Function at 0x14001a460
Capabilities:
Get keyboard layout

Disassembly:
mov qword [rsp + 0x18], rbx
mov byte [rsp + 0x10], dl
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
xor esi, esi
movzx ebp, r9b
xor r13b, r13b
mov r14, r8
mov byte [rsp + 0xb0], r13b
movzx r12d, dl
mov rdi, rcx
movzx r15d, si
mov rbx, rcx
nop word [rax + rax]
movzx eax, word [rbx]
cmp eax, 0x7f
ja 0x14001a4b9
mov ecx, eax
call fcn.1400c3610
test eax, eax
jne 0x14001a4b9
cmp word [rbx], 0x5f
jne 0x14001a4bf
add rbx, 2
jmp 0x14001a4a0
cmp rbx, rdi
jne 0x14001a4cd
cmp word [rdi], si
je 0x14001a4cd
add rbx, 2
test r12b, r12b
jne 0x14001a5b0
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001a4e9
cmp ax, 9
jne 0x14001a5b0
mov rcx, rbx
nop dword [rax]
cmp ax, 0x20
je 0x14001a4fc
cmp ax, 9
jne 0x14001a506
movzx eax, word [rcx + 2]
add rcx, 2
jmp 0x14001a4f0
lea rdx, [0x1400fe7e8]
call fcn.1400bea20
test eax, eax
jne 0x14001a5b0
test bpl, bpl
jne 0x14001a88c
test r14, r14
je 0x14001a52d
mov byte [r14 + 0x16], 1
mov r8d, SafeArrayAllocDescriptor
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.1400cd4c4
sub rbx, rdi
mov word [rsp + 0x6e], si
sar rbx, 1
cmp rbx, 0x20
jae 0x14001a556
mov word [rsp + rbx*2 + 0x30], si
lea rdi, [rsp + 0x30]
lea r12, [r14 + 0x12]
test r14, r14
jne 0x14001a569
lea r12, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
movzx r10d, word [rdi]
test r10w, r10w
je 0x14001a667
movzx edx, word [rdi + 2]
movzx ecx, r10w
test dx, dx
jne 0x14001a5d5
mov r9b, 1
lea rdx, [rsp + 0xb0]
mov r8, rax
call fcn.140023430
movzx r13d, byte [rsp + 0xb0]
movzx ebx, al
jmp 0x14001a73c
movzx eax, word [rbx]
test bpl, bpl
je 0x14001a5c6
test ax, ax
sete sil
mov eax, esi
jmp 0x14001a891
test ax, ax
je 0x14001a55b
mov eax, 4
jmp 0x14001a891
mov r8d, 0xffdf
lea eax, [r10 - 0x61]
and cx, r8w
cmp ax, 0x19
cmova cx, r10w
cmp cx, 0x56
jne 0x14001a639
movzx ecx, dx
lea eax, [rdx - 0x61]
and cx, r8w
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x4b
jne 0x14001a639
lea rcx, [rdi + 4]
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rsp + 0xb0]
call fcn.1400c52cc
movzx ecx, al
mov ebx, esi
mov rax, qword [rsp + 0xb0]
cmp word [rax], bx
cmove ebx, ecx
jmp 0x14001a73c
mov ebp, esi
lea rbx, [0x14011c3a0]
mov rcx, qword [rbx]
mov rdx, rdi
call fcn.1400bea20
test eax, eax
je 0x14001a72a
inc ebp
lea rax, [0x14011ca50]
add rbx, 0x10
cmp rbx, rax
jl 0x14001a642
xor bl, bl
xor edx, edx
mov rcx, rdi
call fcn.1400231e0
movzx r15d, ax
test ax, ax
jne 0x14001a8a9
movzx eax, word [rdi]
mov rbx, rdi
mov ebp, esi
mov ecx, 3
test ax, ax
je 0x14001a7d3
cmp ax, 0x30
jb 0x14001a6d4
nop dword [rax]
cmp ax, 0x39
ja 0x14001a6b4
movzx eax, word [rbx + 2]
add rbx, 2
cmp ax, 0x30
jae 0x14001a6a0
cmp rbx, rdi
jbe 0x14001a6d4
mov rcx, rdi
call fcn.14009b440
lea ecx, [rax - 1]
cmp ecx, 0xf
ja 0x14001a7ce
mov ebp, ecx
mov ecx, 3
mov r8, rcx
lea rdx, [0x140105910]
mov rcx, rbx
call fcn.1400bec00
test eax, eax
jne 0x14001a7ce
lea rcx, [rbx + 6]
lea rdx, [rsp + 0xb0]
call fcn.14009b2e0
mov rcx, qword [rsp + 0xb0]
cmp word [rcx], si
jne 0x14001a7ce
lea ecx, [rax - 1]
cmp ecx, 0x1f
mov ecx, 3
ja 0x14001a7d3
lea r15d, [rax + 0xb]
jmp 0x14001a7d6
movsxd rax, ebp
lea rcx, [0x14011c3a0]
add rax, rax
movzx ebx, byte [rcx + rax*8 + 8]
test bl, bl
je 0x14001a669
movzx esi, byte [rsp + 0xb8]
test sil, sil
je 0x14001a76f
lea eax, [rbx + 0x64]
cmp al, 3
ja 0x14001a792
xor r8d, r8d
lea rcx, [0x1400ff448]
mov rdx, rdi
call fcn.140011090
jmp 0x14001a891
test r14, r14
je 0x14001a792
mov r8d, 2
lea rdx, [0x1400ff478]
mov rcx, rdi
call fcn.1400bec00
test eax, eax
sete al
mov byte [r14 + 0x17], al
lea eax, [rbx - 1]
cmp al, 5
ja 0x14001a79e
cmp bl, 3
jne 0x14001a7a5
lea eax, [rbx + 0x66]
cmp al, 5
ja 0x14001a7a9
mov cl, 1
jmp 0x14001a7ab
xor cl, cl
test r13b, 0x30
je 0x14001a7bc
lea eax, [rbx - 0x41]
cmp al, 0x19
ja 0x14001a7bc
and r13b, 0xcf
test cl, cl
je 0x14001a8b1
mov byte [r12], 2
jmp 0x14001a8b1
mov ecx, 3
mov r15d, esi
test r15w, r15w
jne 0x14001a80f
cmp word [rdi + 2], si
jne 0x14001a7f8
cmp byte [0x140124d3c], sil
jne 0x14001a7f8
test r14, r14
cmove esi, ecx
mov eax, esi
jmp 0x14001a891
xor r8d, r8d
lea rcx, [0x1400ff480]
mov rdx, rdi
call fcn.140011090
jmp 0x14001a891
cmp byte [rsp + 0xb8], sil
jne 0x14001a758
inc dword [0x140122f44]
lea rcx, [0x140122f28]
movsxd rax, ebp
movzx ebx, bpl
mov byte [r12], 4
mov byte [rax + rcx], 1
test r14, r14
je 0x14001a88c
movzx r8d, r13b
mov byte [r14 + 0x10], bl
and r8b, 0xd5
mov word [r14 + 8], r15w
movzx eax, r8b
and al, 0xc0
neg al
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
test r8b, 0xc
cmove edx, ecx
mov ecx, edx
or ecx, 4
test r8b, 0x30
cmove ecx, edx
mov eax, ecx
or eax, 2
test r8b, 3
cmove eax, ecx
and r13b, 0x2a
or dword [r14], eax
or byte [r14 + 0xe], r13b
mov eax, 1
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx esi, byte [rsp + 0xb8]
test sil, sil
je 0x14001a83a
test r14, r14
je 0x14001a88c
mov byte [r14 + 0x11], bl
mov word [r14 + 0xa], r15w
jmp 0x14001a88c