Function at 0x14000e46d
Capabilities:
Print debug messages
Write file on windows

Disassembly:
test rdx, rdx
je 0x14000ea5b
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov qword [rbp - 0x61], 0xfffffffffffffffe
mov rax, qword [0x140729900]
xor rax, rsp
mov qword [rbp + 7], rax
mov qword [rsp + 0x38], r9
mov r12, r8
mov qword [rbp - 0x71], r8
mov rbx, rdx
mov qword [rbp - 0x79], rdx
mov r13, rcx
mov rcx, qword [rdx + 0x18]
lea r15, [0x14041bfe0]
test rcx, rcx
je 0x14000e4d1
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000e4d4
mov rcx, qword [rcx]
jmp 0x14000e4d4
mov rcx, r15
call fcn.140288ad0
test rax, rax
jne 0x14000e4eb
cmp qword [r13 + 0x360], rax
je 0x14000ea3c
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14000e4f9
mov eax, dword [rdx + 0x28]
jmp 0x14000e4fb
xor eax, eax
movzx esi, word [rbx + 0x10]
shl esi, 0xa
test esi, esi
je 0x14000e50e
cmp eax, esi
jae 0x14000ea3c
test rdx, rdx
je 0x14000e523
add rdx, 8
cmp qword [rdx + 0x18], 8
jb 0x14000e526
mov rdx, qword [rdx]
jmp 0x14000e526
mov rdx, r15
call fcn.14000e25c
mov r14, rax
mov rdi, qword [r13 + 0x90]
test rdi, rdi
je 0x14000e549
mov rdi, qword [rdi + 0x18]
test rdi, rdi
je 0x14000e549
add rdi, 0x30
jmp 0x14000e554
mov rdi, qword [r13 + 0xe0]
add rdi, 0x28
test r12, r12
je 0x14000e564
mov rcx, r12
call fcn.140288ad0
mov r12, rax
cmp qword [rdi + 0x10], 0
ja 0x14000e56f
xor ebx, ebx
jmp 0x14000e572
mov ebx, dword [rdi + 0x10]
mov dword [rsp + 0x34], ebx
mov rdx, qword [rsp + 0x38]
test rdx, rdx
jne 0x14000e584
xor eax, eax
jmp 0x14000e591
mov rcx, rdx
call fcn.140288ad0
mov rdx, qword [rsp + 0x38]
mov qword [rbp - 0x69], rax
add ebx, 3
add ebx, eax
add ebx, r12d
mov rcx, qword [r13 + 0x360]
test rcx, rcx
je 0x14000e5c4
cmp qword [rdi + 0x18], 8
jb 0x14000e5b5
mov r8, qword [rdi]
jmp 0x14000e5b8
mov r8, rdi
mov rax, qword [rcx]
mov r9, rdx
mov rdx, qword [rbp - 0x71]
call qword [rax]
cmp r14, 0xffffffffffffffff
je 0x14000e7b9
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, eax
xor r15d, r15d
test esi, esi
je 0x14000e5f3
cmp eax, esi
jae 0x14000e7ab
mov rdx, r14
mov rcx, r13
call fcn.14000e2fc
add ebx, eax
test r12d, r12d
je 0x14000e628
lea r8d, [r12 + r12]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, qword [rbp - 0x71]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e628
add ebx, dword [rsp + 0x30]
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x14000e65c
cmp qword [rdi + 0x18], 8
jb 0x14000e63a
mov rdi, qword [rdi]
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e65c
add ebx, dword [rsp + 0x30]
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x14000e6b0
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e688
add ebx, dword [rsp + 0x30]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [0x1405df280]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e6b0
add ebx, dword [rsp + 0x30]
test esi, esi
je 0x14000e79b
cmp ebx, esi
jb 0x14000e79b
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], r15
mov esi, 7
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x49], r15
mov word [rbp - 0x59], r15w
xor r8d, r8d
lea edx, [rsi + 0x79]
lea rcx, [rbp - 0x59]
call fcn.140010c68
nop
lea r9, [r13 + 8]
cmp qword [r9 + 0x18], 8
jb 0x14000e6f8
mov r9, qword [r9]
lea rdi, [r13 + 0x110]
lea r8, str._FILE_SIZE_LIMIT_REACHED__LOGGING_DISABLED_FOR__s_MODULE_
mov edx, 0x104
mov rcx, rdi
call fcn.14000a38c
cmp word [rdi], r15w
jne 0x14000e71e
mov rax, r15
jmp 0x14000e726
mov rcx, rdi
call fcn.140288ad0
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.140009ed0
mov eax, dword [rbp - 0x49]
lea r8d, [rax + rax]
mov dword [rsp + 0x30], r8d
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rdx, qword [rbp - 0x59]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e76a
add ebx, dword [rsp + 0x30]
mov rdi, qword [rbp - 0x79]
mov eax, dword [rdi + 0x10]
mov ecx, 0x30000
and eax, ecx
cmp eax, ecx
jne 0x14000e78b
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x14000e78b
mov byte [rax], 1
mov ebx, r15d
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.140009e10
jmp 0x14000e79f
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x14000e7ab
mov dword [rax + 0x28], ebx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000ea3c
xor r14d, r14d
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], r14
lea esi, [r14 + 7]
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x49], r14
mov word [rbp - 0x59], r14w
mov edx, ebx
mov rbx, qword [rbp - 0x49]
cmp rbx, rdx
ja 0x14000e80d
cmp qword [rbp - 0x41], rdx
je 0x14000e80d
mov r8b, 1
lea rcx, [rbp - 0x59]
call fcn.140009fec
test al, al
je 0x14000e80d
mov qword [rbp - 0x49], rbx
lea rax, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rax, qword [rbp - 0x59]
mov word [rax + rbx*2], r14w
cmp qword [r13 + 0x358], r14
jne 0x14000e86a
mov qword [rbp - 9], r14
mov qword [rbp - 1], r14
mov qword [rbp - 1], rsi
mov qword [rbp - 9], r14
mov word [rbp - 0x19], r14w
lea rcx, str.____Queued_Lines_Start_____r_n
call fcn.140288ad0
mov r8, rax
lea rdx, str.____Queued_Lines_Start_____r_n
lea rcx, [rbp - 0x19]
call fcn.140009ed0
nop
lea rcx, [r13 + 0x338]
lea rdx, [rbp - 0x19]
call fcn.140010698
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x19]
call fcn.140009e10
test r12d, r12d
je 0x14000e895
mov rbx, qword [rbp - 0x71]
cmp word [rbx], r14w
jne 0x14000e87e
mov rax, r14
jmp 0x14000e886
mov rcx, rbx
call fcn.140288ad0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x59]
call fcn.14000af30
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x14000e8b0
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.14000b150
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x14000e8df
mov rdi, qword [rsp + 0x38]
cmp word [rdi], r14w
jne 0x14000e8c8
mov rax, r14
jmp 0x14000e8d0
mov rcx, rdi
call fcn.140288ad0
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.14000af30
lea rcx, [0x1405df280]
call fcn.140288ad0
mov r8, rax
lea rdx, [0x1405df280]
lea rcx, [rbp - 0x59]
call fcn.14000af30
lea rbx, [r13 + 0x338]
mov rax, qword [rbx + 0x20]
inc rax
cmp qword [rbx + 0x10], rax
ja 0x14000e91a
mov rcx, rbx
call fcn.1400113ac
mov rax, qword [rbx + 0x10]
dec rax
and qword [rbx + 0x18], rax
mov rdx, qword [rbx + 0x18]
add rdx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x10]
dec rdi
and rdi, rdx
mov rax, qword [rbx + 8]
cmp qword [rax + rdi*8], r14
jne 0x14000e959
mov r8b, 1
mov edx, 0x20
lea ecx, [rdx - 0x1f]
call fcn.140009b30
mov rcx, qword [rbx + 8]
mov qword [rcx + rdi*8], rax
mov rax, qword [rbx + 8]
mov rcx, qword [rax + rdi*8]
mov qword [rbp - 0x69], rcx
mov qword [rbp - 0x71], rcx
test rcx, rcx
je 0x14000e98b
mov qword [rcx + 0x18], rsi
mov qword [rcx + 0x10], r14
mov word [rcx], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x59]
call fcn.14000a070
nop
inc qword [rbx + 0x20]
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x29], r14
mov word [rbp - 0x39], r14w
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14000e9bf
lea r9, [rbp - 0x39]
xor r8d, r8d
mov edx, eax
mov rcx, r13
call fcn.14000fc48
lea rcx, str.Unable_to_open_log_file:_r_n_
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x14000e9e7
lea r15, [rax + 8]
cmp qword [r15 + 0x18], 8
jb 0x14000e9e7
mov r15, qword [r15]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1405df300]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1405df280]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x39]
call fcn.140009e10
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.140009e10
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1402812e0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret