Function at 0x1400196b0
Capabilities:
Get keyboard layout

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x430
xor r12d, r12d
xor sil, sil
mov rdi, r9
movzx r15d, r8b
mov rbp, rcx
lea r14, [r9 + 0x12]
movzx r13d, r12w
mov byte [rax + 0x18], sil
test r9, r9
jne 0x1400196ee
lea r14, [rax + 8]
mov qword [rsp + 0x488], rbx
test r15b, r15b
jne 0x140019776
mov rbx, rcx
test rcx, rcx
je 0x140019776
movzx edx, word [rcx]
test dx, dx
je 0x140019776
nop dword [rax + rax]
lea rcx, [0x1400f5b90]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x140019741
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140019720
movzx edx, word [rbx + 2]
add rbx, 2
test dx, dx
jne 0x140019710
jmp 0x140019776
mov rcx, rbx
movzx eax, word [rcx]
cmp ax, 0x20
je 0x140019753
cmp ax, 9
jne 0x140019759
add rcx, 2
jmp 0x140019744
lea rdx, [0x1400f2fc4]
call fcn.1400d6a7c
test eax, eax
jne 0x140019776
test rdi, rdi
je 0x140019772
mov byte [rdi + 0x16], 1
mov word [rbx], r12w
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
cmp word [rbp], r12w
jne 0x14001978c
xor bl, bl
jmp 0x140019b21
lea rdx, [rsp + 0x480]
mov r9, rax
mov r8b, 1
mov rcx, rbp
call fcn.140022fa0
movzx ebx, al
test al, al
je 0x140019b19
test r15b, r15b
je 0x140019ab4
lea eax, [rbx + 0x64]
cmp al, 3
ja 0x140019ad6
cmp byte [rsp + 0x490], r12b
je 0x140019a71
mov rdi, qword [0x14012b628]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140019801
mov rcx, qword [rdi + 0x10]
lea rdx, reloc.WSOCK32.dll_gethostbyaddr
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd640
xor eax, eax
jmp 0x140019efb
lea r13, reloc.WSOCK32.dll_gethostbyaddr
cmp qword [rdi + 8], r13
jne 0x140019817
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14001981c
mov ebp, 1
lea rcx, [rbp + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x14001983a
mov rdx, rbp
mov rcx, r13
call fcn.140006da0
xor eax, eax
jmp 0x140019efb
mov r8, qword [0x1401255a0]
cmp rsi, r8
jbe 0x140019858
cmp rsi, qword [rdi + 0x18]
jbe 0x140019858
lea rdx, [0x140110420]
jmp 0x140019e6a
cmp rcx, 2
jae 0x140019874
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdcf0
xor eax, eax
jmp 0x140019efb
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140019891
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x1401255a0]
mov r9, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r9
jbe 0x140019a06
movzx r10d, byte [rdi + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x1400198ca
cmp al, 2
je 0x140019907
mov rbx, qword [rsp + 0x470]
mov rax, qword [rsp + 0x470]
jmp 0x1400199fa
mov ebx, 0x80
cmp rsi, rbx
ja 0x140019907
cmp rsi, 8
ja 0x1400198e1
mov ebx, 8
jmp 0x1400198ed
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
je 0x140019e7d
mov byte [rdi + 0x20], 1
jmp 0x1400199fa
cmp rsi, 0x20
jae 0x140019917
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400199c1
mov ebx, 0x208
cmp rsi, rbx
jb 0x1400199c1
cmp rsi, 0x50000
jae 0x14001997d
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140019944
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140019973
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140019973
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x1400199c1
cmp rsi, 0x320000
jae 0x14001998f
lea rbx, [rsi + 0x8000]
jmp 0x1400199c1
cmp rsi, 0xc80000
jae 0x1400199ba
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x1400199c1
lea rbx, [rsi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x1400199e1
test r9, r9
je 0x1400199e1
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400d6fc8
jmp 0x1400199e4
xor sil, sil
test rbx, rbx
js 0x140019a35
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x140019a35
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x140019a1c
lea r8, [rbp + rbp]
mov rdx, r13
call fcn.1400d7a30
mov rax, qword [rdi + 8]
lea rcx, [rbp + rbp]
mov word [rcx + rax], r12w
mov qword [rdi + 0x10], rcx
xor eax, eax
jmp 0x140019efb
test sil, sil
je 0x140019a59
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 8], rax
lea rdx, [0x1400f5a40]
jmp 0x140019e6a
mov rax, qword [rdi + 8]
lea rdx, [0x1400f5a40]
mov word [rax], r12w
mov qword [rdi + 0x10], r12
jmp 0x140019e6a
lea r8, [0x1400f5ba0]
lea rcx, [rsp + 0x30]
mov r9, rbp
mov edx, 0x200
call fcn.1400b9310
mov r8, qword [rsp + 0x478]
lea rdx, [rsp + 0x30]
lea rcx, [0x14012c5c0]
call fcn.14004e590
test rdi, rdi
jne 0x140019e7d
lea eax, [rdi + 4]
jmp 0x140019efb
test rdi, rdi
je 0x140019ad6
lea rdx, [0x1400f5bec]
mov r8d, 2
mov rcx, rbp
call fcn.1400d7250
test eax, eax
sete al
mov byte [rdi + 0x17], al
lea eax, [rbx - 1]
cmp al, 5
ja 0x140019ae2
cmp bl, 3
jne 0x140019ae9
lea eax, [rbx + 0x66]
cmp al, 5
ja 0x140019aed
mov cl, 1
jmp 0x140019aef
xor cl, cl
movzx esi, byte [rsp + 0x480]
test sil, 0x30
je 0x140019b08
lea eax, [rbx - 0x41]
cmp al, 0x19
ja 0x140019b08
and sil, 0xcf
test cl, cl
je 0x140019ea1
mov byte [r14], 2
jmp 0x140019ea1
movzx esi, byte [rsp + 0x480]
xor edx, edx
mov rcx, rbp
call fcn.140022e80
movzx r13d, ax
test ax, ax
jne 0x140019ea1
lea rdx, [rsp + 0x480]
mov r8b, 1
mov rcx, rbp
call fcn.1400862b0
mov r13d, eax
test ax, ax
jne 0x140019e81
cmp byte [rsp + 0x490], r12b
je 0x140019e23
mov rdi, qword [0x14012b628]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140019b97
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f5bf4]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd640
xor eax, eax
jmp 0x140019efb
lea r13, [0x1400f5bf4]
cmp qword [rdi + 8], r13
jne 0x140019bad
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x140019bb2
mov ebp, 1
lea rcx, [rbp + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x140019bd0
mov rdx, rbp
mov rcx, r13
call fcn.140006da0
xor eax, eax
jmp 0x140019efb
mov r8, qword [0x1401255a0]
cmp rsi, r8
jbe 0x140019c03
cmp rsi, qword [rdi + 0x18]
jbe 0x140019c03
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
xor eax, eax
jmp 0x140019efb
cmp rcx, 2
jae 0x140019c1f
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdcf0
xor eax, eax
jmp 0x140019efb
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140019c3c
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x1401255a0]
mov r9, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r9
jbe 0x140019db1
movzx r10d, byte [rdi + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x140019c75
cmp al, 2
je 0x140019cb2
mov rbx, qword [rsp + 0x470]
mov rax, qword [rsp + 0x470]
jmp 0x140019da5
mov ebx, 0x80
cmp rsi, rbx
ja 0x140019cb2
cmp rsi, 8
ja 0x140019c8c
mov ebx, 8
jmp 0x140019c98
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
je 0x140019dd9
mov byte [rdi + 0x20], 1
jmp 0x140019da5
cmp rsi, 0x20
jae 0x140019cc2
mov ebx, SafeArrayAllocDescriptor
jmp 0x140019d6c
mov ebx, 0x208
cmp rsi, rbx
jb 0x140019d6c
cmp rsi, 0x50000
jae 0x140019d28
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140019cef
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140019d1e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140019d1e
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x140019d6c
cmp rsi, 0x320000
jae 0x140019d3a
lea rbx, [rsi + 0x8000]
jmp 0x140019d6c
cmp rsi, 0xc80000
jae 0x140019d65
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x140019d6c
lea rbx, [rsi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x140019d8c
test r9, r9
je 0x140019d8c
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400d6fc8
jmp 0x140019d8f
xor sil, sil
test rbx, rbx
js 0x140019de0
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x140019de0
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x140019dc7
lea r8, [rbp + rbp]
mov rdx, r13
call fcn.1400d7a30
mov rax, qword [rdi + 8]
lea rcx, [rbp + rbp]
mov word [rcx + rax], r12w
mov qword [rdi + 0x10], rcx
xor eax, eax
jmp 0x140019efb
test sil, sil
je 0x140019df6
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r12
mov qword [rdi + 8], rax
jmp 0x140019dfe
mov rax, qword [rdi + 8]
mov word [rax], r12w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r12
call fcn.14004e590
xor eax, eax
jmp 0x140019efb
cmp word [rbp + 2], r12w
jne 0x140019e47
cmp byte [0x14012d174], r12b
jne 0x140019e47
mov eax, 3
test rdi, rdi
cmove r12d, eax
mov eax, r12d
jmp 0x140019efb
test rdi, rdi
je 0x140019e7d
lea r8, [0x1400f5bf8]
lea rcx, [rsp + 0x30]
mov r9, rbp
mov edx, 0x200
call fcn.1400b9310
lea rdx, [rsp + 0x30]
lea r8, [0x1400f1524]
lea rcx, [0x14012c5c0]
call fcn.14004e590
xor eax, eax
jmp 0x140019efb
movsxd rbx, dword [rsp + 0x480]
inc dword [0x14012b6c8]
lea rcx, [0x14012b6b8]
mov byte [r14], 4
mov rax, rbx
mov byte [rbx + rcx], 1
test r15b, r15b
je 0x140019eb5
test rdi, rdi
je 0x140019ef6
mov byte [rdi + 0x11], bl
mov word [rdi + 0xa], r13w
jmp 0x140019ef6
test rdi, rdi
je 0x140019ef6
movzx eax, sil
mov byte [rdi + 0x10], bl
mov ebx, 8
and al, 0xd5
mov word [rdi + 8], r13w
test al, 0xc0
cmovne r12d, ebx
test al, 0xc
je 0x140019edb
or r12d, 1
test al, 0x30
je 0x140019ee3
or r12d, 4
test al, 3
je 0x140019eeb
or r12d, 2
or dword [rdi], r12d
and sil, 0x2a
or byte [rdi + 0xe], sil
mov eax, 1
mov rbx, qword [rsp + 0x488]
add rsp, 0x430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret