Function at 0x1800d3c30
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
lea esi, [r9 + 0x156]
mov r13d, r9d
mov dword [rsp + 0x48], esi
mov rdi, r8
mov r14, rdx
mov rbp, rcx
cmp r9d, esi
jae 0x1800d3dea
mov r15, qword [rsp + 0x70]
lea r12d, [r9 - 0x50]
mov eax, dword [rsp + 0x48]
lea rdx, [0x180000000]
xor esi, esi
cmp r12d, 0x92
ja case.default.0x1800d3ca2
movzx eax, byte [rdx + r12 + 0xd426c]
mov ecx, dword [rdx + rax*4 + 0xd4244]
add rcx, rdx
jmp rcx
mov qword [rsp + 0x68], rdi
jmp case.0x1800d3ca2.9
mov ebp, dword [0x18012172c]
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x60], ebp
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d3d24
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
lea r15, [0x18010646e]
mov dword [rsp + 0xd8], esi
mov r8, r15
lea r9, [rsp + 0xd8]
mov rcx, r15
mov edx, 0x77
call fcn.1800b78f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xd2
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
jmp 0x1800d3d2b
lea r15, [0x18010646e]
test rdi, rdi
je 0x1800d3fa8
mov eax, dword [rdi + 0xc]
test eax, eax
je 0x1800d3fa8
inc eax
mov edx, 1
movsxd rcx, eax
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x1800d3f88
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d3dc6
lea rax, [rsp + 0x50]
mov byte [rsp + 0xd8], 1
mov qword [rsp + 0x30], rax
lea rbx, [0x18010646e]
lea rax, [rsp + 0xd8]
mov dword [rsp + 0x28], 0x34
mov r9, rbx
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
mov byte [rsp + 0x40], 2
mov rdx, rbx
mov dword [rsp + 0x58], r15d
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x50], esi
call fcn.180096080
mov rbp, qword [rsp + 0xc0]
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x48]
add r13d, 0x26
add r12d, 0x26
cmp r13d, eax
jb 0x1800d3c82
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
add rbp, 0xfffffffffffffff9
mov qword [rsp + 0x70], rdi
cmp rdi, rbp
jae 0x1800d3f7b
nop dword [rax]
mov r9d, 0xe2
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.180010090
mov r9d, 0xe2
xor r8d, r8d
xor edx, edx
mov rcx, rdi
mov rbx, rax
call fcn.180010090
xor rax, rbx
jne 0x1800d407c
add rdi, 8
add r14, 8
cmp rdi, rbp
jb 0x1800d3e20
jmp 0x1800d3dc6
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1800d40ce
cmp dword [rcx + 8], 1
jne 0x1800d40ce
jmp case.0x1800d3ca2.9
mov eax, StrCmpICW
nop word [rax + rax]
cmp eax, 0x9b
je 0x1800d40a7
add eax, 8
cmp eax, 0xa3
jb 0x1800d3e90
jmp case.0x1800d3ca2.9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x114
call fcn.1800a1920
test eax, eax
je 0x1800d3f1a
lea rax, [rbp - 3]
cmp rdi, rax
jae 0x1800d3f1a
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x13f
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r14
xor ecx, ecx
call fcn.180016df0
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x13f
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rdi
xor ecx, ecx
mov rbx, rax
call fcn.180016df0
cmp ebx, eax
jne 0x1800d3f1a
add rdi, 4
add r14, 4
lea rax, [rbp - 1]
cmp rdi, rax
jae 0x1800d3f53
xor edx, edx
mov r9, r14
xor ecx, ecx
lea r8d, [rdx + 0x28]
call fcn.18007acf0
xor edx, edx
mov r9, rdi
xor ecx, ecx
mov rbx, rax
lea r8d, [rdx + 0x28]
call fcn.18007acf0
cmp bx, ax
jne 0x1800d3f53
add rdi, 2
add r14, 2
cmp rdi, rbp
jae 0x1800d3dce
movzx eax, byte [rdi]
lea rdx, [0x180000000]
cmp byte [r14], al
mov eax, dword [rsp + 0x48]
jne case.default.0x1800d3ca2
inc rdi
jmp case.default.0x1800d3ca2
mov rbp, qword [rsp + 0xc0]
jmp case.0x1800d3ca2.9
mov r8d, 0xe
lea rdx, str.ennes__UEC_17_
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test r14, r14
je 0x1800d3fb0
mov dword [r14], esi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d4074
mov ebx, 0x57
lea rdi, str.21QPanGestureRecognizer
mov eax, ebx
sub eax, 0x57
je 0x1800d404e
sub eax, 0x7a
je 0x1800d4016
cmp eax, 0x7a
jne 0x1800d4065
mov qword [rsp + 0x28], r15
lea r9, [rsp + 0xd8]
lea r8, str.icudt52l_coll_en_IN.res
mov dword [rsp + 0x20], 0x59
mov rdx, r15
mov dword [rsp + 0xd8], esi
xor ecx, ecx
call fcn.18002be30
jmp 0x1800d4065
cmp ebp, dword [0x18012172c]
je 0x1800d4045
lea rcx, str.Justification:Only_ColorOut_web_members_can_have_meaningful_liveness_ids
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.function_SharedInfoWrapper_bf_
mov r8, r15
mov rdx, r15
call fcn.1800fcfa0
mov dword [0x18012172c], ebp
mov qword [0x180121770], rdi
jmp 0x1800d4065
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
add ebx, 0x7a
cmp ebx, 0x1c5
jb 0x1800d3fd6
mov rax, rsi
jmp 0x1800d3def
xor edx, edx
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rsi
xor ecx, ecx
lea r8d, [rdx + 0x5a]
call fcn.1800c65d0
mov eax, eax
sub rax, qword [rsp + 0x70]
add rax, rdi
jmp 0x1800d3def
mov rcx, qword [rsp + 0x68]
lea r9, [rsp + 0xd8]
mov r8d, dword [rbp]
mov rdx, r14
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1800d40da
mov rax, 0xffffffffffffffff
jmp 0x1800d3def
mov eax, dword [rsp + 0xd8]
jmp 0x1800d3def
mov dword [rsp + 0x30], 0x91
lea rcx, [0x1801217a0]
mov qword [rsp + 0x28], rsi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
mov rdx, rdi
call fcn.18005c020
test rax, rax
je 0x1800d4074
mov edx, dword [rax + 8]
test edx, edx
je 0x1800d412f
cmp edx, 1
jne 0x1800d4074
mov rax, qword [rax + 0x18]
jmp 0x1800d3def
mov eax, dword [rax + 0xc]
jmp 0x1800d3def
mov r9d, esi
mov r8d, esi
cmp dword [rdi + 8], esi
jle 0x1800d4187
mov rdx, rsi
nop word [rax + rax]
mov eax, r9d
lea rcx, [rax + rax*2]
mov rax, qword [rdi]
lea rax, [rax + rcx*8]
test rax, rax
je 0x1800d417e
mov rcx, qword [rax]
test rcx, rcx
je 0x1800d417e
mov qword [r15 + rdx*8], rcx
inc r8d
mov rax, qword [rax + 0x10]
inc rdx
test rax, rax
jne 0x1800d4163
inc r9d
cmp r9d, dword [rdi + 8]
jl 0x1800d4150
test r14, r14
je 0x1800d4192
mov eax, dword [rdi + 0xc]
mov dword [r14], eax
movsxd rax, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
mov qword [r15 + rax*8], rsi
call fcn.18009c830
test al, al
je 0x1800d422e
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
mov ebx, dword [rsp + 0x60]
cmp ebx, r8d
je 0x1800d4208
mov edx, ebx
lea rcx, str.HRESULT_ID3D11Device::CreateRenderTargetView__s__0x_08Ix__0x_08Ix___0x_I32x
call fcn.1800fcfa0
lea rdi, [0x18010646e]
xor r9d, r9d
mov r8, rdi
lea rcx, str.Failed_to_set_rasterizer_state.
mov rdx, rdi
call fcn.1800fcfa0
mov dword [0x18012172c], ebx
jmp 0x1800d420f
lea rdi, [0x18010646e]
lea r9, [rsp + 0xd8]
mov dword [rsp + 0xd8], esi
mov r8, rdi
mov edx, 0x77
mov rcx, rdi
call fcn.1800b78f0
mov rax, r15
jmp 0x1800d3def
sub rdi, qword [rsp + 0x70]
mov rax, rdi
jmp 0x1800d3def