Function at 0x140029c30
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm7
movaps xmmword [rsp + 0x210], xmm6
mov rsi, r9
mov ebx, r8d
mov rdi, rdx
mov r14, rcx
mov rax, qword [0x1401df038]
xor rax, rsp
mov qword [rsp + 0x208], rax
mov rcx, qword [0x1401f2ae8]
test rcx, rcx
jne 0x140029c8c
call fcn.140044840
mov rcx, rax
mov qword [0x1401f2ae8], rax
mov rdx, r14
mov r8d, 1
mov r9d, 0x1201bf
call fcn.140044b40
mov ebp, eax
mov rcx, qword [0x1401f2ae8]
test rcx, rcx
jne 0x140029cbd
call fcn.140044840
mov rcx, rax
mov qword [0x1401f2ae8], rax
mov edx, ebx
mov r8d, ebp
call fcn.140045940
test al, al
je 0x140029e8e
xor ecx, ecx
call fcn.14002abc0
test al, al
je 0x140029e5a
movaps xmm6, xmmword [0x1401af9e0]
lea rdi, [rsp + 0x1b0]
movaps xmmword [rdi + 0x40], xmm6
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
xor edx, edx
call fcn.1400957f0
lea rcx, str.newautoupdater
lea rbx, [rsp + 0x1a0]
mov qword [rbx], rcx
call fcn.1401473f0
mov qword [rbx + 8], rax
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call fcn.140096e30
movabs rdi, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0x180]
mov qword [rsi + 0x10], rdi
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.1400edea0
mov ecx, 1
mov rdx, rsi
call fcn.1400842f0
test al, al
je 0x140029e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
movups xmmword [rsp + 0x128], xmm0
movups xmmword [rsp + 0x168], xmm0
movups xmmword [rsp + 0x158], xmm0
movups xmmword [rsp + 0x148], xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x178], 0
movabs rax, 0x4000000070
mov qword [rsp + 0x110], rax
lea rax, str.runas
mov qword [rsp + 0x120], rax
cmp byte [rsp + 0x197], 0
jns 0x140029ddb
mov rsi, qword [rsp + 0x180]
mov qword [rsp + 0x128], rsi
lea rsi, [rsp + 0xf0]
mov qword [rsi + 0x10], rdi
movaps xmmword [rsi], xmm6
lea rcx, [rsp + 0x1b0]
mov rdx, rsi
call fcn.140097940
cmp byte [rsi + 0x17], 0
jns 0x140029e10
mov rsi, qword [rsp + 0xf0]
lea rcx, [rsp + 0x110]
mov qword [rcx + 0x20], rsi
mov dword [rcx + 0x30], 5
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp byte [rsp + 0x107], 0
jns 0x140029e40
mov rcx, qword [rsp + 0xf0]
call fcn.140124dec
lea rcx, [rsp + 0x180]
call fcn.1400ee050
lea rcx, [rsp + 0x1b0]
call fcn.140095cb0
mov rcx, qword [rsp + 0x208]
xor rcx, rsp
call fcn.140125960
movaps xmm6, xmmword [rsp + 0x210]
movaps xmm7, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs r15, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x120], r15
movaps xmm6, xmmword [0x1401af9e0]
movaps xmmword [rsp + 0x110], xmm6
call fcn.1400365c0
lea rbx, [rsp + 0x1b0]
mov rcx, rbx
mov rdx, rax
call fcn.14015f450
lea rdx, str._autoupdate.version
mov r8d, 0x13
mov rcx, rbx
call fcn.1400d8530
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x120], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x110], xmm0
xorps xmm7, xmm7
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
cmp byte [rbx + 0x17], 0
jns 0x140029f14
mov rcx, qword [rsp + 0x1b0]
call fcn.140124dec
lea r14, [rsp + 0x1b0]
mov qword [r14 + 0x10], r15
movaps xmmword [r14], xmm6
lea rcx, str.files_list
lea rbx, [rsp + 0xe0]
mov qword [rbx], rcx
call fcn.1401476a4
mov qword [rbx + 8], rax
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call fcn.1400ef6b0
lea rbx, [rsp + 0x180]
movaps xmmword [rbx], xmm7
mov qword [rbx + 0x10], 0
mov rcx, r14
mov rdx, rbx
call fcn.140085200
test al, al
je 0x14002a1d2
mov qword [rsp + 0x100], r15
lea rax, [0x1401b4860]
mov qword [rsp + 0xd0], rax
movzx eax, byte [rsp + 0x197]
test al, al
cmovs rax, qword [rsp + 0x188]
movaps xmmword [rsp + 0xf0], xmm6
cmovs rbx, qword [rsp + 0x180]
mov qword [rsp + 0xd8], 2
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rax
test rax, rax
js 0x14002a3c4
je 0x140029fde
test rbx, rbx
je 0x14002a3d7
mov dword [rsp + 0x20], 1
lea rbx, [rsp + 0xf0]
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xd0]
mov rcx, rbx
xor r9d, r9d
call fcn.1400e7840
mov r14, qword [rbx]
cmp r14, qword [rbx + 8]
je 0x14002a189
lea r14, str.opera_autoupdate.exe
lea r15, [rsp + 0x98]
mov qword [r15], r14
mov rcx, r14
call fcn.1401473f0
mov rbx, rax
mov qword [r15 + 8], rax
lea r12, [rsp + 0xa8]
mov rcx, rdi
mov rdx, r12
mov r8, r15
call fcn.140094200
lea r8, [rsp + 0x70]
mov qword [r8], r14
mov qword [rsp + 0x28], rbx
mov qword [r8 + 8], rbx
lea r14, [rsp + 0x80]
mov rcx, rsi
mov rdx, r14
call fcn.140094200
mov rcx, r14
mov rdx, r12
call fcn.14017e750
mov ebp, eax
mov rcx, r14
call fcn.1400ee050
mov rcx, r12
call fcn.1400ee050
test bpl, bpl
je 0x14002a181
lea rdx, [rsp + 0x110]
movzx ecx, byte [rdx + 0x17]
test cl, cl
cmovs rcx, qword [rdx + 8]
mov rax, qword [rdx]
cmovns rax, rdx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
test rcx, rcx
js 0x14002a3c4
je 0x14002a0cf
test rax, rax
je 0x14002a3d7
lea rdx, [rsp + 0xa8]
lea r8, [rsp + 0x60]
mov rcx, rdi
call fcn.140094200
movzx ecx, byte [rsp + 0x127]
test cl, cl
cmovs rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x110]
lea rdx, [rsp + 0x110]
cmovns rax, rdx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
test rcx, rcx
js 0x14002a3c4
je 0x14002a129
test rax, rax
je 0x14002a3d7
lea r14, [rsp + 0x80]
lea r8, [rsp + 0x50]
mov rcx, rsi
mov rdx, r14
call fcn.140094200
lea r15, [rsp + 0xa8]
mov rcx, r14
mov rdx, r15
call fcn.14017e750
mov rcx, r14
call fcn.1400ee050
mov rcx, r15
call fcn.1400ee050
mov r12, qword [rsp + 0xf0]
mov rbp, qword [rsp + 0xf8]
jmp 0x14002a34b
mov rcx, rsi
call fcn.140081fa0
mov r14, qword [rsp + 0xf0]
test r14, r14
je 0x14002a1d2
mov rsi, qword [rsp + 0xf8]
mov rcx, r14
cmp rsi, r14
je 0x14002a1c5
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x14002a3ea
cmp byte [rsi + 0x17], 0
js 0x14002a216
lea rax, [rsi - 0x18]
cmp rsi, r14
mov rsi, rax
jne 0x14002a1a2
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0xf8], r14
call fcn.140124dec
cmp byte [rsp + 0x197], 0
jns 0x14002a1e9
mov rcx, qword [rsp + 0x180]
call fcn.140124dec
lea rcx, [rsp + 0x1b0]
call fcn.1400ee050
cmp byte [rsp + 0x127], 0
jns 0x140029e5a
mov rcx, qword [rsp + 0x110]
call fcn.140124dec
jmp 0x140029e5a
mov rcx, qword [rsi]
call fcn.140124dec
jmp 0x14002a1b1
mov rcx, qword [r12]
mov rax, qword [r12 + 8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rax
test rax, rax
jns 0x14002a2fe
jmp 0x14002a3c4
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], r15
test r15, r15
jns 0x14002a2c0
jmp 0x14002a3c4
mov rcx, qword [r12]
mov r8, r15
call fcn.140128140
test eax, eax
je 0x14002a347
test r14b, r14b
mov rbx, qword [r12]
mov rcx, r12
cmovs rcx, rbx
test r13, r13
js 0x14002a3c4
je 0x14002a28b
test rcx, rcx
je 0x14002a3d7
cmp r13, qword [rsp + 0x28]
jne 0x14002a2ab
lea rdx, str.opera_autoupdate.exe
mov r8, qword [rsp + 0x28]
call fcn.140128140
test eax, eax
je 0x14002a347
test r14b, r14b
js 0x14002a241
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r14
mov rbx, r12
mov r15, r14
test rbx, rbx
jne 0x14002a2ce
test r15, r15
jne 0x14002a3d7
mov rcx, rdi
lea rdx, [rsp + 0xa8]
lea r8, [rsp + 0x40]
call fcn.140094200
movzx eax, byte [r12 + 0x17]
test al, al
js 0x14002a220
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], rax
mov rcx, r12
test rcx, rcx
jne 0x14002a30c
test rax, rax
jne 0x14002a3d7
mov rcx, rsi
lea r14, [rsp + 0x80]
mov rdx, r14
lea r8, [rsp + 0x30]
call fcn.140094200
mov rcx, r14
lea rbx, [rsp + 0xa8]
mov rdx, rbx
call fcn.14017e750
mov rcx, r14
call fcn.1400ee050
mov rcx, rbx
call fcn.1400ee050
add r12, 0x18
cmp r12, rbp
je 0x14002a179
movzx r14d, byte [r12 + 0x17]
test r14b, r14b
mov r15, qword [r12 + 8]
mov r13, r14
cmovs r13, r15
movzx eax, byte [rsp + 0x127]
mov rcx, rax
test al, al
jns 0x14002a380
mov rcx, qword [rsp + 0x118]
cmp r13, rcx
jne 0x14002a269
lea rdx, [rsp + 0x110]
test al, al
jns 0x14002a39d
mov rdx, qword [rsp + 0x110]
test r14b, r14b
js 0x14002a255
test r14, r14
je 0x14002a347
xor eax, eax
mov cl, byte [r12 + rax]
cmp cl, byte [rdx + rax]
jne 0x14002a269
inc rax
cmp r14, rax
jne 0x14002a3ad
jmp 0x14002a347
lea rcx, [0x1401b4107]
lea rdx, str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.140160550
lea rcx, [0x1401b4107]
lea rdx, str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.140160550
lea rcx, [0x1401b4107]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.140160550
int3