Function at 0x1400aefe0
Capabilities:
Delete registry value
Set current directory
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3f8
movaps xmmword [rsp + 0x3e0], xmm6
mov r12, rcx
mov rax, qword [0x14029b028]
xor rax, rsp
mov qword [rsp + 0x3d8], rax
call sub.chrome_elf.dll_IsBrowserProcess
movabs r15, 0xaaaaaaaaaaaaaaaa
test al, al
je 0x1400af147
lea rdi, [rsp + 0x182]
mov r8d, 0x208
mov rcx, rdi
mov dl, 0xaa
call fcn.140188160
mov word [rdi - 2], 0
lea rdi, [rsp + 0x180]
xor ecx, ecx
mov rdx, rdi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
cmp ecx, 0x103
ja 0x1400af147
mov eax, eax
lea rdx, [rsp + 0x100]
mov qword [rdx], rdi
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.14010a8d0
lea rbx, [rsp + 0x140]
mov rcx, rdi
mov rdx, rbx
call fcn.140123a80
lea rdi, [rsp + 0x390]
mov qword [rdi + 0x40], r15
movdqa xmm0, xmmword [0x14026cc70]
movdqa xmmword [rdi + 0x30], xmm0
movdqa xmmword [rdi + 0x20], xmm0
movdqa xmmword [rdi + 0x10], xmm0
movdqa xmmword [rdi], xmm0
lea rdx, [0x14027b45b]
lea r8, str....._base_files_file_util_win.cc
lea r14, [rsp + 0x160]
mov rcx, r14
mov r9d, 0x42c
call fcn.1400ed1b0
mov rcx, rdi
mov rdx, r14
xor r8d, r8d
call fcn.140116070
cmp byte [rbx + 0x17], 0
jns 0x1400af108
mov rbx, qword [rsp + 0x140]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov rcx, rdi
call fcn.140115ba0
cmp byte [rsp + 0x157], 0
jns 0x1400af130
mov rcx, qword [rsp + 0x140]
call fcn.1401833ec
cmp byte [rsp + 0x137], 0
jns 0x1400af147
mov rcx, qword [rsp + 0x120]
call fcn.1401833ec
call qword [sym.imp.chrome_elf.dll_GetInstallDetailsPayload]
mov rdi, rax
mov ecx, 0x10
call fcn.1401833f4
lea rcx, [0x14026e650]
mov qword [rax], rcx
mov qword [rax + 8], rdi
mov qword [0x1402b6688], rax
call sub.chrome_elf.dll_SignalInitializeCrashReporting
call sub.chrome_elf.dll_IsBrowserProcess
test al, al
je 0x1400af184
mov byte [0x1402aca2c], 1
lea rcx, [0x1401f6c30]
call fcn.140184468
mov dword [0x1402b1564], 1
mov byte [0x1402b1560], 1
xor ecx, ecx
xor edx, edx
call fcn.140161b60
mov rdi, qword [0x1402b6668]
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], r15
movaps xmm6, xmmword [0x14026cc70]
movaps xmmword [rbx], xmm6
lea rax, str.type
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov qword [r8 + 8], 4
mov rcx, rdi
mov rdx, rbx
call fcn.1401489a0
movzx eax, byte [rbx + 0x17]
test al, al
js 0x1400af1f6
and eax, 0x7f
jmp 0x1400af206
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
test rax, rax
js 0x1400b00e3
test rbx, rbx
jne 0x1400af21d
test rax, rax
jne 0x1400b010d
cmp rax, 0x10
jne 0x1400af259
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.crashpad_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400af81e
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.fallback_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400afe4f
mov qword [rsp + 0xa0], r15
mov rax, qword [fcn.140106270]
lea rcx, [0x140181ca0]
cmp rax, rcx
jne 0x1400b00ae
lea rbx, [rsp + 0x180]
mov qword [rbx], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbx]
movabs rcx, 0x8637bd05af6
cmp rax, rcx
jg 0x1400b0127
imul rax, rax, 0xf4240
cqo
idiv qword [0x1402b6458]
mov qword [rsp + 0xa0], rax
call sub.chrome_elf.dll_SignalChromeElf
mov qword [rsp + 0x3b8], r15
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], 0
mov rbx, qword [0x1402b6680]
movabs rax, 0xfffffffc00000000
and rax, rbx
cmp rax, qword [0x14029be48]
je 0x1400b0100
lea rax, [rsp + 0x390]
mov qword [rax + 0x28], rbx
mov qword [0x1402b6680], rax
cmp qword [rdi + 0x40], 1
ja 0x1400af496
mov rax, qword [rdi + 0x30]
add rdi, 0x38
cmp rax, rdi
jne 0x1400af459
pxor xmm0, xmm0
lea rcx, [rsp + 0x180]
movdqa xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
call fcn.14005c290
test al, al
je 0x1400af47f
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000002
call fcn.140059080
test al, al
jne 0x1400af38e
lea rdx, [rsp + 0x180]
mov rcx, 0xffffffff80000001
call fcn.140059080
lea rcx, [rsp + 0x180]
call fcn.1400b9dc0
test rax, rax
je 0x1400af47f
mov rcx, rax
call fcn.1400b9ed0
mov edi, eax
cmp byte [rsp + 0x197], 0
jns 0x1400af3c5
mov rcx, qword [rsp + 0x180]
call fcn.1401833ec
test edi, edi
jne 0x1400af496
xor esi, esi
jmp 0x1400af74d
lea rdx, [rax + 0x20]
and ecx, 0x7f
test rcx, rcx
js 0x1400b00d4
test rdx, rdx
jne 0x1400af3f2
test rcx, rcx
jne 0x1400b00e0
cmp rcx, 0x11
jne 0x1400af496
movdqu xmm0, xmmword [rdx]
movzx ecx, byte [rdx + 0x10]
movzx edx, byte [0x14027e880]
movd xmm1, ecx
movd xmm2, edx
pcmpeqb xmm0, xmmword [str.profile_directory]
pcmpeqb xmm2, xmm1
pand xmm0, xmm2
pmovmskb ecx, xmm0
cmp ecx, 0xffff
jne 0x1400af496
test rax, rax
je 0x1400b00d7
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x1400af472
mov rcx, qword [rax + 0x10]
cmp qword [rcx], rax
mov rax, rcx
jne 0x1400af441
mov rax, rcx
cmp rcx, rdi
je 0x1400af33d
movzx ecx, byte [rax + 0x37]
test cl, cl
jns 0x1400af3d4
mov rcx, qword [rax + 0x28]
mov rdx, qword [rax + 0x20]
jmp 0x1400af3db
mov rcx, rdx
mov rdx, qword [rdx]
test rdx, rdx
je 0x1400af44d
jmp 0x1400af472
cmp byte [rsp + 0x197], 0
jns 0x1400af496
mov rcx, qword [rsp + 0x180]
call fcn.1401833ec
pxor xmm0, xmm0
lea rdx, [rsp + 0x180]
movdqa xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov ecx, 1
call fcn.140050770
test al, al
je 0x1400af60a
lea rdi, [rsp + 0x180]
mov rcx, rdi
call fcn.1400b9d30
test al, al
je 0x1400af60a
mov qword [rsp + 0x168], r15
xor eax, eax
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0
mov qword [rsp + 0x170], rax
lea rcx, [rsp + 0x140]
mov qword [rcx], rax
mov qword [rsp + 0x20], rcx
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rcx, 0xffffffff80000001
xor r8d, r8d
mov r9d, 0x2001f
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400af5c3
mov rcx, qword [rsp + 0x160]
test rcx, rcx
jne 0x1400b017b
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
cmp byte [rsp + 0x197], 0
jns 0x1400af589
mov rdi, qword [rsp + 0x180]
lea rcx, [rsp + 0x160]
lea rbx, [rsp + 0x140]
mov rdx, rdi
mov r8, rbx
call fcn.14002b670
test eax, eax
je 0x1400afa1a
cmp byte [rsp + 0x157], 0
jns 0x1400af5c3
mov rcx, qword [rsp + 0x140]
call fcn.1401833ec
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x1400af5ed
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x160], 0
mov dword [rsp + 0x168], 0
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x170], 0
test rcx, rcx
jne 0x1400b009f
cmp byte [rsp + 0x197], 0
jns 0x1400af621
mov rcx, qword [rsp + 0x180]
call fcn.1401833ec
mov rdi, qword [0x1402b65f0]
test rdi, rdi
jne 0x1400b014e
xor ecx, ecx
sub ecx, dword [0x1402b65e0]
mov eax, 0xffffffff
cmovns eax, ecx
test eax, eax
jg 0x1400af79f
mov ecx, 0x28
call fcn.1401833f4
mov rdi, rax
pxor xmm0, xmm0
movdqu xmmword [rax + 8], xmm0
movdqu xmmword [rax + 0x18], xmm0
lea rax, [0x14026f548]
mov qword [rdi], rax
mov r8, qword [rsp + 0xa0]
mov rcx, rdi
mov rdx, r12
call fcn.1400b01a0
mov esi, eax
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400af69d
movzx eax, byte [rdi + 0x27]
test al, al
js 0x1400b00f4
test rax, rax
je 0x1400af710
test rdi, rdi
je 0x1400af6be
lea rax, [0x14026f538]
mov qword [rdi], rax
cmp byte [rdi + 0x27], 0
js 0x1400b0116
mov rcx, rdi
call fcn.1401833ec
lea rax, [rsp + 0x80]
movzx edx, byte [rax + 0x17]
mov ecx, edx
and ecx, 0x7f
test dl, dl
cmovs rcx, qword [rax + 8]
cmovs rax, qword [rax]
test rcx, rcx
js 0x1400b00fd
test rax, rax
jne 0x1400af6f1
test rcx, rcx
jne 0x1400b0113
cmp rcx, 5
je 0x1400af731
cmp rcx, 7
jne 0x1400af74d
mov ecx, dword [rax]
xor ecx, dword [str.utility]
mov eax, dword [rax + 3]
xor eax, dword [0x14027358c]
jmp 0x1400af745
lea rdx, str.RelaunchChromeBrowserWithNewCommandLineIfNeeded
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400b0124
call qword [0x1402c9008]
jmp 0x1400af69d
mov ecx, dword [rax]
xor ecx, dword [str.ppapi]
mov al, byte [rax + 4]
xor al, byte [0x140273582]
movzx eax, al
or eax, ecx
je 0x1400b00c1
lea rcx, [rsp + 0x390]
call fcn.140071e80
cmp byte [rsp + 0x97], 0
jns 0x1400af771
mov rcx, qword [rsp + 0x80]
call fcn.1401833ec
mov rcx, qword [rsp + 0x3d8]
xor rcx, rsp
call fcn.140186020
mov eax, esi
movaps xmm6, xmmword [rsp + 0x3e0]
add rsp, 0x3f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, str.....chrome_appchrome_exe_main_win.cc
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r8d, 0x184
mov r9d, 0xffffffff
call fcn.140007440
lea rcx, [rsp + 0x190]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.1401c1300
mov rcx, rdi
call fcn.140007530
jmp 0x1400af649
cmp byte [rsp + 0x197], 0
jns 0x1400af800
mov rcx, qword [rsp + 0x180]
call fcn.1401833ec
test rbx, rbx
je 0x1400af75a
mov rcx, rbx
call fcn.140051460
mov rcx, rbx
call fcn.1401833ec
jmp 0x1400af75a
mov rcx, rdi
call fcn.14001d650
lea rdx, str.no_periodic_tasks
mov rcx, rdi
call fcn.140167240
test al, al
jne 0x1400af8c2
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x40], r15
pxor xmm0, xmm0
movdqa xmmword [rsi], xmm0
movdqa xmmword [rsi + 0x10], xmm0
movdqa xmmword [rsi + 0x20], xmm0
mov qword [rsi + 0x30], 0xffffffffffffffff
mov qword [rsi + 0x38], 0
mov byte [rsi + 0x40], 0
lea rax, str.initial_client_data
lea r8, [rsp + 0x60]
mov qword [r8], rax
mov qword [r8 + 8], 0x13
lea r14, [rsp + 0x390]
mov rcx, rdi
mov rdx, r14
call fcn.1401489a0
mov rcx, rsi
mov rdx, r14
call fcn.140052380
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x1400af8ba
mov rcx, qword [rsp + 0x390]
call fcn.1401833ec
test bl, bl
jne 0x1400af958
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x10], r15
movaps xmmword [rsi], xmm6
lea r14, str.user_data_dir
lea r8, [rsp + 0x40]
mov qword [r8], r14
mov qword [r8 + 8], 0xd
mov rcx, rdi
mov rdx, rsi
call fcn.14001ded0
mov rcx, qword [0x1402b6668]
lea r8, str.type
mov rdx, rsi
mov r9, r14
call fcn.1400bb720
mov esi, eax
test rbx, rbx
je 0x1400af7e9
test esi, esi
je 0x1400af7e9
mov rcx, qword [rbx + 0x98]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400af938
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp byte [rsp + 0x197], 0
jns 0x1400af809
mov rcx, qword [rsp + 0x180]
call fcn.1401833ec
jmp 0x1400af809
lea rsi, [rsp + 0x160]
mov qword [rsi], 0xffffffffffffffff
mov r12, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call r12
mov rbx, rax
mov r14, qword [rsp + 0x1b8]
call r12
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400
mov rcx, rax
mov rdx, r14
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x1400af8c2
lea rsi, [rsp + 0x390]
movaps xmmword [rsi], xmm6
mov rdx, qword [rsp + 0x160]
mov rcx, rsi
call fcn.14006f330
mov ecx, 0xa0
call fcn.1401833f4
mov rbx, rax
mov rcx, rax
call fcn.1400637c0
lea r14, [rsp + 0x50]
mov rcx, r14
mov rdx, rsi
call fcn.14002e230
mov rcx, rbx
mov rdx, r14
call fcn.1400643b0
test al, al
je 0x1400afa08
mov rcx, rbx
call fcn.140021c60
lea rcx, [rsp + 0x390]
call fcn.14002e190
jmp 0x1400af8c4
mov qword [rsp + 0x130], r15
movaps xmmword [rsp + 0x120], xmm6
lea rdx, [0x140272f6a]
movzx ecx, byte [rsp + 0x157]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x148]
mov qword [rsp + 0xc8], rdx
cmovs rbx, qword [rsp + 0x140]
mov qword [rsp + 0xd0], 1
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rax
test rax, rax
js 0x1400b0186
mov qword [rsp + 0x38], r12
test rbx, rbx
jne 0x1400afa92
test rax, rax
jne 0x1400b0189
mov dword [rsp + 0x20], 1
lea rdi, [rsp + 0x120]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xc8]
mov rcx, rdi
mov r9d, 1
call fcn.14006ed10
lea r12, str.WIN95
mov r14, qword [rdi + 8]
lea r13, str.WIN95
jmp 0x1400afb7c
mov r14, qword [rsp + 0x128]
jmp 0x1400afae4
mov rbp, rbx
mov rsi, r14
sub rsi, rbp
jb 0x1400b00dd
je 0x1400afb6f
mov rax, rbp
add rax, rsi
cmp rax, r14
je 0x1400afb3f
cmp byte [rbp + 0x17], 0
js 0x1400b00e6
lea rax, [rsi + rbp]
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0x10], rcx
movdqu xmm0, xmmword [rax]
movdqu xmmword [rbp], xmm0
lea rax, [rsi + rbp]
add rax, 0x18
mov byte [rax - 1], 0
mov word [rax - 0x18], 0
add rbp, 0x18
cmp rax, r14
jne 0x1400afafd
mov r14, qword [rsp + 0x128]
cmp r14, rbp
je 0x1400afb64
add r14, 0xffffffffffffffe8
test r14, r14
je 0x1400b00d1
cmp byte [r14 + 0x17], 0
js 0x1400afba3
lea rax, [r14 - 0x18]
cmp r14, rbp
mov r14, rax
jne 0x1400afb48
mov qword [rsp + 0x128], rbp
mov r14, rbp
add r12, 8
cmp r12, r13
je 0x1400afcd1
mov rdi, qword [r12]
mov rbp, qword [rsp + 0x120]
mov rbx, r14
cmp rbp, r14
je 0x1400afc08
test rdi, rdi
je 0x1400afe49
mov rcx, rdi
call fcn.140183fc8
jmp 0x1400afbb6
mov rcx, qword [r14]
call fcn.1401833ec
jmp 0x1400afb58
add rbp, 0x18
cmp rbp, r14
je 0x1400afc2f
movzx edx, byte [rbp + 0x17]
test dl, dl
js 0x1400afbc6
and edx, 0x7f
mov rcx, rbp
jmp 0x1400afbce
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp]
test rdx, rdx
js 0x1400b00ce
test rcx, rcx
jne 0x1400afbe5
test rdx, rdx
jne 0x1400b00da
cmp rdx, rax
jne 0x1400afbad
test rax, rax
je 0x1400afc05
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [rdi + rdx*2]
jne 0x1400afbad
inc rdx
cmp rax, rdx
jne 0x1400afbf1
mov rbx, rbp
cmp rbx, r14
je 0x1400afae1
mov rax, rbx
add rax, 0x18
cmp rax, r14
je 0x1400afae1
test rdi, rdi
je 0x1400afe46
mov rbp, rbx
jmp 0x1400afc6e
mov rbx, r14
jmp 0x1400afc08
cmp byte [rbp + 0x17], 0
jns 0x1400afc43
mov rcx, qword [rbp]
call fcn.1401833ec
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x10], rax
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbp], xmm0
mov byte [rsi + 0x2f], 0
mov word [rbx], 0
add rbp, 0x18
lea rax, [rbx + 0x18]
cmp rax, r14
je 0x1400afad7
mov rsi, rbx
mov rbx, rax
mov rcx, rdi
call fcn.140183fc8
movzx edx, byte [rsi + 0x2f]
test dl, dl
js 0x1400afc8c
and edx, 0x7f
mov rcx, rbx
jmp 0x1400afc94
mov rdx, qword [rsi + 0x20]
mov rcx, qword [rsi + 0x18]
test rdx, rdx
js 0x1400b00c8
test rcx, rcx
jne 0x1400afcab
test rdx, rdx
jne 0x1400b00cb
cmp rdx, rax
jne 0x1400afc34
test rax, rax
je 0x1400afc61
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [rdi + rdx*2]
jne 0x1400afc34
inc rdx
cmp rax, rdx
jne 0x1400afcb7
jmp 0x1400afc61
mov rax, qword [rsp + 0x120]
cmp rax, r14
je 0x1400afdb1
lea rdi, [rsp + 0x100]
mov qword [rdi + 0x10], r15
movaps xmmword [rdi], xmm6
lea r8, [rsp + 0xf0]
lea rcx, [0x140272f6a]
mov qword [r8], rcx
mov qword [r8 + 8], 1
sub r14, rax
sar r14, 3
movabs rcx, 0xaaaaaaaaaaaaaaab
imul rcx, r14
lea rdx, [rsp + 0xe0]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov rcx, rdi
call fcn.14006ebe0
cmp byte [rdi + 0x17], 0
jns 0x1400afd45
mov rdi, qword [rsp + 0x100]
cmp byte [rsp + 0x197], 0
mov r12, qword [rsp + 0x38]
js 0x1400afd5e
lea rbx, [rsp + 0x180]
jmp 0x1400afd66
mov rbx, qword [rsp + 0x180]
mov rcx, rdi
call fcn.140183fc8
lea eax, [rax*2 + 2]
mov rcx, qword [rsp + 0x160]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov rdx, rbx
xor r8d, r8d
mov r9d, 1
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp byte [rsp + 0x117], 0
jns 0x1400afde0
mov rcx, qword [rsp + 0x100]
call fcn.1401833ec
jmp 0x1400afde0
cmp byte [rsp + 0x197], 0
js 0x1400afdc5
lea rdx, [rsp + 0x180]
jmp 0x1400afdcd
mov rdx, qword [rsp + 0x180]
mov r12, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rsi, qword [rsp + 0x120]
test rsi, rsi
je 0x1400af5ac
mov rdi, qword [rsp + 0x128]
mov rcx, rsi
cmp rdi, rsi
je 0x1400afe34
add rdi, 0xffffffffffffffe8
jmp 0x1400afe1b
mov rcx, qword [rdi]
call fcn.1401833ec
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x1400afe2c
test rdi, rdi
je 0x1400b0110
cmp byte [rdi + 0x17], 0
jns 0x1400afe0f
jmp 0x1400afe07
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x128], rsi
call fcn.1401833ec
jmp 0x1400af5ac
int3
int3
int3
lea rsi, [rsp + 0x180]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.140188160
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400afe4c
pxor xmm0, xmm0
lea rsi, [rsp + 0x390]
movdqa xmmword [rsi], xmm0
xor eax, eax
mov qword [rsi + 0x10], rax
lea rbx, [rsp + 0x160]
mov qword [rbx + 0x10], rax
movdqa xmmword [rbx], xmm0
lea r12, [rsp + 0x140]
mov qword [r12 + 0x10], rax
movdqa xmmword [r12], xmm0
lea r14, [rsp + 0x120]
mov qword [r14 + 0x10], rax
movdqa xmmword [r14], xmm0
lea r15, [rsp + 0x100]
lea rdx, [rsp + 0x180]
mov rcx, r15
call fcn.1401c3a00
mov qword [rsp + 0x20], r12
mov rcx, r15
mov rdx, rsi
mov r8, rbx
mov r9, r14
call fcn.1400bb3c0
cmp byte [r15 + 0x17], 0
jns 0x1400aff08
mov rcx, qword [rsp + 0x100]
call fcn.1401833ec
movzx ecx, byte [rsp + 0x157]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x148]
cmovs r12, qword [rsp + 0x140]
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xf8], rax
test rax, rax
js 0x1400b018c
test r12, r12
jne 0x1400aff50
test rax, rax
jne 0x1400b0195
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0xf0]
call fcn.140148c90
movzx ecx, byte [rsp + 0x177]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x168]
cmovs rbx, qword [rsp + 0x160]
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rax
test rax, rax
js 0x1400b018f
test rbx, rbx
jne 0x1400affad
test rax, rax
jne 0x1400b0198
lea rcx, [rsp + 0xc8]
lea rdx, [rsp + 0xe0]
call fcn.140148c90
movzx ecx, byte [rsp + 0x3a7]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x398]
cmovs rsi, qword [rsp + 0x390]
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], rax
test rax, rax
js 0x1400b0192
test rsi, rsi
jne 0x1400b000a
test rax, rax
jne 0x1400b019b
lea rsi, [rsp + 0xb0]
lea rdx, [rsp + 0xa0]
mov rcx, rsi
call fcn.140148c90
lea r8, [rsp + 0xc8]
lea r9, [rsp + 0x100]
mov rcx, rdi
mov rdx, rsi
call fcn.1401fb260
mov esi, eax
cmp byte [rsp + 0x137], 0
jns 0x1400b0056
mov rcx, qword [rsp + 0x120]
call fcn.1401833ec
cmp byte [rsp + 0x157], 0
jns 0x1400b006d
mov rcx, qword [rsp + 0x140]
call fcn.1401833ec
cmp byte [rsp + 0x177], 0
jns 0x1400b0084
mov rcx, qword [rsp + 0x160]
call fcn.1401833ec
cmp byte [rsp + 0x3a7], 0
jns 0x1400af75a
mov rcx, qword [rsp + 0x390]
jmp 0x1400af814
mov edx, 1
call fcn.140049850
jmp 0x1400af60a
lea rcx, [rsp + 0xa0]
call qword [0x1402c9008]
jmp 0x1400af2be
mov ecx, esi
call fcn.1400b9580
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, qword [rbp]
call fcn.1401833ec
jmp 0x1400afb07
mov rax, qword [rdi + 0x18]
jmp 0x1400af698
int3
mov rcx, rbx
call fcn.1400dc910
jmp 0x1400af30e
int3
int3
int3
mov rcx, qword [rdi + 0x10]
call fcn.1401833ec
jmp 0x1400af6b6
int3
mov rcx, qword [0x1402b6458]
cqo
idiv rcx
imul r8, rax, 0xf4240
imul rax, rdx, 0xf4240
cqo
idiv rcx
add rax, r8
jmp 0x1400af2b6
lea rdx, str.....chrome_appchrome_exe_main_win.cc
lea rbx, [rsp + 0x180]
mov r8d, 0x27
mov rcx, rbx
call fcn.140180c80
mov rcx, rdi
mov rdx, rbx
call fcn.140204960
jmp 0x1400af641
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400af543
int3
int3
int3
int3
int3
int3
int3
int3