Function at 0x432b90
Capabilities:
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46efd8
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x495574]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [ebp + 8]
mov dword [edi], 0
mov dword [edi + 4], 0
mov byte [edi + 8], 0
mov ecx, dword [ecx]
mov edx, ecx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x432bf8
nop dword [eax + eax]
cmp dword [eax + 0x10], 0x409
jae 0x432bee
mov eax, dword [eax + 8]
jmp 0x432bf2
mov edx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x432be0
cmp edx, ecx
je 0x432cab
cmp dword [edx + 0x10], 0x409
ja 0x432cab
lea ecx, [ebp - 0x20]
call fcn.0043a63e
push ecx
xor edx, edx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00415b30
add esp, 4
test al, al
jne 0x432c3b
lea ecx, [ebp - 0x20]
call fcn.0043a655
jmp 0x432e18
mov ebx, dword [ebp - 0x18]
xor edx, edx
test ebx, ebx
jle 0x432c2e
test edx, edx
js 0x432e2e
cmp edx, ebx
jge 0x432e2e
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax + edx*4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x432c9a
cmp dword [eax + 0x10], esi
jae 0x432c72
mov eax, dword [eax + 8]
jmp 0x432c76
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x432c68
mov eax, dword [ebp + 8]
cmp ecx, dword [eax]
je 0x432c9a
cmp esi, dword [ecx + 0x10]
jb 0x432c9a
inc edx
cmp edx, ebx
jl 0x432c44
lea ecx, [ebp - 0x20]
call fcn.0043a655
jmp 0x432e18
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0043a655
jmp 0x432cb0
mov esi, 0x409
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov dword [edi], eax
test eax, eax
je 0x432e18
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0x47ab24
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 1
call fcn.0043a63e
lea edx, [ebp - 0x34]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.00419960
test al, al
je 0x432d2d
mov ecx, dword [ebp - 0x2c]
xor eax, eax
test ecx, ecx
jle 0x432d2d
mov edx, dword [ebp - 0x30]
test eax, eax
js 0x432e2e
cmp eax, ecx
jge 0x432e2e
cmp dword [edx + eax*4], esi
je 0x432d93
inc eax
cmp eax, ecx
jl 0x432d13
mov edx, esi
lea ecx, [ebp + 8]
call fcn.0041b630
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_LoadKeyboardLayoutW]
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [edi + 4], eax
setne al
add ecx, 0xfffffff0
mov byte [edi + 8], al
or eax, 0xffffffff
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x432db6
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, 0x471758
jne 0x432e33
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x432e33
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x432db6
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x34]
mov eax, dword [esi + eax*4]
mov dword [edi + 4], eax
mov byte [edi + 8], 0
call fcn.0043a655
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x432dd5
push esi
jmp 0x432dcd
lea ecx, [ebp - 0x34]
call fcn.0043a655
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x432dd5
push eax
call fcn.00436734
add esp, 4
mov eax, dword [edi + 4]
test eax, eax
je 0x432e18
mov esi, dword [sym.imp.USER32.dll_ActivateKeyboardLayout]
push 0
push eax
call esi
test eax, eax
je 0x432df2
call fcn.00432ac0
jmp 0x432e18
push 0
push dword [edi]
call esi
cmp byte [edi + 8], 0
mov dword [edi], 0
je 0x432e11
push dword [edi + 4]
call dword [sym.imp.USER32.dll_UnloadKeyboardLayout]
mov byte [edi + 8], 0
mov dword [edi + 4], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.00437e01
mov ecx, edx
call esi
jmp 0x432db6