Function at 0x1400a2c10
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0x90
mov rax, qword [0x1403486d0]
xor rax, rsp
mov qword [rbp - 1], rax
mov r15, r9
mov esi, r8d
mov rdi, rcx
mov r13, qword [rbp + 0x6f]
mov r12, qword [rbp + 0x77]
cmp dword [rbp + 0x7f], 0
jne 0x1400a3525
xor ebx, ebx
lea r14d, [rbx + 7]
cmp r8d, 0x113
jne 0x1400a2cb8
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x34], 1
mov rdx, r9
call fcn.14009f110
mov qword [r12], rbx
mov rax, qword [rdi + 0x30]
cmp dword [rax + 0x34], ebx
jne 0x1400a31f0
cmp esi, dword [rdi + 0x70]
jne 0x1400a31fa
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, r15
mov edx, esi
mov rcx, rdi
call fcn.1400a00f0
mov qword [r12], rax
mov eax, 1
jmp 0x1400a3527
cmp esi, 1
jne 0x1400a2dad
lea r15, str.TrayWnd::OnCreate
mov qword [rbp - 0x29], r15
call fcn.1400c1f80
lea rbx, [0x140273c80]
cmp dword [rax + 0x78], r14d
jl 0x1400a2d0f
call fcn.1400c1f80
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
nop
xor r9d, r9d
mov edx, 0x23d
mov r8d, 0x927c0
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, 0x23d
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
mov r9, rdi
lea r8, [0x1400a6320]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov dl, 1
mov rcx, rdi
call fcn.1400a74e0
nop
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x1400a2f33
call fcn.1400c1f80
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayLock
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________LEAVE
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
jmp 0x1400a2f33
cmp esi, 2
jne 0x1400a2e99
lea r15, str.TrayWnd::OnDestroy
mov qword [rbp - 0x29], r15
call fcn.1400c1f80
lea rbx, [0x140273c80]
cmp dword [rax + 0x78], r14d
jl 0x1400a2e04
call fcn.1400c1f80
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
nop
mov rcx, rdi
call fcn.1400aa110
mov rcx, qword [rdi + 0x4f0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, rdi
call fcn.1400a4540
mov rcx, rdi
call fcn.1400a92e0
mov rcx, qword [rdi + 0x540]
test rcx, rcx
je 0x1400a2e4a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
mov qword [rdi + 0x540], rsi
jmp 0x1400a2e4c
xor esi, esi
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
nop
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x1400a2f33
call fcn.1400c1f80
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayLock
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________LEAVE
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
jmp 0x1400a2f33
cmp esi, 0x10
jne 0x1400a2f41
call fcn.1400c1f80
lea rbx, [0x140273c80]
lea rsi, str.TrayWnd::OnClose
cmp dword [rax + 0x78], r14d
jl 0x1400a2eeb
call fcn.1400c1f80
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x1400a2f31
call fcn.1400c1f80
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayLock
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________LEAVE
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
xor esi, esi
mov qword [r12], rsi
mov eax, 1
jmp 0x1400a3527
cmp esi, 0x218
jne 0x1400a3010
call fcn.1400c1f80
lea rsi, str.TrayWnd::OnPowerBroadcast
cmp dword [rax + 0x78], r14d
jl 0x1400a2f9c
call fcn.1400c1f80
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], rsi
lea rcx, str._s:_wParam__0x_08x__lParam__0x_08x
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x331
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
mov r8, rsi
mov rdx, r14
mov rcx, rax
call fcn.1400c23b0
cmp r15, 0x12
jne 0x1400a351a
call fcn.1400c1f80
cmp dword [rax + 0x78], 6
jl 0x1400a2fe5
call fcn.1400c1f80
mov qword [rsp + 0x30], rsi
lea rcx, str._s:_YAWN_got_resume_from_suspend_notification__waking_up_
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x337
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
mov r8, rsi
lea edx, [r15 - 0xc]
mov rcx, rax
call fcn.1400c23b0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400a6360]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r12], rbx
mov eax, 1
jmp 0x1400a3527
cmp esi, 0x11
jne 0x1400a30db
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x34], 1
call fcn.1400d6880
test al, al
je 0x1400a30c6
lea edx, [rsi - 9]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
mov ebx, eax
test eax, eax
js 0x1400a3081
call fcn.1400c1f80
cmp dword [rax + 0x78], r14d
jl 0x1400a30c4
call fcn.1400c1f80
lea rcx, str.Register_for_restart_succeeded.
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x509
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
lea r8, str.TrayWnd::OnQueryEndSession
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
jmp 0x1400a30c4
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400a30c4
call fcn.1400c1f80
mov dword [rsp + 0x30], ebx
lea rcx, str.Failed_to_register_for_restart_0x_08X
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x50d
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
lea r8, str.TrayWnd::OnQueryEndSession
mov edx, 3
mov rcx, rax
call fcn.1400c23b0
xor ebx, ebx
mov qword [r12], 1
mov rax, qword [rdi + 0x30]
cmp dword [rax + 0x34], 0
jmp 0x1400a2c82
cmp esi, 0x16
jne 0x1400a2c88
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x34], 1
mov byte [rbp - 0x31], bl
lea rdx, [rbp - 0x31]
mov rcx, qword [str.iCloudServicesStartupTask]
call fcn.1400d8880
mov ebx, eax
test eax, eax
js 0x1400a3176
mov ebx, 4
cmp byte [rbp - 0x31], 0
cmovne ebx, r14d
call fcn.1400c1f80
cmp dword [rax + 0x78], ebx
jl 0x1400a31c5
call fcn.1400c1f80
mov r10, rax
movzx ecx, byte [rbp - 0x31]
lea rax, [0x14027b818]
lea r8, str.DISABLED
test cl, cl
cmovne r8, rax
mov edx, 4
cmovne edx, r14d
mov qword [rsp + 0x38], r8
mov rax, qword [str.iCloudServicesStartupTask]
mov qword [rsp + 0x30], rax
lea rax, str.StartupTask__s_is__s.
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x518
mov rcx, r10
jmp 0x1400a31b2
call fcn.1400c1f80
cmp dword [rax + 0x78], 3
jl 0x1400a31c5
call fcn.1400c1f80
mov rcx, rax
mov dword [rsp + 0x38], ebx
mov rax, qword [str.iCloudServicesStartupTask]
mov qword [rsp + 0x30], rax
lea rax, str.StartupTask__s_is_unknown__hr_08X.
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x51a
mov edx, 3
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
lea r8, str.TrayWnd::OnEndSession
call fcn.1400c2500
test r15d, r15d
je 0x1400a31dd
call fcn.1400d6880
test al, al
je 0x1400a31dd
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor ebx, ebx
mov qword [r12], rbx
mov rcx, qword [rdi + 0x30]
cmp dword [rcx + 0x34], ebx
je 0x1400a2c88
mov eax, 1
jmp 0x1400a3527
cmp esi, dword [rdi + 0x74]
jne 0x1400a3226
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, r15
mov edx, esi
mov rcx, rdi
call fcn.14009ef20
mov qword [r12], rax
mov eax, 1
jmp 0x1400a3527
cmp esi, dword [rdi + 0x78]
jne 0x1400a3252
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, r15
mov edx, esi
mov rcx, rdi
call fcn.14009f3f0
mov qword [r12], rax
mov eax, 1
jmp 0x1400a3527
cmp esi, dword [rdi + 0x7c]
jne 0x1400a327e
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, r15
mov edx, esi
mov rcx, rdi
call fcn.14009eab0
mov qword [r12], rax
mov eax, 1
jmp 0x1400a3527
cmp esi, 0x111
jne 0x1400a3525
mov eax, 0x9c56
cmp ax, r15w
jne 0x1400a32fd
call fcn.1400c1f80
lea rbx, [0x140273c80]
lea rdi, str.TrayWnd::OnStatusError
cmp dword [rax + 0x78], r14d
jl 0x1400a32df
call fcn.1400c1f80
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
nop
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x1400a2f31
call fcn.1400c1f80
mov qword [rsp + 0x30], rdi
jmp 0x1400a2f0b
mov eax, 0x9c42
cmp ax, r15w
jne 0x1400a342d
lea rdi, str.TrayWnd::OnPreferences
mov qword [rbp - 0x29], rdi
call fcn.1400c1f80
lea rbx, [0x140273c80]
cmp dword [rax + 0x78], r14d
jl 0x1400a335a
call fcn.1400c1f80
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
nop
xor esi, esi
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], r14
mov word [rbp - 0x21], si
xor r8d, r8d
lea rdx, [0x140270b0c]
lea rcx, [rbp - 0x21]
call fcn.1400523d0
nop
mov dword [rsp + 0x20], 0xffffffff
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x21]
xor ecx, ecx
call fcn.14007ab30
nop
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400a33dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a33d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a33d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], r14
mov word [rbp - 0x21], si
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x1400a2f33
call fcn.1400c1f80
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayLock
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________LEAVE
mov edx, r14d
mov rcx, rax
call fcn.1400c23b0
jmp 0x1400a2f33
mov eax, 0x8002
cmp ax, r15w
jne 0x1400a3467
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, str.https:__support.apple.com_guide_icloud_windows_welcome
lea rcx, [0x140274888]
call fcn.1400cc590
mov qword [r12], rbx
mov eax, 1
jmp 0x1400a3527
mov eax, 0x9c41
cmp ax, r15w
jne 0x1400a3525
call fcn.1400c1f80
cmp dword [rax + 0x78], 6
jl 0x1400a34b5
call fcn.1400c1f80
lea rcx, str.Starting_thread_to_launch_browser_from_Notification_Area.
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x5c3
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootMobileMeServicesTrayWnd.cpp
lea r8, str.TrayWnd::OnOpenWebiCloud
mov edx, 6
mov rcx, rax
call fcn.1400c23b0
call fcn.14008ef20
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x11], rbx
mov qword [rbp - 9], r14
mov word [rbp - 0x21], bx
lea rdx, [rbp - 0x21]
mov rcx, rax
call fcn.14008f560
nop
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400a351a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3515
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3515
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [r12], rbx
mov eax, 1
jmp 0x1400a3527
xor eax, eax
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1400e6b50
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret