Function at 0x14004e3c0
Capabilities:
Get keyboard layout

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov r13, rcx
movzx esi, r9b
xor ecx, ecx
movzx edi, r8b
mov word [rsp + 0x36], cx
mov r14, rdx
movzx ebp, cx
mov r12d, ecx
test r8b, r8b
je 0x14004e409
cmp byte [r13 + 0x65], cl
je 0x14004e409
mov bl, 1
jmp 0x14004e40b
xor bl, bl
mov r15, rdx
mov byte [rsp + 0x90], bl
cmp word [rdx], cx
je 0x14004e897
movzx r14d, byte [rsp + 0xa0]
mov edx, 0x7d
nop dword [rax]
mov word [rsp + 0x34], cx
movzx eax, word [r15]
cmp ax, 0x7b
je 0x14004e61f
cmp ax, 0x7d
je 0x14004e58d
test bl, bl
je 0x14004e459
inc r12d
jmp 0x14004e58d
xor ecx, ecx
mov word [rsp + 0x34], ax
mov byte [rsp + 0x30], 0
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r8, rax
movzx eax, word [rsp + 0x34]
test ax, ax
je 0x14004e551
movzx ecx, word [rsp + 0x36]
test cx, cx
jne 0x14004e49e
mov r9b, 1
lea rdx, [rsp + 0x30]
movzx ecx, ax
call fcn.1400192b0
movzx ebx, al
jmp 0x14004e770
movzx ebx, ax
test ebx, 0xffffff80
je 0x14004e4ad
xor edx, edx
jmp 0x14004e4c1
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx ecx, word [rsp + 0x36]
mov edx, eax
movzx eax, bx
mov r8d, 0xffdf
and ax, r8w
test edx, edx
cmove ax, bx
cmp ax, 0x56
jne 0x14004e510
call fcn.14000d4e0
cmp ax, 0x4b
jne 0x14004e510
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
movzx ecx, al
xor ebx, ebx
mov rax, qword [rsp + 0x38]
cmp word [rax], bx
cmove ebx, ecx
jmp 0x14004e770
xor edi, edi
lea rbx, str.Numpad0
nop dword [rax]
mov rcx, qword [rbx]
lea rdx, [rsp + 0x34]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e60a
inc rdi
lea rax, [0x1400ff810]
add rbx, 0x10
cmp rbx, rax
jl 0x14004e520
movzx ebx, byte [rsp + 0x90]
movzx edx, byte [rsp + 0xb0]
test bp, bp
jne 0x14004e565
cmp byte [rsp + 0x31], bpl
je 0x14004e580
movzx eax, bp
lea rcx, [rax + r13]
movzx eax, sil
not al
and al, byte [rcx + 0x174]
or al, dl
mov byte [rcx + 0x174], al
movzx edi, byte [rsp + 0xa0]
xor ecx, ecx
lea edx, [rcx + 0x7d]
movzx esi, byte [rsp + 0xa8]
add r15, 2
cmp word [r15], 0
jne 0x14004e430
mov r14, qword [rsp + 0x98]
test r12d, r12d
je 0x14004e897
mov eax, dword [r13 + 0x30]
cmp r12d, eax
jbe 0x14004e81c
test eax, eax
je 0x14004e5d0
mov rcx, qword [r13 + 0x28]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea ecx, [r12*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r13 + 0x28], rax
test rax, rax
jne 0x14004e818
lea r8, [0x1400cc644]
lea rdx, str.Out_of_memory.
lea rcx, [0x140105cf0]
call fcn.1400481c0
jmp 0x14004e8bc
shl rdi, 4
lea rax, str.Numpad0
movzx ebx, byte [rdi + rax + 8]
jmp 0x14004e768
lea rdi, [r15 + 2]
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rsi, rax
test rax, rax
je 0x14004e580
sub rax, r15
sar rax, 1
sub rax, 1
jne 0x14004e654
add rsi, 2
cmp word [rsi], 0x7d
jne 0x14004e580
jmp 0x14004e65a
cmp rax, 1
jne 0x14004e66e
test bl, bl
je 0x14004e666
inc r12d
jmp 0x14004e580
movzx eax, word [rdi]
mov word [rsp + 0x34], ax
xor eax, eax
xor ecx, ecx
mov word [rsi], ax
mov byte [rsp + 0x31], al
mov byte [rsp + 0x30], al
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r8b, 1
lea rdx, [rsp + 0x30]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140019180
movzx ebx, al
test al, al
je 0x14004e743
movzx edi, word [rdi]
test edi, 0xffffff80
je 0x14004e6b4
xor edx, edx
mov ecx, edx
jmp 0x14004e6c5
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, eax
xor edx, edx
movzx eax, di
mov r14d, 0xffdf
and ax, r14w
test ecx, ecx
cmove ax, di
cmp ax, 0x56
jne 0x14004e716
movzx edi, word [r15 + 4]
test edi, 0xffffff80
je 0x14004e6ef
mov ecx, edx
jmp 0x14004e6fe
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, eax
movzx eax, di
and ax, r14w
test ecx, ecx
cmove ax, di
cmp ax, 0x4b
jne 0x14004e716
mov r14b, 1
jmp 0x14004e719
xor r14b, r14b
cmp qword [r13 + 0x10], 0
je 0x14004e753
test r14b, r14b
jne 0x14004e753
mov dl, 1
movzx ecx, bl
call fcn.140019ea0
movzx ebp, ax
test ax, ax
je 0x14004e753
mov eax, 0x100
xor bp, ax
xor bl, bl
jmp 0x14004e753
lea rdx, [rsp + 0x31]
mov rcx, rdi
call fcn.140019060
movzx ebp, ax
mov r15d, 0x7d
mov word [rsi], r15w
mov r15, rsi
movzx esi, byte [rsp + 0xa8]
movzx edi, byte [rsp + 0xa0]
test bl, bl
je 0x14004e549
movzx ecx, word [rsp + 0x34]
test cx, cx
je 0x14004e7aa
test dil, dil
je 0x14004e7aa
call qword [sym.imp.USER32.dll_IsCharAlphaW]
test eax, eax
jne 0x14004e7aa
test byte [rsp + 0x30], 0x30
movzx eax, bl
lea rcx, [rax + r13]
sete al
inc al
or byte [rcx + 0x74], al
jmp 0x14004e549
movzx edx, byte [rsp + 0xb0]
movzx edi, sil
movzx eax, bl
not dil
lea rcx, [rax + r13]
movzx eax, byte [rax + r13 + 0x74]
and al, dil
or al, dl
mov byte [rcx + 0x74], al
test sil, sil
je 0x14004e80b
test r14b, r14b
jne 0x14004e80b
xor edx, edx
movzx ecx, bl
call fcn.140019ea0
movzx ebx, byte [rsp + 0x90]
movzx edx, byte [rsp + 0xb0]
test ax, ax
je 0x14004e559
movzx eax, ax
and byte [rax + r13 + 0x174], dil
jmp 0x14004e559
movzx ebx, byte [rsp + 0x90]
jmp 0x14004e559
mov dword [r13 + 0x30], r12d
movzx eax, word [r14]
mov rbx, qword [r13 + 0x28]
test ax, ax
je 0x14004e890
mov r15d, 0x7d
nop
cmp ax, 0x7b
je 0x14004e845
cmp ax, r15w
je 0x14004e882
mov word [rbx], ax
add rbx, 2
jmp 0x14004e882
lea rdi, [r14 + 2]
mov edx, r15d
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14004e882
cmp rax, rdi
jne 0x14004e86c
cmp word [rax + 2], r15w
lea rcx, [rax + 2]
cmove rax, rcx
lea rcx, [r14 + 4]
cmp rax, rcx
jne 0x14004e87f
movzx ecx, word [rdi]
mov word [rbx], cx
add rbx, 2
mov r14, rax
movzx eax, word [r14 + 2]
add r14, 2
test ax, ax
jne 0x14004e830
xor eax, eax
mov word [rbx], ax
jmp 0x14004e8b7
test dil, dil
je 0x14004e8b7
cmp dword [r13 + 0x30], 0
je 0x14004e8ac
mov rax, qword [r13 + 0x28]
mov word [rax], cx
jmp 0x14004e8b7
lea rax, [0x1400cc644]
mov qword [r13 + 0x28], rax
mov eax, 1
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret