Function at 0x140043390
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm6
mov r15, r9
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x140213038]
xor rax, rsp
mov qword [rsp + 0x358], rax
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043423
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rbp, [rsp + 0xd0]
mov rcx, rbp
mov r8d, 0x154
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.RunUserExperiment
mov r8d, 0x11
call fcn.1400cf4f0
mov rcx, rbp
call fcn.14004a9c0
movabs r12, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xc8]
mov qword [rcx], r12
call fcn.140170540
lea rbp, [rsp + 0xc0]
mov qword [rbp], r12
mov qword [rsp + 0x20], r15
mov rcx, rbp
mov rdx, rsi
mov r8, rbx
mov r9, rdi
call fcn.14003ea90
cmp qword [rbp], 0
je 0x140043560
lea rcx, [rsp + 0x60]
mov qword [rcx + 0x50], r12
movaps xmm6, xmmword [0x1401d9dd0]
movaps xmmword [rcx + 0x40], xmm6
movaps xmmword [rcx + 0x30], xmm6
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.140170c00
lea rsi, [rsp + 0x58]
mov qword [rsi], r12
lea rcx, [rsp + 0xc8]
mov rdx, rsi
call fcn.1401706c0
lea rdx, [rsp + 0x54]
mov dword [rdx], 0
mov rcx, qword [rsi]
call fcn.14016fa20
test al, al
je 0x1400435d1
cmp dword [rsp + 0x54], 0
je 0x1400435d1
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.14016fc20
test al, al
je 0x14004361d
lea rcx, [rsp + 0x60]
call fcn.140170bf0
test al, al
je 0x140043680
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043ceb
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x174
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Experiment_has_reached_terminal_state:
mov r8d, 0x27
call fcn.1400cf4f0
mov edx, dword [rsp + 0x64]
mov rcx, rax
call fcn.14001a0a0
jmp 0x140043673
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x1400435ba
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x15a
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Timed_out_while_waiting_for_setup_singleton
mov r8d, 0x2b
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rcx, [rsp + 0xc8]
mov edx, 2
call fcn.1400432d0
jmp 0x140043d18
mov ecx, 2
call fcn.1400d9610
test al, al
je 0x140043ceb
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x168
mov r9d, 2
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Failed_to_read_study_participation.
mov r8d, 0x23
jmp 0x14004366e
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043ceb
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x16e
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Another_user_is_participating_in_the_experiment.
mov r8d, 0x30
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
jmp 0x140043ceb
lea rcx, [rsp + 0x60]
call fcn.140170be0
test al, al
je 0x140043732
cmp dword [rsp + 0x54], 1
jne 0x1400436a9
xor ecx, ecx
mov edx, 0x10
call fcn.140077ce0
mov edx, eax
jmp 0x1400436c2
call fcn.140077d90
movsd xmm1, qword [0x1401e6d20]
xor edx, edx
ucomisd xmm1, xmm0
seta dl
shl edx, 4
lea rcx, [rsp + 0x60]
call fcn.140170ca0
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043732
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x17d
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Assigned_user_to_experiment_group:
mov r8d, 0x23
call fcn.1400cf4f0
mov edx, dword [rsp + 0x60]
mov rcx, rax
call fcn.14001a0a0
mov rcx, rsi
call fcn.14004a9c0
call fcn.140164040
test eax, eax
jns 0x140043743
mov rcx, r15
call fcn.1400409f0
cmp eax, 0x1c
jg 0x1400437b4
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x1400437a2
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x187
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Aborting_experiment_due_to_activity.
mov r8d, 0x24
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 5
jmp 0x140043cd9
lea rcx, [rsp + 0x60]
mov edx, eax
call fcn.140170cc0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
mov rdx, rax
call fcn.140055fb0
test al, al
je 0x140043840
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x14004382e
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x19a
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Aborting_experiment_due_to_tablet_device.
mov r8d, 0x29
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 4
jmp 0x140043cd9
lea rsi, [rsp + 0xd0]
mov qword [rsi + 0x10], r12
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.1400588a0
call fcn.1400586f0
movzx edi, al
add rdi, 0xffffffff80000001
lea rbx, [rsp + 0x260]
mov qword [rbx + 0x10], r12
movaps xmmword [rbx], xmm6
mov rcx, rbx
call fcn.140054aa0
cmp byte [rsi + 0x17], 0
jns 0x14004388b
mov rsi, qword [rsp + 0xd0]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
mov r9d, 0x101
call fcn.140054c40
test eax, eax
je 0x1400438aa
xor esi, esi
jmp 0x14004395f
lea rdx, [0x1401e2526]
lea rcx, [rsp + 0x260]
call fcn.140054ed0
mov sil, 1
test al, al
jne 0x14004395f
xorpd xmm0, xmm0
lea rdi, [rsp + 0x2e0]
movapd xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
lea rdx, [0x1401e25f6]
lea rcx, [rsp + 0x260]
mov r8, rdi
call fcn.140055300
test eax, eax
je 0x140043900
xor esi, esi
jmp 0x14004394c
movzx eax, byte [rsp + 0x2f7]
test al, al
jns 0x140043914
mov rax, qword [rsp + 0x2e8]
mov sil, 1
cmp rax, 0xd
jne 0x14004394c
lea rdi, [rsp + 0x2e0]
mov qword [rsp + 0x20], ntohl
lea r9, [0x1401e7068]
mov rcx, rdi
xor edx, edx
mov r8, 0xffffffffffffffff
call fcn.1400d6990
test eax, eax
setne sil
cmp byte [rdi + 0x17], 0
jns 0x14004395f
mov rcx, qword [rsp + 0x2e0]
call fcn.140100564
lea rcx, [rsp + 0x260]
call fcn.140054da0
cmp byte [rsp + 0xe7], 0
jns 0x140043983
mov rcx, qword [rsp + 0xd0]
call fcn.140100564
test sil, sil
je 0x1400439f4
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x1400439e2
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1a1
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Aborting_experiment_due_to_Chrome_update_rename_pending.
mov r8d, 0x38
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 7
jmp 0x140043cd9
mov r13, qword [rsp + 0xc0]
mov qword [rsp + 0x2e0], r12
call fcn.1400d6e20
lea rdi, [rsp + 0xd0]
mov qword [rdi + 0x10], r12
movaps xmmword [rdi], xmm6
lea r8, str.experiment_retry_delay
mov rcx, rax
mov rdx, rdi
call fcn.1400d7020
mov dword [rsp + 0x340], 0xaaaaaaaa
movzx ecx, byte [rdi + 0x17]
mov rax, rcx
test cl, cl
jns 0x140043a48
mov rax, qword [rsp + 0xd8]
mov esi, 0x11e1a300
test rax, rax
je 0x140043a8d
test cl, cl
jns 0x140043a5e
mov rdi, qword [rsp + 0xd0]
lea rcx, [rsp + 0x260]
mov qword [rcx], rdi
mov qword [rcx + 8], rax
lea rdx, [rsp + 0x340]
call fcn.14004d830
test al, al
je 0x140043a8d
movsxd rax, dword [rsp + 0x340]
imul rsi, rax, 0xf4240
mov qword [rsp + 0x2e0], rsi
cmp byte [rsp + 0xe7], 0
jns 0x140043aac
mov rcx, qword [rsp + 0xd0]
call fcn.140100564
mov bpl, 1
lea rdi, [rsp + 0xd0]
mov dword [rsp + 0xd0], 0
mov rcx, rdi
call qword [sym.imp.SHELL32.dll_SHQueryUserNotificationState]
test eax, eax
js 0x140043ade
mov eax, dword [rsp + 0xd0]
and eax, 0xfffffffb
cmp eax, 1
jne 0x140043b2b
mov qword [rsp + 0xd0], r12
mov rcx, rdi
call fcn.140041cb0
cmp qword [rsp + 0xd0], 0
je 0x140043b1e
lea rcx, [rsp + 0x260]
call fcn.1400dda40
mov rax, qword [rsp + 0x260]
sub rax, qword [rsp + 0xd0]
cmp rax, 0x11e1a2ff
jle 0x140043b2b
call fcn.14013adf0
test al, al
je 0x140043c64
test bpl, 1
je 0x140043b52
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 8
call fcn.140170c90
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call fcn.140170120
xor ebp, ebp
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rbx, rbx
je 0x140043b75
mov rcx, rbx
call fcn.14016fa10
mov rcx, rbx
call fcn.140100564
mov rcx, r13
lea rdx, [rsp + 0x2e0]
call fcn.14003f020
mov ebx, eax
lea rcx, [rsp + 0xc8]
mov rdx, rdi
call fcn.1401706c0
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xd0], 0
mov r14, qword [rsp + 0x58]
mov qword [rsp + 0x58], rax
test r14, r14
je 0x140043bf3
mov rcx, r14
call fcn.14016fa10
mov rcx, r14
call fcn.140100564
mov rsi, qword [rsp + 0xd0]
mov qword [rsp + 0xd0], 0
test rsi, rsi
je 0x140043bf3
mov rcx, rsi
call fcn.14016fa10
mov rcx, rsi
call fcn.140100564
test bl, bl
je 0x140043ab7
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043c55
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1a9
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Aborting_experiment_while_waiting_to_present.
mov r8d, 0x2d
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 9
jmp 0x140043cd9
cmp dword [rsp + 0x88], 0x10
jne 0x140043d7a
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043ccc
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1b7
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Skipping_Chrome_launch_for_client_in_the_holdback_group.
mov r8d, 0x38
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, reloc.WS2_32.dll_ntohl
call fcn.140170c90
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call fcn.140170120
mov rsi, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rsi, rsi
je 0x140043d0e
mov rcx, rsi
call fcn.14016fa10
mov rcx, rsi
call fcn.140100564
lea rcx, [rsp + 0x60]
call fcn.14012f9d0
mov rsi, qword [rsp + 0xc0]
mov qword [rsp + 0xc0], 0
test rsi, rsi
je 0x140043d41
mov rcx, rsi
call fcn.14003efd0
mov rcx, rsi
call fcn.140100564
lea rcx, [rsp + 0xc8]
call fcn.140170690
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.1401013e0
movaps xmm6, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str..._.._chrome_installer_setup_user_experiment.cc
mov edx, 0x30
call fcn.1400d9640
test eax, eax
jle 0x140043dd4
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, IsOS
mov r9d, 0xffffffff
call fcn.14004a520
lea rcx, [rsp + 0xe0]
lea rdx, str.Launching_Chrome_to_show_the_toast.
mov r8d, 0x23
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov edx, 0xa
call fcn.140170c90
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call fcn.140170120
add r15, 8
lea rbx, [rsp + 0x340]
mov qword [rbx + 0x10], r12
movaps xmmword [rbx], xmm6
lea rcx, str.chrome.exe
lea rbp, [rsp + 0x330]
mov qword [rbp], rcx
call fcn.14011bf14
mov qword [rbp + 8], rax
mov rcx, r15
mov rdx, rbx
mov r8, rbp
call fcn.1400d8c10
lea rbp, [rsp + 0x2e0]
mov qword [rbp + 0x40], r12
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp], xmm6
mov rcx, rbp
mov rdx, rbx
call fcn.140045290
mov edx, dword [rsi + 0x28]
mov rcx, rdi
call fcn.14004d100
movzx eax, byte [rsp + 0xe7]
test al, al
cmovs rdi, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2d0]
mov qword [rsi], rdi
cmovs rax, qword [rsp + 0xd8]
mov qword [rsi + 8], rax
lea rdx, str.try_chrome_again
lea r14, [rsp + 0x260]
mov rcx, r14
call fcn.140135f90
mov rcx, rbp
mov rdx, r14
mov r8, rsi
call fcn.140046380
cmp byte [r14 + 0x17], 0
jns 0x140043ec6
mov rcx, qword [rsp + 0x260]
call fcn.140100564
cmp byte [rsp + 0xe7], 0
jns 0x140043edd
mov rcx, qword [rsp + 0xd0]
call fcn.140100564
xorpd xmm0, xmm0
movapd xmmword [rsp + 0x260], xmm0
xor eax, eax
mov qword [rsp + 0x2c0], rax
movapd xmmword [rsp + 0x2b0], xmm0
movapd xmmword [rsp + 0x2a0], xmm0
movapd xmmword [rsp + 0x290], xmm0
movapd xmmword [rsp + 0x280], xmm0
movapd xmmword [rsp + 0x270], xmm0
mov dword [rsp + 0x260], 0x68
mov qword [rsp + 0x250], rax
movapd xmmword [rsp + 0x240], xmm0
lea rdi, [rsp + 0x220]
mov qword [rdi + 0x10], r12
movaps xmmword [rdi], xmm6
lea rcx, [rsp + 0x2e0]
mov rdx, rdi
call fcn.140047790
cmp byte [rdi + 0x17], 0
jns 0x140043f6a
mov rdi, qword [rsp + 0x220]
cmp byte [rsp + 0x357], 0
jns 0x140043f7c
mov rbx, qword [rsp + 0x340]
lea rax, [rsp + 0x240]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r14
xorpd xmm0, xmm0
movupd xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0
mov rcx, rbx
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140043fe7
lea rsi, [rsp + 0xd0]
mov qword [rsi + 0x10], r12
movaps xmmword [rsi], xmm6
lea rdx, [rsp + 0x240]
mov rcx, rsi
call fcn.140077e50
mov rcx, rsi
call fcn.140077fd0
jmp 0x140044053
mov ecx, 2
call fcn.1400d9610
test al, al
je 0x140044053
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._chrome_installer_setup_user_experiment.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x229
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0xe0]
lea rdx, str.Failed_to_launch:
mov r8d, 0x12
call fcn.1400cf4f0
lea rdx, [rsp + 0x220]
mov rcx, rax
call fcn.14004b410
mov rcx, rsi
call fcn.140158f30
cmp byte [rsp + 0x237], 0
jns 0x14004406a
mov rcx, qword [rsp + 0x220]
call fcn.140100564
lea rcx, [rsp + 0x2e0]
call fcn.1400456c0
lea rcx, [rsp + 0x340]
call fcn.1400d7bc0
jmp 0x140043ceb