Function at 0x180097510
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
mov rax, qword [0x1800f6ae8]
xor rax, rsp
mov qword [rsp + 0x160], rax
mov ebx, dword [rsp + 0x38]
lea eax, [r8 + 0x2b0]
mov dword [rsp + 0x48], r8d
mov r13, rdx
mov dword [rsp + 0x30], eax
mov r14, rcx
cmp r8d, eax
jae 0x1800978c9
mov r12d, dword [rsp + 0x38]
mov eax, r8d
mov ebp, dword [rsp + 0x38]
mov r15d, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x30]
xor edx, edx
lea r8, [0x180000000]
mov r9d, 0xffff
cmp eax, 0x13a
ja 0x1800978a2
je 0x1800978c9
add eax, 0xffffffc8
cmp eax, 0xe7
ja case.default.0x1800975b3
movzx eax, byte [r8 + rax + 0x97af8]
mov ecx, dword [r8 + rax*4 + 0x97acc]
add rcx, r8
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
xor edx, edx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_setbuf]
jmp case.0x1800975b3.66
mov rcx, qword [r14 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp case.0x1800975b3.66
movzx eax, word [r13]
mov word [rsp + 0x4c], dx
xor edx, edx
div dword [r14 + 0x38]
imul edx, dword [r14 + 0x10]
mov ecx, eax
mov eax, dword [r14 + 0xc]
imul eax, ecx
add rdx, rax
mov rax, qword [r14]
add rax, 4
add rax, rdx
mov qword [rsp + 0x58], rax
jmp case.0x1800975b3.66
mov rcx, qword [r14 + 0x28]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp case.0x1800975b3.66
mov rdi, qword [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne case.0x1800975b3.66
nop dword [rax]
mov r8, rdi
lea rcx, [rsp + 0x60]
mov edx, 0x100
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je case.0x1800975b3.63
movzx eax, byte [rsp + 0x60]
cmp al, 0x23
je 0x180097748
xor edi, edi
cmp al, 0x2d
jne 0x180097690
mov edi, 1
mov byte [rsp + 0x60], 0x20
nop dword [rax]
mov edx, 0xa
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x1800976a7
mov byte [rax], 0
mov edx, 0xd
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x1800976be
mov byte [rax], 0
test edi, edi
jne 0x1800976d3
lea rdx, [rsp + 0x60]
lea rcx, str.ew_juwwanecm.sys
call fcn.1800d0700
mov eax, dword [r13]
lea r8, [rsp + 0x60]
mov edx, 0xd4
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call fcn.180029f60
mov esi, eax
test eax, eax
je 0x180097748
mov edi, 0xee
nop word [rax + rax]
cmp edi, 0xee
je 0x180097714
cmp edi, 0x7348
jne 0x18009773a
inc ebp
jmp 0x18009773a
mov eax, dword [r13]
lea r9, [rsp + 0x40]
mov r8d, 0xd8
mov dword [rsp + 0x38], eax
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x60]
call fcn.18003ece0
add edi, 0x725a
cmp edi, 0xe4b4
jbe 0x180097700
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
mov rdi, qword [rsp + 0x50]
test eax, eax
je 0x180097650
jmp case.0x1800975b3.66
mov ebp, edx
jmp case.0x1800975b3.66
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov ecx, 1
jmp 0x1800975ba
cmp byte [r14], 0x2d
jne 0x1800977a6
cmp byte [r14 + 1], 0
jne 0x1800977a6
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rsp + 0x50], rax
jmp 0x180097816
mov esi, 0xa1
nop dword [rax + rax]
mov eax, esi
sub eax, 0xa1
je 0x1800977f7
cmp eax, 1
jne 0x18009780c
cmp qword [rsp + 0x50], 0
jne 0x18009780c
mov edi, 0x11a
nop dword [rax + rax]
mov eax, edi
sub eax, 0x119
je 0x180097ab3
cmp eax, 1
jne 0x1800977eb
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
dec edi
cmp edi, 0x118
ja 0x1800977d0
jmp 0x18009780c
lea rdx, [0x1800e0c20]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rsp + 0x50], rax
inc esi
cmp esi, 0xa3
jb 0x1800977b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
jmp case.0x1800975b3.66
mov rax, qword [rsp + 0x58]
cmp word [rax], r9w
jne case.0x1800975b3.66
mov edi, 0xeb
mov eax, edi
sub eax, 0xea
je 0x180097abf
cmp eax, 1
jne 0x180097884
cmp byte [0x1800f6bd9], 0
je 0x180097884
mov qword [rsp + 0x20], rdx
lea r9, [0x1800d9468]
mov edx, 0xffffd504
lea r8, [0x1800d9468]
lea rcx, str.DispatchLaunchDimZMax
call fcn.1800d0700
xor edx, edx
dec edi
cmp edi, 0xe9
ja 0x180097843
jmp case.0x1800975b3.66
mov dword [rsp + 0x48], 0x10f
mov ebx, ebp
jmp case.0x1800975b3.66
sub eax, 0x14a
je 0x1800979fc
sub eax, 0x2b
je 0x1800979d9
sub eax, 0x2b
je 0x180097928
sub eax, 0x2b
je 0x1800978f6
cmp eax, 0x2b
jne case.default.0x1800975b3
mov eax, ebx
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1800d1090
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test r12d, r12d
jne 0x180097920
inc dword [r14 + 0x44]
lea r9, [rsp + 0x40]
movzx eax, word [r13]
mov r8d, 0xfc
mov rdx, r14
mov word [rsp + 0x40], ax
xor ecx, ecx
call fcn.180099b40
nop
mov ebx, r12d
jmp case.0x1800975b3.66
movzx eax, word [r13]
xor edx, edx
div dword [r14 + 0x38]
mov r8d, 2
imul edx, dword [r14 + 0x10]
mov ecx, eax
mov eax, dword [r14 + 0xc]
imul eax, ecx
mov rcx, qword [r14]
add rcx, 4
add rdx, rax
add rcx, rdx
lea rdx, [rsp + 0x4c]
call qword [r14 + 0x28]
mov r12d, eax
mov esi, 0x45
cmp esi, 0x45
jne 0x1800979c6
test r12d, r12d
je 0x1800979c6
mov edi, 0x2d
cmp edi, 0x2d
je 0x180097989
cmp edi, 0xe9
jne 0x1800979b8
mov eax, r12d
jmp 0x1800978cb
cmp byte [0x1800f6bd9], 0
je 0x1800979b8
lea r9, [0x1800d9468]
mov qword [rsp + 0x20], 0
lea r8, [0x1800d9468]
mov edx, r12d
lea rcx, str.0___live_input_count
call fcn.1800d0700
add edi, 0xbc
cmp edi, 0x1a5
jb 0x180097974
add esi, 0x2646
cmp esi, 0x2646
jbe 0x180097965
jmp case.0x1800975b3.66
cmp byte [0x1800f6bd9], 0
je case.default.0x1800975b3
movzx edx, word [r13]
lea rcx, str.NET_STREAM_CREATE
call fcn.1800d0700
jmp case.0x1800975b3.66
mov rax, qword [rsp + 0x58]
cmp word [rax], 0
jne case.default.0x1800975b3
mov esi, 0x11f
cmp esi, 0x11f
je 0x180097a7f
cmp esi, 0x5653
jne 0x180097a85
test r15d, r15d
je 0x180097a85
mov edi, 0x123
nop word [rax + rax]
mov eax, edi
sub eax, 0x123
je 0x180097a46
cmp eax, 1
jne 0x180097a73
mov eax, r15d
jmp 0x1800978cb
cmp byte [0x1800f6bd9], 0
je 0x180097a73
mov qword [rsp + 0x20], rdx
lea r9, [0x1800d9468]
mov edx, r15d
lea r8, [0x1800d9468]
lea rcx, str.DXDestroySamplerState
call fcn.1800d0700
xor edx, edx
inc edi
cmp edi, 0x125
jb 0x180097a30
jmp 0x180097a85
mov r15d, 0xffffd503
add esi, 0x5534
cmp esi, 0xaa68
jbe 0x180097a10
mov ecx, dword [rsp + 0x30]
mov eax, dword [rsp + 0x48]
add eax, 0x2b
mov dword [rsp + 0x48], eax
cmp eax, ecx
jae 0x1800978c9
jmp 0x180097571
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, 0xffffd504
jmp 0x1800978cb