Function at 0x14002bff0
Capabilities:
Get keyboard layout

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xb8
xor ebx, ebx
movzx r13d, r9b
mov dword [rbp - 0x69], ebx
mov rax, rcx
mov word [rbp - 0x6b], bx
movzx r15d, bx
mov edi, ebx
test r8b, r8b
je 0x14002c041
cmp byte [rcx + 0x64], bl
je 0x14002c041
mov sil, 1
jmp 0x14002c044
xor sil, sil
add rcx, 0x74
mov byte [rbp - 0x6f], sil
mov r14, rdx
mov qword [rbp - 0x59], rcx
lea rcx, [rax + 0x174]
mov qword [rbp - 0x61], rcx
cmp word [rdx], bx
je 0x14002c61d
movzx r12d, byte [rbp + 0x6f]
nop dword [rax]
mov word [rbp - 0x6d], bx
movzx eax, word [r14]
cmp ax, 0x7b
je 0x14002c1a8
cmp ax, 0x7d
je 0x14002c4b5
test sil, sil
je 0x14002c09b
inc edi
mov dword [rbp - 0x69], edi
jmp 0x14002c4b5
xor ecx, ecx
mov word [rbp - 0x6d], ax
mov byte [rbp - 0x70], 0
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
cmp word [rbp - 0x6d], 0
jne 0x14002c0c0
xor sil, sil
xor r12b, r12b
xor dil, dil
jmp 0x14002c44a
movzx r8d, word [rbp - 0x6b]
test r8w, r8w
jne 0x14002c0ec
movzx ecx, word [rbp - 0x6d]
lea rdx, [rbp - 0x70]
mov r9b, 1
mov r8, rax
call fcn.1400234b0
xor r12b, r12b
movzx esi, al
xor dil, dil
jmp 0x14002c44a
movzx edx, word [rbp - 0x6d]
mov r9d, 0xffdf
movzx ecx, dx
and cx, r9w
lea eax, [rdx - 0x61]
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x56
jne 0x14002c157
movzx ecx, r8w
lea eax, [r8 - 0x61]
and cx, r9w
cmp ax, 0x19
cmova cx, r8w
cmp cx, 0x4b
jne 0x14002c157
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x69]
call fcn.1400c6d68
movzx ecx, al
mov esi, ebx
mov rax, qword [rbp - 0x51]
cmp word [rax], 0
cmove esi, ecx
xor r12b, r12b
xor dil, dil
jmp 0x14002c44a
lea rsi, [0x14011f3a0]
mov rdi, rbx
mov rbx, rsi
mov rcx, qword [rbx]
lea rdx, [rbp - 0x6d]
call fcn.1400c0304
test eax, eax
je 0x14002c195
inc rdi
lea rax, [0x14011fa50]
add rbx, 0x10
cmp rbx, rax
jl 0x14002c164
xor sil, sil
xor r12b, r12b
xor dil, dil
jmp 0x14002c44a
add rdi, rdi
xor r12b, r12b
movzx esi, byte [rsi + rdi*8 + 8]
xor dil, dil
jmp 0x14002c44a
add r14, 2
mov edx, 0x7d
mov rcx, r14
call fcn.1400bb988
mov r13, rax
test rax, rax
je 0x14002c4b5
mov rbx, rax
sub rbx, r14
sar rbx, 1
jne 0x14002c1e7
add r13, 2
cmp word [r13], 0x7d
jne 0x14002c4b3
mov ebx, 1
jmp 0x14002c1ed
cmp rbx, 1
jne 0x14002c204
test sil, sil
je 0x14002c1fc
inc edi
mov dword [rbp - 0x69], edi
jmp 0x14002c4b3
movzx eax, word [r14]
mov word [rbp - 0x6d], ax
add rbx, rbx
lea rcx, [rbp - 0x31]
mov r8, rbx
mov rdx, r14
call fcn.1400bba40
xor r14d, r14d
xor ecx, ecx
mov word [rbp + rbx - 0x31], r14w
mov byte [rbp - 0x70], r14b
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
movzx r10d, word [rbp - 0x31]
test r10w, r10w
jne 0x14002c245
xor sil, sil
mov r15d, r14d
movzx edi, r14b
jmp 0x14002c442
movzx edx, word [rbp - 0x2f]
movzx ecx, r10w
test dx, dx
jne 0x14002c269
mov r9b, 1
lea rdx, [rbp - 0x70]
mov r8, rax
call fcn.1400234b0
movzx esi, al
jmp 0x14002c315
mov ebx, 0xffdf
lea eax, [r10 - 0x61]
and cx, bx
cmp ax, 0x19
cmova cx, r10w
cmp cx, 0x56
jne 0x14002c2c0
movzx ecx, dx
lea eax, [rdx - 0x61]
and cx, bx
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x4b
jne 0x14002c2c0
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x2d]
call fcn.1400c6d68
movzx ecx, al
mov esi, r14d
mov rax, qword [rbp - 0x49]
cmp word [rax], si
cmove esi, ecx
jmp 0x14002c31a
lea rsi, [0x14011f3a0]
mov rdi, r14
mov rbx, rsi
nop dword [rax]
mov rcx, qword [rbx]
lea rdx, [rbp - 0x31]
call fcn.1400c0304
test eax, eax
je 0x14002c30d
inc rdi
lea rax, [0x14011fa50]
add rbx, 0x10
cmp rbx, rax
jl 0x14002c2d0
xor sil, sil
cmp word [rbp - 0x31], r14w
jne 0x14002c391
mov r15d, r14d
movzx edi, r14b
jmp 0x14002c442
add rdi, rdi
movzx esi, byte [rsi + rdi*8 + 8]
mov ebx, 0xffdf
test sil, sil
je 0x14002c2f6
movzx edx, word [rbp - 0x31]
movzx ecx, dx
and cx, bx
lea eax, [rdx - 0x61]
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x56
jne 0x14002c361
movzx edx, word [rbp - 0x2f]
movzx ecx, dx
and cx, bx
lea eax, [rdx - 0x61]
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x4b
jne 0x14002c361
mov r12b, 1
movzx edi, r14b
jmp 0x14002c442
mov dl, 1
movzx ecx, sil
xor r12b, r12b
call fcn.140023ea0
movzx r15d, ax
test ax, ax
je 0x14002c43e
mov eax, 0x100
xor r15w, ax
xor sil, sil
movzx edi, sil
jmp 0x14002c442
lea r15, [0x14011f2d0]
mov rdi, r14
mov rbx, r15
nop
mov rcx, qword [rbx]
lea rdx, [rbp - 0x31]
call fcn.1400c0304
test eax, eax
je 0x14002c42f
inc rdi
lea rax, [0x14011f3a0]
add rbx, 0x10
cmp rbx, rax
jl 0x14002c3a0
movzx ecx, word [rbp - 0x31]
lea eax, [rcx - 0x61]
cmp ax, 0x19
mov eax, ecx
ja 0x14002c3d5
and eax, 0xffffffdf
cmp ax, 0x53
jne 0x14002c41c
movzx edx, word [rbp - 0x2f]
mov r8d, 0xffdf
movzx ecx, dx
and cx, r8w
lea eax, [rdx - 0x61]
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x43
jne 0x14002c41c
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 0x2d]
call fcn.1400c6d68
mov ecx, eax
mov rax, qword [rbp - 0x41]
cmp word [rax], r14w
je 0x14002c426
movzx r15d, r14w
movzx edi, r14b
jmp 0x14002c442
mov dil, 1
movzx r15d, cx
jmp 0x14002c442
add rdi, rdi
movzx r15d, word [r15 + rdi*8 + 8]
movzx edi, r14b
jmp 0x14002c442
movzx edi, r12b
mov r14, r13
movzx r13d, byte [rbp + 0x77]
test sil, sil
je 0x14002c48a
movzx ecx, word [rbp - 0x6d]
test cx, cx
je 0x14002c53f
cmp byte [rbp + 0x6f], 0
je 0x14002c53f
call qword [sym.imp.USER32.dll_IsCharAlphaW]
test eax, eax
jne 0x14002c53f
mov rcx, qword [rbp - 0x59]
movzx eax, sil
add rcx, rax
test byte [rbp - 0x70], 0x30
sete al
inc al
or byte [rcx], al
movzx edx, byte [rbp + 0x7f]
mov rcx, qword [rbp - 0x61]
test r15w, r15w
jne 0x14002c49d
test dil, dil
je 0x14002c4b0
movzx eax, r15w
add rcx, rax
movzx eax, r13b
not al
and al, byte [rcx]
or al, dl
mov byte [rcx], al
mov edi, dword [rbp - 0x69]
xor ebx, ebx
movzx esi, byte [rbp - 0x6f]
add r14, 2
movzx r13d, byte [rbp + 0x77]
cmp word [r14], 0
jne 0x14002c070
mov r12, qword [rbp + 0x67]
test edi, edi
je 0x14002c614
mov rbx, qword [rbp + 0x5f]
mov eax, dword [rbx + 0x30]
cmp edi, eax
jbe 0x14002c599
test eax, eax
je 0x14002c4f5
mov rcx, qword [rbx + 0x28]
call fcn.1400c0480
lea ecx, [rdi*2 + 2]
call fcn.1400c0494
mov qword [rbx + 0x28], rax
test rax, rax
jne 0x14002c596
mov rax, qword [0x140127498]
lea rdx, [0x1400ffa10]
mov qword [rsp + 0x28], rax
lea rcx, [0x140127620]
xor eax, eax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.14000f850
jmp 0x14002c641
mov rcx, qword [rbp - 0x59]
movzx ebx, r13b
movzx edx, byte [rbp + 0x7f]
not bl
movzx eax, sil
add rcx, rax
movzx eax, byte [rcx]
and al, bl
or al, dl
mov byte [rcx], al
test r13b, r13b
je 0x14002c48e
test r12b, r12b
jne 0x14002c48e
xor edx, edx
movzx ecx, sil
call fcn.140023ea0
mov rcx, qword [rbp - 0x61]
movzx edx, byte [rbp + 0x7f]
test ax, ax
je 0x14002c492
movzx eax, ax
and byte [rax + rcx], bl
jmp 0x14002c492
mov dword [rbx + 0x30], edi
movzx eax, word [r12]
mov rbx, qword [rbx + 0x28]
test ax, ax
je 0x14002c60d
cmp ax, 0x7b
je 0x14002c5bc
cmp ax, 0x7d
je 0x14002c5fe
mov word [rbx], ax
add rbx, 2
jmp 0x14002c5fe
lea rdi, [r12 + 2]
mov edx, 0x7d
mov rcx, rdi
call fcn.1400bb988
mov rcx, rax
test rax, rax
je 0x14002c5fe
cmp rax, rdi
jne 0x14002c5e7
add rax, 2
cmp word [rax], 0x7d
cmove rcx, rax
lea rax, [r12 + 4]
cmp rcx, rax
jne 0x14002c5fb
movzx eax, word [rdi]
mov word [rbx], ax
add rbx, 2
mov r12, rcx
movzx eax, word [r12 + 2]
add r12, 2
test ax, ax
jne 0x14002c5a7
xor eax, eax
mov word [rbx], ax
jmp 0x14002c63c
mov rax, qword [rbp + 0x5f]
movzx r8d, byte [rbp + 0x6f]
test r8b, r8b
je 0x14002c63c
cmp dword [rax + 0x30], 0
je 0x14002c631
mov rax, qword [rax + 0x28]
mov word [rax], bx
jmp 0x14002c63c
lea rcx, [0x1400fbbd0]
mov qword [rax + 0x28], rcx
mov eax, 1
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret