Function at 0x14002a220
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
movaps xmmword [rsp + 0x90], xmm6
mov ebp, r9d
xor r15d, r15d
cmp r8d, r9d
jb 0x14002a6ed
mov eax, ebp
and eax, 0x1f
jne 0x14002a6ed
mov r9, rdx
mov rsi, rcx
add r8d, 0xfffffff0
mov eax, ebp
mov qword [rsp + 0x70], rax
lea rcx, [rax + 0x28]
xor r15d, r15d
mov rax, r8
xor edx, edx
div rcx
cmp rcx, r8
ja 0x14002a6ed
mov qword [rsi], r9
mov qword [rsp + 0x78], r9
mov qword [r9], 0
lea rcx, [rax + rax*4]
lea rcx, [rcx*8 + 0x10]
mov qword [rsp + 0x40], rcx
lea rcx, [rsi + 8]
mov qword [rsp + 0x68], rcx
mov r14d, 0x10
mov ebx, 0x28
xorps xmm6, xmm6
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x5c], ebp
mov qword [rsp + 0x80], rax
mov r13, qword [rsi]
mov ecx, 0x48
call fcn.14009633c
mov r12, rax
movups xmmword [rax], xmm6
movups xmmword [rax + 0x18], xmm6
movups xmmword [rax + 0x28], xmm6
mov ecx, 0x18
call fcn.14009633c
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x68]
mov qword [rax + 8], rcx
mov rcx, qword [rsi + 8]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rsi + 8], rax
inc qword [rsi + 0x18]
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rbp, rax
cmp qword [r12], rax
je 0x14002a617
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [r12]
inc rax
cmp rax, 2
jae 0x14002a629
mov rsi, r14
mov rax, rbp
inc rax
cmp rax, 2
jb 0x14002a35e
mov qword [r12], rbp
call fcn.140061fd0
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbp, qword [r12]
lea rdi, [rbx + r13]
add rdi, 0xfffffffffffffff8
mov rax, qword [rsp + 0x50]
mov r14, qword [rax + 0x28]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, rbp
mov r8, r14
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002a6ed
lea rbp, [rbx + r13]
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rdi, rax
cmp qword [r12 + 8], rax
mov r14, rsi
mov qword [rsp + 0x88], rbx
je 0x14002a61f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
mov rax, qword [r12 + 8]
inc rax
cmp rax, 2
mov rsi, qword [rsp + 0x50]
jae 0x14002a663
mov rax, rdi
inc rax
cmp rax, 2
jb 0x14002a413
mov qword [r12 + 8], rdi
call fcn.140061fd0
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rdi, qword [r12 + 8]
mov rbx, qword [rsi + 0x28]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, rdi
mov r8, rbx
mov r9, rbp
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002a6ed
mov rdx, qword [rsp + 0x40]
mov qword [r13 + r14], rdx
mov dword [r13 + r14 + 8], 1
mov rcx, qword [r12 + 0x20]
mov rax, qword [0x14012dfa0]
and rax, rcx
cmp rax, qword [0x14012df88]
mov ebp, dword [rsp + 0x5c]
mov rdi, qword [rsp + 0x78]
je 0x14002a7a6
mov rax, qword [0x14012dfa0]
and rax, rdi
cmp rax, qword [0x14012df88]
je 0x14002a7b5
add r13, r14
mov qword [r12 + 0x20], rdi
mov dword [r12 + 0x10], ebp
mov rcx, qword [r12 + 0x28]
mov rax, qword [0x14012dfa0]
and rax, rcx
cmp rax, qword [0x14012df88]
je 0x14002a7c7
mov rax, qword [0x14012dfa0]
and rax, r13
cmp rax, qword [0x14012df88]
je 0x14002a7d6
mov qword [r12 + 0x28], r13
mov r15, qword [r13]
mov r13, qword [r12 + 0x20]
mov rax, qword [0x14012dfa0]
and rax, r13
mov rcx, qword [0x14012df88]
cmp rax, rcx
je 0x14002a7e8
lea rdi, [r15 + r13]
cmp rax, rcx
je 0x14002a80b
mov rax, qword [0x14012dfa0]
and rax, rdi
cmp rax, qword [0x14012df88]
je 0x14002a826
mov rax, qword [0x14012dfa0]
and rax, rdi
mov rcx, qword [0x14012df88]
cmp rax, rcx
je 0x14002a829
mov rbx, r12
add rbx, 0x18
cmp rax, rcx
je 0x14002a84c
mov rcx, qword [rbx]
mov rax, qword [0x14012dfa0]
and rax, rcx
cmp rax, qword [0x14012df88]
je 0x14002a85e
mov qword [r12 + 0x18], rdi
mov rdi, qword [rsi + 0x38]
mov rcx, qword [r12 + 0x30]
mov rax, qword [0x14012dfa0]
and rax, rcx
cmp rax, qword [0x14012df88]
mov rbx, qword [rsp + 0x88]
je 0x14002a86d
mov rax, qword [0x14012dfa0]
and rax, rdi
cmp rax, qword [0x14012df88]
je 0x14002a87c
mov qword [r12 + 0x30], rdi
mov rax, qword [rsi + 0x28]
mov qword [r12 + 0x38], rax
mov eax, dword [rsi + 0x30]
mov dword [r12 + 0x40], eax
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x40], rdx
mov rcx, qword [rsi + 0x20]
mov r8, qword [r12]
mov qword [rsp + 0x20], r12
mov rdx, rsi
lea r9, [0x1400111e0]
call fcn.14002a8a0
add r14, 0x28
add rbx, 0x28
mov rax, qword [rsp + 0x80]
dec rax
jne 0x14002a2c3
jmp 0x14002a69c
mov rsi, r14
jmp 0x14002a36a
mov rsi, qword [rsp + 0x50]
jmp 0x14002a421
call fcn.140061fd0
mov r15, qword [r12]
cmp qword [0x140142d48], 0
je 0x14002a70c
mov rcx, qword [0x140142d48]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, r15
call qword [0x140150008]
mov qword [r12], 0
jmp 0x14002a346
call fcn.140061fd0
mov rdx, qword [r12 + 8]
cmp qword [0x140142d48], 0
je 0x14002a74e
mov rcx, qword [0x140142d48]
mov rax, qword [rcx]
mov rax, qword [rax]
call qword [0x140150008]
mov qword [r12 + 8], 0
jmp 0x14002a3fd
mov rdi, qword [rsi]
mov rbx, qword [rsi + 0x28]
add rdi, 8
mov r14, qword [0x140146458]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, r14
mov r8, rbx
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002a6ed
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x60]
mov qword [rax], rcx
mov r15b, 1
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x14011a090]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002a88e
lea rcx, [sym.opera.exe_GetHandleVerifier]
cmp rax, rcx
je 0x14002a79a
call qword [0x140150008]
mov rcx, rax
xor edx, edx
call fcn.140021bd0
jmp 0x14002a640
mov qword [rsp + 0x48], rdx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x14011a090]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002a895
lea rcx, [sym.opera.exe_GetHandleVerifier]
cmp rax, rcx
je 0x14002a7a0
call qword [0x140150008]
mov rcx, rax
xor edx, edx
call fcn.140021bd0
mov rdx, qword [rsp + 0x48]
jmp 0x14002a67b
xor ecx, ecx
mov dl, 1
jmp 0x14002a744
xor ecx, ecx
mov dl, 1
jmp 0x14002a78b
call fcn.14006a8b0
mov rdx, qword [rsp + 0x40]
jmp 0x14002a492
mov rcx, rdi
call fcn.140062440
mov rdx, qword [rsp + 0x40]
jmp 0x14002a4a9
call fcn.14006a8b0
mov rdx, qword [rsp + 0x40]
jmp 0x14002a4d2
mov rcx, r13
call fcn.140062440
mov rdx, qword [rsp + 0x40]
jmp 0x14002a4e9
mov rcx, r13
call fcn.140062440
mov rdx, qword [rsp + 0x40]
mov rcx, qword [0x14012df88]
mov rax, qword [0x14012dfa0]
and rax, r13
jmp 0x14002a511
mov rcx, r13
mov rdx, r15
call fcn.1400955b0
mov rdx, qword [rsp + 0x40]
test al, al
jne 0x14002a535
int3
int3
mov rcx, rdi
call fcn.140062440
mov rdx, qword [rsp + 0x40]
mov rcx, qword [0x14012df88]
mov rax, qword [0x14012dfa0]
and rax, rdi
jmp 0x14002a54f
mov rcx, rdi
call fcn.14006a8b0
mov rdx, qword [rsp + 0x40]
jmp 0x14002a55f
call fcn.14006a8b0
mov rdx, qword [rsp + 0x40]
jmp 0x14002a579
call fcn.14006a8b0
mov rdx, qword [rsp + 0x40]
jmp 0x14002a5a6
mov rcx, rdi
call fcn.140062440
mov rdx, qword [rsp + 0x40]
jmp 0x14002a5bd
xor ecx, ecx
jmp 0x14002a742
xor ecx, ecx
jmp 0x14002a789