Function at 0x140054fc0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov rdi, r9
mov qword [rsp + 0x28], r8
mov r13, rdx
mov rbx, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
call fcn.1400e3170
mov rsi, rax
mov edx, dword [rax + 4]
mov r14d, dword [rax + 8]
mov ebp, dword [rax + 0xc]
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xc0], r12
movaps xmm6, xmmword [0x1402103c0]
movaps xmmword [rsp + 0xb0], xmm6
lea r15, [rsp + 0xd0]
mov rcx, r15
call fcn.1401658f0
movsx rax, byte [r15 + 0x17]
test rax, rax
jns 0x140055060
mov rax, qword [rsp + 0xd8]
mov r15, qword [rsp + 0xd0]
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], rax
test rax, rax
js 0x140055e42
sete al
test r15, r15
setne cl
or cl, al
je 0x140055e2f
mov qword [rsp + 0x38], rbx
lea rbx, [0x140217356]
mov qword [rsp + 0x190], rbx
mov qword [rsp + 0x198], 1
lea r15, [rsp + 0x2c0]
mov rcx, r15
mov edx, r14d
call fcn.1401658f0
movsx rax, byte [r15 + 0x17]
test rax, rax
jns 0x1400550d7
mov rax, qword [rsp + 0x2c8]
mov r15, qword [rsp + 0x2c0]
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], rax
test rax, rax
js 0x140055e42
sete al
test r15, r15
setne cl
or cl, al
je 0x140055e2f
mov qword [rsp + 0x1b0], rbx
mov qword [rsp + 0x1b8], 1
lea r14, [rsp + 0x148]
mov rcx, r14
mov edx, ebp
call fcn.1401658f0
movsx rax, byte [r14 + 0x17]
test rax, rax
jns 0x140055141
mov rax, qword [rsp + 0x150]
mov r14, qword [rsp + 0x148]
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1c8], rax
test rax, rax
js 0x140055e42
sete al
test r14, r14
setne cl
or cl, al
je 0x140055e2f
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x180]
lea r15, [rsp + 0x90]
mov qword [r15], rax
mov qword [r15 + 8], 5
lea r13, [rsp + 0xb0]
mov rcx, r13
mov rdx, r15
call fcn.14005a5c0
cmp byte [rsp + 0x15f], 0
jns 0x1400551b5
mov rcx, qword [rsp + 0x148]
call fcn.1400fc308
cmp byte [rsp + 0x2d7], 0
jns 0x1400551cc
mov rcx, qword [rsp + 0x2c0]
call fcn.1400fc308
cmp byte [rsp + 0xe7], 0
jns 0x1400551e3
mov rcx, qword [rsp + 0xd0]
call fcn.1400fc308
mov qword [rsp + 0xa0], r12
movaps xmmword [rsp + 0x90], xmm6
lea rcx, [rsp + 0x180]
mov qword [rcx + 0x10], r12
movaps xmmword [rcx], xmm6
call fcn.1400dc560
call fcn.140070080
mov rax, qword [rax + 8]
cmp byte [rax + 0x48], 1
je 0x140055225
lea rdx, [rsp + 0x180]
mov ecx, 0x6f
jmp 0x140055232
lea rdx, [rsp + 0x180]
mov ecx, 0x71
call fcn.140060460
test al, al
je 0x1400553b5
lea rax, [0x14021b63c]
lea r8, [rsp + 0x148]
mov qword [r8], rax
mov qword [r8 + 8], 6
lea r14, [rsp + 0x180]
lea rbp, [rsp + 0x2c0]
mov rcx, r14
mov rdx, rbp
call fcn.14006a660
lea rax, [0x14021453b]
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov qword [r8 + 8], 3
lea rbx, [rsp + 0xd0]
mov rcx, rbp
mov rdx, rbx
call fcn.14006a660
mov rcx, r14
mov rdx, rbx
call fcn.140068ec0
mov rcx, rbx
call fcn.1400dc710
mov rcx, rbp
call fcn.1400dc710
xorps xmm7, xmm7
movaps xmmword [rbx], xmm7
mov qword [rbx + 0x10], 0
lea rbp, [rsp + 0xd0]
mov rcx, r14
mov rdx, rbp
call fcn.140061960
test al, al
je 0x14005534d
movsx rax, byte [rsp + 0xe7]
test rax, rax
cmovs rax, qword [rsp + 0xd8]
mov qword [rsp + 0xa0], r12
cmovs rbp, qword [rsp + 0xd0]
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0x2c0], rbp
mov qword [rsp + 0x2c8], rax
test rax, rax
js 0x140055e42
sete al
test rbp, rbp
setne cl
or cl, al
je 0x140055e2f
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x2c0]
call fcn.140063f20
jmp 0x140055361
movaps xmmword [rsp + 0x90], xmm7
mov qword [rsp + 0xa0], 0
cmp byte [rsp + 0xe7], 0
jns 0x1400553cc
mov rcx, qword [rsp + 0xd0]
call fcn.1400fc308
jmp 0x1400553cc
mov qword [rsp + 0x188], 2
mov r14, qword [rsp + 0x180]
jmp 0x140055421
mov rdx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x188]
lea rcx, [rsp + 0x2c0]
call fcn.1400cc5b0
jmp 0x14005545d
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
lea rbx, [rsp + 0x180]
mov rcx, rbx
call fcn.1400dc710
mov qword [rsp + 0x80], r12
movaps xmmword [rsp + 0x70], xmm6
xorps xmm0, xmm0
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
lea r14, [rsp + 0x180]
mov rcx, r14
call fcn.14017b450
test al, al
jne 0x14005542f
cmp byte [rsp + 0x197], 0
js 0x14005537a
mov byte [rsp + 0x197], 2
mov dword [r14], 0x6e0065
mov word [r14 + 4], 0
cmp byte [rsp + 0x197], 0
js 0x140055393
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x2d0], rax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x2c0], xmm0
mov ecx, 0x18
call fcn.1400fc2cc
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0xe0], rbx
test rax, rax
je 0x140055e68
cmp byte [rsp + 0x2d7], 0
jns 0x140055506
mov rdx, qword [rsp + 0x2c0]
mov r8, qword [rsp + 0x2c8]
mov rcx, rax
call fcn.1400cc5b0
lea rbp, [rsp + 0xd0]
mov qword [rbp + 8], rbx
lea rax, str.http:__coccoc.com_uninstall.html_hl_1
lea rdx, [rsp + 0x148]
mov qword [rdx], rax
mov qword [rdx + 8], 0x26
lea r14, [rsp + 0x70]
mov rcx, r14
mov r8, rbp
xor r9d, r9d
call fcn.140165300
mov rbx, qword [rbp]
test rbx, rbx
je 0x14005555d
mov r12, qword [rsp + 0xd8]
mov rcx, rbx
cmp r12, rbx
je 0x140055550
add r12, 0xffffffffffffffe8
jmp 0x140055535
mov rcx, qword [rsp + 0x2d0]
mov qword [rax + 0x10], rcx
movaps xmm0, xmmword [rsp + 0x2c0]
movups xmmword [rax], xmm0
jmp 0x1400554ae
mov rcx, qword [r12]
call fcn.1400fc308
lea rax, [r12 - 0x18]
cmp r12, rbx
mov r12, rax
je 0x140055548
test r12, r12
je 0x140055e55
cmp byte [r12 + 0x17], 0
js 0x14005551f
jmp 0x140055528
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0xd8], rbx
call fcn.1400fc308
cmp byte [rsp + 0x2d7], 0
jns 0x140055574
mov rcx, qword [rsp + 0x2c0]
call fcn.1400fc308
cmp byte [rsp + 0x197], 0
movabs rbx, 0xaaaaaaaaaaaaaaaa
jns 0x140055595
mov rcx, qword [rsp + 0x180]
call fcn.1400fc308
movsx rax, byte [rsp + 0x87]
test rax, rax
cmovs rax, qword [rsp + 0x78]
mov qword [rsp + 0x60], rbx
cmovs r14, qword [rsp + 0x70]
movaps xmmword [rsp + 0x50], xmm6
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x188], rax
test rax, rax
js 0x140055e42
sete al
test r14, r14
setne cl
or cl, al
je 0x140055e2f
lea rax, str.crversion
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], ntohl
lea r14, [rsp + 0x2c0]
mov rcx, qword [rsp + 0x38]
mov rdx, r14
call fcn.140062150
movsx rax, byte [r14 + 0x17]
test rax, rax
jns 0x14005562b
mov rax, qword [rsp + 0x2c8]
mov r14, qword [rsp + 0x2c0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rax
test rax, rax
js 0x140055e42
sete al
test r14, r14
setne cl
or cl, al
je 0x140055e2f
lea rdx, [rsp + 0x40]
mov rcx, rbp
call fcn.140063f20
movsx rax, byte [rsp + 0xe7]
test rax, rax
jns 0x14005567a
mov rax, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0xd0]
mov qword [rsp + 0x1a0], rbp
mov qword [rsp + 0x1a8], rax
test rax, rax
js 0x140055e42
sete al
test rbp, rbp
setne cl
or cl, al
je 0x140055e2f
lea rax, str.os
movsx rcx, byte [rsp + 0xc7]
test rcx, rcx
cmovs rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x1b0], rax
cmovs r13, qword [rsp + 0xb0]
mov qword [rsp + 0x1b8], 4
mov qword [rsp + 0x1c0], r13
mov qword [rsp + 0x1c8], rcx
test rcx, rcx
js 0x140055e42
sete al
test r13, r13
setne cl
or cl, al
je 0x140055e2f
lea r13, [rsp + 0x180]
lea rdx, [rsp + 0x148]
mov qword [rdx], r13
mov qword [rdx + 8], 5
lea r12, [rsp + 0x50]
mov rcx, r12
call fcn.14005a5c0
cmp byte [rsp + 0xe7], 0
jns 0x140055746
mov rcx, qword [rsp + 0xd0]
call fcn.1400fc308
cmp byte [rsp + 0x2d7], 0
jns 0x14005575d
mov rcx, qword [rsp + 0x2c0]
call fcn.1400fc308
movsx rcx, byte [rsp + 0xa7]
mov rax, rcx
test rcx, rcx
jns 0x140055776
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x140055857
movsx r8, byte [rsp + 0x67]
test r8, r8
cmovs r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
cmovns rdx, r12
mov qword [rsp + 0x180], rdx
mov qword [rsp + 0x188], r8
test r8, r8
js 0x140055e42
sete r8b
test rdx, rdx
setne dl
or dl, r8b
je 0x140055e2f
lea rdx, str.uid
mov qword [rsp + 0x190], rdx
mov qword [rsp + 0x198], 5
test cl, cl
jns 0x1400557ea
mov r15, qword [rsp + 0x90]
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], rax
test rax, rax
js 0x140055e42
test r15, r15
je 0x140055e2f
lea rdx, [rsp + 0x2c0]
mov qword [rdx], r13
mov qword [rdx + 8], 3
lea rcx, [rsp + 0xd0]
call fcn.14005a5c0
cmp byte [rsp + 0x67], 0
jns 0x14005583d
mov rcx, qword [rsp + 0x50]
call fcn.1400fc308
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x28]
movsx rax, byte [rcx + 0x17]
test rax, rax
jns 0x14005586a
mov rax, qword [rcx + 8]
test rax, rax
je 0x1400559bf
lea rbx, [rsp + 0x180]
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, qword [rsp + 0x30]
mov r8d, 0x64
call fcn.140090e00
lea r14, [rsp + 0x2c0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [r14], rax
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.140090e70
mov r14, qword [r14]
test r14, r14
je 0x1400559b2
cmp byte [r14 + 0x18], 6
jne 0x140055996
lea rbx, [rsp + 0x148]
mov word [rbx], 0xaaaa
mov rcx, r14
call fcn.140062670
mov r14, rax
lea rcx, str.user_experience_metrics.reporting_enabled
lea r15, [rsp + 0xd0]
mov qword [r15], rcx
call fcn.14011f4e0
mov qword [r15 + 8], rax
mov rcx, r14
mov rdx, rbx
mov r8, r15
call fcn.140062b80
mov bpl, byte [rbx + 1]
and bpl, byte [rbx]
mov r14, qword [rsp + 0x2c0]
mov qword [rsp + 0x2c0], 0
test r14, r14
je 0x140055947
mov rcx, r14
call fcn.1400cf380
mov rcx, r14
call fcn.1400fc308
lea rcx, [rsp + 0x180]
call fcn.140090e40
test bpl, bpl
mov rbx, qword [rsp + 0x28]
je 0x1400559bf
lea rdx, [0x14021b5e6]
lea r14, [rsp + 0x50]
mov r8d, 1
mov rcx, r14
call fcn.1400cc6b0
movsx r8, byte [rbx + 0x17]
test r8, r8
jns 0x140055989
mov r8, qword [rbx + 8]
mov rbx, qword [rbx]
mov rcx, r14
mov rdx, rbx
call fcn.1400cc6b0
jmp 0x1400559bf
mov qword [rsp + 0x2c0], 0
mov rcx, r14
call fcn.1400cf380
mov rcx, r14
call fcn.1400fc308
lea rcx, [rsp + 0x180]
call fcn.140090e40
movsx rcx, byte [rdi + 0x17]
mov rax, rcx
test rcx, rcx
jns 0x1400559d0
mov rax, qword [rdi + 8]
test rax, rax
je 0x140055aac
movsx r8, byte [rsp + 0x67]
test r8, r8
cmovs r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
cmovns rdx, r12
mov qword [rsp + 0x180], rdx
mov qword [rsp + 0x188], r8
test r8, r8
js 0x140055e42
sete r8b
test rdx, rdx
setne dl
or dl, r8b
je 0x140055e2f
lea rdx, [0x14021b5e6]
mov qword [rsp + 0x190], rdx
mov qword [rsp + 0x198], 1
test cl, cl
jns 0x140055a3f
mov rdi, qword [rdi]
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], rax
test rax, rax
js 0x140055e42
test rdi, rdi
je 0x140055e2f
lea rdx, [rsp + 0x2c0]
mov qword [rdx], r13
mov qword [rdx + 8], 3
lea rcx, [rsp + 0xd0]
call fcn.14005a5c0
cmp byte [rsp + 0x67], 0
jns 0x140055a92
mov rcx, qword [rsp + 0x50]
call fcn.1400fc308
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x50], xmm0
cmp dword [rsi], 7
jl 0x140055b8e
lea rsi, [rsp + 0x2c0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
lea rdx, str.microsoft_edge:
lea r8, [rsp + 0x50]
mov rcx, rsi
call fcn.14002f2e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xf8], xmm0
movups xmmword [rsp + 0x128], xmm0
movups xmmword [rsp + 0x118], xmm0
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x138], 0
movabs rax, 0x10000000070
mov qword [rsp + 0xd0], rax
lea rax, str.open
mov qword [rsp + 0xe0], rax
cmp byte [rsi + 0x17], 0
jns 0x140055b50
mov rsi, qword [rsp + 0x2c0]
lea rcx, [rsp + 0xd0]
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov esi, eax
test eax, eax
je 0x140055c58
cmp byte [rsp + 0x2d7], 0
jns 0x140055b8a
mov rcx, qword [rsp + 0x2c0]
call fcn.1400fc308
test esi, esi
jne 0x140055bd1
lea rsi, [rsp + 0x180]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.1400dc560
mov ecx, 0x67
mov rdx, rsi
call fcn.140060460
test al, al
jne 0x140055cbd
lea rcx, [rsp + 0x180]
call fcn.1400dc710
cmp byte [rsp + 0x67], 0
jns 0x140055be2
mov rcx, qword [rsp + 0x50]
call fcn.1400fc308
cmp byte [rsp + 0x87], 0
jns 0x140055bf6
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
cmp byte [rsp + 0xa7], 0
jns 0x140055c0d
mov rcx, qword [rsp + 0x90]
call fcn.1400fc308
cmp byte [rsp + 0xc7], 0
jns 0x140055c24
mov rcx, qword [rsp + 0xb0]
call fcn.1400fc308
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1400fd9d0
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140055b73
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str.....chromeinstaller_setupchromium_behaviors.cc
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r8d, 0x46
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x190]
lea rdx, str.Failed_to_launch_Edge_for_uninstall_survey
mov r8d, 0x2a
call fcn.1400be440
mov rcx, rdi
call fcn.14016b4a0
jmp 0x140055b73
lea rax, [0x14021b726]
lea r8, [rsp + 0x170]
mov qword [r8], rax
mov qword [r8 + 8], 0x11
lea rdi, [rsp + 0x180]
lea rsi, [rsp + 0xd0]
mov rcx, rdi
mov rdx, rsi
call fcn.14006a660
mov rcx, rdi
mov rdx, rsi
call fcn.140068ec0
mov rcx, rsi
call fcn.1400dc710
lea rax, str.iexplore.exe
lea r8, [rsp + 0x160]
mov qword [r8], rax
mov qword [r8 + 8], ntohl
lea rsi, [rsp + 0xd0]
mov rcx, rdi
mov rdx, rsi
call fcn.14006a660
mov rcx, rdi
mov rdx, rsi
call fcn.140068ec0
mov rcx, rsi
call fcn.1400dc710
lea rdx, [0x14021b74c]
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov r8, rdi
call fcn.14002f2e0
lea rdx, [0x14021b746]
mov r8d, 2
mov rcx, rbx
call fcn.1400cc6b0
movups xmm0, xmmword [rax]
lea rdi, [rsp + 0x2c0]
movaps xmmword [rdi], xmm0
mov rcx, qword [rax + 0x10]
mov qword [rdi + 0x10], rcx
xor ebx, ebx
mov qword [rax + 0x10], rbx
xorps xmm6, xmm6
movups xmmword [rax], xmm6
movsx r8, byte [rsp + 0x67]
test r8, r8
cmovs r8, qword [rsp + 0x58]
cmovs r12, qword [rsp + 0x50]
mov rcx, rdi
mov rdx, r12
call fcn.1400cc6b0
movups xmm0, xmmword [rax]
movaps xmmword [rsi], xmm0
mov rcx, qword [rax + 0x10]
mov qword [rsi + 0x10], rcx
mov qword [rax + 0x10], rbx
movups xmmword [rax], xmm6
cmp byte [rdi + 0x17], 0
jns 0x140055dde
mov rcx, qword [rsp + 0x2c0]
call fcn.1400fc308
cmp byte [rsp + 0x15f], 0
jns 0x140055df5
mov rcx, qword [rsp + 0x148]
call fcn.1400fc308
lea rdx, [rsp + 0x2c0]
mov dword [rdx], 0
lea rsi, [rsp + 0xd0]
mov rcx, rsi
call fcn.140184c20
cmp byte [rsi + 0x17], 0
jns 0x140055bc4
mov rcx, qword [rsp + 0xd0]
call fcn.1400fc308
jmp 0x140055bc4
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.140139400
int3