Function at 0x40be20
Capabilities:
Get keyboard layout

Disassembly:
sub esp, 0x414
push ebx
push ebp
mov ebp, dword [esp + 0x428]
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], 0
mov byte [esp + 0x13], 0
test ebp, ebp
je 0x40be4d
lea eax, [ebp + 0x14]
mov dword [esp + 0x18], eax
jmp 0x40be55
lea ecx, [esp + 0x1f]
mov dword [esp + 0x18], ecx
cmp byte [esp + 0x42c], 0
jne 0x40bea4
mov ebx, 0x4a352c
mov eax, edi
call fcn.004095d0
mov esi, eax
test esi, esi
je 0x40bea4
mov ecx, esi
movzx eax, word [ecx]
cmp eax, 0x20
je 0x40be80
cmp eax, 9
jne 0x40be85
add ecx, 2
jmp 0x40be73
push 0x4a0d58
push ecx
call fcn.0048cdc9
add esp, 8
test eax, eax
jne 0x40bea4
test ebp, ebp
je 0x40be9f
mov byte [ebp + 0x18], 1
xor edx, edx
mov word [esi], dx
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
movzx edx, word [edi]
test dx, dx
jne 0x40bf1e
xor bl, bl
mov eax, edi
call fcn.00412200
movzx eax, ax
mov dword [esp + 0x14], eax
test ax, ax
jne 0x40c11a
push 1
lea ebx, [esp + 0x24]
mov eax, edi
call fcn.0044fb50
movzx eax, ax
add esp, 4
mov dword [esp + 0x14], eax
test ax, ax
jne 0x40c0fe
cmp byte [esp + 0x434], al
je 0x40c09d
mov edx, dword [0x4c6cb4]
push 1
push 0
push 0xffffffffffffffff
push 0x4a358c
push edx
call fcn.00476700
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x414
ret
cmp word [edi + 2], 0
jne 0x40bf87
mov ecx, eax
lea esi, [esp + 0x13]
mov eax, edx
call fcn.00412360
mov bl, al
test bl, bl
je 0x40beb6
cmp byte [esp + 0x42c], 0
je 0x40c03e
lea edx, [ebx + 0x64]
cmp dl, 3
ja 0x40c05a
cmp byte [esp + 0x434], 0
je 0x40bffc
mov eax, dword [0x4c6cb4]
push 1
push 0
push 0xffffffffffffffff
push 0x4a3534
push eax
call fcn.00476700
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x414
ret
mov esi, edx
test esi, 0xffffff80
jne 0x40bfa3
push 2
push esi
call fcn.0048e01e
add esp, 8
test eax, eax
je 0x40bfa3
and esi, 0xffffffdf
cmp si, 0x56
jne 0x40bfcd
mov ax, word [edi + 2]
call fcn.004095a0
cmp ax, 0x4b
jne 0x40bfcd
push 0x10
lea eax, [edi + 4]
push 0
push eax
call fcn.0048e3fb
add esp, 0xc
jmp 0x40bf32
xor esi, esi
nop
mov ecx, dword [esi*8 + 0x4c36f8]
push edi
push ecx
call fcn.0048cdc9
add esp, 8
test eax, eax
je 0x40bff0
inc esi
cmp esi, 0x6d
jl 0x40bfd0
jmp 0x40beb4
mov bl, byte [esi*8 + 0x4c36fc]
jmp 0x40bf34
push edi
push 0x4a3538
mov esi, 0x200
lea edi, [esp + 0x2c]
call fcn.00473990
mov ecx, dword [esp + 0x430]
add esp, 8
push ecx
mov edx, edi
push edx
mov ecx, 0x4c8640
call fcn.0042e2a0
test ebp, ebp
jne 0x40bf11
pop edi
pop esi
lea eax, [ebp + 4]
pop ebp
pop ebx
add esp, 0x414
ret
test ebp, ebp
je 0x40c05a
push 2
push 0x4a3584
push edi
call fcn.0048d617
add esp, 0xc
test eax, eax
sete al
mov byte [ebp + 0x19], al
lea ecx, [ebx - 1]
cmp cl, 5
ja 0x40c067
cmp bl, 3
jne 0x40c06f
lea edx, [ebx + 0x66]
cmp dl, 5
ja 0x40c073
mov al, 1
jmp 0x40c075
xor al, al
mov dl, byte [esp + 0x13]
test dl, 0x30
je 0x40c089
lea ecx, [ebx - 0x41]
cmp cl, 0x19
ja 0x40c089
and dl, 0xcf
test al, al
je 0x40c11e
mov eax, dword [esp + 0x18]
mov byte [eax], 2
jmp 0x40c11e
cmp word [edi + 2], 0
jne 0x40c0c4
cmp byte [0x4c910c], 0
jne 0x40c0c4
mov eax, ebp
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 0xfffffffd
pop ebp
add eax, 3
pop ebx
add esp, 0x414
ret
test ebp, ebp
je 0x40c0f1
push edi
push 0x4a3590
mov esi, 0x200
lea edi, [esp + 0x2c]
call fcn.00473990
add esp, 8
push 0x4ab04c
mov eax, edi
push eax
mov ecx, 0x4c8640
call fcn.0042e2a0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x414
ret
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov eax, 1
add dword [0x4c7eb0], eax
mov byte [ecx], 4
mov byte [ebx + 0x4c7ea0], al
mov dl, byte [esp + 0x13]
cmp byte [esp + 0x42c], 0
je 0x40c148
test ebp, ebp
je 0x40c185
mov cx, word [esp + 0x14]
pop edi
pop esi
mov byte [ebp + 0x13], bl
mov word [ebp + 0xa], cx
pop ebp
mov eax, 1
pop ebx
add esp, 0x414
ret
test ebp, ebp
je 0x40c185
mov ax, word [esp + 0x14]
mov word [ebp + 8], ax
mov al, dl
and al, 0xd5
xor ecx, ecx
mov byte [ebp + 0x12], bl
test al, 0xc0
je 0x40c167
mov ecx, 8
test al, 0xc
je 0x40c16e
or ecx, 1
test al, 0x30
je 0x40c175
or ecx, 4
test al, 3
je 0x40c17c
or ecx, 2
or dword [ebp + 0xc], ecx
and dl, 0x2a
or byte [ebp + 0x10], dl
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x414
ret