Function at 0x415b70
Capabilities:
Get keyboard layout

Disassembly:
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov bl, dl
mov byte [esp + 0x11], 0
mov edi, ecx
mov byte [esp + 0x12], bl
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x7f
ja 0x415ba1
push eax
call fcn.004a3b30
add esp, 4
test eax, eax
jne 0x415ba1
cmp word [esi], 0x5f
jne 0x415ba6
add esi, 2
jmp 0x415b86
cmp esi, edi
jne 0x415bb3
cmp word [edi], 0
je 0x415bb3
add esi, 2
mov ebp, dword [esp + 0x60]
test bl, bl
jne 0x415c8f
movzx ecx, word [esi]
cmp ecx, 0x20
je 0x415bd0
cmp ecx, 9
jne 0x415c8f
mov eax, esi
cmp cx, 0x20
je 0x415bde
cmp cx, 9
jne 0x415be7
movzx ecx, word [eax + 2]
add eax, 2
jmp 0x415bd2
push 0x4d34a4
push eax
call fcn.0049f841
add esp, 8
test eax, eax
jne 0x415c8f
cmp byte [esp + 0x64], al
jne 0x415dfa
test ebp, ebp
je 0x415c0f
mov byte [ebp + 0x16], 1
push 0x1f
lea eax, [esp + 0x1c]
push edi
push eax
call fcn.004aad14
sub esi, edi
xor eax, eax
sar esi, 1
add esp, 0xc
mov word [esp + 0x56], ax
cmp esi, 0x20
jae 0x415c34
mov word [esp + esi*2 + 0x18], ax
lea edi, [esp + 0x18]
lea esi, [ebp + 0x12]
test ebp, ebp
jne 0x415c43
lea esi, [esp + 0x13]
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
push 1
lea edx, [esp + 0x1d]
mov ecx, edi
call fcn.0041cb80
mov bl, al
add esp, 0xc
test bl, bl
je 0x415d20
cmp byte [esp + 0x12], 0
je 0x415cbb
lea ecx, [ebx + 0x64]
cmp cl, 3
ja 0x415cd7
push 0
mov edx, edi
mov ecx, str.Unsupported_prefix_key.
call fcn.0040ddc0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
cmp byte [esp + 0x64], 0
movzx ecx, word [esi]
je 0x415ca9
xor eax, eax
test cx, cx
sete al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
test cx, cx
je 0x415c38
mov eax, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
test ebp, ebp
je 0x415cd7
push 2
push 0x4d40e4
push edi
call fcn.0049f9c2
add esp, 0xc
test eax, eax
sete al
mov byte [ebp + 0x17], al
mov al, bl
dec al
cmp al, 5
ja 0x415ce4
cmp bl, 3
jne 0x415cec
mov al, bl
add al, 0x66
cmp al, 5
ja 0x415cf0
mov dl, 1
jmp 0x415cf2
xor dl, dl
mov cl, byte [esp + 0x11]
mov byte [esp + 0x11], cl
test cl, 0x30
je 0x415d0e
mov al, bl
sub al, 0x41
cmp al, 0x19
ja 0x415d0e
and cl, 0xcf
mov byte [esp + 0x11], cl
xor eax, eax
test dl, dl
je 0x415e0f
mov byte [esi], 2
jmp 0x415e0f
xor edx, edx
mov ecx, edi
call fcn.0041cac0
movzx eax, ax
test ax, ax
jne 0x415e07
push 1
lea edx, [esp + 0x18]
mov ecx, edi
call fcn.00454ac0
movzx eax, ax
add esp, 4
test ax, ax
jne 0x415d88
cmp word [edi + 2], ax
jne 0x415d6f
cmp byte [0x4ea58c], al
jne 0x415d6f
xor eax, eax
mov ecx, 3
test ebp, ebp
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
push 0
mov edx, edi
mov ecx, str.Invalid_key_name.
call fcn.0040ddc0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
cmp byte [esp + 0x12], 0
jne 0x415c76
mov ebx, dword [esp + 0x14]
mov cl, byte [esp + 0x11]
inc dword [0x4e8fc0]
mov byte [esi], 4
mov byte [ebx + 0x4e8fa8], 1
mov byte [esp + 0x11], cl
test ebp, ebp
je 0x415dfa
mov word [ebp + 8], ax
mov byte [ebp + 0x10], bl
mov bl, cl
and bl, 0xd5
mov al, bl
and al, 0xc0
movzx ecx, al
neg ecx
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
test bl, 0xc
cmove edx, ecx
mov ecx, edx
or ecx, 4
test bl, 0x30
cmove ecx, edx
mov eax, ecx
or eax, 2
test bl, 3
cmove eax, ecx
or dword [ebp], eax
mov al, byte [esp + 0x11]
and al, 0x2a
or byte [ebp + 0xe], al
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
mov cl, byte [esp + 0x11]
mov byte [esp + 0x11], cl
cmp byte [esp + 0x12], 0
je 0x415daf
test ebp, ebp
je 0x415dfa
pop edi
pop esi
mov byte [ebp + 0x11], bl
mov word [ebp + 0xa], ax
mov eax, 1
pop ebp
pop ebx
add esp, 0x4c
ret