Function at 0x14001ef30
Capabilities:
Delete registry key

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x210], rbx
mov rax, qword [0x14016ca00]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r14, rdx
mov rbx, rcx
mov ecx, 0x800
call fcn.1400bbc88
mov rsi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
test rsi, rsi
je 0x14001f009
test rax, rax
je 0x14001f001
xor edx, edx
mov r8d, 0x800
mov rcx, rsi
call fcn.1400c2130
lea rax, [0x140125748]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeUninstaller::UninstallIme
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rsi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
cmp qword [r14 + 0x18], 8
jb 0x14001efe6
mov r9, qword [r14]
jmp 0x14001efe9
mov r9, r14
mov r8, rsi
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
mov rcx, rdi
call fcn.140014f60
mov rcx, rsi
call fcn.1400bd2dc
test rdi, rdi
je 0x14001f016
mov rcx, rdi
call fcn.1400bd2dc
mov rcx, rbx
call fcn.14002ab40
mov rcx, rbx
call fcn.140026300
mov rcx, rbx
call fcn.14002b0c0
mov rcx, rbx
call fcn.14002b1e0
lea r8, [rbx + 0x50]
call fcn.140026410
mov rdx, r14
mov rcx, rbx
call fcn.14002b3e0
mov dword [rbx + 0x38], eax
mov ecx, 0x800
test eax, eax
jne 0x14001f0f6
call fcn.1400bbc88
mov rdi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rdi, rdi
je 0x14001f0e0
test rax, rax
je 0x14001f0d8
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
lea rax, [0x1401257c0]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeUninstaller::UninstallIme
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rbx
call fcn.1400c2130
mov r8, rdi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
mov rcx, rbx
call fcn.140014f60
mov rcx, rdi
call fcn.1400bd2dc
test rbx, rbx
je 0x14001f4b4
mov rcx, rbx
call fcn.1400bd2dc
jmp 0x14001f4b4
call fcn.1400bbc88
mov rsi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
test rsi, rsi
je 0x14001f180
test rax, rax
je 0x14001f178
xor edx, edx
mov r8d, 0x800
mov rcx, rsi
call fcn.1400c2130
lea rax, str.b0R
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeUninstaller::UninstallIme
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rsi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
mov r9d, dword [rbx + 0x38]
mov r8, rsi
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
mov rcx, rdi
call fcn.140014f60
mov rcx, rsi
call fcn.1400bd2dc
test rdi, rdi
je 0x14001f18d
mov rcx, rdi
call fcn.1400bd2dc
mov edx, dword [rbx + 0x38]
call fcn.140027ce0
mov rcx, rbx
call fcn.14001f4e0
movsxd rcx, dword [rbx + 0x38]
call qword [sym.imp.USER32.dll_UnloadKeyboardLayout]
test eax, eax
jne 0x14001f255
mov ecx, 0x800
call fcn.1400bbc88
mov rsi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
test rsi, rsi
je 0x14001f248
test rax, rax
je 0x14001f240
xor edx, edx
mov r8d, 0x800
mov rcx, rsi
call fcn.1400c2130
lea rax, [0x140125820]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeUninstaller::UninstallIme
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rsi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbx + 0x38]
mov r8, rsi
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
mov rcx, rdi
call fcn.140015100
mov rcx, rsi
call fcn.1400bd2dc
test rdi, rdi
je 0x14001f255
mov rcx, rdi
call fcn.1400bd2dc
mov eax, dword [rbx + 0x38]
mov rcx, qword [rbx + 0x18]
mov r8, qword [rbx + 0x20]
cmp rcx, r8
je 0x14001f291
cmp dword [rcx], eax
je 0x14001f274
add rcx, 4
cmp rcx, r8
jne 0x14001f265
jmp 0x14001f291
lea rdx, [rcx + 4]
sub r8, rdx
sar r8, 2
lea r8, [r8*4]
call fcn.1400bcb10
add qword [rbx + 0x20], 0xfffffffffffffffc
mov rcx, rbx
call fcn.140026bb0
mov rcx, rbx
call fcn.1400202c0
xor edx, edx
mov rcx, rbx
call fcn.14002b2a0
lea rcx, [rbp - 0x60]
call fcn.1400685a0
cmp dword [rbp - 0x5c], 6
jb 0x14001f2d0
mov r8d, dword [rbx + 0x38]
lea rdx, [rbx + 0x50]
call fcn.14002aa60
lea r8, [rbx + 0x50]
call fcn.140026cc0
call fcn.140068670
xor esi, esi
test al, al
je 0x14001f3a6
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x58], si
lea r8d, [rsi + 0x30]
lea rdx, str.Control_PanelInternationalUser_Profilezh_Hans
lea rcx, [rsp + 0x58]
call fcn.140006900
nop
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.140020360
nop
cmp qword [rsp + 0x70], 8
jb 0x14001f332
mov rcx, qword [rsp + 0x58]
call fcn.1400bd20c
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x58], si
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rsi
mov word [rsp + 0x78], si
mov r8d, 0x33
lea rdx, str.Control_PanelInternationalUser_Profilezh_Hans_CN
lea rcx, [rsp + 0x78]
call fcn.140006900
nop
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.140020360
nop
cmp qword [rbp - 0x70], 8
jb 0x14001f395
mov rcx, qword [rsp + 0x78]
call fcn.1400bd20c
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rsi
mov word [rsp + 0x78], si
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x38], si
mov r8d, dword [rbx + 0x38]
lea rdx, str.SystemCurrentControlSetControlKeyboard_Layouts_08X
lea rcx, [rsp + 0x38]
call fcn.140061ab0
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rdi, rdi
je 0x14001f481
test rax, rax
je 0x14001f479
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
lea rax, [0x1401259e0]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeUninstaller::UninstallIme
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rbx
call fcn.1400c2130
mov r8, rdi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
mov rcx, rbx
call fcn.140014e90
mov rcx, rdi
call fcn.1400bd2dc
test rbx, rbx
je 0x14001f48f
mov rcx, rbx
call fcn.1400bd2dc
nop
cmp qword [rsp + 0x50], 8
jb 0x14001f4a1
mov rcx, qword [rsp + 0x38]
call fcn.1400bd20c
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x38], si
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1400bcae0
mov rbx, qword [rsp + 0x210]
add rsp, 0x1d0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret