn.00468e20
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x444eb2
cmp eax, 0xc
jl 0x444eb2
cmp eax, 0x2b
jle 0x444ed8
mov ecx, dword [0x4ca738]
push 1
push 0
push 0xffffffffffffffff
push 0x4bb578
call fcn.004a2db0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov esi, dword [0x4cbf24]
mov byte [esp + 0x11], 0
mov dword [esp + 0x24], 1
mov byte [esp + 0x12], 1
mov bl, byte [esi]
mov dword [esp + 0x1c], 0
test bl, bl
je 0x444f61
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx eax, bl
test eax, 0xffffff80
jne 0x444f1d
push 2
push eax
call edi
add esp, 8
test eax, eax
je 0x444f1d
and bl, 0xdf
mov al, bl
cmp al, 0x44
je 0x444f54
cmp al, 0x4c
je 0x444f4a
cmp al, 0x54
jne 0x444f59
lea ecx, [esi + 1]
mov byte [esp + 0x12], 0
call fcn.00421130
mulsd xmm0, qword [0x4c2350]
cvttsd2si eax, xmm0
mov dword [esp + 0x1c], eax
jmp 0x444f59
mov dword [esp + 0x24], 0
jmp 0x444f59
mov byte [esp + 0x11], 1
mov bl, byte [esi + 1]
inc esi
test bl, bl
jne 0x444f04
lea eax, [esp + 0x90]
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], eax
jmp 0x444fca
cmp al, 0x3e
je 0x444f9d
mov edx, dword [0x4cbf20]
mov ecx, dword [0x4cbf28]
cmp al, 0x5c
je 0x445035
cmp byte [ecx], 0
jne 0x44503e
mov al, byte [esp + 0x10]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov al, byte [esp + 0x10]
mov byte [esp + 0x11], al
mov eax, dword [esp + 0x20]
mov byte [esp + 0x12], 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], eax
mov al, byte [ebp]
cmp al, 0x3e
je 0x444fea
mov ecx, dword [0x4ca738]
push 1
push 0
push 0xffffffffffffffff
push 0x4b6c08
call fcn.004a2db0
mov al, byte [ebp]
cmp al, 0x5c
jne 0x445001
push 1
mov ecx, ebp
call fcn.00430230
mov byte [esp + 0x13], 1
cmp eax, 1
je 0x445006
mov byte [esp + 0x13], 0
xor edi, edi
lea ebx, [esp + 0x90]
cmp byte [ebp + 1], 0
mov ecx, 0x4001
jbe 0x4450db
mov ebp, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
test ecx, ecx
jne 0x445093
mov dword [esp + edi*4 + 0x30], 0x4b6ba9
jmp 0x4450c6
cmp byte [edx], 0
je 0x444f9d
cmp al, 0x5c
mov byte [esp + 0x12], 0
cmove ecx, edx
call fcn.00421130
mulsd xmm0, qword [0x4c2350]
mov dl, byte [esp + 0x10]
mov byte [esp + 0x10], dl
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
cmp ecx, 1
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x14], ecx
mov cl, byte [esp + 0x10]
mov byte [esp + 0x11], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ecx
jge 0x444fca
mov dword [esp + 0x1c], 0x1f4
jmp 0x444fca
lea esi, [ecx - 1]
mov dword [esp + edi*4 + 0x30], ebx
push esi
push dword [edi*4 + 0x4cbf20]
push ebx
call ebp
mov ecx, ebx
mov byte [esi + ebx], 0
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4450b1
sub ecx, edx
inc ecx
add ebx, ecx
lea ecx, [esp + 0x4091]
sub ecx, ebx
mov eax, dword [esp + 0x28]
inc edi
movzx eax, byte [eax + 1]
cmp edi, eax
jl 0x445024
mov ebp, dword [esp + 0x28]
mov eax, dword fs:[0x24]
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
mov edi, dword [0x4c8024]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
nop
movzx eax, byte [ebp]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x445117.63
movzx eax, byte [eax + 0x445578]
jmp dword [eax*4 + 0x445558]
mov al, byte [ebp + 1]
cmp al, 4
ja 0x44512e
mov ecx, 0x4b6ba9
cmp al, 3
jbe 0x44513a
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x44516b
mov ecx, 0x4b6ba9
mov esi, ecx
cmp al, 1
jbe 0x44514f
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x44516b
mov edx, 0x4b6ba9
mov ecx, edx
mov esi, edx
test al, al
je 0x445162
mov eax, dword [esp + 0x30]
jmp 0x44516b
mov eax, 0x4b6ba9
mov ecx, eax
mov esi, eax
push 0
push 0
push 1
push 0
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a41c0
add esp, 0x1c
test eax, eax
je case.0x445117.63
mov eax, dword [0x4c8024]
cmp dword [eax + 0x54], 0xffffffff
jle 0x44554b
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x4cc810], eax
je 0x4454b5
mov eax, dword [0x4c8024]
push dword [eax + 0x54]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp + 1]
cmp al, 4
ja 0x4451d6
mov ecx, 0x4b6ba9
cmp al, 3
jbe 0x4451e2
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x445213
mov ecx, 0x4b6ba9
mov esi, ecx
cmp al, 1
jbe 0x4451f7
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x445213
mov edx, 0x4b6ba9
mov ecx, edx
mov esi, edx
test al, al
je 0x44520a
mov eax, dword [esp + 0x30]
jmp 0x445213
mov eax, 0x4b6ba9
mov ecx, eax
mov esi, eax
push 0
push 0
push 0
push 0
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a41c0
add esp, 0x1c
test eax, eax
je 0x44518a
jmp case.0x445117.63
mov al, byte [ebp + 1]
cmp al, 4
ja 0x445247
mov ecx, 0x4b6ba9
cmp al, 3
jbe 0x445253
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x445284
mov ecx, 0x4b6ba9
mov esi, ecx
cmp al, 1
jbe 0x445268
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x445284
mov edx, 0x4b6ba9
mov ecx, edx
mov esi, edx
test al, al
je 0x44527b
mov eax, dword [esp + 0x30]
jmp 0x445284
mov eax, 0x4b6ba9
mov ecx, eax
mov esi, eax
push 1
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a4040
add esp, 0x10
test eax, eax
jne 0x44518a
jmp case.0x445117.63
mov al, byte [ebp + 1]
cmp al, 4
ja 0x4452b2
mov ecx, 0x4b6ba9
cmp al, 3
jbe 0x4452be
mov eax, dword [esp + 0x30]
mov esi, edx
mov edx, dword [esp + 0x34]
jmp 0x4452ef
mov ecx, 0x4b6ba9
mov esi, ecx
cmp al, 1
jbe 0x4452d3
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
jmp 0x4452ef
mov edx, 0x4b6ba9
mov ecx, edx
mov esi, edx
test al, al
je 0x4452e6
mov eax, dword [esp + 0x30]
jmp 0x4452ef
mov eax, 0x4b6ba9
mov ecx, eax
mov esi, eax
push 1
push ecx
push esi
push edx
mov edx, eax
mov ecx, edi
call fcn.004a4040
add esp, 0x10
test eax, eax
je 0x44518a
jmp case.0x445117.63
cmp byte [esp + 0x13], 0
je 0x445327
call dword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x44554b
jmp case.0x445117.63
mov esi, dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
push 1
call esi
test eax, eax
jne 0x44554b
push 0xf
call esi
test eax, eax
jne 0x44554b
jmp case.0x445117.63
mov al, byte [esp + 0x10]
test al, al
je 0x445366
mov edx, dword [esp + 0x24]
mov cl, al
call fcn.004690a0
cmp al, byte [esp + 0x11]
je 0x44554b
jmp case.0x445117.63
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x14]
push 0
push eax
call fcn.00469140
add esp, 8
xorps xmm1, xmm1
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp 0x445391
mov al, 1
jmp 0x445393
xor al, al
cmp al, byte [esp + 0x11]
je 0x44554b
jmp case.0x445117.63
test esi, esi
je 0x4454e2
lea eax, [esp + 0x20]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [esp + 0x20], 0x103
jne 0x4454d5
mov eax, dword [esp + 0x28]
cmp dword [0x4cc810], eax
jne 0x44548a
cmp byte [esp + 0x12], 0
jne 0x4453f1
mov esi, dword [esp + 0x1c]
add esi, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
sub ecx, eax
cmp ecx, 5
jle 0x445497
mov edx, 1
mov ecx, 0x8000012f
call fcn.00401730
test al, al
je 0x4450ed
mov edi, dword [0x4c8024]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
cmp byte [edi + 0xd9], 0
je 0x445100
mov eax, dword [0x4cb244]
mov ecx, 0x190
test eax, eax
cmovne ecx, eax
cmp dword [ecx*4 + 0x4cb884], ebp
jne 0x445450
cmp dword [ecx*4 + 0x4cb244], ebx
mov ecx, dword [esp + 0x40]
je 0x445100
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [eax*4 + 0x4cb888], ebp
mov dword [eax*4 + 0x4cb248], ebx
inc eax
mov dword [0x4cb244], eax
cmp eax, 0x190
jl 0x445100
mov dword [0x4cb244], 0
jmp 0x4450f3
mov esi, dword [esp + 0x1c]
add esi, ebx
cmp byte [esp + 0x12], 0
jne 0x4454a8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esi, eax
cmp esi, 5
jle 0x444eb2
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4450ed
mov ecx, dword [0x4c8024]
mov edx, 1
mov ecx, dword [ecx + 0x54]
call fcn.00401730
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x20]
jmp 0x4454e8
xor edi, edi
mov dword [esp + 0x20], edi
mov esi, dword [0x4ca738]
cmp byte [esi + 0x17], 0
jne 0x4454f7
mov esi, dword [esi + 0xc]
mov cl, byte [esi + 0x15]
test cl, 2
je 0x445510
and cl, 0x3d
mov byte [esi + 0x15], cl
mov ecx, dword [esi]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [esi + 0x15]
mov eax, edi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [esi], eax
mov dword [esi + 4], edx
mov byte [esi + 0x15], cl
jge 0x44553b
mov ecx, esi
call fcn.004013b0
and byte [esi + 0x15], 0x8f
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x4ca760], 0
je 0x44554b
mov ecx, esi
call fcn.004013b0
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret