Function at 0x14000dd50
Capabilities:
Get keyboard layout

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x440
xor ebp, ebp
lea r15, [r9 + 0x12]
mov byte [rax + 0x18], bpl
mov rbx, r9
movzx r12d, r8b
mov r13, rdx
mov rsi, rcx
movzx r14d, bp
test r9, r9
jne 0x14000dd8d
lea r15, [rax + 0x20]
test r12b, r12b
jne 0x14000de15
mov rdi, rsi
test rsi, rsi
je 0x14000de15
movzx edx, word [rcx]
test dx, dx
je 0x14000de15
nop word [rax + rax]
lea rcx, [0x1400e2b00]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x14000dde1
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x14000ddc0
movzx edx, word [rdi + 2]
add rdi, 2
test dx, dx
jne 0x14000ddb0
jmp 0x14000de15
mov rcx, rdi
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14000ddf3
cmp ax, 9
jne 0x14000ddf9
add rcx, 2
jmp 0x14000dde4
lea rdx, [0x1400d12b0]
call fcn.1400ab8c0
test eax, eax
jne 0x14000de15
test rbx, rbx
je 0x14000de12
mov byte [rbx + 0x16], 1
mov word [rdi], bp
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r8b, 1
lea rdx, [rsp + 0x490]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.140016650
movzx edi, al
test al, al
je 0x14000df08
test r12b, r12b
je 0x14000dea1
lea ecx, [rdi + 0x64]
cmp cl, 3
ja 0x14000dec3
cmp byte [rsp + 0x4a0], bpl
je 0x14000de63
lea rdx, [0x1400e2b08]
jmp 0x14000df4c
mov r9, rsi
lea r8, str.__s__is_not_allowed_as_a_prefix_key.
mov edx, 0x200
lea rcx, [rsp + 0x40]
call fcn.14008b9a0
mov r8, r13
lea rdx, [rsp + 0x40]
lea rcx, [0x1401072b0]
call fcn.1400395f0
test rbx, rbx
jne 0x14000df64
lea eax, [rbx + 4]
jmp 0x14000e05b
test rbx, rbx
je 0x14000dec3
mov r8d, 2
lea rdx, [0x1400e2b5c]
mov rcx, rsi
call fcn.1400aba40
test eax, eax
sete al
mov byte [rbx + 0x17], al
lea eax, [rdi - 1]
cmp al, 5
ja 0x14000ded0
cmp dil, 3
jne 0x14000ded7
lea eax, [rdi + 0x66]
cmp al, 5
ja 0x14000dedb
mov cl, 1
jmp 0x14000dedd
xor cl, cl
movzx r9d, byte [rsp + 0x490]
test r9b, 0x30
je 0x14000def7
lea eax, [rdi - 0x41]
cmp al, 0x19
ja 0x14000def7
and r9b, 0xcf
test cl, cl
je 0x14000dfec
mov byte [r15], 2
jmp 0x14000dfec
xor edx, edx
mov rcx, rsi
call fcn.140016540
movzx r14d, ax
test ax, ax
jne 0x14000dfe3
mov r8b, 1
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.14005fcb0
mov r14d, eax
test ax, ax
jne 0x14000dfc9
cmp byte [rsp + 0x4a0], bpl
je 0x14000df6b
lea rdx, [0x1400e2b64]
mov rcx, qword [0x140104d40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.14008f120
xor eax, eax
jmp 0x14000e05b
cmp word [rsi + 2], bp
jne 0x14000df8c
cmp byte [0x140107e60], bpl
jne 0x14000df8c
mov eax, 3
test rbx, rbx
cmove ebp, eax
mov eax, ebp
jmp 0x14000e05b
test rbx, rbx
je 0x14000df64
mov r9, rsi
lea r8, [0x1400e2b68]
mov edx, 0x200
lea rcx, [rsp + 0x40]
call fcn.14008b9a0
lea r8, [0x1400cef3c]
lea rdx, [rsp + 0x40]
lea rcx, [0x1401072b0]
call fcn.1400395f0
xor eax, eax
jmp 0x14000e05b
movsxd rdi, dword [rsp + 0x30]
lea rcx, [0x140105cd0]
inc dword [0x140105cec]
mov byte [r15], 4
mov byte [rdi + rcx], 1
movzx r9d, byte [rsp + 0x490]
test r12b, r12b
je 0x14000e001
test rbx, rbx
je 0x14000e056
mov byte [rbx + 0x11], dil
mov word [rbx + 0xa], r14w
jmp 0x14000e056
test rbx, rbx
je 0x14000e056
movzx r8d, r9b
mov byte [rbx + 0x10], dil
and r8b, 0xd5
mov word [rbx + 8], r14w
movzx eax, r8b
and al, 0xc0
neg al
movzx eax, r8b
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
and al, 0xc
movzx eax, r8b
cmove edx, ecx
mov ecx, edx
or ecx, 4
and al, 0x30
cmove ecx, edx
mov eax, ecx
or eax, 2
and r8b, 3
cmove eax, ecx
and r9b, 0x2a
or dword [rbx], eax
or byte [rbx + 0xe], r9b
mov eax, 1
mov rbx, qword [rsp + 0x480]
add rsp, 0x440
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret