Function at 0x14000a610
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov r14, rcx
lea rcx, [0x140132070]
call fcn.1400010dc
lea rcx, [0x140132030]
call fcn.1400010dc
mov qword [0x140133db0], r14
mov r8, r14
lea rdx, [0x14000b2b0]
lea rcx, str.SensorDataService
call qword [sym.imp.api_ms_win_service_core_l1_1_1.dll_RegisterServiceCtrlHandlerExW]
mov qword [r14 + 0x38], rax
xor r12d, r12d
test rax, rax
jne 0x14000a692
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov edx, eax
lea rcx, str.RegisterServiceCtrlHandlerEx
call fcn.14000a3bc
jmp 0x14000a95f
mov dword [r14 + 0x18], 0x10
mov dword [r14 + 0x28], r12d
mov dword [rsp + 0x20], 0xbb8
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, r14
call fcn.14000b1d0
mov esi, 1
mov ecx, esi
call qword [sym.imp.api_ms_win_core_winrt_l1_1_0.dll_RoInitialize]
mov ebx, eax
mov dword [rbp + 0x60], eax
test eax, eax
jns 0x14000a6e6
mov edx, eax
lea rcx, str.CoInitializeEx
call fcn.14000a3bc
mov r9d, ebx
mov edx, esi
jmp 0x14000a884
lea r8, [r14 + 8]
xor edx, edx
mov ecx, esi
call fcn.14000c490
mov edi, eax
test eax, eax
jns 0x14000a70c
lea rcx, str.CreateEventHR
mov edx, eax
call fcn.14000a3bc
mov r9d, edi
jmp 0x14000a6df
mov dword [rbp + 0x50], r12d
lea r15, [r14 + 0x40]
lea rdx, [rbp + 0x50]
mov rcx, r15
call fcn.14000b920
mov edi, eax
test eax, eax
jns 0x14000a72f
lea rcx, str.MakeAndInitialize_ThreadPool_
jmp 0x14000a700
mov qword [rbp + 0x58], r14
mov rax, qword [r15]
mov qword [rbp + 0x48], rax
lea r13, [r14 + 0x80]
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x48]
mov rcx, r13
call fcn.14000ba70
test eax, eax
jns 0x14000a760
mov edx, edi
lea rcx, str.MakeAndInitialize_TimerWorkItem_
jmp 0x14000a702
mov dword [rbp + 0x50], r12d
mov dword [rbp + 0x48], r12d
mov dword [rbp + 0x58], 4
lea rax, [rbp + 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea r8, str.IdleShutdownInMS
lea rdx, [0x1400ded48]
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
test eax, eax
jne 0x14000a7be
cmp dword [rbp + 0x50], 4
jne 0x14000a7be
cmp dword [rbp + 0x58], 4
mov edx, dword [rbp + 0x48]
je 0x14000a7c3
mov edx, 0x2710
mov dword [r14], edx
mov rcx, qword [r13]
call fcn.140058800
test eax, eax
jns 0x14000a7e1
mov edx, edi
lea rcx, str.TimerWorkItem::RunAsync
jmp 0x14000a702
mov rdx, r14
mov rcx, qword [r15]
call fcn.14000cb58
mov edi, eax
test eax, eax
jns 0x14000a7fe
lea rcx, str.ConnectionManager::StaticInit
jmp 0x14000a700
mov rcx, qword [r15]
call fcn.14000fb7c
mov edi, eax
test eax, eax
jns 0x14000a818
lea rcx, str.SourceManager::StaticInit
jmp 0x14000a700
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
mov rcx, r14
call fcn.14000b1d0
lea rcx, [rbp + 0x58]
call fcn.14000cc58
nop
mov rcx, qword [rax]
call fcn.14000d414
mov esi, eax
mov r12, qword [rbp + 0x58]
test r12, r12
je 0x14000a867
and qword [rbp + 0x58], 0
mov rdx, qword [r12]
mov rdi, qword [rdx + 0x10]
mov rcx, rdi
call qword [fcn.140009410]
mov rcx, r12
call rdi
xor r12d, r12d
test esi, esi
jns 0x14000a89c
mov edx, esi
lea rcx, str.ConnectionManager::Start
call fcn.14000a3bc
mov r9d, esi
lea edx, [r12 + 1]
mov r8d, 0x42a
mov dword [rsp + 0x20], r12d
mov rcx, r14
call fcn.14000b1d0
jmp 0x14000a955
or edx, 0xffffffff
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitForSingleObject]
cmp qword [0x140133e80], r12
je 0x14000a8da
call fcn.14000d6fc
mov rsi, qword [0x140133e80]
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140009410]
mov rcx, rsi
call rdi
mov qword [0x140133e80], r12
call fcn.14000ff1c
mov rcx, qword [r13]
call fcn.140058894
mov rsi, qword [r15]
test rsi, rsi
je 0x14000a908
mov qword [r15], r12
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140009410]
mov rcx, rsi
call rdi
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov rcx, r14
call fcn.14000b1d0
mov rcx, qword [0x140132090]
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
mov qword [0x140132090], r12
mov dword [0x140132070], r12d
mov rcx, qword [0x140132050]
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
mov qword [0x140132050], r12
mov dword [0x140132030], r12d
test ebx, ebx
js 0x14000a95f
call qword [sym.imp.api_ms_win_core_winrt_l1_1_0.dll_RoUninitialize]
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret