Function at 0x1400d3dc0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x1403486d0]
xor rax, rsp
mov qword [rbp + 0x270], rax
movzx r14d, cl
mov rcx, qword [str.AppleInc.iCloud_nzyj5cx40ttqa]
call fcn.1400d6770
test al, al
jne 0x1400d3e1f
mov rcx, qword [str.AppleInc.iCloud_dch5apj5k449g]
call fcn.1400d6770
test al, al
jne 0x1400d3e1f
mov al, 1
jmp 0x1400d47f0
call fcn.1400d6900
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x104
lea rdx, [rbp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.1400d7680
nop
xor r12d, r12d
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r12w
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
lea r8, [rbp]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.1400c7390
lea rcx, [rbp - 0x80]
call fcn.1400d8480
nop
lea rcx, [rbp - 0x40]
call fcn.1400d56e0
nop
mov r15b, 1
call fcn.1400d6880
test al, al
jne 0x1400d3f13
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d3efa
call fcn.1400c1f80
lea rcx, str.Not_running_as_UWP
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2a2
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
lea edx, [r12 + 3]
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d3f13
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x3d54
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x44], r12d
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
mov r8, qword [str.UWPMigrationComplete]
mov rdx, qword [str.SoftwareApple_Inc.Internet_Services]
mov rcx, 0xffffffff80000001
call fcn.1400c4ab0
test eax, eax
jne 0x1400d400d
cmp dword [rsp + 0x40], eax
je 0x1400d400d
call fcn.1400c1f80
cmp dword [rax + 0x78], 6
jl 0x1400d4068
call fcn.1400c1f80
mov rbx, rax
mov edx, dword [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400dd930
nop
cmp qword [rax + 0x18], 8
jb 0x1400d3f87
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
lea rax, str.Migration_to_UWP_was_completed__time_u___s_
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x374
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.UWP_IsMigrationComplete
mov edx, 6
mov rcx, rbx
call fcn.1400c2500
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1400d4068
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d4006
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d4006
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
jmp 0x1400d4068
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d404f
call fcn.1400c1f80
lea rcx, str.UWP_migration_hasnt_completed_successfully
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2af
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d4068
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x3d54
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x48]
call fcn.1400d59e0
test al, al
je 0x1400d410b
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d40f2
call fcn.1400c1f80
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
mov qword [rsp + 0x30], rcx
lea rcx, str.iCloud_Desktop_is_running:__s
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2c2
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d410b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x420
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov r11, qword [str.AppleInc.iCloud_nzyj5cx40ttqa]
mov r9, 0xffffffffffffffff
mov rax, r9
nop dword [rax]
inc rax
cmp word [r11 + rax*2], 0
jne 0x1400d4120
lea r10, [rbp - 0x80]
mov rdi, qword [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae r10, rdi
mov rbx, qword [rbp - 0x70]
cmp rbx, rax
jne 0x1400d4187
mov r8, rbx
mov rax, r11
test rbx, rbx
je 0x1400d42df
movzx ecx, word [r10]
movzx edx, word [r11]
cmp cx, dx
jb 0x1400d4187
sub r10, rax
cmp cx, dx
ja 0x1400d4187
cmp r8, 1
je 0x1400d42df
dec r8
add rax, 2
movzx ecx, word [r10 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x1400d4167
mov rax, qword [str.AppleInc.iCloud_dch5apj5k449g]
nop
inc r9
cmp word [rax + r9*2], 0
jne 0x1400d4190
lea r10, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae r10, rdi
cmp rbx, r9
jne 0x1400d41f0
mov rcx, rbx
test rbx, rbx
je 0x1400d43bc
movzx edx, word [r10]
movzx r8d, word [rax]
cmp dx, r8w
jb 0x1400d41f0
sub r10, rax
cmp dx, r8w
ja 0x1400d41f0
cmp rcx, 1
je 0x1400d43bc
dec rcx
add rax, 2
movzx edx, word [rax + r10]
movzx r8d, word [rax]
cmp dx, r8w
jae 0x1400d41ce
test rbx, rbx
je 0x1400d4263
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d424a
call fcn.1400c1f80
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
lea rcx, str.Running_in_unknown_PackageFamily:__s
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2f6
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d4263
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x3d54
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea r9, [rsp + 0x60]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x78]
cmp r11, 8
cmovae r9, r10
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xb
jne 0x1400d4448
lea rax, str.iCloudPrefs
test rcx, rcx
je 0x1400d4427
movzx edx, word [r9]
mov r8d, 0x69
cmp dx, r8w
jb 0x1400d4448
sub r9, rax
cmp dx, r8w
ja 0x1400d4448
cmp rcx, 1
je 0x1400d4427
dec rcx
add rax, 2
movzx edx, word [r9 + rax]
movzx r8d, word [rax]
cmp dx, r8w
jae 0x1400d42b4
jmp 0x1400d4448
mov rcx, qword [str.AppleInc.iCloud_dch5apj5k449g]
call fcn.1400d6770
test al, al
je 0x1400d4263
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d4335
call fcn.1400c1f80
lea rcx, str.Running_in_Store_PackageFamily__but_Internal_package_is_also_installed.
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2d4
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
lea rcx, [rbp - 0x20]
call fcn.1400d4e10
cmp qword [rax + 0x18], 8
jb 0x1400d4348
mov rax, qword [rax]
mov r9d, 0x40030
mov r8, rax
lea rdx, str.You_have_2_iCloud_AppX_packages_installed._Uninstall_one_of_them.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1400d43a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d439e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d439e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
test r14b, r14b
je 0x1400d4263
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x659
jmp 0x1400d425a
mov rcx, r11
call fcn.1400d6770
test al, al
je 0x1400d4263
xor r15b, r15b
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d440e
call fcn.1400c1f80
lea rcx, str.Running_in_Internal_PackageFamily__but_Store_package_is_also_installed.
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x2e2
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d4263
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x659
jmp 0x1400d425a
mov r8d, 6
lea rdx, [0x140289ae8]
lea rcx, [rsp + 0x60]
call fcn.1400523d0
mov r11, qword [rsp + 0x78]
mov r10, qword [rsp + 0x60]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rsp + 0x60]
cmp r11, 8
cmovae rcx, r10
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400d45c4
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rbx, qword [rsp + 0x60]
lea rdi, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdi, qword [rbp - 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400d4e10
nop
cmp qword [rax + 0x18], 8
jb 0x1400d44a4
mov rax, qword [rax]
mov qword [rsp + 0x20], rbx
mov r9, rdi
mov r8, rax
lea rdx, str.Unexpected_AppID_for__s__which_may_cause_COM_server_issues:_using__s_not__s
lea rcx, [rbp - 0x20]
call fcn.1400c48a0
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1400d4503
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d44fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d44fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400d4566
call fcn.1400c1f80
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x30], rcx
lea rcx, [0x140273b24]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x305
lea r9, str.D:BWA6FBB69CA_F410_0iCloudCommon_131_srcrootiCCUtilsUWPUtils.cpp
lea r8, str.CentennialStartupValidation
mov edx, 3
mov rcx, rax
call fcn.1400c2500
test r14b, r14b
je 0x1400d4580
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x4015
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1400d45c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d45be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d45be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400d4610
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d460a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d460a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400d4653
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d464e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d464e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1400d46a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d46a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d46a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400d46fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d46f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d46f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x1400d4750
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d474a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d474a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400d4795
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d4790
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d4790
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1400d47ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d47e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d47e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
movzx eax, r15b
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.1400e6b50
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret