Function at 0x10079360
Capabilities:
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d25c5
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x1010e040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov al, byte [esi + 0x10d]
mov ecx, dword [0x10115ba8]
mov byte [esi + 0x10c], al
mov byte [esi + 0x10d], 0
push 0x4f
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x100793c7
mov ecx, dword [0x10115ba8]
push 0x50
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x100793c7
xor bl, bl
jmp 0x100793c9
mov bl, 1
mov ecx, dword [0x10115ba8]
push 0x53
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x100793f3
mov ecx, dword [0x10115ba8]
push 0x54
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x100793f3
xor bh, bh
jmp 0x100793f5
mov bh, 1
mov ecx, dword [0x10115ba8]
push 0x51
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x1007941f
mov ecx, dword [0x10115ba8]
push 0x52
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
test al, al
jne 0x1007941f
xor cl, cl
jmp 0x10079421
mov cl, 1
xor al, al
mov byte [ebp - 0xd], al
test bh, bh
je 0x10079649
mov eax, dword [ebp + 8]
add eax, 0xfffffff5
cmp eax, 0x50
ja case.0x1007967f.67
movzx eax, byte [eax + 0x100799c4]
jmp dword [eax*4 + 0x1007998c]
mov ecx, dword [esi + 0xd8]
mov eax, ecx
neg eax
sbb eax, eax
neg eax
dec eax
mov dword [esi + 0x128], eax
mov dword [esi + 0x108], ecx
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x360]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x360]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x388]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x38c]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x328]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x32c]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
je 0x100794e9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x388]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x390]
mov eax, dword [esi]
mov ecx, esi
push 0xa
call dword [eax + 0x340]
cmp byte [esi + 0x173], 0
je 0x100795a1
mov ecx, dword [0x10115b8c]
push 0x20
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 0
test edi, edi
je 0x1007956a
mov ecx, dword [0x10115b8c]
mov dword [edi], vtable.KeyValues.0
mov dword [edi + 4], 0xffffffff
mov dword [edi + 0xc], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 8], 0
mov dword [edi + 8], 0
mov dword [edi + 8], 0
mov dword [edi + 0x18], 0
mov byte [edi + 0x1c], 0
mov eax, dword [ecx]
push str.TextNewLine
call dword [eax + 0x10]
mov dword [edi + 4], eax
jmp 0x1007956c
xor edi, edi
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
mov eax, dword [esi]
push edi
call dword [eax + 0xb4]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x338]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x33c]
jmp 0x100795a1
push 1
mov ecx, esi
call fcn.1007c520
mov bl, byte [ebp - 0xd]
cmp byte [esi + 0x144], 0
mov eax, dword [esi + 0x108]
mov dword [esi + 0x12c], eax
je 0x100795c3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x3e8]
test bl, bl
je case.0x1007967f.65
mov al, byte [esi + 0x10c]
mov ecx, esi
push dword [ebp + 8]
mov byte [esi + 0x10d], al
call fcn.10061f80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
jmp 0x1007959a
cmp byte [esi + 0x183], 0
je case.0x1007967f.67
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push 0
cmp eax, 0x4090409
jne 0x10079629
mov edi, dword [esi + 0x38c]
push edi
call dword [sym.imp.USER32.dll_ActivateKeyboardLayout]
movzx ecx, di
call fcn.1001c380
jmp 0x100795a1
push 0x4090409
mov dword [esi + 0x38c], eax
call dword [sym.imp.USER32.dll_ActivateKeyboardLayout]
mov ecx, 0x409
call fcn.1001c380
jmp 0x100795a1
test cl, cl
je 0x10079669
cmp byte [esi + 0x183], 0
je case.0x1007967f.67
cmp dword [ebp + 8], 0x39
je 0x100795a1
mov byte [ebp - 0xd], 1
jmp 0x100795a1
mov eax, dword [ebp + 8]
add eax, 0xffffffc0
cmp eax, 0x27
ja case.0x1007967f.65
movzx eax, byte [eax + 0x10079a54]
jmp dword [eax*4 + 0x10079a18]
test bl, bl
je case.0x1007967f.67
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x388]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x364]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
test bl, bl
jne 0x1007947e
call dword [eax + 0x350]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x318]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
je case.0x1007967f.67
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x320]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
je case.0x1007967f.67
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x324]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
mov ecx, esi
mov eax, dword [esi]
je 0x10079584
call dword [eax + 0x330]
jmp 0x100795a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x334]
jmp 0x100795a1
mov eax, dword [esi]
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
mov eax, dword [eax + 0x3ec]
mov ecx, esi
call eax
mov edx, dword [esi]
mov ecx, esi
test al, al
je 0x10079762
call dword [edx + 0x388]
jmp 0x100795a1
call dword [edx + 0x34c]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
je 0x100797a1
cmp byte [esi + 0x171], 0
je 0x100797a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x388]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x390]
mov eax, dword [esi]
mov ecx, esi
push 0xa
call dword [eax + 0x340]
jmp 0x100797a5
mov byte [ebp - 0xd], 1
cmp byte [esi + 0x173], 0
je 0x100795a1
mov ecx, dword [0x10115b8c]
push 0x20
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 1
jmp 0x1007950f
mov ecx, dword [esi + 0x148]
xor eax, eax
mov dword [ebp - 0x14], eax
cmp byte [esi + 0x145], al
jne 0x100797ed
test ecx, ecx
jne 0x100797ed
mov byte [ebp - 0xd], 1
jmp 0x10079804
mov byte [ebp - 0xd], al
test ecx, ecx
je 0x10079804
mov eax, dword [ecx]
call dword [eax + 0x304]
mov dword [ebp - 0x14], eax
xor al, al
mov byte [ebp - 0xd], al
cmp byte [esi + 0x145], 0
je 0x10079861
mov ecx, dword [0x10115b84]
push dword [esi + 0x13c]
mov edx, dword [ecx]
call dword [edx + 0xf8]
mov edi, dword [0x10115b80]
mov ecx, esi
mov edx, dword [esi]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
mov ebx, dword [edi]
lea eax, [ebp - 0x20]
push eax
call dword [edx]
push eax
mov ecx, edi
call dword [ebx + 0x14]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cdq
lea ecx, [ecx + 1]
idiv ecx
mov edi, eax
test edi, edi
jle 0x10079861
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x320]
sub edi, 1
jne 0x10079852
mov ecx, dword [esi + 0x148]
test ecx, ecx
je 0x100795a1
mov eax, dword [ecx]
call dword [eax + 0x314]
mov ecx, dword [esi + 0x148]
mov edi, eax
mov edx, dword [ecx]
call dword [edx + 0x304]
mov ebx, dword [ebp - 0x14]
sub edi, ebx
mov ecx, dword [esi + 0x148]
add eax, edi
sub ebx, eax
dec ebx
push ebx
mov edx, dword [ecx]
call dword [edx + 0x300]
jmp 0x100795a1
cmp byte [esi + 0x145], 0
mov ecx, dword [esi + 0x148]
mov dword [ebp - 0x14], 0
jne 0x100798c5
test ecx, ecx
jne 0x100798c5
mov byte [ebp - 0xd], 1
jmp 0x100798dd
mov byte [ebp - 0xd], 0
test ecx, ecx
je 0x100798dd
mov eax, dword [ecx]
call dword [eax + 0x304]
mov dword [ebp - 0x14], eax
xor al, al
mov byte [ebp - 0xd], al
cmp byte [esi + 0x145], 0
je 0x1007993f
mov ecx, dword [0x10115b84]
push dword [esi + 0x13c]
mov edx, dword [ecx]
call dword [edx + 0xf8]
mov edi, dword [0x10115b80]
mov ecx, esi
mov edx, dword [esi]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push eax
mov ebx, dword [edi]
lea eax, [ebp - 0x20]
push eax
call dword [edx]
push eax
mov ecx, edi
call dword [ebx + 0x14]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cdq
lea ecx, [ecx + 1]
idiv ecx
mov edi, eax
test edi, edi
jle 0x1007993f
nop dword [eax + eax]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x324]
sub edi, 1
jne 0x10079930
mov ecx, dword [esi + 0x148]
test ecx, ecx
je 0x100795a1
mov eax, dword [ecx]
call dword [eax + 0x314]
mov ecx, dword [esi + 0x148]
mov edi, eax
mov edx, dword [ecx]
call dword [edx + 0x304]
mov ebx, dword [ebp - 0x14]
add edi, ebx
mov ecx, dword [esi + 0x148]
sub edi, eax
lea eax, [ebx + 1]
mov edx, dword [ecx]
add eax, edi
push eax
call dword [edx + 0x300]
jmp 0x100795a1
mov bl, 1
jmp 0x100795a4