Function at 0x140065f60
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push rbx
push r14
push r15
mov eax, 0x8180
call fcn.1400ed080
sub rsp, rax
xor r14d, r14d
mov r15, rcx
cmp byte [rcx], 0x3e
jne 0x140066030
mov rcx, qword [0x140129e70]
lea rdx, str.UseErrorLevel
call fcn.1400ce990
mov r9, qword [0x140129e68]
test rax, rax
mov rdx, qword [0x140129e60]
mov eax, r14d
setne bl
cmp byte [r15 + 1], 3
movzx ecx, bl
cmova rax, qword [0x140129dd8]
xor cl, 1
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov byte [rsp + 0x40], 1
lea rax, [rsp + 0x68]
mov byte [rsp + 0x38], bl
mov qword [rsp + 0x30], rax
mov rax, qword [0x140129e70]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
lea rcx, [0x14012afc0]
call fcn.1400611f0
test eax, eax
jne 0x140066030
test bl, bl
je 0x140066020
mov rcx, qword [0x140127a38]
lea r8, [r14 - 1]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea rdx, str.ERROR
call fcn.1400d3520
mov r14d, eax
mov eax, r14d
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret
movzx eax, byte [r15]
mov qword [rsp + 0x8170], rsi
mov qword [rsp + 0x8168], rdi
mov qword [rsp + 0x8160], r12
mov qword [rsp + 0x8158], r13
movaps xmmword [rsp + 0x8140], xmm6
cmp al, 0x5d
jne 0x1400661a8
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, qword [0x140129e60]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.140023fb0
mov byte [rsp + 0x81b0], al
test al, al
jne 0x1400660d5
mov rcx, qword [0x140129e60]
lea rdx, [rsp + 0x60]
xor r8d, r8d
call fcn.1400925e0
mov dword [rsp + 0x58], eax
test eax, eax
je 0x1400660b1
add eax, 0xfffffff4
cmp eax, 0x1f
jbe 0x1400660e0
mov rcx, qword [0x140127a38]
lea rdx, [0x14010620c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3520
jmp 0x1400668cb
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
mov rdi, qword [0x140129e68]
mov r13b, 1
mov byte [rsp + 0x81a0], r14b
mov r12d, r14d
mov dword [rsp + 0x54], 1
mov byte [rsp + 0x81a8], r13b
movzx eax, word [rdi]
mov dword [rsp + 0x50], r14d
test ax, ax
je 0x14006618e
movsd xmm6, qword [0x1401144a8]
nop word [rax + rax]
movzx ebx, ax
test ebx, 0xffffff80
jne 0x14006613f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14006613f
and ebx, 0xffffffdf
cmp ebx, 0x44
je 0x14006616c
cmp ebx, 0x4c
je 0x140066165
cmp ebx, 0x54
jne 0x140066174
xor r13b, r13b
lea rcx, [rdi + 2]
call fcn.140031da0
mulsd xmm0, xmm6
cvttsd2si r12d, xmm0
jmp 0x140066174
mov dword [rsp + 0x54], r14d
jmp 0x140066174
mov byte [rsp + 0x81a0], 1
movzx eax, word [rdi + 2]
add rdi, 2
test ax, ax
jne 0x140066120
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r12d
lea rax, [rsp + 0x130]
mov dword [rsp + 0x120], r14d
mov qword [rsp + 0x110], rax
jmp 0x140066213
cmp al, 0x3e
je 0x1400661cc
mov rdx, qword [0x140129e60]
mov rcx, qword [0x140129e70]
cmp al, 0x5c
je 0x1400662a9
cmp word [rcx], r14w
jne 0x1400662b3
movzx eax, byte [rsp + 0x81a0]
mov r13b, 1
mov byte [rsp + 0x81b0], al
mov r12d, r14d
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x81a0]
mov byte [rsp + 0x81a0], al
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0x54], eax
mov byte [rsp + 0x81a8], r13b
mov dword [rsp + 0x50], r14d
movzx eax, byte [r15]
mov qword [rsp + 0x8178], rbp
cmp al, 0x3e
je 0x140066246
mov rcx, qword [0x140127a38]
lea rdx, [0x1400ef8b4]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3520
movzx eax, byte [r15]
cmp al, 0x5c
jne 0x140066264
mov edx, 1
mov rcx, r15
call fcn.14004e6a0
mov byte [rsp + 0x81b8], 1
cmp eax, 1
je 0x14006626c
mov byte [rsp + 0x81b8], r14b
mov ebp, r14d
lea rdi, [rsp + 0x130]
mov ecx, 0x4001
cmp byte [r15 + 1], bpl
jbe 0x1400663ad
mov rsi, r14
lea r13, [0x1400ef7d4]
lea r12, [0x140000000]
test ecx, ecx
jne 0x14006632b
mov qword [rsp + rsi + 0x70], r13
jmp 0x14006638c
cmp word [rdx], r14w
je 0x1400661cc
xor r13b, r13b
cmp al, 0x5c
mov byte [rsp + 0x81a8], r13b
cmove rcx, rdx
call fcn.140031da0
movzx ecx, byte [rsp + 0x81a0]
movzx r8d, byte [rsp + 0x81a0]
mov edx, dword [rsp + 0x81a0]
mulsd xmm0, qword [0x1401144a8]
mov byte [rsp + 0x81a0], cl
mov ecx, dword [rsp + 0x81a0]
mov byte [rsp + 0x81b0], r8b
mov dword [rsp + 0x58], edx
cvttsd2si r12d, xmm0
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], r12d
cmp r12d, 1
jge 0x140066213
mov r12d, 0x1f4
mov dword [rsp + 0x50], r12d
jmp 0x140066213
mov rdx, qword [rsi + r12 + 0x129e60]
movsxd rbx, ecx
mov rcx, rdi
mov qword [rsp + rsi + 0x70], rdi
lea r8, [rbx - 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov rax, 0xffffffffffffffff
mov word [rdi + rbx*2 - 2], r14w
nop word [rax + rax]
cmp word [rdi + rax*2 + 2], r14w
lea rax, [rax + 1]
jne 0x140066360
lea rdi, [rdi + rax*2]
add rdi, 2
lea rcx, [rsp + 0x130]
mov rax, rdi
sub rax, rcx
mov ecx, 0x4001
sar rax, 1
sub ecx, eax
movzx eax, byte [r15 + 1]
inc ebp
add rsi, 8
cmp ebp, eax
jl 0x140066297
mov r12d, dword [rsp + 0x50]
movzx r13d, byte [rsp + 0x81a8]
mov ebp, dword gs:[0x48]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rsi, qword [rsp + 0x68]
xorps xmm6, xmm6
mov edi, eax
mov r10, qword [0x140124200]
lea r9, [0x140000000]
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
nop dword [rax]
movzx eax, byte [r15]
add eax, 0xffffffc2
cmp eax, 0x40
ja case.0x140066416.69
cdqe
movzx eax, byte [r9 + rax + 0x66920]
mov ecx, dword [r9 + rax*4 + 0x66900]
add rcx, r9
jmp rcx
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006642f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x14006646d
lea rdx, [0x1400ef7d4]
mov rcx, rdx
cmp al, 3
jbe 0x140066448
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x14006646d
mov r9, rdx
cmp al, 1
jbe 0x140066457
mov r8, r11
mov rdx, rbx
jmp 0x14006646d
mov r8, rdx
test al, al
je 0x140066463
mov rdx, rbx
jmp 0x14006646d
lea r9, [0x1400ef7d4]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4cf0
test rax, rax
je case.0x140066416.69
mov rax, qword [0x140124200]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006686f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x14012af90], eax
mov rax, qword [0x140124200]
mov ecx, dword [rax + 0x74]
je 0x140066865
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x1400668c3
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x1400664eb
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x140066529
lea rdx, [0x1400ef7d4]
mov rcx, rdx
cmp al, 3
jbe 0x140066504
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x140066529
mov r9, rdx
cmp al, 1
jbe 0x140066513
mov r8, r11
mov rdx, rbx
jmp 0x140066529
mov r8, rdx
test al, al
je 0x14006651f
mov rdx, rbx
jmp 0x140066529
lea r9, [0x1400ef7d4]
mov rcx, r9
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x38], r14
mov byte [rsp + 0x30], r14b
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4cf0
test rax, rax
je 0x140066497
jmp case.0x140066416.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x14006656f
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x1400665ad
lea rdx, [0x1400ef7d4]
mov rcx, rdx
cmp al, 3
jbe 0x140066588
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x1400665ad
mov r9, rdx
cmp al, 1
jbe 0x140066597
mov r8, r11
mov rdx, rbx
jmp 0x1400665ad
mov r8, rdx
test al, al
je 0x1400665a3
mov rdx, rbx
jmp 0x1400665ad
lea r9, [0x1400ef7d4]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4af0
test rax, rax
jne 0x140066497
jmp case.0x140066416.69
movzx eax, byte [r15 + 1]
cmp al, 4
jbe 0x1400665e4
mov rcx, rdx
mov r9, r8
mov r8, r11
mov rdx, rbx
jmp 0x140066622
lea rdx, [0x1400ef7d4]
mov rcx, rdx
cmp al, 3
jbe 0x1400665fd
mov r9, r8
mov rdx, rbx
mov r8, r11
jmp 0x140066622
mov r9, rdx
cmp al, 1
jbe 0x14006660c
mov r8, r11
mov rdx, rbx
jmp 0x140066622
mov r8, rdx
test al, al
je 0x140066618
mov rdx, rbx
jmp 0x140066622
lea r9, [0x1400ef7d4]
mov rcx, r9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, r10
call fcn.1400d4af0
test rax, rax
jne case.0x140066416.69
mov rax, qword [0x140124200]
cmp dword [rax + 0x74], 0xffffffff
jle 0x14006686f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x14012af90], eax
je 0x14006685b
mov rax, qword [0x140124200]
mov ecx, dword [rax + 0x74]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x1400668c3
cmp byte [rsp + 0x81b8], r14b
je 0x140066697
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x14006686f
jmp case.0x140066416.69
mov ecx, ntohs
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006686f
lea ecx, [rax + 0xf]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14006686f
jmp case.0x140066416.69
movzx eax, byte [rsp + 0x81b0]
test al, al
je 0x1400666e7
mov edx, dword [rsp + 0x54]
movzx ecx, al
call fcn.140092920
cmp al, byte [rsp + 0x81a0]
je 0x14006686f
jmp case.0x140066416.69
mov edx, dword [rsp + 0x60]
lea r8, [rsp + 0x110]
mov ecx, dword [rsp + 0x58]
xor r9d, r9d
call fcn.1400929d0
ucomisd xmm0, xmm6
jp 0x14006670b
jne 0x14006670b
xor eax, eax
jmp 0x14006670d
mov al, 1
cmp al, byte [rsp + 0x81a0]
je 0x14006686f
jmp case.0x140066416.69
test rsi, rsi
je 0x140066886
lea rdx, [rsp + 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x5c], 0x103
jne 0x140066876
cmp dword [0x14012af90], ebp
jne 0x140066835
test r13b, r13b
jne 0x14006676e
lea ebx, [rdi + r12]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x14006683e
mov rbx, qword [rsp + 0x70]
mov edx, 1
mov ecx, 0x8000012f
call fcn.1400019e0
mov r10, qword [0x140124200]
lea r9, [0x140000000]
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
test al, al
je 0x1400663f0
cmp byte [r10 + 0x139], r14b
je 0x1400663f0
movsxd rcx, dword [0x140128af0]
lea r9, [0x140000000]
test ecx, ecx
mov eax, 0x190
cmovne eax, ecx
movsxd rdx, eax
cmp qword [r9 + rdx*8 + 0x129138], r15
jne 0x1400667f0
cmp dword [r9 + rdx*4 + 0x128afc], edi
mov rdx, qword [rsp + 0x90]
je 0x1400663f0
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov r11, qword [rsp + 0x78]
mov qword [r9 + rcx*8 + 0x129140], r15
mov dword [r9 + rcx*4 + 0x128b00], edi
inc ecx
mov dword [0x140128af0], ecx
cmp ecx, 0x190
jl 0x1400663f0
mov dword [0x140128af0], r14d
jmp 0x1400663d8
lea ebx, [rdi + r12]
test r13b, r13b
jne 0x14006684b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebx, eax
cmp ebx, 5
jle 0x1400668a4
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400663c5
mov rcx, qword [0x140124200]
mov ecx, dword [rcx + 0x74]
mov edx, 1
call fcn.1400019e0
mov eax, 1
jmp 0x1400668c3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, dword [rsp + 0x5c]
jmp 0x14006688b
mov dword [rsp + 0x5c], r14d
mov rcx, qword [0x140127a38]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, r14d
call fcn.140001540
mov eax, 1
jmp 0x1400668c3
mov rcx, qword [0x140127a38]
lea rdx, [0x14010620c]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400d3520
mov rbp, qword [rsp + 0x8178]
mov r12, qword [rsp + 0x8160]
mov rdi, qword [rsp + 0x8168]
mov rsi, qword [rsp + 0x8170]
mov r13, qword [rsp + 0x8158]
movaps xmm6, xmmword [rsp + 0x8140]
add rsp, 0x8180
pop r15
pop r14
pop rbx
ret