Skip to content

Instantly share code, notes, and snippets.

@spddl
Created October 15, 2021 15:22
Show Gist options
  • Save spddl/a43bcbbeeae8a6e74a2b677ffb8872d4 to your computer and use it in GitHub Desktop.
Save spddl/a43bcbbeeae8a6e74a2b677ffb8872d4 to your computer and use it in GitHub Desktop.
int64_t sub_1000023d0(HWND arg1, int64_t arg2, int64_t arg3)
void var_1d8
int64_t rax_1 = *data_100005110 ^ &var_1d8
SetCursor(*data_100005b98)
int32_t rbx = 1
int32_t var_1b8 = 1
int64_t rax_2 = SetupDiOpenDevRegKey(arg2, arg3, 1, 0, 1, 2)
if (rax_2 != -1)
HKEY var_188
var_1b8.q = &var_188
LSTATUS rax_3 = RegOpenKeyExA(hKey: rax_2, lpSubKey: "Interrupt Management", ulOptions: 0, samDesired: 0x20006, phkResult: var_1b8)
if (rax_3 != 0)
if (rax_3 != 2)
sub_10000356c(rax_3)
rbx = 0
RegCloseKey(hKey: rax_2)
if (rbx != 0)
HKEY var_190
var_1b8.q = &var_190
LSTATUS rax_4 = RegOpenKeyExA(hKey: var_188, lpSubKey: "Affinity Policy - Temporal", ulOptions: 0, samDesired: 0x20006, phkResult: var_1b8)
if (rax_4 != 0)
if (rax_4 != 2)
sub_10000356c(rax_4)
rbx = 0
RegCloseKey(hKey: var_188)
if (rbx != 0)
RegDeleteValueA(hKey: var_190, lpValueName: "TargetProcessorSet")
RegCloseKey(hKey: var_190)
int64_t var_1a8 = 0
var_1a8.d = 8
var_1a8:4.d = 0x12
int64_t var_1a0
var_1a0.d = 5
var_1a0:4.d = 2
uint8_t rbx_1
if (SetupDiSetClassInstallParamsA(arg2, arg3, &var_1a8, 0x14, var_1b8) == 0)
label_100002529:
rbx_1 = 0
else
if (SetupDiCallClassInstaller(0x12, arg2, arg3) == 0)
goto label_100002529
var_1a0.d = 4
if (SetupDiSetClassInstallParamsA(arg2, arg3, &var_1a8, 0x14) == 0)
goto label_100002529
if (SetupDiCallClassInstaller(0x12, arg2, arg3) == 0)
goto label_100002529
int32_t var_178 = 0x140
if (SetupDiGetDeviceInstallParamsA(arg2, arg3, &var_178) == 0)
goto label_100002529
int32_t var_174
rbx_1 = not.b((var_174 u>> 8).b) & 1
SetCursor(*data_100005b90)
void* rdx_6 = data_1000016b0 {"Device successfully restarted."}
if (rbx_1 == 0)
rdx_6 = data_1000016d0 {"Device could not be restarted. …"}
MessageBoxA(hWnd: arg1, lpText: rdx_6, lpCaption: "Notice", uType: 0)
return sub_100003a50(rax_1 ^ &var_1d8)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment