Function at 0x18004dd40
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
lea ebx, [rdx + 0x4ec]
mov r14, r9
mov dword [rsp + 0x50], ebx
cmp edx, ebx
movzx ebx, byte [rsp + 0xe8]
mov r15, r8
mov esi, edx
jae 0x18004dfb5
mov r13, qword [rsp + 0x60]
mov edi, dword [rsp + 0xe8]
mov rbp, qword [rsp + 0x60]
mov r12, qword [rsp + 0x60]
mov eax, dword [rsp + 0x50]
nop dword [rax + rax]
cmp esi, 0x197
ja 0x18004deee
je 0x18004dee4
mov eax, esi
sub eax, 0x19
je 0x18004decd
sub eax, 0x69
je 0x18004dec0
sub eax, 0x43
je 0x18004de14
sub eax, 0x4e
je 0x18004ddea
cmp eax, 0x69
jne 0x18004dfa6
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
movsxd r12, eax
jmp 0x18004df9e
lea rdx, [0x1800aa204]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbp, rax
test rax, rax
je 0x18004dfd3
mov r8d, 2
mov rcx, rax
jmp 0x18004df96
movzx eax, byte [r14]
lea rdx, [rsp + 0x68]
mov r8d, 0x7c
mov byte [rsp + 0xe8], al
lea rcx, [rsp + 0xe8]
call fcn.180065ad0
test al, al
jne 0x18004de44
cmp byte [r14], al
je 0x18004dffc
xor eax, eax
mov dword [rsp + 0xe8], 0x240
mov dword [0x1800c5144], eax
lea r9, [0x1800c50e0]
mov qword [rsp + 0x60], rax
lea r8, [0x1800c5450]
lea rax, [rsp + 0x68]
mov dword [rsp + 0x58], 0xc0
mov qword [rsp + 0x40], rax
lea rdx, [0x1800c5190]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea rcx, [0x1800c5390]
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov dword [rsp + 0x28], 0x5d
mov qword [rsp + 0x20], rax
call fcn.18004e3a0
mov rdi, rax
jmp 0x18004df9e
mov dword [r14 + 0x10], 0
jmp 0x18004dfa6
mov rax, qword [r15]
mov qword [r14], rax
mov qword [r14 + 8], rcx
mov dword [r14 + 0x14], 0
jmp 0x18004dfa6
test edi, edi
sete bl
jmp 0x18004dfaa
mov eax, esi
sub eax, 0x1e5
je 0x18004df90
sub eax, 0x1b
je 0x18004dfb5
sub eax, 0x4e
je 0x18004df6e
sub eax, 0x69
je 0x18004df22
cmp eax, 0x69
jne 0x18004dfa6
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004df9e
mov rdx, r15
lea rcx, str.Update_check_succeeded.
call fcn.1800a0e30
mov r9, r14
mov qword [rsp + 0x60], r12
lea r8, [rsp + 0x60]
mov edx, 0x3e
mov rcx, r13
call fcn.180064780
mov edx, eax
cmp rdx, r12
jb 0x18004df60
lea rcx, str.on_actionBug_report_triggered
call fcn.1800a0e30
jmp 0x18004df9e
lea rcx, str.Url::GetQuery:_host_1__path_2
call fcn.1800a0e30
jmp 0x18004df9e
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rbp
mov r8, r12
mov rcx, rax
mov edx, 1
mov r13, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
jmp 0x18004df9e
xor r8d, r8d
mov rcx, rbp
xor edx, edx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, qword [rsp + 0xe0]
mov eax, dword [rsp + 0x50]
add esi, 0x69
cmp esi, eax
jb 0x18004dda0
movzx eax, bl
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, r15
lea rdx, str.include_exclude_list
mov rcx, rax
call fcn.1800a0de0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor al, al
jmp 0x18004dfb8