Function at 0x18009d490
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
imul r13d, ecx, 0xe8c
mov r15, r8
mov r14, rdx
mov r12d, ecx
mov ebp, ecx
cmp ecx, r13d
ja 0x18009d65c
mov ebx, dword [rsp + 0xb0]
xor esi, esi
nop dword [rax + rax]
cmp ebp, 0xcaa4
ja 0x18009d703
je 0x18009d6cf
cmp ebp, 0x109
ja 0x18009d638
je 0x18009d5a9
mov eax, ebp
sub eax, 0x40
je 0x18009d597
sub eax, 0x44
je 0x18009d588
sub eax, 0x40
je 0x18009d523
cmp eax, 0xe
jne 0x18009d8cd
mov eax, dword [r14 + 0x10]
mov dword [rsp + 0x48], eax
jmp 0x18009d8cd
cmp dword [r14], 2
jge 0x18009d562
mov ebx, 0x4a
nop
mov eax, ebx
sub eax, 0x49
je 0x18009d8e4
cmp eax, 1
jne 0x18009d55b
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [r15]
lea rdx, str.SetWidgetGeometry
mov rcx, rax
call fcn.1800cf5c0
dec ebx
cmp ebx, 0x48
ja 0x18009d530
mov rax, qword [r15 + 8]
lea rcx, [rsp + 0x30]
mov r9d, 0x131
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
call fcn.1800b7c90
mov rbx, rax
jmp 0x18009d8cd
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
jmp 0x18009d8cd
mov rax, qword [r14]
mov ecx, dword [rax + 0x10]
and ecx, 2
mov dword [rsp + 0x48], ecx
jmp 0x18009d8cd
mov rax, qword [r14]
test rax, rax
je 0x18009d65c
cmp qword [rax + 0xb0], 0
je 0x18009d8cd
mov edi, 1
mov rdx, rax
cmp dword [rax + 0xa8], edi
jl 0x18009d61d
mov esi, 0x30
nop dword [rax + rax]
mov rcx, qword [rdx + 0xb0]
cmp qword [rsi + rcx], 0
je 0x18009d60d
mov eax, edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rax + rax*2]
shl rdx, 4
add rdx, rcx
lea ecx, [r9 + 0x4a]
call fcn.180086260
mov rdx, qword [r14]
inc edi
add rsi, 0x30
cmp edi, dword [rdx + 0xa8]
jle 0x18009d5e0
xor esi, esi
xor r9d, r9d
add rdx, 0xb0
xor r8d, r8d
lea ecx, [r9 + 0x4a]
call fcn.180086260
jmp 0x18009d8cd
cmp ebp, 0x3140
je 0x18009d65c
cmp ebp, 0x6594
je 0x18009d69e
cmp ebp, 0x96d4
je 0x18009d679
cmp ebp, 0xa19a
jne 0x18009d8cd
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test ebx, ebx
jne 0x18009d8e4
mov r8, qword [r15 + 8]
lea rdx, [rsp + 0xc8]
mov ecx, SHSetFolderPathW
call fcn.1800cac00
mov ebx, eax
jmp 0x18009d8cd
lea r9, [rsp + 0xb0]
mov dword [rsp + 0xb0], 0x48
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov ecx, 0xac
call fcn.180098000
mov dword [rsp + 0xb0], eax
jmp 0x18009d8cd
cmp dword [rsp + 0xb0], 0
je 0x18009d8cd
mov ecx, 9
mov eax, ecx
sub eax, 8
je 0x18009d65c
cmp eax, 1
jne 0x18009d6f7
mov qword [rsp + 0x48], rsi
dec ecx
cmp ecx, 7
ja 0x18009d6e2
jmp 0x18009d8cd
cmp ebp, 0x1c2f4
ja 0x18009d7c0
je 0x18009d8f0
cmp ebp, 0xcbed
je 0x18009d7a9
cmp ebp, 0x12ce4
je 0x18009d77f
cmp ebp, 0x12fb4
je 0x18009d75d
cmp ebp, 0x194c4
jne 0x18009d8cd
mov rdx, qword [rsp + 0x50]
mov r8d, 0x48
mov ecx, dword [r14]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
cdqe
mov qword [rsp + 0x60], rax
jmp 0x18009d8cd
mov rax, qword [rsp + 0x50]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov qword [rax + 0x40], rcx
jmp 0x18009d8cd
test ebx, ebx
jne 0x18009d8e4
mov r9d, dword [rsp + 0xc8]
lea rcx, str._sCannot_find_the_set_license_agreement_info_function
mov r8d, dword [rsp + 0x30]
mov rdx, qword [r15 + 8]
call fcn.1800cfb40
jmp 0x18009d8cd
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
lea ecx, [r9 + 0x4a]
call fcn.180086260
jmp 0x18009d8cd
cmp ebp, 0x1f9d4
je 0x18009d889
cmp ebp, 0x25ee4
je 0x18009d7fc
cmp ebp, 0x2c3f4
je 0x18009d7ed
cmp ebp, 0x32904
je 0x18009d65c
jmp 0x18009d8cd
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x48], rax
jmp 0x18009d8cd
mov rax, qword [rsp + 0x50]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x58], rax
mov edx, 0x43
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsp + 0x38], eax
call fcn.18007d660
cmp eax, 0x514649fb
jne 0x18009d84a
mov rax, qword [rsp + 0x58]
lea r8, [rsp + 0x40]
mov edx, 0x43
mov ecx, dword [rax + 4]
mov dword [rsp + 0x40], ecx
xor ecx, ecx
call fcn.18007d660
cmp eax, 2
je 0x18009d8cd
mov edi, 0x104
nop
mov eax, edi
sub eax, 0x104
je 0x18009d864
cmp eax, 1
je 0x18009d65c
jmp 0x18009d87d
xor r9d, r9d
lea rdx, [rsp + 0x58]
xor r8d, r8d
lea ecx, [r9 + 0x4a]
call fcn.180086260
mov qword [rsp + 0x48], rsi
inc edi
cmp edi, 0x106
jb 0x18009d850
jmp 0x18009d8cd
cmp qword [rsp + 0x60], 0x48
je 0x18009d8cd
mov edi, 0xc4
mov eax, edi
sub eax, 0xc4
je 0x18009d8aa
cmp eax, 1
je 0x18009d65c
jmp 0x18009d8c3
xor r9d, r9d
lea rdx, [rsp + 0x50]
xor r8d, r8d
lea ecx, [r9 + 0x4a]
call fcn.180086260
mov qword [rsp + 0x48], rsi
inc edi
cmp edi, 0xc6
jb 0x18009d896
imul eax, r12d, 0xc4
add ebp, eax
cmp ebp, r13d
jbe 0x18009d4d0
jmp 0x18009d65c
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3