Function at 0x14004ce70
Capabilities:
Get keyboard layout

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov r13, rcx
movzx esi, r9b
xor ecx, ecx
movzx edi, r8b
mov word [rsp + 0x36], cx
mov r14, rdx
movzx ebp, cx
mov r12d, ecx
test r8b, r8b
je 0x14004ceb9
cmp byte [r13 + 0x65], cl
je 0x14004ceb9
mov bl, 1
jmp 0x14004cebb
xor bl, bl
mov r15, rdx
mov byte [rsp + 0x90], bl
cmp word [rdx], cx
je 0x14004d338
movzx r14d, byte [rsp + 0xa0]
mov edx, 0x7d
nop dword [rax]
mov word [rsp + 0x34], cx
movzx eax, word [r15]
cmp ax, 0x7b
je 0x14004d044
cmp ax, 0x7d
je 0x14004d084
test bl, bl
je 0x14004cf09
inc r12d
jmp 0x14004d084
xor ecx, ecx
mov word [rsp + 0x34], ax
mov byte [rsp + 0x30], 0
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r8, rax
movzx eax, word [rsp + 0x34]
test ax, ax
je 0x14004cffd
movzx ecx, word [rsp + 0x36]
test cx, cx
jne 0x14004cf4e
mov r9b, 1
lea rdx, [rsp + 0x30]
movzx ecx, ax
call fcn.140018e70
movzx ebx, al
jmp 0x14004d214
movzx ebx, ax
test ebx, 0xffffff80
je 0x14004cf5d
xor edx, edx
jmp 0x14004cf71
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx ecx, word [rsp + 0x36]
mov edx, eax
movzx eax, bx
mov r8d, 0xffdf
and ax, r8w
test edx, edx
cmove ax, bx
cmp ax, 0x56
jne 0x14004cfc0
call fcn.14000d150
cmp ax, 0x4b
jne 0x14004cfc0
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
movzx ecx, al
xor ebx, ebx
mov rax, qword [rsp + 0x38]
cmp word [rax], bx
cmove ebx, ecx
jmp 0x14004d214
xor edi, edi
lea rbx, str.Numpad0
nop dword [rax]
mov rcx, qword [rbx]
lea rdx, [rsp + 0x34]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004d02f
inc rdi
lea rax, [0x1400fe810]
add rbx, 0x10
cmp rbx, rax
jl 0x14004cfd0
movzx ebx, byte [rsp + 0x90]
movzx edx, byte [rsp + 0xb0]
movzx edi, byte [rsp + 0xa0]
test bp, bp
je 0x14004d07f
movzx eax, bp
lea rcx, [rax + r13]
movzx eax, sil
not al
and al, byte [rcx + 0x174]
or al, dl
mov byte [rcx + 0x174], al
jmp 0x14004d07f
shl rdi, 4
lea rax, str.Numpad0
movzx ebx, byte [rdi + rax + 8]
jmp 0x14004d20c
lea rdi, [r15 + 2]
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rsi, rax
test rax, rax
je 0x14004d077
sub rax, r15
sar rax, 1
sub rax, 1
jne 0x14004d101
add rsi, 2
cmp word [rsi], 0x7d
je 0x14004d107
movzx edi, byte [rsp + 0xa0]
xor ecx, ecx
lea edx, [rcx + 0x7d]
movzx esi, byte [rsp + 0xa8]
add r15, 2
cmp word [r15], 0
jne 0x14004cee0
mov r14, qword [rsp + 0x98]
test r12d, r12d
je 0x14004d338
mov eax, dword [r13 + 0x30]
cmp r12d, eax
jbe 0x14004d2be
test eax, eax
je 0x14004d0c7
mov rcx, qword [r13 + 0x28]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea ecx, [r12*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r13 + 0x28], rax
test rax, rax
jne 0x14004d2ba
lea r8, [0x1400cb664]
lea rdx, str.Out_of_memory.
lea rcx, [0x140105140]
call fcn.140046d70
jmp 0x14004d35d
cmp rax, 1
jne 0x14004d11b
test bl, bl
je 0x14004d113
inc r12d
jmp 0x14004d077
movzx eax, word [rdi]
mov word [rsp + 0x34], ax
xor eax, eax
xor ecx, ecx
mov word [rsi], ax
mov byte [rsp + 0x30], al
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r8b, 1
lea rdx, [rsp + 0x30]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140018d40
movzx ebx, al
test al, al
je 0x14004d1ec
movzx edi, word [rdi]
test edi, 0xffffff80
je 0x14004d15d
xor edx, edx
mov ecx, edx
jmp 0x14004d16e
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, eax
xor edx, edx
movzx eax, di
mov r14d, 0xffdf
and ax, r14w
test ecx, ecx
cmove ax, di
cmp ax, 0x56
jne 0x14004d1bf
movzx edi, word [r15 + 4]
test edi, 0xffffff80
je 0x14004d198
mov ecx, edx
jmp 0x14004d1a7
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, eax
movzx eax, di
and ax, r14w
test ecx, ecx
cmove ax, di
cmp ax, 0x4b
jne 0x14004d1bf
mov r14b, 1
jmp 0x14004d1c2
xor r14b, r14b
cmp qword [r13 + 0x10], 0
je 0x14004d1f7
test r14b, r14b
jne 0x14004d1f7
mov dl, 1
movzx ecx, bl
call fcn.140019a60
movzx ebp, ax
test ax, ax
je 0x14004d1f7
mov eax, 0x100
xor bp, ax
xor bl, bl
jmp 0x14004d1f7
mov rcx, rdi
call fcn.140018c30
movzx ebp, ax
mov r15d, 0x7d
mov word [rsi], r15w
mov r15, rsi
movzx esi, byte [rsp + 0xa8]
movzx edi, byte [rsp + 0xa0]
test bl, bl
je 0x14004cff5
movzx ecx, word [rsp + 0x34]
test cx, cx
je 0x14004d24e
test dil, dil
je 0x14004d24e
call qword [sym.imp.USER32.dll_IsCharAlphaW]
test eax, eax
jne 0x14004d24e
test byte [rsp + 0x30], 0x30
movzx eax, bl
lea rcx, [rax + r13]
sete al
inc al
or byte [rcx + 0x74], al
jmp 0x14004cff5
movzx edx, byte [rsp + 0xb0]
movzx edi, sil
movzx eax, bl
not dil
lea rcx, [rax + r13]
movzx eax, dil
and al, byte [rcx + 0x74]
or al, dl
mov byte [rcx + 0x74], al
test sil, sil
je 0x14004d2ad
test r14b, r14b
jne 0x14004d2ad
xor edx, edx
movzx ecx, bl
call fcn.140019a60
movzx ebx, byte [rsp + 0x90]
movzx edx, byte [rsp + 0xb0]
test ax, ax
je 0x14004d005
movzx eax, ax
and byte [rax + r13 + 0x174], dil
jmp 0x14004d005
movzx ebx, byte [rsp + 0x90]
jmp 0x14004d005
mov dword [r13 + 0x30], r12d
movzx eax, word [r14]
mov rbx, qword [r13 + 0x28]
test ax, ax
je 0x14004d331
mov r15d, 0x7d
cmp ax, 0x7b
je 0x14004d2e6
cmp ax, r15w
je 0x14004d323
mov word [rbx], ax
add rbx, 2
jmp 0x14004d323
lea rdi, [r14 + 2]
mov edx, r15d
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14004d323
cmp rax, rdi
jne 0x14004d30d
cmp word [rax + 2], r15w
lea rcx, [rax + 2]
cmove rax, rcx
lea rcx, [r14 + 4]
cmp rax, rcx
jne 0x14004d320
movzx ecx, word [rdi]
mov word [rbx], cx
add rbx, 2
mov r14, rax
movzx eax, word [r14 + 2]
add r14, 2
test ax, ax
jne 0x14004d2d1
xor eax, eax
mov word [rbx], ax
jmp 0x14004d358
test dil, dil
je 0x14004d358
cmp dword [r13 + 0x30], 0
je 0x14004d34d
mov rax, qword [r13 + 0x28]
mov word [rax], cx
jmp 0x14004d358
lea rax, [0x1400cb664]
mov qword [r13 + 0x28], rax
mov eax, 1
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret