Function at 0x140022840
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0xf8]
sub rsp, 0x1f0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14016ca00]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov rsi, rcx
lea rdi, [rcx + 0x38]
mov eax, dword [rdi]
mov rcx, qword [rcx + 0x18]
mov r8, qword [rsi + 0x20]
cmp rcx, r8
je 0x1400228bc
nop
cmp dword [rcx], eax
je 0x14002289f
add rcx, 4
cmp rcx, r8
jne 0x140022890
jmp 0x1400228bc
lea rdx, [rcx + 4]
sub r8, rdx
sar r8, 2
lea r8, [r8*4]
call fcn.1400bcb10
add qword [rsi + 0x20], 0xfffffffffffffffc
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0x18]
lea rdx, [rsp + 0x30]
lea rcx, [rsi + 0x18]
call fcn.140020f10
mov rcx, rsi
call fcn.140026bb0
lea rcx, [rbp - 0x40]
call fcn.1400685a0
cmp dword [rbp - 0x3c], 6
jb 0x140022b4e
lea rbx, [rsi + 0x50]
mov r8d, dword [rdi]
mov rdx, rbx
call fcn.14002aa60
xor esi, esi
mov qword [rsp + 0x70], rsi
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rsi
mov word [rsp + 0x78], si
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], rsi
mov word [rbp - 0x68], si
mov eax, dword [rdi]
mov dword [rsp + 0x74], eax
lea r8d, [rsi + 0x26]
lea rdx, str.00000000_0000_0000_0000_000000000000
lea rcx, [rsp + 0x78]
call fcn.140006900
lea r8d, [rsi + 0x26]
lea rdx, str.00000000_0000_0000_0000_000000000000
lea rcx, [rbp - 0x68]
call fcn.140006900
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8, qword [rbx]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400211d0
mov r8, rbx
call fcn.140026cc0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x48], si
lea rax, str.34745C63_B2F0_4784_8B67_5E12C8701A31
mov qword [rsp + 0x20], rax
mov r9d, 0x804
lea r8, str.SoftwareMicrosoftCTFAssemblies
lea rdx, str._s0x_08x_s
lea rcx, [rsp + 0x48]
call fcn.140061ab0
mov qword [rsp + 0x30], rsi
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rdx, qword [rsp + 0x48]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140022a3d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rdi
lea r9d, [rsi + 4]
xor r8d, r8d
lea rdx, str.KeyboardLayout
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140022ae7
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rdi, rdi
je 0x140022ad9
test rax, rax
je 0x140022ad1
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
lea rax, [0x140125cd8]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCInputImeInstaller::SetDefaultInputIDInRegistry
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rbx
call fcn.1400c2130
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
mov rcx, rbx
call fcn.140015100
mov rcx, rdi
call fcn.1400bd2dc
test rbx, rbx
je 0x140022ae7
mov rcx, rbx
call fcn.1400bd2dc
nop
cmp qword [rsp + 0x60], 8
jb 0x140022af9
mov rcx, qword [rsp + 0x48]
call fcn.1400bd20c
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x48], si
cmp qword [rbp - 0x50], 8
jb 0x140022b1c
mov rcx, qword [rbp - 0x68]
call fcn.1400bd20c
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], rsi
mov word [rbp - 0x68], si
cmp qword [rbp - 0x70], 8
jb 0x140022b3d
mov rcx, qword [rsp + 0x78]
call fcn.1400bd20c
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rsi
mov word [rsp + 0x78], si
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.1400bcae0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret