Function at 0x140001000
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3a8
movaps xmmword [rsp + 0x390], xmm6
mov r15, rcx
mov rax, qword [0x1401ac698]
xor rax, rsp
mov qword [rsp + 0x388], rax
call fcn.1400027b4
call fcn.140040350
xor ecx, ecx
xor edx, edx
call fcn.140025fb0
call fcn.140026320
mov r12, rax
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], r13
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rbx], xmm6
lea rcx, [0x14015f38c]
lea rdi, [rsp + 0x180]
mov qword [rdi], rcx
call fcn.14014ae60
mov qword [rdi + 8], rax
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call fcn.1400268e0
lea rcx, str.crashpad_handler
call fcn.14014ae60
movzx edi, byte [rbx]
mov rsi, rdi
shr rsi, 1
and dil, 1
mov rbx, qword [rbx + 8]
mov rcx, rbx
cmove rcx, rsi
cmp rax, rcx
jne 0x140001100
mov qword [rsp + 0x20], rax
lea r9, str.crashpad_handler
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.140022200
test eax, eax
je 0x1400013b2
movzx esi, byte [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
mov edi, esi
and dil, 1
shr rsi, 1
lea rcx, str.fallback_handler
call fcn.14014ae60
test dil, dil
cmovne rsi, rbx
cmp rax, rsi
jne 0x140001142
mov qword [rsp + 0x20], rax
lea r9, str.fallback_handler
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.140022200
test eax, eax
je 0x140001536
lea rcx, [rsp + 0xa0]
mov qword [rcx], r13
call fcn.14003acf0
call sub.nw_elf.dll_SignalChromeElf
lea rcx, [rsp + 0x50]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.140024130
movzx esi, byte [rsp + 0x80]
test sil, 1
je 0x140001184
mov rsi, qword [rsp + 0x88]
jmp 0x140001187
shr rsi, 1
test rsi, rsi
je 0x1400011c3
lea rcx, [0x14015f37a]
call fcn.14014ae60
cmp rax, rsi
jne 0x1400011c8
mov qword [rsp + 0x20], rsi
lea r9, [0x14015f37a]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.140022200
test eax, eax
jne 0x1400011c8
call fcn.140041a90
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.140029490
mov ecx, 7
mov rdx, rsi
call fcn.140032ad0
test al, al
je 0x140001910
lea rcx, [rsp + 0x180]
call fcn.14002adf0
test al, al
je 0x140001910
lea rsi, [rsp + 0x160]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.1400412e0
lea r8, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rcx, rsi
mov rdx, 0xffffffff80000001
mov r9d, 0x2001f
call fcn.140041300
test eax, eax
jne 0x140001903
xorps xmm0, xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
lea r14, [rsp + 0x182]
test byte [r14 - 2], 1
mov rdx, r14
je 0x140001275
mov rdx, qword [rsp + 0x190]
lea rcx, [rsp + 0x160]
lea r8, [rsp + 0x140]
call fcn.140041490
test eax, eax
jne 0x1400018ec
lea rbx, [rsp + 0x120]
mov qword [rbx + 0x10], r13
movaps xmmword [rbx], xmm6
lea r12, [0x14015f14c]
lea r8, [rsp + 0xc8]
mov qword [r8], r12
mov qword [r8 + 8], 1
lea rax, [rsp + 0x142]
movzx edx, byte [rax - 2]
mov rcx, rdx
shr rcx, 1
test dl, 1
mov rbp, qword [rax + 0xe]
cmove rbp, rax
lea rdx, [rsp + 0xb0]
mov qword [rdx], rbp
cmovne rcx, qword [rax + 6]
mov qword [rdx + 8], rcx
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov r9d, 1
call fcn.140036e90
xor ebp, ebp
lea rdi, str.WIN95
lea rsi, [rsp + 0x100]
mov rax, qword [rbp + rdi]
mov qword [rsp + 0x100], rax
mov rcx, rbx
mov rdx, rsi
call fcn.140001acd
add rbp, 8
cmp rbp, 0x68
jne 0x140001313
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x128]
cmp rax, rcx
je 0x14000187a
lea rsi, [rsp + 0x100]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
lea r8, [rsp + 0xf0]
mov qword [r8], r12
mov qword [r8 + 8], 1
sub rcx, rax
sar rcx, 3
movabs rbp, 0xaaaaaaaaaaaaaaab
imul rbp, rcx
lea rdx, [rsp + 0xe0]
mov qword [rdx], rbp
mov qword [rdx + 8], rax
mov rcx, rsi
call fcn.140038470
test byte [rsi], 1
je 0x14000189e
mov r8, qword [rsp + 0x110]
jmp 0x1400018a6
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor r15d, r15d
mov ecx, eax
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_PostThreadMessageW]
lea rcx, [rsp + 0x50]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_PeekMessageW]
mov rcx, r12
call fcn.14004a83c
lea rdx, str.no_periodic_tasks
mov rcx, r12
call fcn.140026870
test al, al
jne 0x1400017e7
lea rdi, [rsp + 0x180]
mov qword [rdi + 0x40], r13
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
call fcn.14004c44c
lea r8, str.initial_client_data
lea r14, [rsp + 0x160]
mov rcx, r12
mov rdx, r14
call fcn.1400268e0
mov rcx, rdi
mov rdx, r14
call fcn.14004c4a0
mov ebx, eax
test byte [r14], 1
je 0x14000146d
mov rcx, qword [rsp + 0x170]
call fcn.14012c9c4
test bl, bl
je 0x1400017e4
lea r14, [rsp + 0x140]
mov qword [r14], 0xffffffffffffffff
mov rsi, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rsi
mov rbx, rax
mov rdi, qword [rsp + 0x1b8]
call rsi
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400
mov rcx, rax
mov rdx, rdi
mov r8, rbx
mov r9, r14
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x1400017e4
lea r14, [rsp + 0x160]
movaps xmmword [r14], xmm6
mov rdx, qword [rsp + 0x140]
mov rcx, r14
call fcn.1400403c0
mov ecx, 0xa8
call fcn.14012c988
mov r15, rax
mov rcx, rax
call fcn.14004a350
lea rbx, [rsp + 0x40]
mov rcx, rbx
mov rdx, r14
call fcn.1400404b0
mov rcx, r15
mov rdx, rbx
call fcn.14004a41e
test al, al
je 0x140001524
mov rcx, r15
call fcn.14004a5a0
lea rcx, [rsp + 0x160]
call fcn.140040550
jmp 0x1400017e7
lea rsi, [rsp + 0x180]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.14012fcf0
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x140001594
lea rdx, str..._.._chrome_app_chrome_exe_main_win.cc
lea r9, str.::GetModuleFileName_nullptr__exe_file__base::size_exe_file__
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov r8d, 0xa1
call fcn.140024e50
mov rcx, rsi
call fcn.140024ee0
mov rcx, rsi
call fcn.140024ef0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x170], rax
movaps xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x150], rax
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x130], rax
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x110], rax
movaps xmmword [rsp + 0x100], xmm0
lea rcx, [rsp + 0x180]
call fcn.14014b2c4
mov rdi, rax
movabs rax, 0x7ffffffffffffff0
cmp rdi, rax
jae 0x140001aba
cmp rdi, 0xb
jae 0x140001621
lea eax, [rdi + rdi]
lea rbx, [rsp + 0x102]
mov byte [rbx - 2], al
test rdi, rdi
jne 0x140001657
jmp 0x14000166d
lea rsi, [rdi + 8]
and rsi, 0xfffffffffffffff8
js 0x140001ac7
lea rcx, [rsi + rsi]
call fcn.14012c988
mov rbx, rax
mov qword [rsp + 0x110], rax
or rsi, 1
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rdi
mov r8, rdi
add r8, rdi
lea rdx, [rsp + 0x180]
mov rcx, rbx
call fcn.14012f890
mov word [rbx + rdi*2], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x100]
lea rdx, [rsp + 0x50]
lea r8, [rsp + 0x160]
lea r9, [rsp + 0x120]
mov rcx, rsi
call fcn.140054616
test byte [rsi], 1
je 0x1400016b7
mov rcx, qword [rsp + 0x110]
call fcn.14012c9c4
lea rax, [rsp + 0x142]
movzx edx, byte [rax - 2]
mov rcx, rdx
shr rcx, 1
test dl, 1
mov rbp, qword [rax + 0xe]
cmove rbp, rax
lea rdx, [rsp + 0xf0]
mov qword [rdx], rbp
cmovne rcx, qword [rax + 6]
mov qword [rdx + 8], rcx
lea rdi, [rsp + 0x100]
mov rcx, rdi
call fcn.140039950
lea rax, [rsp + 0x162]
movzx edx, byte [rax - 2]
mov rcx, rdx
shr rcx, 1
test dl, 1
mov rbp, qword [rax + 0xe]
cmove rbp, rax
lea rdx, [rsp + 0xe0]
mov qword [rdx], rbp
cmovne rcx, qword [rax + 6]
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0xc8]
mov rcx, rsi
call fcn.140039950
lea rax, [rsp + 0x52]
movzx edx, byte [rax - 2]
mov rcx, rdx
shr rcx, 1
test dl, 1
mov rbp, qword [rax + 0xe]
cmove rbp, rax
lea rdx, [rsp + 0xa0]
mov qword [rdx], rbp
cmovne rcx, qword [rax + 6]
mov qword [rdx + 8], rcx
lea rbx, [rsp + 0xb0]
mov rcx, rbx
call fcn.140039950
mov rcx, r12
mov rdx, rbx
mov r8, rsi
mov r9, rdi
call fcn.14004aab6
mov ebp, eax
test byte [rsp + 0x120], 1
je 0x1400017a1
mov rcx, qword [rsp + 0x130]
call fcn.14012c9c4
test byte [rsp + 0x140], 1
je 0x1400017b8
mov rcx, qword [rsp + 0x150]
call fcn.14012c9c4
test byte [rsp + 0x160], 1
je 0x1400017cf
mov rcx, qword [rsp + 0x170]
call fcn.14012c9c4
test byte [rsp + 0x50], 1
je 0x140001a75
mov rcx, qword [rsp + 0x60]
jmp 0x140001870
xor r15d, r15d
lea rbx, [rsp + 0x180]
mov qword [rbx + 0x10], r13
movaps xmmword [rbx], xmm6
lea rsi, str.user_data_dir
lea rdi, [rsp + 0x160]
mov qword [rdi], rsi
mov rcx, rsi
call fcn.14014ae60
mov qword [rdi + 8], rax
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call fcn.140026a10
call fcn.140026320
lea r8, [0x14015f38c]
mov rcx, rax
mov rdx, rbx
mov r9, rsi
call fcn.14004abd4
mov ebp, eax
test r15, r15
je 0x14000184f
test ebp, ebp
je 0x14000184f
mov rcx, r15
call fcn.14004a792
lea rcx, [rsp + 0x180]
call fcn.1400295c0
test r15, r15
je 0x140001a75
mov rcx, r15
call fcn.14004a3f4
mov rcx, r15
call fcn.14012c9c4
jmp 0x140001a75
test byte [rsp + 0x180], 1
je 0x14000188c
mov r14, qword [rsp + 0x190]
lea rcx, [rsp + 0x160]
mov rdx, r14
call fcn.1400413e0
jmp 0x1400018df
lea r8, [rsp + 0x102]
test byte [rsp + 0x180], 1
je 0x1400018b8
mov r14, qword [rsp + 0x190]
lea rcx, [rsp + 0x160]
mov rdx, r14
call fcn.1400415a0
test byte [rsp + 0x100], 1
je 0x1400018df
mov rcx, qword [rsp + 0x110]
call fcn.14012c9c4
lea rcx, [rsp + 0x120]
call fcn.140001dbc
test byte [rsp + 0x140], 1
je 0x140001903
mov rcx, qword [rsp + 0x150]
call fcn.14012c9c4
lea rcx, [rsp + 0x160]
call fcn.140041390
lea rcx, [rsp + 0x180]
call fcn.1400295c0
lea rcx, str..._.._chrome_app_chrome_exe_main_win.cc
mov edx, 0x28
call fcn.14002c5b0
test eax, eax
jle 0x140001977
lea rdx, str..._.._chrome_app_chrome_exe_main_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x116
mov r9d, 0xffffffff
call fcn.14002c620
lea rcx, [rsp + 0x190]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.140001e21
mov rcx, rsi
call fcn.14002cae0
call fcn.14000272d
mov rbx, rax
mov r8, qword [rsp + 0xa0]
mov rcx, rax
mov rdx, r15
call fcn.1400024b6
mov ebp, eax
mov rcx, rbx
call fcn.140002698
test rbx, rbx
je 0x1400019ae
mov rax, qword [rbx]
mov rcx, rbx
mov edx, 1
call qword [rax]
lea rcx, [0x14015f391]
call fcn.14014ae60
movzx ebx, byte [rsp + 0x80]
mov rdi, rbx
shr rdi, 1
and bl, 1
mov rsi, qword [rsp + 0x88]
mov rcx, rsi
cmove rcx, rdi
cmp rax, rcx
jne 0x140001a1d
mov qword [rsp + 0x20], rax
lea r9, [0x14015f391]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.140022200
test eax, eax
je 0x140001a5a
movzx edi, byte [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov ebx, edi
and bl, 1
shr rdi, 1
lea rcx, [0x14015f386]
call fcn.14014ae60
test bl, bl
cmovne rdi, rsi
cmp rax, rdi
jne 0x140001a6b
mov qword [rsp + 0x20], rax
lea r9, [0x14015f386]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.140022200
test eax, eax
jne 0x140001a6b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x50]
call fcn.140024170
test byte [rsp + 0x80], 1
je 0x140001a8c
mov rcx, qword [rsp + 0x90]
call fcn.14012c9c4
mov rcx, qword [rsp + 0x388]
xor rcx, rsp
call fcn.14012cde0
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x390]
add rsp, 0x3a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x100]
call fcn.1400215c4
call fcn.14013f8b4
int3