Function at 0x1400b0620
Capabilities:
Delete registry value
Set current directory
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3f8
movaps xmmword [rsp + 0x3e0], xmm6
mov r12, rcx
mov rax, qword [0x14029c028]
xor rax, rsp
mov qword [rsp + 0x3d8], rax
call sub.chrome_elf.dll_IsBrowserProcess
movabs r15, 0xaaaaaaaaaaaaaaaa
test al, al
je 0x1400b0787
lea rdi, [rsp + 0x182]
mov r8d, 0x208
mov rcx, rdi
mov dl, 0xaa
call fcn.140189b30
mov word [rdi - 2], 0
lea rdi, [rsp + 0x180]
xor ecx, ecx
mov rdx, rdi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
cmp ecx, 0x103
ja 0x1400b0787
mov eax, eax
lea rdx, [rsp + 0x100]
mov qword [rdx], rdi
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.14010c090
lea rbx, [rsp + 0x140]
mov rcx, rdi
mov rdx, rbx
call fcn.140149d80
lea rdi, [rsp + 0x390]
mov qword [rdi + 0x40], r15
movdqa xmm0, xmmword [0x14026dc70]
movdqa xmmword [rdi + 0x30], xmm0
movdqa xmmword [rdi + 0x20], xmm0
movdqa xmmword [rdi + 0x10], xmm0
movdqa xmmword [rdi], xmm0
lea rdx, [0x14027c45b]
lea r8, str....._base_files_file_util_win.cc
lea r14, [rsp + 0x160]
mov rcx, r14
mov r9d, 0x42c
call fcn.1400ee990
mov rcx, rdi
mov rdx, r14
xor r8d, r8d
call fcn.140123200
cmp byte [rbx + 0x17], 0
jns 0x1400b0748
mov rbx, qword [rsp + 0x140]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov rcx, rdi
call fcn.1400dee50
cmp byte [rsp + 0x157], 0
jns 0x1400b0770
mov rcx, qword [rsp + 0x140]
call fcn.140184dbc
cmp byte [rsp + 0x137], 0
jns 0x1400b0787
mov rcx, qword [rsp + 0x120]
call fcn.140184dbc
call qword [sym.imp.chrome_elf.dll_GetInstallDetailsPayload]
mov rdi, rax
mov ecx, 0x10
call fcn.140184dc4
lea rcx, [0x14026f650]
mov qword [rax], rcx
mov qword [rax + 8], rdi
mov qword [0x1402b7688], rax
call sub.chrome_elf.dll_SignalInitializeCrashReporting
call sub.chrome_elf.dll_IsBrowserProcess
test al, al
je 0x1400b07c4
mov byte [0x1402ada2c], 1
lea rcx, [0x1401f7880]
call fcn.140185e38
mov dword [0x1402b2564], 1
mov byte [0x1402b2560], 1
xor ecx, ecx
xor edx, edx
call fcn.140162340
mov rdi, qword [0x1402b7668]
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], r15
movaps xmm6, xmmword [0x14026dc70]
movaps xmmword [rbx], xmm6
lea rax, str.type
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov qword [r8 + 8], 4
mov rcx, rdi
mov rdx, rbx
call fcn.140147ff0
movzx eax, byte [rbx + 0x17]
test al, al
js 0x1400b0836
and eax, 0x7f
jmp 0x1400b0846
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
test rax, rax
js 0x1400b1723
test rbx, rbx
jne 0x1400b085d
test rax, rax
jne 0x1400b174d
cmp rax, 0x10
jne 0x1400b0899
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.crashpad_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400b0e5e
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.fallback_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400b148f
mov qword [rsp + 0xa0], r15
mov rax, qword [fcn.14014f070]
lea rcx, [0x140183600]
cmp rax, rcx
jne 0x1400b16ee
lea rbx, [rsp + 0x180]
mov qword [rbx], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbx]
movabs rcx, 0x8637bd05af6
cmp rax, rcx
jg 0x1400b1767
imul rax, rax, 0xf4240
cqo
idiv qword [0x1402b7458]
mov qword [rsp + 0xa0], rax
call sub.chrome_elf.dll_SignalChromeElf
mov qword [rsp + 0x3b8], r15
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], 0
mov rbx, qword [0x1402b7680]
movabs rax, 0xfffffffc00000000
and rax, rbx
cmp rax, qword [0x14029ce48]
je 0x1400b1740
lea rax, [rsp + 0x390]
mov qword [rax + 0x28], rbx
mov qword [0x1402b7680], rax
cmp qword [rdi + 0x40], 1
ja 0x1400b0ad6
mov rax, qword [rdi + 0x30]
add rdi, 0x38
cmp rax, rdi
jne 0x1400b0a99
pxor xmm0, xmm0
lea rcx, [rsp + 0x180]
movdqa xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
call fcn.14005c570
test al, al
je 0x1400b0abf
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000002
call fcn.140058f30
test al, al
jne 0x1400b09ce
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000001
call fcn.140058f30
lea rcx, [rsp + 0x180]
call fcn.1400bb040
test rax, rax
je 0x1400b0abf
mov rcx, rax
call fcn.1400bb150
mov edi, eax
cmp byte [rsp + 0x197], 0
jns 0x1400b0a05
mov rcx, qword [rsp + 0x180]
call fcn.140184dbc
test edi, edi
jne 0x1400b0ad6
xor esi, esi
jmp 0x1400b0d8d
lea rdx, [rax + 0x20]
and ecx, 0x7f
test rcx, rcx
js 0x1400b1714
test rdx, rdx
jne 0x1400b0a32
test rcx, rcx
jne 0x1400b1720
cmp rcx, 0x11
jne 0x1400b0ad6
movdqu xmm0, xmmword [rdx]
movzx ecx, byte [rdx + 0x10]
movzx edx, byte [0x14027f880]
movd xmm1, ecx
movd xmm2, edx
pcmpeqb xmm0, xmmword [str.profile_directory]
pcmpeqb xmm2, xmm1
pand xmm0, xmm2
pmovmskb ecx, xmm0
cmp ecx, 0xffff
jne 0x1400b0ad6
test rax, rax
je 0x1400b1717
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x1400b0ab2
mov rcx, qword [rax + 0x10]
cmp qword [rcx], rax
mov rax, rcx
jne 0x1400b0a81
mov rax, rcx
cmp rcx, rdi
je 0x1400b097d
movzx ecx, byte [rax + 0x37]
test cl, cl
jns 0x1400b0a14
mov rcx, qword [rax + 0x28]
mov rdx, qword [rax + 0x20]
jmp 0x1400b0a1b
mov rcx, rdx
mov rdx, qword [rdx]
test rdx, rdx
je 0x1400b0a8d
jmp 0x1400b0ab2
cmp byte [rsp + 0x197], 0
jns 0x1400b0ad6
mov rcx, qword [rsp + 0x180]
call fcn.140184dbc
pxor xmm0, xmm0
lea rdx, [rsp + 0x180]
movdqa xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov ecx, 1
call fcn.140051b80
test al, al
je 0x1400b0c4a
lea rdi, [rsp + 0x180]
mov rcx, rdi
call fcn.1400bafb0
test al, al
je 0x1400b0c4a
mov qword [rsp + 0x168], r15
xor eax, eax
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0
mov qword [rsp + 0x170], rax
lea rcx, [rsp + 0x140]
mov qword [rcx], rax
mov qword [rsp + 0x20], rcx
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rcx, 0xffffffff80000001
xor r8d, r8d
mov r9d, 0x2001f
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400b0c03
mov rcx, qword [rsp + 0x160]
test rcx, rcx
jne 0x1400b17bb
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
cmp byte [rsp + 0x197], 0
jns 0x1400b0bc9
mov rdi, qword [rsp + 0x180]
lea rcx, [rsp + 0x160]
lea rbx, [rsp + 0x140]
mov rdx, rdi
mov r8, rbx
call fcn.14002c8f0
test eax, eax
je 0x1400b105a
cmp byte [rsp + 0x157], 0
jns 0x1400b0c03
mov rcx, qword [rsp + 0x140]
call fcn.140184dbc
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x1400b0c2d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x160], 0
mov dword [rsp + 0x168], 0
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x170], 0
test rcx, rcx
jne 0x1400b16df
cmp byte [rsp + 0x197], 0
jns 0x1400b0c61
mov rcx, qword [rsp + 0x180]
call fcn.140184dbc
mov rdi, qword [0x1402b75f0]
test rdi, rdi
jne 0x1400b178e
xor ecx, ecx
sub ecx, dword [0x1402b75e0]
mov eax, 0xffffffff
cmovns eax, ecx
test eax, eax
jg 0x1400b0ddf
mov ecx, 0x28
call fcn.140184dc4
mov rdi, rax
pxor xmm0, xmm0
movdqu xmmword [rax + 8], xmm0
movdqu xmmword [rax + 0x18], xmm0
lea rax, [0x140270548]
mov qword [rdi], rax
mov r8, qword [rsp + 0xa0]
mov rcx, rdi
mov rdx, r12
call fcn.1400b17e0
mov esi, eax
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400b0cdd
movzx eax, byte [rdi + 0x27]
test al, al
js 0x1400b1734
test rax, rax
je 0x1400b0d50
test rdi, rdi
je 0x1400b0cfe
lea rax, [0x140270538]
mov qword [rdi], rax
cmp byte [rdi + 0x27], 0
js 0x1400b1756
mov rcx, rdi
call fcn.140184dbc
lea rax, [rsp + 0x80]
movzx edx, byte [rax + 0x17]
mov ecx, edx
and ecx, 0x7f
test dl, dl
cmovs rcx, qword [rax + 8]
cmovs rax, qword [rax]
test rcx, rcx
js 0x1400b173d
test rax, rax
jne 0x1400b0d31
test rcx, rcx
jne 0x1400b1753
cmp rcx, 5
je 0x1400b0d71
cmp rcx, 7
jne 0x1400b0d8d
mov ecx, dword [rax]
xor ecx, dword [str.utility]
mov eax, dword [rax + 3]
xor eax, dword [0x14027458c]
jmp 0x1400b0d85
lea rdx, str.RelaunchChromeBrowserWithNewCommandLineIfNeeded
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400b1764
call qword [0x1402ca008]
jmp 0x1400b0cdd
mov ecx, dword [rax]
xor ecx, dword [str.ppapi]
mov al, byte [rax + 4]
xor al, byte [0x140274582]
movzx eax, al
or eax, ecx
je 0x1400b1701
lea rcx, [rsp + 0x390]
call fcn.140073560
cmp byte [rsp + 0x97], 0
jns 0x1400b0db1
mov rcx, qword [rsp + 0x80]
call fcn.140184dbc
mov rcx, qword [rsp + 0x3d8]
xor rcx, rsp
call fcn.1401879f0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x3e0]
add rsp, 0x3f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, str.....chrome_appchrome_exe_main_win.cc
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r8d, 0x184
mov r9d, 0xffffffff
call fcn.1400078c0
lea rcx, [rsp + 0x190]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.1401c2dd0
mov rcx, rdi
call fcn.1400079b0
jmp 0x1400b0c89
cmp byte [rsp + 0x197], 0
jns 0x1400b0e40
mov rcx, qword [rsp + 0x180]
call fcn.140184dbc
test rbx, rbx
je 0x1400b0d9a
mov rcx, rbx
call fcn.140052870
mov rcx, rbx
call fcn.140184dbc
jmp 0x1400b0d9a
mov rcx, rdi
call fcn.14001d0b0
lea rdx, str.no_periodic_tasks
mov rcx, rdi
call fcn.140168700
test al, al
jne 0x1400b0f02
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x40], r15
pxor xmm0, xmm0
movdqa xmmword [rsi], xmm0
movdqa xmmword [rsi + 0x10], xmm0
movdqa xmmword [rsi + 0x20], xmm0
mov qword [rsi + 0x30], 0xffffffffffffffff
mov qword [rsi + 0x38], 0
mov byte [rsi + 0x40], 0
lea rax, str.initial_client_data
lea r8, [rsp + 0x60]
mov qword [r8], rax
mov qword [r8 + 8], 0x13
lea r14, [rsp + 0x390]
mov rcx, rdi
mov rdx, r14
call fcn.140147ff0
mov rcx, rsi
mov rdx, r14
call fcn.140053790
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x1400b0efa
mov rcx, qword [rsp + 0x390]
call fcn.140184dbc
test bl, bl
jne 0x1400b0f98
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x10], r15
movaps xmmword [rsi], xmm6
lea r14, str.user_data_dir
lea r8, [rsp + 0x40]
mov qword [r8], r14
mov qword [r8 + 8], 0xd
mov rcx, rdi
mov rdx, rsi
call fcn.14001d930
mov rcx, qword [0x1402b7668]
lea r8, str.type
mov rdx, rsi
mov r9, r14
call fcn.1400bc9a0
mov esi, eax
test rbx, rbx
je 0x1400b0e29
test esi, esi
je 0x1400b0e29
mov rcx, qword [rbx + 0x98]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400b0f78
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp byte [rsp + 0x197], 0
jns 0x1400b0e49
mov rcx, qword [rsp + 0x180]
call fcn.140184dbc
jmp 0x1400b0e49
lea rsi, [rsp + 0x160]
mov qword [rsi], 0xffffffffffffffff
mov r12, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call r12
mov rbx, rax
mov r14, qword [rsp + 0x1b8]
call r12
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400
mov rcx, rax
mov rdx, r14
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x1400b0f02
lea rsi, [rsp + 0x390]
movaps xmmword [rsi], xmm6
mov rdx, qword [rsp + 0x160]
mov rcx, rsi
call fcn.1400709a0
mov ecx, 0xa0
call fcn.140184dc4
mov rbx, rax
mov rcx, rax
call fcn.140065130
lea r14, [rsp + 0x50]
mov rcx, r14
mov rdx, rsi
call fcn.140030450
mov rcx, rbx
mov rdx, r14
call fcn.14003b660
test al, al
je 0x1400b1048
mov rcx, rbx
call fcn.140024290
lea rcx, [rsp + 0x390]
call fcn.1400303b0
jmp 0x1400b0f04
mov qword [rsp + 0x130], r15
movaps xmmword [rsp + 0x120], xmm6
lea rdx, [0x140273f6a]
movzx ecx, byte [rsp + 0x157]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x148]
mov qword [rsp + 0xc8], rdx
cmovs rbx, qword [rsp + 0x140]
mov qword [rsp + 0xd0], 1
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rax
test rax, rax
js 0x1400b17c6
mov qword [rsp + 0x38], r12
test rbx, rbx
jne 0x1400b10d2
test rax, rax
jne 0x1400b17c9
mov dword [rsp + 0x20], 1
lea rdi, [rsp + 0x120]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xc8]
mov rcx, rdi
mov r9d, 1
call fcn.140070380
lea r12, str.WIN95
mov r14, qword [rdi + 8]
lea r13, str.WIN95
jmp 0x1400b11bc
mov r14, qword [rsp + 0x128]
jmp 0x1400b1124
mov rbp, rbx
mov rsi, r14
sub rsi, rbp
jb 0x1400b171d
je 0x1400b11af
mov rax, rbp
add rax, rsi
cmp rax, r14
je 0x1400b117f
cmp byte [rbp + 0x17], 0
js 0x1400b1726
lea rax, [rsi + rbp]
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0x10], rcx
movdqu xmm0, xmmword [rax]
movdqu xmmword [rbp], xmm0
lea rax, [rsi + rbp]
add rax, 0x18
mov byte [rax - 1], 0
mov word [rax - 0x18], 0
add rbp, 0x18
cmp rax, r14
jne 0x1400b113d
mov r14, qword [rsp + 0x128]
cmp r14, rbp
je 0x1400b11a4
add r14, 0xffffffffffffffe8
test r14, r14
je 0x1400b1711
cmp byte [r14 + 0x17], 0
js 0x1400b11e3
lea rax, [r14 - 0x18]
cmp r14, rbp
mov r14, rax
jne 0x1400b1188
mov qword [rsp + 0x128], rbp
mov r14, rbp
add r12, 8
cmp r12, r13
je 0x1400b1311
mov rdi, qword [r12]
mov rbp, qword [rsp + 0x120]
mov rbx, r14
cmp rbp, r14
je 0x1400b1248
test rdi, rdi
je 0x1400b1489
mov rcx, rdi
call fcn.140185998
jmp 0x1400b11f6
mov rcx, qword [r14]
call fcn.140184dbc
jmp 0x1400b1198
add rbp, 0x18
cmp rbp, r14
je 0x1400b126f
movzx edx, byte [rbp + 0x17]
test dl, dl
js 0x1400b1206
and edx, 0x7f
mov rcx, rbp
jmp 0x1400b120e
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp]
test rdx, rdx
js 0x1400b170e
test rcx, rcx
jne 0x1400b1225
test rdx, rdx
jne 0x1400b171a
cmp rdx, rax
jne 0x1400b11ed
test rax, rax
je 0x1400b1245
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [rdi + rdx*2]
jne 0x1400b11ed
inc rdx
cmp rax, rdx
jne 0x1400b1231
mov rbx, rbp
cmp rbx, r14
je 0x1400b1121
mov rax, rbx
add rax, 0x18
cmp rax, r14
je 0x1400b1121
test rdi, rdi
je 0x1400b1486
mov rbp, rbx
jmp 0x1400b12ae
mov rbx, r14
jmp 0x1400b1248
cmp byte [rbp + 0x17], 0
jns 0x1400b1283
mov rcx, qword [rbp]
call fcn.140184dbc
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x10], rax
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbp], xmm0
mov byte [rsi + 0x2f], 0
mov word [rbx], 0
add rbp, 0x18
lea rax, [rbx + 0x18]
cmp rax, r14
je 0x1400b1117
mov rsi, rbx
mov rbx, rax
mov rcx, rdi
call fcn.140185998
movzx edx, byte [rsi + 0x2f]
test dl, dl
js 0x1400b12cc
and edx, 0x7f
mov rcx, rbx
jmp 0x1400b12d4
mov rdx, qword [rsi + 0x20]
mov rcx, qword [rsi + 0x18]
test rdx, rdx
js 0x1400b1708
test rcx, rcx
jne 0x1400b12eb
test rdx, rdx
jne 0x1400b170b
cmp rdx, rax
jne 0x1400b1274
test rax, rax
je 0x1400b12a1
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [rdi + rdx*2]
jne 0x1400b1274
inc rdx
cmp rax, rdx
jne 0x1400b12f7
jmp 0x1400b12a1
mov rax, qword [rsp + 0x120]
cmp rax, r14
je 0x1400b13f1
lea rdi, [rsp + 0x100]
mov qword [rdi + 0x10], r15
movaps xmmword [rdi], xmm6
lea r8, [rsp + 0xf0]
lea rcx, [0x140273f6a]
mov qword [r8], rcx
mov qword [r8 + 8], 1
sub r14, rax
sar r14, 3
movabs rcx, 0xaaaaaaaaaaaaaaab
imul rcx, r14
lea rdx, [rsp + 0xe0]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov rcx, rdi
call fcn.140070250
cmp byte [rdi + 0x17], 0
jns 0x1400b1385
mov rdi, qword [rsp + 0x100]
cmp byte [rsp + 0x197], 0
mov r12, qword [rsp + 0x38]
js 0x1400b139e
lea rbx, [rsp + 0x180]
jmp 0x1400b13a6
mov rbx, qword [rsp + 0x180]
mov rcx, rdi
call fcn.140185998
lea eax, [rax*2 + 2]
mov rcx, qword [rsp + 0x160]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov rdx, rbx
xor r8d, r8d
mov r9d, 1
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp byte [rsp + 0x117], 0
jns 0x1400b1420
mov rcx, qword [rsp + 0x100]
call fcn.140184dbc
jmp 0x1400b1420
cmp byte [rsp + 0x197], 0
js 0x1400b1405
lea rdx, [rsp + 0x180]
jmp 0x1400b140d
mov rdx, qword [rsp + 0x180]
mov r12, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rsi, qword [rsp + 0x120]
test rsi, rsi
je 0x1400b0bec
mov rdi, qword [rsp + 0x128]
mov rcx, rsi
cmp rdi, rsi
je 0x1400b1474
add rdi, 0xffffffffffffffe8
jmp 0x1400b145b
mov rcx, qword [rdi]
call fcn.140184dbc
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x1400b146c
test rdi, rdi
je 0x1400b1750
cmp byte [rdi + 0x17], 0
jns 0x1400b144f
jmp 0x1400b1447
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x128], rsi
call fcn.140184dbc
jmp 0x1400b0bec
int3
int3
int3
lea rsi, [rsp + 0x180]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.140189b30
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400b148c
pxor xmm0, xmm0
lea rsi, [rsp + 0x390]
movdqa xmmword [rsi], xmm0
xor eax, eax
mov qword [rsi + 0x10], rax
lea rbx, [rsp + 0x160]
mov qword [rbx + 0x10], rax
movdqa xmmword [rbx], xmm0
lea r12, [rsp + 0x140]
mov qword [r12 + 0x10], rax
movdqa xmmword [r12], xmm0
lea r14, [rsp + 0x120]
mov qword [r14 + 0x10], rax
movdqa xmmword [r14], xmm0
lea r15, [rsp + 0x100]
lea rdx, [rsp + 0x180]
mov rcx, r15
call fcn.1401c4a50
mov qword [rsp + 0x20], r12
mov rcx, r15
mov rdx, rsi
mov r8, rbx
mov r9, r14
call fcn.1400bc640
cmp byte [r15 + 0x17], 0
jns 0x1400b1548
mov rcx, qword [rsp + 0x100]
call fcn.140184dbc
movzx ecx, byte [rsp + 0x157]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x148]
cmovs r12, qword [rsp + 0x140]
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xf8], rax
test rax, rax
js 0x1400b17cc
test r12, r12
jne 0x1400b1590
test rax, rax
jne 0x1400b17d5
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0xf0]
call fcn.1401482e0
movzx ecx, byte [rsp + 0x177]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x168]
cmovs rbx, qword [rsp + 0x160]
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rax
test rax, rax
js 0x1400b17cf
test rbx, rbx
jne 0x1400b15ed
test rax, rax
jne 0x1400b17d8
lea rcx, [rsp + 0xc8]
lea rdx, [rsp + 0xe0]
call fcn.1401482e0
movzx ecx, byte [rsp + 0x3a7]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x398]
cmovs rsi, qword [rsp + 0x390]
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], rax
test rax, rax
js 0x1400b17d2
test rsi, rsi
jne 0x1400b164a
test rax, rax
jne 0x1400b17db
lea rsi, [rsp + 0xb0]
lea rdx, [rsp + 0xa0]
mov rcx, rsi
call fcn.1401482e0
lea r8, [rsp + 0xc8]
lea r9, [rsp + 0x100]
mov rcx, rdi
mov rdx, rsi
call fcn.1401fbf00
mov esi, eax
cmp byte [rsp + 0x137], 0
jns 0x1400b1696
mov rcx, qword [rsp + 0x120]
call fcn.140184dbc
cmp byte [rsp + 0x157], 0
jns 0x1400b16ad
mov rcx, qword [rsp + 0x140]
call fcn.140184dbc
cmp byte [rsp + 0x177], 0
jns 0x1400b16c4
mov rcx, qword [rsp + 0x160]
call fcn.140184dbc
cmp byte [rsp + 0x3a7], 0
jns 0x1400b0d9a
mov rcx, qword [rsp + 0x390]
jmp 0x1400b0e54
mov edx, 1
call fcn.14004ae40
jmp 0x1400b0c4a
lea rcx, [rsp + 0xa0]
call qword [0x1402ca008]
jmp 0x1400b08fe
mov ecx, esi
call fcn.1400ba7f0
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, qword [rbp]
call fcn.140184dbc
jmp 0x1400b1147
mov rax, qword [rdi + 0x18]
jmp 0x1400b0cd8
int3
mov rcx, rbx
call fcn.1400ddc60
jmp 0x1400b094e
int3
int3
int3
mov rcx, qword [rdi + 0x10]
call fcn.140184dbc
jmp 0x1400b0cf6
int3
mov rcx, qword [0x1402b7458]
cqo
idiv rcx
imul r8, rax, 0xf4240
imul rax, rdx, 0xf4240
cqo
idiv rcx
add rax, r8
jmp 0x1400b08f6
lea rdx, str.....chrome_appchrome_exe_main_win.cc
lea rbx, [rsp + 0x180]
mov r8d, 0x27
mov rcx, rbx
call fcn.1401825c0
mov rcx, rdi
mov rdx, rbx
call fcn.140205560
jmp 0x1400b0c81
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400b0b83
int3
int3
int3
int3
int3
int3
int3
int3