Function at 0x14004afc0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
mov eax, 0x1b00
call fcn.14005ba50
sub rsp, rax
mov rax, qword [0x1400d9180]
xor rax, rsp
mov qword [rsp + 0x1af0], rax
mov r9, qword [0x1400dbf70]
mov dil, r8b
movzx r8d, byte [0x1400d8e34]
mov rsi, rdx
mov edx, dword [0x1400dffdc]
mov rbx, rcx
lea rcx, str.DeviceNotification:_bSuspended:_d_s_bEnableHidNotifications:_d_m_hBthDev_d_n
call fcn.1400300fc
mov r13d, sendto
lea rdx, str.0P_bD
mov r8d, r13d
mov rcx, rbx
call fcn.14005bbb0
xor r12d, r12d
test eax, eax
jne 0x14004b081
test dil, dil
je 0x14004b081
cmp qword [0x1400dbf70], r12
je 0x14004b081
lea rcx, str.BTWPP_DeleteUnsupportedSvcRegistry
call fcn.14003786c
lea rcx, str.BTWPP_SetRoleSwitchConfig
call fcn.14003786c
lea r8, [fcn.14003115c]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1400dffdc], r12d
je 0x14004b09b
lea rcx, str.DeviceNotification:_ignore_due_to_we_are_suspending_n
call fcn.1400300fc
jmp 0x14004b324
lea rdx, [0x14009f000]
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
test eax, eax
jne 0x14004b191
test dil, dil
je 0x14004b191
cmp qword [0x1400dbf70], r12
je 0x14004b191
mov ebp, 0x104
lea rcx, [rsp + 0x18e0]
mov r8, rsi
mov edx, ebp
call fcn.14005fbe4
lea rcx, [rsp + 0x18e0]
mov edx, ebp
call fcn.140060dac
lea rdx, str.BTHMS_BTHPAN
lea rcx, [rsp + 0x18e0]
call fcn.1400604d4
test rax, rax
je 0x14004b113
lea r8, [fcn.140037b6c]
jmp 0x14004b171
lea rdx, str.BTHENUM7788FA25_DFE4_4EA4_B838_4771E26CCF82
lea rcx, [rsp + 0x18e0]
call fcn.1400604d4
test rax, rax
je 0x14004b191
lea rcx, [rsp + 0x30]
call fcn.140026df4
lea rcx, [rsp + 0x30]
call fcn.140022d94
test eax, eax
jne 0x14004b15c
cmp dword [rsp + 0x18c8], 2
jne 0x14004b16a
lea rcx, str.DeviceNotification:_ignore_pan_arrival_at_uninstallation_n
call fcn.1400300fc
jmp 0x14004b191
lea rcx, str.DeviceNotification:_CBTInstallCfg::Read_failed._err:_d_n
mov edx, eax
call fcn.1400300fc
lea r8, [fcn.14003302c]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1400d8e34], r12b
jne 0x14004b1a6
lea rcx, str.DeviceNotification:_ignore_due_to_HID_notifications_are_disabled_n
jmp 0x14004b091
lea rbp, [0x14009ea20]
mov r8, r13
mov rcx, rbx
mov rdx, rbp
call fcn.14005bbb0
test eax, eax
je 0x14004b1d9
lea rdx, [0x14009ea30]
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
test eax, eax
jne 0x14004b25c
cmp qword [0x1400dbf70], r12
je 0x14004b25c
lea rcx, str.DeviceNotification:_HID_n
call fcn.1400300fc
mov r8, r13
mov rdx, rbp
mov rcx, rbx
call fcn.14005bbb0
mov dl, dil
mov rcx, rsi
test eax, eax
sete r8b
call fcn.140049600
lea rdx, [0x14009ea30]
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
lea rcx, [0x1400dfff0]
test eax, eax
sete dl
call fcn.140048200
test dil, dil
je 0x14004b25c
lea rdx, [0x14009ea30]
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
lea rcx, [0x1400dfff0]
mov rdx, rsi
test eax, eax
sete r8b
call fcn.14004a010
lea rdx, str.0P_bD
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
test eax, eax
jne 0x14004b293
test dil, dil
je 0x14004b293
cmp qword [0x1400dbf70], r12
je 0x14004b293
mov dword [0x1400dcd10], r12d
xor r9d, r9d
lea r8, [0x14004a1c0]
jmp 0x14004b307
lea rdx, str.0P_bD
mov r8, r13
mov rcx, rbx
call fcn.14005bbb0
test eax, eax
jne 0x14004b2ae
test dil, dil
je 0x14004b2e7
mov r8, r13
mov rdx, rbp
mov rcx, rbx
call fcn.14005bbb0
test eax, eax
jne 0x14004b324
test dil, dil
je 0x14004b324
lea rcx, str._HID00001124_0000_1000_8000_00805F9B34FB
call fcn.14005d25c
lea rdx, str._HID00001124_0000_1000_8000_00805F9B34FB
mov rcx, rsi
mov r8, rax
call fcn.1400618c0
test eax, eax
je 0x14004b324
mov r8, r13
mov rdx, rbp
mov rcx, rbx
call fcn.14005bbb0
mov ecx, r12d
lea r8, [fcn.14004ad40]
test eax, eax
sete cl
movsxd r9, ecx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x1af0]
xor rcx, rsp
call fcn.14005ba20
mov rbx, qword [rsp + 0x1b48]
add rsp, 0x1b00
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret