Function at 0x140048c20
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
mov qword [rsp + 0x20], r9
push rdi
sub rsp, 0x120
mov rax, qword [0x1400d2070]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov eax, dword [0x1400d70b0]
and eax, 1
test eax, eax
jne 0x140048cba
mov eax, dword [0x1400d70b0]
or eax, 1
mov dword [0x1400d70b0], eax
mov edx, 0x10
lea rcx, [0x1400d70b8]
call fcn.140001d80
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov r8d, 1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [0x1400d70b8]
call fcn.14000e540
lea rcx, [0x14009c120]
int3
mov eax, dword [0x1400d70b0]
and eax, 2
test eax, eax
jne 0x140048d05
mov eax, dword [0x1400d70b0]
or eax, 2
mov dword [0x1400d70b0], eax
mov edx, 0x108
lea rcx, [0x1400d70d0]
call fcn.140001d80
mov edx, 1
lea rcx, [0x1400d70d0]
call fcn.140049c10
lea rcx, [0x14009c100]
int3
cmp qword [rsp + 0x140], 0
jne 0x140048d3f
movzx eax, byte [0x1400d6f79]
test eax, eax
je 0x140048d33
lea rcx, [0x1400d70d0]
call fcn.14002cef0
lea rcx, [0x1400d70d0]
call fcn.140049a50
mov byte [0x1400d6f79], 0
jmp 0x140049081
lea rax, [rsp + 0xc8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov r8d, 0x1388
lea rdx, [0x1400d70b8]
lea rcx, [rsp + 0xc8]
call fcn.1400490a0
movzx eax, al
test eax, eax
jne 0x140049081
lea rcx, [0x1400d70b8]
call fcn.140002160
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
movzx eax, byte [0x1400d6f79]
test eax, eax
jne 0x140048daf
lea rcx, [0x1400d70d0]
call fcn.1400489e0
mov byte [0x1400d6f79], al
lea rax, [rsp + 0x148]
mov qword [rsp + 0xc0], rax
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x140]
call fcn.140003d50
mov dword [rsp + 0x24], eax
mov edx, 0x18
lea rcx, [rsp + 0xd8]
call fcn.140001d80
lea rcx, [rsp + 0x20]
call fcn.140002280
mov ecx, dword [rsp + 0x24]
inc ecx
movsxd rcx, ecx
mov r8, rax
mov rdx, rcx
lea rcx, [rsp + 0xd8]
call fcn.14001e660
nop
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x48], rax
xor edx, edx
lea rcx, [rsp + 0xd8]
call fcn.14001e610
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x50]
call fcn.140059220
mov qword [rsp + 0xc0], 0
xor edx, edx
lea rcx, [rsp + 0xd8]
call fcn.14001e610
mov r8, rax
lea rdx, str.CIS_cleanup:__s
lea rcx, [rsp + 0xf0]
call fcn.1400449b0
nop
lea rcx, [rsp + 0xf0]
call fcn.140003970
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
movzx eax, byte [0x1400d6f79]
test eax, eax
je 0x14004904d
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0xd0]
call fcn.1400589c0
lea rcx, [rsp + 0xd0]
call fcn.1400589a0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 8]
lea rcx, [0x1400d70d0]
call fcn.140049ce0
lea rdx, [0x1400b048c]
mov rcx, rax
call fcn.140052080
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 4]
mov dword [rsp + 0x28], eax
mov edx, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x58]
call fcn.140049ce0
lea rdx, [0x1400b0174]
mov rcx, rax
call fcn.140052080
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
mov edx, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0x60]
call fcn.140049ce0
lea rdx, [0x1400b00a4]
mov rcx, rax
call fcn.140052080
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x130], 0
jne 0x140048f68
lea rax, [0x1400ac787]
mov qword [rsp + 0x38], rax
jmp 0x140048f75
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x68]
call fcn.140052080
lea rdx, [0x1400b004c]
mov rcx, rax
call fcn.140052080
mov qword [rsp + 0x70], rax
mov edx, dword [rsp + 0x138]
mov rcx, qword [rsp + 0x70]
call fcn.140049ce0
lea rdx, str._t__
mov rcx, rax
call fcn.140052080
mov qword [rsp + 0x90], rax
xor edx, edx
lea rcx, [rsp + 0xd8]
call fcn.14001e610
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140044560
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
call fcn.140052430
mov qword [rsp + 0x98], rax
lea rdx, [0x140052020]
mov rcx, qword [rsp + 0x98]
call fcn.140049f80
nop
lea rcx, [rsp + 0xa0]
call fcn.1400313a0
lea rcx, [0x1400d70d0]
call fcn.14002cef0
nop
lea rcx, [rsp + 0xf0]
call fcn.140003bf0
nop
lea rcx, [rsp + 0xd8]
call fcn.14001e640
nop
jmp 0x14004906b
lea rcx, [0x1400d70b8]
call fcn.140002160
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEvent]
nop
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.140069a00
add rsp, 0x120
pop rdi
ret