Function at 0x435b20
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x8088
call fcn.004aea90
push ebx
push ebp
push esi
push edi
mov ebp, ecx
cmp byte [ebp], 0x3e
jne 0x435bc7
mov ecx, dword [0x4ddc10]
mov edx, str.UseErrorLevel
call fcn.0047cda0
test eax, eax
mov ecx, 0x4ddca0
mov al, 3
setne bl
cmp al, byte [ebp + 1]
mov byte [esp + 0x14], bl
sbb eax, eax
and eax, dword [0x4ddbbc]
push eax
push 1
push dword [esp + 0x1c]
lea eax, [esp + 0x24]
push eax
push dword [0x4ddc10]
mov al, bl
xor al, 1
movzx eax, al
push eax
push dword [0x4ddc0c]
push 0
push dword [0x4ddc08]
call fcn.00430fb0
test eax, eax
jne 0x435bc7
test bl, bl
je 0x435bbd
mov ecx, dword [0x4dc408]
push 1
push eax
push 0xffffffffffffffff
push str.ERROR
call fcn.0047faa0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp]
cmp al, 0x5d
jne 0x435cfd
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
mov ecx, dword [0x4ddc08]
xor edx, edx
push 0
call fcn.00414160
mov bl, al
add esp, 0xc
mov byte [esp + 0x12], bl
test bl, bl
jne 0x435c3e
mov ecx, dword [0x4ddc08]
lea edx, [esp + 0x2c]
push 0
call fcn.00454db0
mov ecx, eax
add esp, 4
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x435c20
cmp ecx, 0xc
jl 0x435c20
cmp ecx, 0x2b
jle 0x435c46
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4ca34c
call fcn.0047faa0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov edi, dword [0x4ddc0c]
mov byte [esp + 0x11], 0
mov dword [esp + 0x20], 1
mov byte [esp + 0x10], 1
movzx eax, word [edi]
mov dword [esp + 0x28], 0
test ax, ax
je 0x435cdf
mov ecx, eax
movzx esi, cx
test esi, 0xffffff80
je 0x435c7f
xor eax, eax
jmp 0x435c8a
push 2
push esi
call fcn.0049bd84
add esp, 8
mov ecx, esi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, esi
cmp ecx, 0x44
je 0x435ccc
cmp ecx, 0x4c
je 0x435cc2
cmp ecx, 0x54
jne 0x435cd1
lea ecx, [edi + 2]
mov byte [esp + 0x10], 0
call fcn.00415260
mulsd xmm0, qword [0x4d46d8]
cvttsd2si edx, xmm0
mov dword [esp + 0x28], edx
jmp 0x435cd1
mov dword [esp + 0x20], 0
jmp 0x435cd1
mov byte [esp + 0x11], 1
movzx eax, word [edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x435c70
lea eax, [esp + 0x90]
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], eax
jmp 0x435d9c
mov edx, dword [0x4ddc08]
mov ecx, dword [0x4ddc10]
cmp al, 0x3e
je 0x435d17
cmp al, 0x5c
je 0x435d1b
cmp word [ecx], 0
jne 0x435d21
cmp al, 0x5c
jne 0x435d6f
cmp word [edx], 0
je 0x435d6f
cmp al, 0x5c
mov byte [esp + 0x10], 0
cmove ecx, edx
call fcn.00415260
mulsd xmm0, qword [0x4d46d8]
mov bl, byte [esp + 0x10]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x12], bl
mov dword [esp + 0x24], edx
cvttsd2si ecx, xmm0
mov dword [esp + 0x28], ecx
cmp ecx, 1
mov cl, byte [esp + 0x10]
mov byte [esp + 0x11], cl
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], ecx
jge 0x435d9c
mov dword [esp + 0x28], 0x1f4
jmp 0x435d9c
mov byte [esp + 0x10], 1
mov al, byte [esp + 0x10]
mov byte [esp + 0x12], al
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov al, byte [esp + 0x10]
mov byte [esp + 0x11], al
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x28], 0
mov dword [esp + 0x20], eax
mov al, byte [ebp]
cmp al, 0x3e
je 0x435dbc
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4b716c
call fcn.0047faa0
mov al, byte [ebp]
cmp al, 0x5c
jne 0x435dd3
push 1
mov ecx, ebp
call fcn.00422cc0
mov byte [esp + 0x13], 1
cmp eax, 1
je 0x435dd8
mov byte [esp + 0x13], 0
xor edi, edi
lea ebx, [esp + 0x90]
cmp byte [ebp + 1], 0
mov ecx, 0x4001
jbe 0x435e53
nop dword [eax]
test ecx, ecx
jne 0x435dfe
mov dword [esp + edi*4 + 0x30], 0x4b70dc
jmp 0x435e4a
lea esi, [ecx - 1]
mov dword [esp + edi*4 + 0x30], ebx
push esi
push dword [edi*4 + 0x4ddc08]
push ebx
call fcn.004a1eb4
mov ecx, ebx
add esp, 0xc
xor eax, eax
mov word [ebx + esi*2], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x435e21
sub ecx, edx
sar ecx, 1
lea ebx, [ebx + ecx*2]
add ebx, 2
lea ecx, [esp + 0x90]
mov eax, ebx
sub eax, ecx
mov ecx, 0x4001
sar eax, 1
sub ecx, eax
movzx eax, byte [ebp + 1]
inc edi
cmp edi, eax
jl 0x435df0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, dword [0x4d98d8]
mov esi, eax
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
nop
movzx eax, byte [ebp]
add eax, 0xffffffc2
cmp eax, 0x3e
ja case.0x435e87.63
movzx eax, byte [eax + 0x43620c]
jmp dword [eax*4 + 0x4361ec]
mov al, byte [ebp + 1]
mov ecx, 0x4b70dc
cmp al, 4
mov edi, 0x4b70dc
push 0
cmova ecx, edx
mov esi, 0x4b70dc
cmp al, 3
mov edx, 0x4b70dc
push 0
cmova edi, dword [esp + 0x44]
cmp al, 1
push 1
cmova esi, dword [esp + 0x40]
test al, al
push 0
cmovne edx, dword [esp + 0x40]
push ecx
push edi
push esi
mov ecx, ebx
call fcn.00480f80
add esp, 0x1c
test eax, eax
jne 0x435fdb
mov esi, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp case.0x435e87.63
mov al, byte [ebp + 1]
mov edi, 0x4b70dc
cmp al, 4
mov esi, 0x4b70dc
push 0
cmova edi, edx
mov ecx, 0x4b70dc
push 0
cmp al, 3
mov edx, 0x4b70dc
push 0
cmova esi, dword [esp + 0x48]
cmp al, 1
push 0
cmova ecx, dword [esp + 0x44]
test al, al
push edi
cmovne edx, dword [esp + 0x44]
push esi
push ecx
mov ecx, ebx
call fcn.00480f80
add esp, 0x1c
test eax, eax
je 0x435fdb
mov esi, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp case.0x435e87.63
mov cl, byte [ebp + 1]
mov edi, 0x4b70dc
cmp cl, 4
mov esi, 0x4b70dc
push 1
cmova edi, edx
mov eax, 0x4b70dc
cmp cl, 3
mov edx, 0x4b70dc
push edi
cmova esi, dword [esp + 0x44]
cmp cl, 1
push esi
cmova eax, dword [esp + 0x40]
test cl, cl
push eax
cmovne edx, dword [esp + 0x40]
mov ecx, ebx
call fcn.00480df0
add esp, 0x10
jmp 0x435ed4
mov cl, byte [ebp + 1]
mov edi, 0x4b70dc
cmp cl, 4
mov esi, 0x4b70dc
push 1
cmova edi, edx
mov eax, 0x4b70dc
cmp cl, 3
mov edx, 0x4b70dc
push edi
cmova esi, dword [esp + 0x44]
cmp cl, 1
push esi
cmova eax, dword [esp + 0x40]
test cl, cl
push eax
cmovne edx, dword [esp + 0x40]
mov ecx, ebx
call fcn.00480df0
add esp, 0x10
test eax, eax
jne 0x435edc
mov eax, dword [0x4d98d8]
mov ecx, dword [eax + 0x54]
cmp ecx, 0xffffffff
jle 0x4361dd
mov edx, 1
call fcn.004015d0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [esp + 0x13], 0
je 0x43601d
call dword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x4361dd
jmp case.0x435e87.63
push 0xd
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x4361dd
push 0xf
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x4361dd
jmp case.0x435e87.63
mov al, byte [esp + 0x12]
test al, al
je 0x43605e
mov edx, dword [esp + 0x20]
mov cl, al
call fcn.00454f80
cmp al, byte [esp + 0x11]
je 0x4361dd
jmp case.0x435e87.63
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x24]
push 0
push eax
call fcn.00455020
add esp, 8
xorps xmm1, xmm1
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp 0x436089
mov al, 1
jmp 0x43608b
xor al, al
cmp al, byte [esp + 0x11]
je 0x4361dd
jmp case.0x435e87.63
test ecx, ecx
je 0x436174
lea eax, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [esp + 0x1c], 0x103
jne 0x436164
cmp byte [esp + 0x10], 0
jne 0x4360d3
call edi
mov ecx, dword [esp + 0x28]
add ecx, esi
sub ecx, eax
cmp ecx, 5
jle 0x435c20
mov edx, 1
mov ecx, 0x8000012f
call fcn.004015d0
mov ebx, dword [0x4d98d8]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x40]
test al, al
je 0x435e70
cmp byte [ebx + 0xf9], 0
je 0x435e70
mov eax, dword [0x4dcf2c]
mov ecx, 0x190
test eax, eax
cmovne ecx, eax
cmp dword [ecx*4 + 0x4dd56c], ebp
jne 0x43612e
cmp dword [ecx*4 + 0x4dcf2c], esi
mov ecx, dword [esp + 0x18]
je 0x435e70
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x40]
mov dword [eax*4 + 0x4dd570], ebp
mov dword [eax*4 + 0x4dcf30], esi
inc eax
mov dword [0x4dcf2c], eax
cmp eax, 0x190
jl 0x435e70
mov dword [0x4dcf2c], 0
jmp 0x435e67
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x1c]
jmp 0x43617a
xor edi, edi
mov dword [esp + 0x1c], edi
mov esi, dword [0x4dc408]
cmp byte [esi + 0x17], 0
jne 0x436189
mov esi, dword [esi + 0xc]
mov cl, byte [esi + 0x15]
test cl, 2
je 0x4361a2
and cl, 0x3d
mov byte [esi + 0x15], cl
mov ecx, dword [esi]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [esi + 0x15]
mov eax, edi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [esi], eax
mov dword [esi + 4], edx
mov byte [esi + 0x15], cl
jge 0x4361cd
mov ecx, esi
call fcn.00401330
and byte [esi + 0x15], 0x8f
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x4dc430], 0
je 0x4361dd
mov ecx, esi
call fcn.00401330
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret