Function at 0x14007a36d
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x398
movaps xmmword [rsp + 0x380], xmm6
mov r13, r9
mov rsi, r8
mov rdi, rdx
mov rbp, rcx
mov rax, qword [0x14030d038]
xor rax, rsp
mov qword [rsp + 0x378], rax
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a400
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rbx, [rsp + 0xf0]
mov rcx, rbx
mov r8d, 0x148
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.RunUserExperiment
mov r8d, 0x11
call fcn.1400ff874
mov rcx, rbx
call fcn.140001d00
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xb8]
mov qword [rcx], r14
call fcn.1401ff438
mov qword [rsp + 0x20], r13
mov dword [rsp + 0x28], 0x1388
lea rbx, [rsp + 0xf0]
mov rcx, rbx
mov rdx, rbp
mov r8, rdi
mov r9, rsi
call fcn.1400719d4
mov rsi, qword [rbx]
test rsi, rsi
je 0x14007a540
lea rcx, [rsp + 0x60]
mov qword [rcx + 0x50], r14
movaps xmm6, xmmword [0x1402ae190]
movaps xmmword [rcx + 0x40], xmm6
movaps xmmword [rcx + 0x30], xmm6
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.1401fe726
lea rdi, [rsp + 0x58]
mov qword [rdi], r14
lea rcx, [rsp + 0xb8]
mov rdx, rdi
call fcn.1401ff588
lea rdx, [rsp + 0x54]
mov dword [rdx], 0
mov rcx, qword [rdi]
call fcn.1401fe414
test al, al
je 0x14007a5b1
cmp dword [rsp + 0x54], 0
je 0x14007a5b1
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.1401fe5ee
test al, al
je 0x14007a5fd
mov eax, dword [rsp + 0x64]
lea ecx, [rax - 0xb]
cmp ecx, 6
ja 0x14007a6c1
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a657
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x169
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Experiment_has_reached_terminal_state:
mov r8d, 0x27
call fcn.1400ff874
mov edx, dword [rsp + 0x64]
mov rcx, rax
call fcn.14010cb82
jmp 0x14007a64f
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a59a
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xf0]
mov rcx, rsi
mov r8d, 0x14f
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Timed_out_while_waiting_for_setup_singleton
mov r8d, 0x2b
call fcn.1400ff874
mov rcx, rsi
call fcn.140001d00
lea rcx, [rsp + 0xb8]
mov edx, 2
call fcn.14007a2cd
jmp 0x14007a688
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14007a657
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x15d
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Failed_to_read_study_participation.
mov r8d, 0x23
jmp 0x14007a64a
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a657
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x163
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Another_user_is_participating_in_the_experiment.
mov r8d, 0x30
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rdi, rdi
je 0x14007a67a
mov rcx, rdi
call fcn.14029277c
mov rcx, rdi
call fcn.140112038
mov rax, qword [rsi]
mov rcx, rsi
mov edx, 1
call qword [rax + 8]
lea rcx, [rsp + 0xb8]
call fcn.1401ff538
mov rcx, qword [rsp + 0x378]
xor rcx, rsp
call fcn.140115e50
movaps xmm6, xmmword [rsp + 0x380]
add rsp, 0x398
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp eax, 2
jg 0x14007a76a
cmp dword [rsp + 0x54], 1
jne 0x14007a6e1
xor ecx, ecx
mov edx, 5
call fcn.140187570
mov edx, eax
jmp 0x14007a6fa
call fcn.1400e50e0
movsd xmm1, qword [0x1402ba9d8]
xor eax, eax
ucomisd xmm1, xmm0
seta al
lea edx, [rax + rax*4]
lea rcx, [rsp + 0x60]
call fcn.14029278a
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a76a
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x172
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Assigned_user_to_experiment_group:
mov r8d, 0x23
call fcn.1400ff874
mov edx, dword [rsp + 0x60]
mov rcx, rax
call fcn.14010cb82
mov rcx, rdi
call fcn.140001d00
call fcn.1401eb556
test eax, eax
jns 0x14007a77b
mov rcx, r13
call fcn.140076993
cmp eax, 0x1c
jg 0x14007a7e4
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a7da
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x17c
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Aborting_experiment_due_to_activity.
mov r8d, 0x24
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 5
jmp 0x14007ac89
lea rcx, [rsp + 0x60]
mov edx, eax
call fcn.1401ff5bc
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
mov rdx, rax
call fcn.1401d09e0
test al, al
je 0x14007a868
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007a85e
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x18f
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Aborting_experiment_due_to_tablet_device.
mov r8d, 0x29
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 4
jmp 0x14007ac89
mov qword [rsp + 0x100], r14
movaps xmmword [rsp + 0xf0], xmm6
mov rcx, rbx
call fcn.14018d742
call fcn.140179cdb
movzx edi, al
add rdi, 0xffffffff80000001
lea rbp, [rsp + 0x270]
mov qword [rbp + 0x10], r14
movaps xmmword [rbp], xmm6
mov rcx, rbp
call fcn.1400e6d60
cmp byte [rsp + 0x107], 0
jns 0x14007a8b9
mov rbx, qword [rsp + 0xf0]
mov rcx, rbp
mov rdx, rdi
mov r8, rbx
mov r9d, 0x101
call fcn.140009250
test eax, eax
jne 0x14007a97b
lea rdx, [0x1402b0fa6]
lea rcx, [rsp + 0x270]
call fcn.140184720
mov dil, 1
test al, al
jne 0x14007a97d
xorpd xmm0, xmm0
lea r8, [rsp + 0x300]
movapd xmmword [r8], xmm0
mov qword [r8 + 0x10], 0
lea rdx, [0x1402b10ac]
lea rcx, [rsp + 0x270]
call fcn.14015c930
test eax, eax
jne 0x14007ad13
movzx eax, byte [rsp + 0x317]
test al, al
jns 0x14007a93d
mov rax, qword [rsp + 0x308]
mov dil, 1
cmp rax, 0xb
jne 0x14007ad15
mov qword [rsp + 0x20], 0xb
lea r9, [0x1402bad24]
lea rcx, [rsp + 0x300]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400e6cd2
test eax, eax
setne dil
jmp 0x14007ad15
xor edi, edi
lea rcx, [rsp + 0x270]
call fcn.1400e6d80
cmp byte [rsp + 0x107], 0
jns 0x14007a9a1
mov rcx, qword [rsp + 0xf0]
call fcn.140112038
test dil, dil
je 0x14007aa0a
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007aa00
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x196
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Aborting_experiment_due_to_Chrome_update_rename_pending.
mov r8d, 0x38
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 7
jmp 0x14007ac89
mov qword [rsp + 0x360], r14
mov rcx, qword [0x140314ba8]
lea rdi, [rsp + 0xf0]
mov qword [rdi + 0x10], r14
movaps xmmword [rdi], xmm6
lea rax, str.experiment_retry_delay
lea r8, [rsp + 0x270]
mov qword [r8], rax
mov qword [r8 + 8], 0x16
mov rdx, rdi
call fcn.14017eb40
mov dword [rsp + 0x250], 0xaaaaaaaa
movzx ecx, byte [rdi + 0x17]
mov rax, rcx
test cl, cl
jns 0x14007aa68
mov rax, qword [rsp + 0xf8]
mov ebx, 0x11e1a300
test rax, rax
je 0x14007aaad
test cl, cl
jns 0x14007aa7e
mov rdi, qword [rsp + 0xf0]
lea rcx, [rsp + 0x300]
mov qword [rcx], rdi
mov qword [rcx + 8], rax
lea rdx, [rsp + 0x250]
call fcn.1401dbdd0
test al, al
je 0x14007aaad
movsxd rax, dword [rsp + 0x250]
imul rbx, rax, 0xf4240
mov qword [rsp + 0x360], rbx
cmp byte [rsp + 0x107], 0
jns 0x14007aacc
mov rcx, qword [rsp + 0xf0]
call fcn.140112038
mov r15b, 1
lea rbp, [rsp + 0xf0]
lea r12, [rsp + 0xb8]
mov dword [rsp + 0xf0], 0
mov rcx, rbp
call qword [sym.imp.SHELL32.dll_SHQueryUserNotificationState]
test eax, eax
js 0x14007ab06
mov eax, dword [rsp + 0xf0]
and eax, 0xfffffffb
cmp eax, 1
jne 0x14007ab53
mov qword [rsp + 0xf0], r14
mov rcx, rbp
call fcn.140077a7f
cmp qword [rsp + 0xf0], 0
je 0x14007ab46
lea rcx, [rsp + 0x270]
call fcn.140006bf0
mov rax, qword [rsp + 0x270]
sub rax, qword [rsp + 0xf0]
cmp rax, 0x11e1a2ff
jle 0x14007ab53
call fcn.140291912
test al, al
je 0x14007aca3
test r15b, 1
jne 0x14007ac03
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rbx, rbx
je 0x14007ab80
mov rcx, rbx
call fcn.14029277c
mov rcx, rbx
call fcn.140112038
mov rax, qword [rsi]
mov rcx, rsi
lea rdx, [rsp + 0x360]
call qword [rax]
mov ebx, eax
mov rcx, r12
mov rdx, rbp
call fcn.1401ff588
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xf0], 0
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0x58], rax
test rdi, rdi
je 0x14007abf9
mov rcx, rdi
call fcn.14029277c
mov rcx, rdi
call fcn.140112038
mov rdi, qword [rsp + 0xf0]
mov qword [rsp + 0xf0], 0
test rdi, rdi
je 0x14007abf9
mov rcx, rdi
call fcn.14029277c
mov rcx, rdi
call fcn.140112038
test bl, bl
je 0x14007aadf
jmp 0x14007ac2a
mov eax, 8
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x64], eax
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.1401feeb4
xor r15d, r15d
jmp 0x14007ab5d
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
test eax, eax
jle 0x14007ac84
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x19e
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Aborting_experiment_while_waiting_to_present.
mov r8d, 0x2d
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 9
lea rdx, [rsp + 0x60]
mov dword [rdx + 0x24], eax
mov dword [rdx + 4], eax
mov rcx, qword [rsp + 0x58]
call fcn.1401feeb4
jmp 0x14007a657
mov edi, dword [rsp + 0x88]
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400c7bd0
cmp edi, 5
jne 0x14007ad35
test eax, eax
jle 0x14007ad09
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x1ac
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Skipping_Edge_launch_for_client_in_the_holdback_group.
mov r8d, 0x36
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 0xe
jmp 0x14007ac89
xor edi, edi
cmp byte [rsp + 0x317], 0
jns 0x14007a97d
mov rcx, qword [rsp + 0x300]
call fcn.140112038
jmp 0x14007a97d
test eax, eax
jle 0x14007ad7e
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x1a5
mov r9d, 0xffffffff
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.Launching_Edge_to_show_the_toast.
mov r8d, 0x21
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
mov eax, 0xa
lea rdi, [rsp + 0x60]
mov dword [rdi + 0x24], eax
mov dword [rdi + 4], eax
mov rcx, qword [rsp + 0x58]
mov rdx, rdi
call fcn.1401feeb4
add r13, 8
lea r15, [rsp + 0x360]
mov qword [r15 + 0x10], r14
movaps xmmword [r15], xmm6
lea rax, str.msedge.exe
lea r8, [rsp + 0x350]
mov qword [r8], rax
mov qword [r8 + 8], 0xa
mov rcx, r13
mov rdx, r15
call fcn.14000cf90
lea rbx, [rsp + 0x300]
mov qword [rbx + 0x40], r14
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, r15
call fcn.1401c5680
mov edx, dword [rdi + 0x28]
mov rcx, rbp
call fcn.14014bf40
movzx eax, byte [rsp + 0x107]
test al, al
cmovs rbp, qword [rsp + 0xf0]
lea r8, [rsp + 0x2f0]
mov qword [r8], rbp
cmovs rax, qword [rsp + 0xf8]
mov qword [r8 + 8], rax
lea rax, str.try_edge_again
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rax
mov qword [rdx + 8], 0xe
mov rcx, rbx
call fcn.1400d8630
cmp byte [rsp + 0x107], 0
jns 0x14007ae69
mov rcx, qword [rsp + 0xf0]
call fcn.140112038
call fcn.1401d7720
test al, al
je 0x14007afe8
xorpd xmm0, xmm0
movapd xmmword [rsp + 0x270], xmm0
movapd xmmword [rsp + 0x2c0], xmm0
movapd xmmword [rsp + 0x2b0], xmm0
movapd xmmword [rsp + 0x2a0], xmm0
movapd xmmword [rsp + 0x290], xmm0
movapd xmmword [rsp + 0x280], xmm0
xor eax, eax
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0x270], 0x68
mov qword [rsp + 0x260], rax
movapd xmmword [rsp + 0x250], xmm0
lea rdi, [rsp + 0x230]
mov qword [rdi + 0x10], r14
movaps xmmword [rdi], xmm6
lea rcx, [rsp + 0x300]
mov rdx, rdi
call fcn.140160e90
cmp byte [rdi + 0x17], 0
jns 0x14007af03
mov rdi, qword [rsp + 0x230]
cmp byte [rsp + 0x377], 0
jns 0x14007af15
mov r15, qword [rsp + 0x360]
lea rax, [rsp + 0x250]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x40], rax
xorps xmm6, xmm6
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0
mov rcx, r15
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14007b0d7
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14007b0a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rcx, [rsp + 0xf0]
mov r8d, 0x224
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x100]
lea rdx, str.Failed_to_launch:
mov r8d, 0x12
call fcn.1400ff874
mov rdi, rax
cmp byte [rsp + 0x247], 0
js 0x14007b041
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0xd0], rax
movapd xmm0, xmmword [rsp + 0x230]
movapd xmmword [rsp + 0xc0], xmm0
jmp 0x14007b05e
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14007b0b8
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov r8d, 0x215
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x100]
lea rdx, str.LaunchChrome__:_Not_running_as_interactive_user__browser_will_not_launch_as_expected__aborting_launch.
mov r8d, 0x66
call fcn.1400ff874
mov rcx, rdi
call fcn.140001d00
jmp 0x14007b0b8
mov rdx, qword [rsp + 0x230]
mov r8, qword [rsp + 0x238]
lea rcx, [rsp + 0xc0]
call fcn.1400e6dd4
lea rbx, [rsp + 0xd8]
lea rdx, [rsp + 0xc0]
mov rcx, rbx
call fcn.1401d5e8d
mov rcx, rdi
mov rdx, rbx
call fcn.1401834e0
cmp byte [rbx + 0x17], 0
jns 0x14007b094
mov rcx, qword [rsp + 0xd8]
call fcn.140112038
lea rcx, [rsp + 0xf0]
call fcn.140183e60
cmp byte [rsp + 0x247], 0
jns 0x14007b0b8
mov rcx, qword [rsp + 0x230]
call fcn.140112038
lea rcx, [rsp + 0x300]
call fcn.1401c5ae0
lea rcx, [rsp + 0x360]
call fcn.1400e1350
jmp 0x14007a657
lea rdi, [rsp + 0xf0]
movaps xmmword [rdi], xmm6
mov qword [rdi + 0x10], 0
lea rdx, [rsp + 0x250]
mov rcx, rdi
call fcn.140161d60
mov rcx, rdi
call fcn.140161c20
jmp 0x14007b0a1