Function at 0x1400351a0
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400d5010]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov esi, ecx
mov rdi, qword [0x1400daa80]
test rdi, rdi
jne 0x140035231
mov ecx, 0x16a8
call fcn.140076964
mov rbx, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x16a8
mov rcx, rax
call fcn.14007eaa0
mov rcx, rbx
call fcn.1400316f0
mov rdi, rax
mov qword [0x1400daa80], rax
test rax, rax
jne 0x140035231
mov r8d, 0x9d
jmp 0x140035f4c
cmp esi, dword [rdi + 0x4c]
jl 0x140035241
mov r8d, 0x9e
jmp 0x140035f4c
lea rcx, [rdi + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [rdi + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
call fcn.140013bc0
mov rdx, rax
test rax, rax
jne 0x14003526d
mov r8d, 0xa4
jmp 0x140035f4c
xor r14d, r14d
mov ebx, r14d
mov ecx, r14d
add rax, 0xa4
nop dword [rax]
cmp dword [rax - 4], r14d
je 0x14003528a
cmp dword [rax], esi
je 0x14003529f
inc ebx
inc rcx
add rax, 0xc
cmp rcx, 0x21
jge 0x140035f46
jmp 0x140035280
cmp ebx, 0x21
jae 0x140035f46
mov eax, ebx
lea r13, [rax + 0x14]
lea r13, [rax + r13*2]
lea r13, [rdx + r13*4]
test r13, r13
je 0x140035f46
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x50], r14
mov dword [rbp - 0x48], r14d
mov qword [rbp - 0x40], r14
call fcn.140004150
mov rcx, rax
test rax, rax
jne 0x1400352e9
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp + 0x18], rax
mov r9d, ebx
lea r8, str.SoftwareRealtekAudioGUI_INFORMATIONJackInfomation
lea rdx, str._sJack_d
lea rcx, [rbp + 0x18]
call fcn.1400053a0
mov r9d, 0x2001f
mov rbx, qword [rbp + 0x18]
mov r8, rbx
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x50]
call fcn.14002a460
or rsi, 0xffffffffffffffff
test eax, eax
je 0x140035382
mov dword [rsp + 0x28], 0x2001f
mov r8, rbx
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x50]
call fcn.140036210
test eax, eax
je 0x140035382
mov rdx, rbx
lea rcx, str.CJackMgr::UpdateUIJackInfoToReg_:_Failed_to_create__s_n
call fcn.14002f950
mov r8d, 0xbc
lea rdx, str.CJackInfoRegWriter::UpdateJackInfoToReg
lea rcx, str._s__d_RETURN_FALSE_ON_FALSE
call fcn.14002f950
jmp 0x140035f19
mov dword [rsp + 0x70], r14d
mov r15d, dword [r13 + 4]
movsxd rax, r15d
imul r12, rax, 0xac
add r12, rdi
movzx ebx, word [r12 + 0x100]
shr ebx, 1
and ebx, 1
mov dword [rbp - 0x24], r14d
mov dword [rbp - 0x28], 4
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x24]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
xor r8d, r8d
lea rdx, str.JackStatus
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov esi, eax
test eax, eax
jne 0x1400353f0
mov esi, r14d
mov eax, 0xd
cmp dword [rbp - 0x20], 4
cmovne esi, eax
mov dword [rbp - 0x18], ebx
mov dword [rsp + 0x28], 4
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.JackStatus
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movsxd rcx, r15d
mov eax, dword [rdi + rcx*4 + 0x70]
mov dword [rbp - 0x10], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.JackStatusChangedWhenPowerDown
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
cmp esi, 2
jne 0x14003548c
test ebx, ebx
je 0x14003548c
mov dword [rbp - 8], 1
mov dword [rsp + 0x28], 4
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 2]
xor r8d, r8d
lea rdx, str.JackStatusChangedWhenPowerDown
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov eax, dword [r13 + 8]
mov dword [rbp], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.JackIconTypeColor
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov esi, dword [r12 + 0x184]
mov eax, dword [r12 + 0x194]
mov dword [rsp + 0x50], eax
mov ebx, dword [r12 + 0x19c]
mov dword [rsp + 0x78], ebx
mov ecx, eax
shl ecx, 8
add ecx, 0x100
and ecx, 0xf00
mov eax, ebx
shl eax, 0xc
add eax, 0x1000
and eax, 0xf000
or ecx, eax
or ecx, esi
mov dword [rbp + 8], ecx
mov dword [rsp + 0x28], 4
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.JackWidgetId
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov ecx, r14d
mov dword [rbp - 0x70], ecx
mov dword [rbp - 0x60], r14d
cmp r15d, dword [rdi + 0x4c]
jae 0x1400355a3
imul rcx, r15, 0xac
cmp dword [rcx + rdi + 0x190], 0
je 0x140035564
mov eax, dword [rcx + rdi + 0x188]
mov dword [rbp - 0x70], eax
mov eax, dword [rcx + rdi + 0x18c]
jmp 0x14003557e
mov eax, dword [rcx + rdi + 0xfc]
shr eax, 8
and eax, 0xf
mov dword [rbp - 0x70], eax
mov eax, dword [rcx + rdi + 0xf4]
and eax, 0xf
mov dword [rbp - 0x60], eax
call fcn.140027b30
test rax, rax
je 0x1400355a0
mov r10, qword [rax]
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x70]
mov edx, r15d
mov rcx, rax
call qword [r10 + 0x38]
mov ecx, dword [rbp - 0x70]
test ebx, ebx
js 0x1400355af
mov edx, dword [rdi + 0x1680]
jmp 0x1400355b5
mov edx, dword [rdi + 0x1674]
mov dword [rsp + 0x64], edx
test ebx, ebx
js 0x1400355c5
mov eax, dword [rdi + 0x1684]
jmp 0x1400355cb
mov eax, dword [rdi + 0x1678]
mov dword [rsp + 0x68], eax
test ebx, ebx
js 0x1400355db
mov eax, dword [rdi + 0x1688]
jmp 0x1400355e1
mov eax, dword [rdi + 0x167c]
mov dword [rsp + 0x60], eax
mov r8d, r14d
cmp esi, edx
sete r8b
cmp ecx, 2
jne 0x14003560c
mov eax, dword [rbp - 0x60]
add eax, 0xfffffff6
cmp eax, 1
ja 0x14003560c
mov edx, 1
mov dword [rsp + 0x6c], edx
mov r13d, edx
jmp 0x140035621
mov edx, r14d
mov dword [rsp + 0x6c], r14d
mov r13d, r14d
lea eax, [rcx - 8]
test eax, 0xfffffffd
je 0x140035626
mov r12d, r14d
jmp 0x14003562c
mov r12d, 1
call fcn.14002f720
test eax, eax
je 0x14003566f
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0x30], ebx
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], esi
mov r9d, r15d
mov r8d, 0xf2
lea rdx, str.CJackInfoRegWriter::UpdateJackInfoToReg
lea rcx, str._s__d_JackIdx_d_Wid_d_SecCodec_d_UsbCodec_d_bUAJ_d_bUAJHeadset_d_bUAJDedicatedMicOrLinein_d
call fcn.14002f950
xor edx, edx
mov r8d, 0x88
lea rcx, [rbp + 0x20]
call fcn.14007eaa0
lea rcx, [rbp + 0x20]
call fcn.1400511e0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], r14
mov dword [rbp + 0x68], 0xa
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x90], r14
mov dword [rbp + 0x98], 0xa
or rbx, 0xffffffffffffffff
mov dword [rbp + 0xa0], ebx
mov dword [rbp + 0x3c], r14d
mov dword [rbp + 0x38], r15d
lea rcx, [rbp + 0x20]
call fcn.140037280
lea rcx, [rbp + 0x20]
call fcn.1400378f0
test eax, eax
jne 0x140035709
mov r8d, 0x296
lea rdx, str.CJackReteskInfo::SetCurrSelPinIndex
lea rcx, str._s__d_RETURN_ON_FALSE
call fcn.14002f950
call fcn.140004150
mov rcx, rax
test rax, rax
jne 0x140035721
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x38], rax
call fcn.140004150
mov rcx, rax
test rax, rax
jne 0x140035747
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x38]
call fcn.140003d80
lea rcx, [rbp - 0x30]
call fcn.140003d80
mov r15, qword [rbp + 0x70]
test r15, r15
je 0x1400357e1
lea rdx, [0x14009f964]
mov eax, dword [r15 + 0x10]
mov r15, qword [r15]
mov edi, eax
shr edi, 0x10
mov rcx, qword [rbp - 0x38]
lea rbx, [0x140094658]
cmp dword [rcx - 0x10], 0
cmovne rbx, rdx
mov ecx, eax
shr ecx, 8
movzx r9d, cl
movzx ecx, al
shl ecx, 8
or r9d, ecx
mov r8, rbx
lea rdx, str._s_04x
lea rcx, [rbp - 0x38]
call fcn.140035fa0
mov r9d, edi
mov r8, rbx
lea rdx, str._s_d
lea rcx, [rbp - 0x30]
call fcn.140035fa0
test r15, r15
lea rdx, [0x14009f964]
jne 0x140035777
or rbx, 0xffffffffffffffff
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x14003582a
mov rcx, rbx
nop dword [rax]
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x1400357f0
lea ecx, [rcx*2 + 2]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.JackListTypeSequence
mov rdi, qword [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
jmp 0x14003582e
mov rdi, qword [rbp - 0x50]
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x140035874
mov rcx, rbx
nop word [rax + rax]
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x140035840
lea ecx, [rcx*2 + 2]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.JackListName
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0x10], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.JackListCurrSelectIndex
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
call fcn.140004150
mov rcx, rax
test rax, rax
jne 0x1400358bf
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea r15, [0x140094658]
mov rdi, r15
shr rdi, 0x10
test rdi, rdi
jne 0x140035901
movzx ebx, r15w
mov ecx, ebx
call fcn.1400055d0
test rax, rax
je 0x14003591f
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140005290
jmp 0x14003591f
mov rax, rbx
inc rax
cmp word [r15 + rax*2], 0
jne 0x140035904
mov r8d, eax
mov rdx, r15
lea rcx, [rbp - 0x68]
call fcn.140003c30
nop
call fcn.140004150
mov rcx, rax
test rax, rax
jne 0x140035937
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x58], rbx
test rdi, rdi
jne 0x14003596b
movzx edi, r15w
mov ecx, edi
call fcn.1400055d0
test rax, rax
je 0x14003598e
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140005290
jmp 0x14003598a
or rax, 0xffffffffffffffff
nop
inc rax
cmp word [r15 + rax*2], 0
jne 0x140035970
mov r8d, eax
mov rdx, r15
lea rcx, [rbp - 0x58]
call fcn.140003c30
mov rbx, qword [rbp - 0x58]
mov rdi, qword [0x1400daaf0]
test rdi, rdi
jne 0x1400359ce
mov ecx, 0x150
call fcn.140076964
mov rdi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x150
mov rcx, rax
call fcn.14007eaa0
mov rcx, rdi
call fcn.1400555d0
mov rdi, rax
mov qword [0x1400daaf0], rax
or edx, 0xffffffff
mov rcx, qword [rdi + 0x140]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
inc dword [rdi + 0x138]
mov rax, qword [0x1400daaf0]
test rax, rax
jne 0x140035a22
mov ecx, 0x150
call fcn.140076964
mov rdi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x150
mov rcx, rax
call fcn.14007eaa0
mov rcx, rdi
call fcn.1400555d0
nop
mov qword [0x1400daaf0], rax
mov rcx, rax
call fcn.140055800
mov r15, rax
test rax, rax
je 0x140035ca6
mov edi, r13d
mov qword [rbp - 0x80], rdi
mov eax, r12d
mov qword [rsp + 0x58], rax
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rsp + 0x78]
nop
cmp qword [0x1400daaf0], 0
jne 0x140035a90
mov ecx, 0x150
call fcn.140076964
mov rdi, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x150
mov rcx, rax
call fcn.14007eaa0
mov rcx, rdi
call fcn.1400555d0
nop
mov qword [0x1400daaf0], rax
mov rdi, qword [rbp - 0x80]
call fcn.140009a70
test r15, r15
je 0x140035c9b
mov rdx, qword [r15 + 0x10]
mov r15, qword [r15]
test rdx, rdx
je 0x140035b92
cmp esi, dword [rsp + 0x64]
jne 0x140035b54
test rdi, rdi
jne 0x140035b19
cmp qword [rsp + 0x58], rdi
je 0x140035b54
mov edi, dword [rsp + 0x50]
cmp edi, dword [rdx + 0x154]
jne 0x140035b92
cmp r13d, dword [rdx + 0x14c]
jne 0x140035b92
mov ecx, r14d
mov r8d, dword [rdx + 0x1e8]
test r8d, r8d
je 0x140035b92
nop dword [rax + rax]
mov eax, ecx
cmp dword [rdx + rax*4 + 0x1ec], r12d
je 0x140035ba4
inc ecx
cmp ecx, r8d
jb 0x140035b00
jmp 0x140035b92
mov edi, dword [rsp + 0x50]
cmp edi, dword [rdx + 0x154]
jne 0x140035b92
cmp r13d, dword [rdx + 0x14c]
jne 0x140035b92
mov ecx, r14d
mov r8d, dword [rdx + 0x1e8]
test r8d, r8d
je 0x140035b92
nop dword [rax]
mov eax, ecx
cmp dword [rdx + rax*4 + 0x1ec], esi
je 0x140035bb6
inc ecx
cmp ecx, r8d
jb 0x140035b40
jmp 0x140035b92
mov eax, dword [rsp + 0x50]
cmp eax, dword [rdx + 0x154]
jne 0x140035b92
cmp r13d, dword [rdx + 0x14c]
jne 0x140035b92
mov ecx, r14d
mov r8d, dword [rdx + 0x1e8]
test r8d, r8d
je 0x140035b92
nop dword [rax + rax]
mov eax, ecx
cmp dword [rdx + rax*4 + 0x1ec], esi
je 0x140035ba4
inc ecx
cmp ecx, r8d
jb 0x140035b80
test r15, r15
je 0x140035ca6
mov rdi, qword [rbp - 0x80]
jmp 0x140035a50
add rdx, 0x10
lea rcx, [rbp - 0x68]
call fcn.14000a080
jmp 0x140035ca6
add rdx, 0x10
lea rcx, [rbp - 0x68]
call fcn.14000a080
call fcn.140009a70
mov rcx, rax
call fcn.140055800
mov rsi, rax
test rax, rax
je 0x140035ca6
mov r15d, dword [rsp + 0x68]
cmp qword [0x1400daaf0], 0
jne 0x140035c21
mov ecx, 0x150
call fcn.140076964
mov rdi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x150
mov rcx, rax
call fcn.14007eaa0
mov rcx, rdi
call fcn.1400555d0
nop
mov qword [0x1400daaf0], rax
mov edi, dword [rsp + 0x50]
call fcn.140009a70
test rsi, rsi
je 0x140035c90
mov rdx, qword [rsi + 0x10]
mov rsi, qword [rsi]
test rdx, rdx
je 0x140035c73
cmp edi, dword [rdx + 0x154]
jne 0x140035c73
cmp r13d, dword [rdx + 0x14c]
jne 0x140035c73
mov ecx, r14d
mov r8d, dword [rdx + 0x1e8]
test r8d, r8d
je 0x140035c73
nop word [rax + rax]
mov eax, ecx
cmp dword [rdx + rax*4 + 0x1ec], r15d
je 0x140035c7d
inc ecx
cmp ecx, r8d
jb 0x140035c60
test rsi, rsi
je 0x140035ca6
jmp 0x140035be1
add rdx, 0x10
lea rcx, [rbp - 0x58]
call fcn.14000a080
mov rbx, qword [rbp - 0x58]
jmp 0x140035ca6
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov ecx, 0x80004005
call fcn.140003ec0
int3
mov rax, qword [0x1400daaf0]
test rax, rax
jne 0x140035ce4
mov ecx, 0x150
call fcn.140076964
mov rdi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x150
mov rcx, rax
call fcn.14007eaa0
mov rcx, rdi
call fcn.1400555d0
nop
mov qword [0x1400daaf0], rax
mov ecx, dword [rax + 0x138]
sub ecx, 1
mov dword [rax + 0x138], ecx
jne 0x140035d04
mov rcx, qword [rax + 0x148]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
jmp 0x140035d22
cmp ecx, 0x32
jle 0x140035d22
mov r8d, 0x6e
lea rdx, str.CMMPlatform::AudioDevList_Release
lea rcx, str._s__d_calling_AudioDevList_Release_isnt_matched_AudioDevList_AddRef_or_directly_return_in_EnumAudioDeviceStart_loop
call fcn.14002f950
mov rax, qword [rbp - 0x68]
cmp dword [rax - 0x10], 0
je 0x140035de3
cmp dword [rsp + 0x6c], 0
je 0x140035d41
cmp dword [rbx - 0x10], 0
je 0x140035de3
mov r15d, 1
mov rcx, qword [rbp - 0x68]
or rsi, 0xffffffffffffffff
mov rax, rsi
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140035d52
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9d, r15d
xor r8d, r8d
lea rdx, str.EndpointId
mov rdi, qword [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
cmp dword [rbx - 0x10], 0
jne 0x140035da3
lea rdx, str.EndpointIdForHiddenJack
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteValueW]
jmp 0x140035df0
mov rax, rsi
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x140035db0
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, r15d
xor r8d, r8d
lea rdx, str.EndpointIdForHiddenJack
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
jmp 0x140035df0
mov r15d, dword [rsp + 0x70]
mov rdi, qword [rbp - 0x50]
or rsi, 0xffffffffffffffff
test rdi, rdi
je 0x140035e02
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov qword [rbp - 0x50], r14
mov dword [rbp - 0x48], r14d
cmp dword [0x1400d9638], 0
je 0x140035e4a
cmp dword [0x1400d9670], 0
jne 0x140035e25
mov rax, qword [0x1400d53a8]
test byte [rax + 0x1c], 1
je 0x140035e4a
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9d, r15d
mov r8d, 0x16c
lea rdx, str.CJackInfoRegWriter::UpdateJackInfoToReg
lea rcx, str._s__d_FoundEp_d_EpId_s
call fcn.14002f950
mov r14d, r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035e67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035e85
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035ea3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035ec1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x70]
call fcn.14000a5b0
lea rcx, [rbp + 0x40]
call fcn.140012580
nop
mov eax, dword [0x1400d967c]
cmp eax, 1
jne 0x140035eef
call fcn.140051e00
call fcn.140053ba0
mov eax, dword [0x1400d967c]
dec eax
mov dword [0x1400d967c], eax
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035f15
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rbx, qword [rbp + 0x18]
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140035f32
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140035f41
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov eax, r14d
jmp 0x140035f61
mov r8d, 0xa8
lea rdx, str.CJackInfoRegWriter::UpdateJackInfoToReg
lea rcx, str._s__d_RETURN_FALSE_ON_FALSE
call fcn.14002f950
xor eax, eax
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.140076320
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret