Function at 0x14006a750
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push rbx
push r14
push r15
mov eax, 0x8180
call fcn.1401119a0
sub rsp, rax
xor r14d, r14d
mov r15, rcx
cmp byte [rcx], 0x3e
jne 0x14006a820
mov rcx, qword [0x140162b70]
lea rdx, str.UseErrorLevel
call fcn.1400d0d80
mov r9, qword [0x140162b68]
test rax, rax
mov rdx, qword [0x140162b60]
mov eax, r14d
setne bl
cmp byte [r15 + 1], 3
movzx ecx, bl
cmova rax, qword [0x140162ad8]
xor cl, 1
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov byte [rsp + 0x40], 1
lea rax, [rsp + 0x68]
mov byte [rsp + 0x38], bl
mov qword [rsp + 0x30], rax
mov rax, qword [0x140162b70]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
lea rcx, [0x140163cc0]
call fcn.1400648c0
test eax, eax
jne 0x14006a820
test bl, bl
je 0x14006a810
mov rcx, qword [0x140160738]
lea r8, [r14 - 1]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea rdx, str.ERROR
call fcn.1400d5e90
mov r14d, eax
mov eax, r14d
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret
movzx eax, byte [r15]
mov qword [rsp + 0x8170], rsi
mov qword [rsp + 0x8168], rdi
mov qword [rsp + 0x8160], r12
mov qword [rsp + 0x8158], r13
movaps xmmword [rsp + 0x8140], xmm6
cmp al, 0x5d
jne 0x14006a997
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, qword [0x140162b60]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.140024340
mov byte [rsp + 0x81b0], al
test al, al
jne 0x14006a8c5
mov rcx, qword [0x140162b60]
lea rdx, [rsp + 0x60]
xor r8d, r8d
call fcn.140094910
mov dword [rsp + 0x58], eax
test eax, eax
je 0x14006a8a1
add eax, 0xfffffff4
cmp eax, 0x1f
jbe 0x14006a8d0
mov rcx, qword [0x140160738]
lea rdx, [0x140136e9c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d5e90
jmp 0x14006b0ab
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
mov rdi, qword [0x140162b68]
mov r13b, 1
mov byte [rsp + 0x81a0], r14b
mov r12d, r14d
mov dword [rsp + 0x54], 1
mov byte [rsp + 0x81a8], r13b
movzx eax, word [rdi]
mov dword [rsp + 0x50], r14d
test ax, ax
je 0x14006a97d
movsd xmm6, qword [0x1401467d8]
nop word [rax + rax]
movzx ebx, ax
test ebx, 0xffffff80
jne 0x14006a92e
mov edx, 2
mov ecx, ebx
call fcn.1400fc354
test eax, eax
je 0x14006a92e
and ebx, 0xffffffdf
cmp ebx, 0x44
je 0x14006a95b
cmp ebx, 0x4c
je 0x14006a954
cmp ebx, 0x54
jne 0x14006a963
xor r13b, r13b
lea rcx, [rdi + 2]
call fcn.1400320e0
mulsd xmm0, xmm6
cvttsd2si r12d, xmm0
jmp 0x14006a963
mov dword [rsp + 0x54], r14d
jmp 0x14006a963
mov byte [rsp + 0x81a0], 1
movzx eax, word [rdi + 2]
add rdi, 2
test ax, ax
jne 0x14006a910
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r12d
lea rax, [rsp + 0x130]
mov dword [rsp + 0x120], r14d
mov qword [rsp + 0x110], rax
jmp 0x14006aa02
cmp al, 0x3e
je 0x14006a9bb
mov rdx, qword [0x140162b60]
mov rcx, qword [0x140162b70]
cmp al, 0x5c
je 0x14006aa98
cmp word [rcx], r14w
jne 0x14006aaa2
movzx eax, byte [rsp + 0x81a0]
mov r13b, 1
mov byte [rsp + 0x81b0], al
mov r12d, r14d
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x81a0]
mov byte [rsp + 0x81a0], al
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x54], eax
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r14d
movzx eax, byte [r15]
mov qword [rsp + 0x8178], rbp
cmp al, 0x3e
je 0x14006aa35
mov rcx, qword [0x140160738]
lea rdx, [0x14012054c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d5e90
movzx eax, byte [r15]
cmp al, 0x5c
jne 0x14006aa53
mov edx, 1
mov rcx, r15
call fcn.140050060
mov byte [rsp + 0x81b8], 1
cmp eax, 1
je 0x14006aa5b
mov byte [rsp + 0x81b8], r14b
mov ebp, r14d
lea rdi, [rsp + 0x130]
mov ecx, 0x4001
cmp byte [r15 + 1], bpl
jbe 0x14006ab90
mov rsi, r14
lea r13, [0x14012046c]
lea r12, [0x140000000]
test ecx, ecx
jne 0x14006ab1a
mov qword [rsp + rsi + 0x70], r13
jmp 0x14006ab6f
cmp word [rdx], r14w
je 0x14006a9bb
xor r13b, r13b
cmp al, 0x5c
mov byte [rsp + 0x81a8], r13b
cmove rcx, rdx
call fcn.1400320e0
movzx ecx, byte [rsp + 0x81a0]
movzx r8d, byte [rsp + 0x81a0]
mov edx, dword [rsp + 0x81a0]
mulsd xmm0, qword [0x1401467d8]
mov byte [rsp + 0x81a0], cl
mov ecx, dword [rsp + 0x81a0]
mov byte [rsp + 0x81b0], r8b
mov dword [rsp + 0x58], edx
cvttsd2si r12d, xmm0
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], r12d
cmp r12d, 1
jge 0x14006aa02
mov r12d, 0x1f4
mov dword [rsp + 0x50], r12d
jmp 0x14006aa02
mov rdx, qword [rsi + r12 + 0x162b60]
movsxd rbx, ecx
mov rcx, rdi
mov qword [rsp + rsi + 0x70], rdi
lea r8, [rbx - 1]
call fcn.1401020c4
mov rax, 0xffffffffffffffff
mov word [rdi + rbx*2 - 2], r14w
cmp word [rdi + rax*2 + 2], r14w
lea rax, [rax + 1]
jne 0x14006ab43
lea rdi, [rdi + rax*2]
add rdi, 2
lea rcx, [rsp + 0x130]
mov rax, rdi
sub rax, rcx
mov ecx, 0x4001
sar rax, 1
sub ecx, eax
movzx eax, byte [r15 + 1]
inc ebp
add rsi, 8
cmp ebp, eax
jl 0x14006aa86
mov r12d, dword [rsp + 0x50]
movzx r13d, byte [rsp + 0x81a8]
mov ebp, dword gs:[0x48]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rsi, qword [rsp + 0x68]
xorps xmm6, xmm6
mov edi, eax
mov r10, qword [0x14015bc10]
lea r9, [0x140000000]
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
movzx eax, byte [r15]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x14006abf6.69
cdqe
movzx eax, byte [r9 + rax + 0x6b100]
mov ecx, dword [r9 + rax*4 + 0x6b0e0]
add rcx, r9
jmp rcx
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006ac0f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006ac4d
lea rdx, [0x14012046c]
mov rcx, rdx
cmp al, 3
jbe 0x14006ac28
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006ac4d
mov r9, rdx
cmp al, 1
jbe 0x14006ac37
mov r8, r11
mov rdx, rbx
jmp 0x14006ac4d
mov r8, rdx
test al, al
je 0x14006ac43
mov rdx, rbx
jmp 0x14006ac4d
lea r9, [0x14012046c]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d7650
test rax, rax
je case.0x14006abf6.69
mov rax, qword [0x14015bc10]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006b04f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140163c90], eax
mov rax, qword [0x14015bc10]
mov ecx, dword [rax + 0x74]
je 0x14006b045
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x14006b0a3
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006accb
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006ad09
lea rdx, [0x14012046c]
mov rcx, rdx
cmp al, 3
jbe 0x14006ace4
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006ad09
mov r9, rdx
cmp al, 1
jbe 0x14006acf3
mov r8, r11
mov rdx, rbx
jmp 0x14006ad09
mov r8, rdx
test al, al
je 0x14006acff
mov rdx, rbx
jmp 0x14006ad09
lea r9, [0x14012046c]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], r14b
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d7650
test rax, rax
je 0x14006ac77
jmp case.0x14006abf6.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006ad4f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006ad8d
lea rdx, [0x14012046c]
mov rcx, rdx
cmp al, 3
jbe 0x14006ad68
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006ad8d
mov r9, rdx
cmp al, 1
jbe 0x14006ad77
mov r8, r11
mov rdx, rbx
jmp 0x14006ad8d
mov r8, rdx
test al, al
je 0x14006ad83
mov rdx, rbx
jmp 0x14006ad8d
lea r9, [0x14012046c]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d7450
test rax, rax
jne 0x14006ac77
jmp case.0x14006abf6.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006adc4
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006ae02
lea rdx, [0x14012046c]
mov rcx, rdx
cmp al, 3
jbe 0x14006addd
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006ae02
mov r9, rdx
cmp al, 1
jbe 0x14006adec
mov r8, r11
mov rdx, rbx
jmp 0x14006ae02
mov r8, rdx
test al, al
je 0x14006adf8
mov rdx, rbx
jmp 0x14006ae02
lea r9, [0x14012046c]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d7450
test rax, rax
jne case.0x14006abf6.69
mov rax, qword [0x14015bc10]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006b04f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140163c90], eax
je 0x14006b03b
mov rax, qword [0x14015bc10]
mov ecx, dword [rax + 0x74]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x14006b0a3
cmp byte [rsp + 0x81b8], r14b
je 0x14006ae77
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x14006b04f
jmp case.0x14006abf6.69
mov ecx, ntohs
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006b04f
lea ecx, [rax + 0xf]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006b04f
jmp case.0x14006abf6.69
movzx eax, byte [rsp + 0x81b0]
test al, al
je 0x14006aec7
mov edx, dword [rsp + 0x54]
movzx ecx, al
call fcn.140094d20
cmp al, byte [rsp + 0x81a0]
je 0x14006b04f
jmp case.0x14006abf6.69
mov edx, dword [rsp + 0x60]
lea r8, [rsp + 0x110]
mov ecx, dword [rsp + 0x58]
xor r9d, r9d
call fcn.140094dd0
ucomisd xmm0, xmm6
jp 0x14006aeeb
jne 0x14006aeeb
xor eax, eax
jmp 0x14006aeed
mov al, 1
cmp al, byte [rsp + 0x81a0]
je 0x14006b04f
jmp case.0x14006abf6.69
test rsi, rsi
je 0x14006b066
lea rdx, [rsp + 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x5c], 0x103
jne 0x14006b056
cmp dword [0x140163c90], ebp
jne 0x14006b015
test r13b, r13b
jne 0x14006af4e
lea ebx, [rdi + r12]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x14006b01e
mov rbx, qword [rsp + 0x70]
mov edx, 1
mov ecx, 0x8000012f
call fcn.140001a10
mov r10, qword [0x14015bc10]
lea r9, [0x140000000]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
test al, al
je 0x14006abd0
cmp byte [r10 + 0x139], r14b
je 0x14006abd0
movsxd rcx, dword [0x1401617f0]
lea r9, [0x140000000]
test ecx, ecx
mov eax, 0x190
cmovne eax, ecx
movsxd rdx, eax
cmp qword [r9 + rdx*8 + 0x161e38], r15
jne 0x14006afd0
cmp dword [r9 + rdx*4 + 0x1617fc], edi
mov rdx, qword [rsp + 0x90]
je 0x14006abd0
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
mov qword [r9 + rcx*8 + 0x161e40], r15
mov dword [r9 + rcx*4 + 0x161800], edi
inc ecx
mov dword [0x1401617f0], ecx
cmp ecx, 0x190
jl 0x14006abd0
mov dword [0x1401617f0], r14d
jmp 0x14006abbb
lea ebx, [rdi + r12]
test r13b, r13b
jne 0x14006b02b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebx, eax
cmp ebx, 5
jle 0x14006b084
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14006aba8
mov rcx, qword [0x14015bc10]
mov ecx, dword [rcx + 0x74]
mov edx, 1
call fcn.140001a10
mov eax, 1
jmp 0x14006b0a3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, dword [rsp + 0x5c]
jmp 0x14006b06b
mov dword [rsp + 0x5c], r14d
mov rcx, qword [0x140160738]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, r14d
call fcn.140001570
mov eax, 1
jmp 0x14006b0a3
mov rcx, qword [0x140160738]
lea rdx, [0x140136e9c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d5e90
mov rbp, qword [rsp + 0x8178]
mov r12, qword [rsp + 0x8160]
mov rdi, qword [rsp + 0x8168]
mov rsi, qword [rsp + 0x8170]
mov r13, qword [rsp + 0x8158]
movaps xmm6, xmmword [rsp + 0x8140]
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret