Function at 0x433fed
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0xa4]
sub esp, 0x124
mov eax, dword [0x498b28]
xor eax, ebp
mov dword [ebp + 0xa0], eax
mov eax, dword [ebp + 0xbc]
push ebx
mov ebx, dword [ebp + 0xc4]
push esi
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0xc8]
push edi
push dword [ebp + 0xb8]
mov edi, dword [ebp + 0xc0]
push dword [ebp + 0xb4]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0xcc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0xd0]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0xd4]
push str.BtwProvisionedHidDevsGetHidInfo:_HidAddr_012I64x_n
xor esi, esi
push 4
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x64], esi
call fcn.004295b9
xor eax, eax
add esp, 0x10
cmp edi, eax
je 0x434074
cmp ebx, eax
je 0x434097
cmp dword [ebp - 0x78], eax
je 0x43407e
cmp dword [ebp - 0x6c], eax
je 0x434097
cmp dword [ebp - 0x68], eax
mov ebx, dword [0x4670bc]
mov edi, 0x100
je 0x434134
cmp dword [ebp - 0x70], eax
jne 0x4340ad
push str.BtwProvisionedHidDevsGetHidInfo:_Invalid_parameter_n
push 1
call fcn.004295b9
pop ecx
pop ecx
push 0x57
pop esi
jmp 0x4343dc
push dword [ebp + 0xb8]
lea eax, [ebp - 0x60]
push dword [ebp + 0xb4]
push str.SYSTEMCurrentControlSetServicesBTHPORTParameters
push str._sDevices_012I64x
push edi
push eax
call fcn.0043ce7f
add esp, 0x18
lea eax, [ebp - 0x64]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x60]
push eax
push reloc.WS2_32.dll_bind
call ebx
mov esi, eax
test esi, esi
je 0x434101
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegOpenKeyEx_failed._err_d_n
push 1
call fcn.004295b9
add esp, 0xc
jmp 0x4343dc
push dword [ebp - 0x70]
push dword [ebp - 0x68]
push 0
push 0
push str.Name
push dword [ebp - 0x64]
call dword [0x467050]
mov esi, eax
test esi, esi
je 0x434127
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegQueryValueEx_Name__failed._err_d_n
jmp 0x4340f2
push dword [ebp - 0x64]
call dword [0x467004]
and dword [ebp - 0x64], 0
cmp dword [ebp - 0x78], 0
jne 0x434144
cmp dword [ebp - 0x74], 0
je 0x434314
push dword [ebp + 0xb8]
lea eax, [ebp - 0x60]
push dword [ebp + 0xb4]
push str.SYSTEMCurrentControlSetServicesBTHPORTParameters
push str._sDevices_012I64xCachedServices
push edi
push eax
call fcn.0043ce7f
add esp, 0x18
lea eax, [ebp - 0x64]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x60]
push eax
push reloc.WS2_32.dll_bind
call ebx
mov esi, eax
test esi, esi
je 0x43418e
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegOpenKeyEx_CachedServices__failed._err_d_n
jmp 0x4340f2
cmp dword [ebp - 0x74], 0
jne 0x43419a
and dword [ebp - 0x68], 0
jmp 0x4341a2
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
push dword [ebp - 0x6c]
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push dword [ebp - 0x74]
push dword [ebp - 0x64]
call fcn.00433dae
mov esi, eax
add esp, 0x14
test esi, esi
je 0x4341ca
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_GetHidSdpRecords_failed._err_d_n
jmp 0x4340f2
cmp dword [ebp - 0x78], 0
je 0x4341ed
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 0
jne 0x4341ed
push str.BtwProvisionedHidDevsGetHidInfo:_no_HID_SDP_record_n
push 1
call fcn.004295b9
pop ecx
pop ecx
push 0xd
jmp 0x4340a7
push dword [ebp - 0x64]
call dword [0x467004]
and dword [ebp - 0x64], 0
cmp dword [ebp - 0x74], 0
je 0x434314
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0
jne 0x434314
push dword [ebp + 0xb8]
mov ecx, dword [ebp - 0x68]
push dword [ebp + 0xb4]
mov dword [eax], ecx
push str.SYSTEMCurrentControlSetServicesBTHPORTParameters
push str._sDevices_012I64x
lea eax, [ebp - 0x60]
push edi
push eax
call fcn.0043ce7f
add esp, 0x18
lea eax, [ebp - 0x64]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x60]
push eax
push reloc.WS2_32.dll_bind
call ebx
mov esi, eax
test esi, esi
je 0x43425f
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegOpenKeyEx_Devices__failed._err_d_n
jmp 0x4340f2
mov esi, dword [0x467050]
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x70]
push eax
push 0
push 0
push 0x4889d4
push dword [ebp - 0x64]
mov dword [ebp - 0x6c], 4
call esi
test eax, eax
je 0x43429d
push eax
push str.BtwProvisionedHidDevsGetHidInfo:_RegQueryValueEx_PID__failed._err_d._Use_dummy_PID_n
push 4
call fcn.004295b9
add esp, 0xc
mov dword [ebp - 0x70], 0xffff
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x68]
push eax
push 0
push 0
push 0x4889d8
push dword [ebp - 0x64]
mov dword [ebp - 0x6c], 4
call esi
mov esi, eax
test esi, esi
je 0x4342d7
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegQueryValueEx_VID__failed._err_d._Use_dummy_VID_n
push 4
call fcn.004295b9
add esp, 0xc
mov dword [ebp - 0x68], 0xffff
push dword [ebp - 0x64]
call dword [0x467004]
push dword [ebp - 0x7c]
and dword [ebp - 0x64], 0
push dword [ebp - 0x74]
push dword [ebp - 0x68]
push dword [ebp - 0x70]
call fcn.0043562d
add esp, 0x10
test al, al
jne 0x434314
push str.BtwProvisionedHidDevsGetHidInfo:_CreatePnpSdpRecord_failed_n
push 1
call fcn.004295b9
pop ecx
pop ecx
mov esi, 0x80004005
jmp 0x4343dc
cmp dword [ebp - 0x80], 0
je 0x4343dc
push 0x10
push 0
push dword [ebp - 0x80]
call fcn.00436a20
push dword [ebp + 0xb0]
lea eax, [ebp - 0x60]
push dword [ebp + 0xac]
push str.SYSTEMCurrentControlSetServicesBTHPORTParameters
push str._sKeys_012I64x
push edi
push eax
call fcn.0043ce7f
add esp, 0x24
lea eax, [ebp - 0x64]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x60]
push eax
push reloc.WS2_32.dll_bind
call ebx
mov esi, eax
xor ebx, ebx
cmp esi, ebx
je 0x43437f
cmp esi, 2
jne 0x434374
xor esi, esi
jmp 0x4343dc
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegOpenKeyEx_Keys__failed._err_d_n
jmp 0x4340f2
push dword [ebp + 0xb8]
lea eax, [ebp - 0x60]
push dword [ebp + 0xb4]
push str._012I64x
push edi
push eax
call fcn.0043ce7f
add esp, 0x14
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x80]
lea eax, [ebp - 0x60]
push ebx
push ebx
push eax
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0x10
call dword [0x467050]
mov esi, eax
cmp esi, ebx
je 0x4343d0
cmp esi, 2
je 0x434370
push esi
push str.BtwProvisionedHidDevsGetHidInfo:_RegQueryValueEx_Keys__failed._err_d_n
jmp 0x4340f2
push dword [ebp - 0x64]
call dword [0x467004]
mov dword [ebp - 0x64], ebx
cmp dword [ebp - 0x64], 0
je 0x4343eb
push dword [ebp - 0x64]
call dword [0x467004]
test esi, esi
jle 0x4343fb
and esi, 0xffff
or esi, 0x80070000
mov ecx, dword [ebp + 0xa0]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.004369c2
add ebp, 0xa4
leave
ret