Function at 0x140001000
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x498
movaps xmmword [rsp + 0x480], xmm6
mov r15, rcx
mov rax, qword [0x14019e638]
xor rax, rsp
mov qword [rsp + 0x478], rax
call fcn.140002cec
call fcn.140048c50
xor ecx, ecx
xor edx, edx
call fcn.1400293b0
call fcn.140029720
mov r12, rax
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x30]
mov qword [rdi + 0x10], r13
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rdi], xmm6
lea rcx, [0x140153456]
lea rsi, [rsp + 0x270]
mov qword [rsi], rcx
call fcn.140140690
mov qword [rsi + 8], rax
mov rcx, r12
mov rdx, rdi
mov r8, rsi
call fcn.140029ce0
lea rcx, str.crashpad_handler
call fcn.140140690
movzx ecx, byte [rdi]
mov rsi, rcx
shr rsi, 1
mov bl, 1
and bl, cl
mov rdi, qword [rdi + 8]
mov rcx, rdi
cmove rcx, rsi
cmp rax, rcx
jne 0x1400010f3
mov qword [rsp + 0x20], rax
lea r9, str.crashpad_handler
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400256aa
test eax, eax
je 0x140001378
movzx esi, byte [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov bl, 1
and bl, sil
shr rsi, 1
lea rcx, str.fallback_handler
call fcn.140140690
test bl, bl
cmovne rsi, rdi
cmp rax, rsi
jne 0x140001131
mov qword [rsp + 0x20], rax
lea r9, str.fallback_handler
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400256aa
test eax, eax
je 0x140001423
lea rcx, [rsp + 0x78]
mov qword [rcx], r13
call fcn.14003bb10
call sub.nw_elf.dll_SignalChromeElf
lea rcx, [rsp + 0xa0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.1400276b0
movzx esi, byte [rsp + 0x30]
mov al, 1
test sil, al
je 0x14000116e
mov rsi, qword [rsp + 0x38]
jmp 0x140001171
shr rsi, 1
test rsi, rsi
je 0x1400011aa
lea rcx, str.gpu_process
call fcn.140140690
cmp rax, rsi
jne 0x1400011af
mov qword [rsp + 0x20], rsi
lea r9, str.gpu_process
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400256aa
test eax, eax
jne 0x1400011af
call fcn.14004a070
lea rsi, [rsp + 0x270]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.14002c720
mov ecx, 7
mov rdx, rsi
call fcn.140035820
test al, al
je 0x140001788
lea rcx, [rsp + 0x270]
call fcn.14002e030
test al, al
je 0x140001788
lea rsi, [rsp + 0x250]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.1400496e0
lea r8, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rcx, rsi
mov rdx, 0xffffffff80000001
mov r9d, 0x2001f
call fcn.140049800
test eax, eax
jne 0x14000177b
xorps xmm0, xmm0
movaps xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], 0
lea r14, [rsp + 0x272]
test byte [r14 - 2], 1
mov rdx, r14
je 0x14000125c
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0x250]
lea r8, [rsp + 0x230]
call fcn.140049990
test eax, eax
jne 0x140001764
lea rbx, [rsp + 0x210]
mov qword [rbx + 0x10], r13
movaps xmmword [rbx], xmm6
lea r12, [0x140153114]
lea r8, [rsp + 0x88]
mov qword [r8], r12
mov qword [r8 + 8], 1
lea rbp, [rsp + 0x232]
movzx edx, byte [rbp - 2]
mov rcx, rdx
shr rcx, 1
mov al, 1
test dl, al
mov rax, qword [rbp + 0xe]
cmove rax, rbp
lea rdx, [rsp + 0x60]
mov qword [rdx], rax
cmovne rcx, qword [rbp + 6]
mov qword [rdx + 8], rcx
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov r9d, 1
call fcn.1400381c0
xor esi, esi
lea rbp, str.WIN95
lea rdi, [rsp + 0x1f0]
mov rax, qword [rsi + rbp]
mov qword [rsp + 0x1f0], rax
mov rcx, rbx
mov rdx, rdi
call fcn.14000192e
add rsi, 8
cmp rsi, 0x68
jne 0x1400012f8
mov rax, qword [rsp + 0x210]
cmp rax, qword [rsp + 0x218]
je 0x1400016f4
lea rsi, [rsp + 0x1f0]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
lea r8, [rsp + 0x1e0]
mov qword [r8], r12
mov qword [r8 + 8], 1
lea rdx, [rsp + 0x210]
mov rcx, rsi
call fcn.1400399d0
mov bl, 1
test byte [rsi], bl
je 0x140001718
mov r8, qword [rsp + 0x200]
jmp 0x140001720
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, eax
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_PostThreadMessageW]
lea rcx, [rsp + 0x270]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_PeekMessageW]
mov rcx, r12
call fcn.14004cd5c
lea rbx, [rsp + 0xa0]
mov qword [rbx + 0x10], r13
movaps xmmword [rbx], xmm6
lea rsi, str.user_data_dir
lea rdi, [rsp + 0x250]
mov qword [rdi], rsi
mov rcx, rsi
call fcn.140140690
mov qword [rdi + 8], rax
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call fcn.140029e10
call fcn.140029720
lea r8, [0x140153456]
mov rcx, rax
mov rdx, rbx
mov r9, rsi
call fcn.14004d0f4
mov esi, eax
mov rcx, rbx
call fcn.14002c850
jmp 0x1400018dc
lea rsi, [rsp + 0x270]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.1401236f0
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x14000147c
lea rdx, str..._.._chrome_app_chrome_exe_main_win.cc
lea r9, str.::GetModuleFileName_nullptr__exe_file__base::size_exe_file__
lea rsi, [rsp + 0xa0]
mov rcx, rsi
mov r8d, 0x9d
call fcn.14002f600
mov rcx, rsi
call fcn.14002f710
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
xor eax, eax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x260], rax
movaps xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x240], rax
movaps xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x220], rax
movaps xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x200], rax
movaps xmmword [rsp + 0x1f0], xmm0
lea rcx, [rsp + 0x270]
call fcn.140140af4
mov rsi, rax
movabs rax, 0x7ffffffffffffff0
cmp rsi, rax
jae 0x14000191b
cmp rsi, 0xb
jae 0x14000150f
lea eax, [rsi + rsi]
lea rbx, [rsp + 0x1f2]
mov byte [rbx - 2], al
test rsi, rsi
jne 0x140001545
jmp 0x14000155b
lea rdi, [rsi + 8]
and rdi, 0xfffffffffffffff8
js 0x140001928
lea rcx, [rdi + rdi]
call fcn.140120368
mov rbx, rax
mov qword [rsp + 0x200], rax
or rdi, 1
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rsi
mov r8, rsi
add r8, rsi
lea rdx, [rsp + 0x270]
mov rcx, rbx
call fcn.140123290
mov word [rbx + rsi*2], 0
lea rbp, [rsp + 0x230]
mov qword [rsp + 0x20], rbp
lea rdi, [rsp + 0x1f0]
lea rsi, [rsp + 0xa0]
lea rbx, [rsp + 0x250]
lea r9, [rsp + 0x210]
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14005580b
mov r15b, 1
test byte [rdi], r15b
je 0x1400015b1
mov rcx, qword [rsp + 0x200]
call fcn.1401203c4
movzx eax, byte [rsp + 0x230]
mov edi, 2
or rbp, rdi
mov rcx, rax
shr rcx, 1
test al, r15b
cmovne rbp, qword [rsp + 0x240]
lea rdx, [rsp + 0x1e0]
mov qword [rdx], rbp
cmovne rcx, qword [rsp + 0x238]
mov qword [rdx + 8], rcx
lea r14, [rsp + 0x1f0]
mov rcx, r14
call fcn.14003af00
movzx eax, byte [rsp + 0x250]
or rbx, rdi
mov rcx, rax
shr rcx, 1
test al, r15b
cmovne rbx, qword [rsp + 0x260]
lea rdx, [rsp + 0x78]
mov qword [rdx], rbx
cmovne rcx, qword [rsp + 0x258]
mov qword [rdx + 8], rcx
lea rbx, [rsp + 0x88]
mov rcx, rbx
call fcn.14003af00
movzx eax, byte [rsp + 0xa0]
or rsi, rdi
mov rcx, rax
shr rcx, 1
test al, r15b
cmovne rsi, qword [rsp + 0xb0]
lea rdx, [rsp + 0x50]
mov qword [rdx], rsi
cmovne rcx, qword [rsp + 0xa8]
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x60]
mov rcx, rsi
call fcn.14003af00
mov rcx, r12
mov rdx, rsi
mov r8, rbx
mov r9, r14
call fcn.14004cfd6
mov esi, eax
test byte [rsp + 0x210], r15b
je 0x1400016a6
mov rcx, qword [rsp + 0x220]
call fcn.1401203c4
test byte [rsp + 0x230], 1
je 0x1400016bd
mov rcx, qword [rsp + 0x240]
call fcn.1401203c4
test byte [rsp + 0x250], 1
je 0x1400016d4
mov rcx, qword [rsp + 0x260]
call fcn.1401203c4
test byte [rsp + 0xa0], 1
je 0x1400018dc
mov rcx, qword [rsp + 0xb0]
call fcn.1401203c4
jmp 0x1400018dc
test byte [rsp + 0x270], 1
je 0x140001706
mov r14, qword [rsp + 0x280]
lea rcx, [rsp + 0x250]
mov rdx, r14
call fcn.1400498e0
jmp 0x140001757
lea r8, [rsp + 0x1f2]
test byte [rsp + 0x270], bl
je 0x140001731
mov r14, qword [rsp + 0x280]
lea rcx, [rsp + 0x250]
mov rdx, r14
call fcn.140049aa0
test byte [rsp + 0x1f0], bl
je 0x140001757
mov rcx, qword [rsp + 0x200]
call fcn.1401203c4
lea rcx, [rsp + 0x210]
call fcn.140001bfe
test byte [rsp + 0x230], 1
je 0x14000177b
mov rcx, qword [rsp + 0x240]
call fcn.1401203c4
lea rcx, [rsp + 0x250]
call fcn.140049890
lea rcx, [rsp + 0x270]
call fcn.14002c850
lea rcx, str..._.._chrome_app_chrome_exe_main_win.cc
mov edx, 0x28
call fcn.140030320
test eax, eax
jle 0x1400017ef
lea rdx, str..._.._chrome_app_chrome_exe_main_win.cc
lea rsi, [rsp + 0x270]
mov rcx, rsi
mov r8d, 0xf2
mov r9d, 0xffffffff
call fcn.140030390
lea rcx, [rsp + 0x278]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.140001c63
mov rcx, rsi
call fcn.14002f710
call fcn.140002bf6
mov rdi, rax
mov r8, qword [rsp + 0x78]
mov rcx, rax
mov rdx, r15
call fcn.14000277c
mov esi, eax
mov rcx, rdi
call fcn.140002aae
test rdi, rdi
je 0x140001823
mov rax, qword [rdi]
mov rcx, rdi
mov edx, 1
call qword [rax]
lea rcx, str.utility
call fcn.140140690
movzx ecx, byte [rsp + 0x30]
mov rdi, rcx
shr rdi, 1
mov bl, 1
and bl, cl
mov rbp, qword [rsp + 0x38]
mov rcx, rbp
cmove rcx, rdi
cmp rax, rcx
jne 0x140001884
mov qword [rsp + 0x20], rax
lea r9, str.utility
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400256aa
test eax, eax
je 0x1400018be
movzx edi, byte [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov bl, 1
and bl, dil
shr rdi, 1
lea rcx, [0x140153450]
call fcn.140140690
test bl, bl
cmovne rdi, rbp
cmp rax, rdi
jne 0x1400018cf
mov qword [rsp + 0x20], rax
lea r9, [0x140153450]
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400256aa
test eax, eax
jne 0x1400018cf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, esi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0xa0]
call fcn.1400276f0
test byte [rsp + 0x30], 1
je 0x1400018ed
mov rcx, qword [rsp + 0x40]
call fcn.1401203c4
mov rcx, qword [rsp + 0x478]
xor rcx, rsp
call fcn.1401207e0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x480]
add rsp, 0x498
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x1f0]
call fcn.14002482c
call fcn.140134e78
int3