Function at 0x4910c0
Capabilities:
Get keyboard layout

Disassembly:
sub esp, 0x110
mov eax, dword [0x6687b8]
xor eax, esp
mov dword [esp + 0x10c], eax
push ebx
xor ebx, ebx
call fcn.00484fb0
test eax, eax
jne 0x4910f6
pop ebx
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.005d28b3
add esp, 0x110
ret
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_GetKeyboardLayoutList]
push 0
push 0
call esi
mov dword [esp + 0x10], eax
add eax, eax
add eax, eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebp, eax
test ebp, ebp
jne 0x491133
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.005d28b3
add esp, 0x110
ret
mov ecx, dword [esp + 0x10]
push ebp
push ecx
call esi
xor esi, esi
cmp dword [esp + 0x10], ebx
jle 0x491577
jmp 0x491150
push 0x102
lea edx, [esp + 0x1a]
push 0
push edx
mov word [esp + 0x20], 0
call fcn.005da970
mov ecx, dword [ebp + esi*4]
add esp, 0xc
push 0x80
lea eax, [esp + 0x18]
push eax
push ecx
call sub.IMM32.dll_ImmGetDescriptionW
lea edx, [esp + 0xc]
push edx
lea ecx, [esp + 0x18]
call fcn.00409dd0
mov ecx, dword [esp + 0xc]
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a30
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4911bd
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4911bd
or ebx, 1
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a38
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4911e9
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4911e9
or ebx, 2
cmp dword [ecx - 0xc], 0
jl 0x49154e
push str.IQ
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491215
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491215
or ebx, 4
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a48
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491241
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491241
or ebx, 8
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a54
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x49126d
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x49126d
or ebx, 0x20
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a5c
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491299
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491299
or ebx, 0x40
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a68
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4912c8
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4912c8
or ebx, 0x80
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a74
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4912f7
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4912f7
or ebx, 0x100
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a80
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491326
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491326
or ebx, 0x200
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a8c
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491355
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491355
or ebx, 0x400
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630a98
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491384
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491384
or ebx, 0x800
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630aa4
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4913b3
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4913b3
or ebx, 0x1000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630ab0
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4913e2
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4913e2
or ebx, 0x2000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630abc
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491411
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491411
or ebx, 0x4000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630ac8
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491440
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491440
or ebx, 0x8000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push str.Microsoft_Pinyin_IME
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x49146f
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x49146f
or ebx, 0x10000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630b00
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x49149e
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x49149e
or ebx, 0x20000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630b0c
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4914cd
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4914cd
or ebx, 0x40000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630b18
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x4914f8
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4914f8
or ebx, 0x80000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630b20
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x491523
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x491523
or ebx, 0x100000
cmp dword [ecx - 0xc], 0
jl 0x49154e
push 0x630b28
push ecx
call fcn.005d2e73
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x49154e
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x49154e
or ebx, 0x200000
lea eax, [ecx - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49156a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 1
cmp esi, dword [esp + 0x10]
jl 0x491150
push ebp
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x118]
pop esi
pop ebp
mov eax, ebx
pop ebx
xor ecx, esp
call fcn.005d28b3
add esp, 0x110
ret