Function at 0x140008ae5
Capabilities:
Print debug messages
Write file on windows

Disassembly:
test rdx, rdx
je 0x14000904a
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xc8
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov rax, qword [0x1400f0088]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x71], r9
mov r12, r8
mov qword [rbp - 0x69], r8
mov r15, rdx
mov r13, rcx
xor edi, edi
mov rcx, qword [rdx + 0x18]
lea rbx, [0x1400ce728]
test rcx, rcx
je 0x140008b46
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140008b49
mov rcx, qword [rcx]
jmp 0x140008b49
mov rcx, rbx
call fcn.140058be4
test rax, rax
jne 0x140008b60
cmp qword [r13 + 0x360], rdi
je 0x14000902b
mov rdx, qword [r15 + 0x18]
test rdx, rdx
je 0x140008b6e
mov eax, dword [rdx + 0x28]
jmp 0x140008b70
mov eax, edi
movzx esi, word [r15 + 0x10]
shl esi, 0xa
test esi, esi
je 0x140008b84
cmp eax, esi
jae 0x14000902b
test rdx, rdx
je 0x140008b99
add rdx, 8
cmp qword [rdx + 0x18], 8
jb 0x140008b9c
mov rdx, qword [rdx]
jmp 0x140008b9c
mov rdx, rbx
mov r8d, 0x78
call fcn.140008804
mov r14, rax
mov rcx, r13
call fcn.140008294
mov rdi, rax
xor r8d, r8d
test r12, r12
jne 0x140008bc2
mov r12d, r8d
jmp 0x140008bd0
mov rcx, r12
call fcn.140058be4
mov r12, rax
xor r8d, r8d
cmp qword [rdi + 0x10], r8
ja 0x140008bdc
mov dword [rbp - 0x75], r8d
jmp 0x140008be2
mov eax, dword [rdi + 0x10]
mov dword [rbp - 0x75], eax
mov rdx, qword [rbp - 0x71]
test rdx, rdx
jne 0x140008bf0
mov eax, r8d
jmp 0x140008bff
mov rcx, rdx
call fcn.140058be4
mov rdx, qword [rbp - 0x71]
xor r8d, r8d
mov qword [rbp - 0x61], rax
mov ecx, dword [rbp - 0x75]
add ecx, 3
add eax, ecx
add eax, r12d
mov dword [rbp - 0x79], eax
mov rcx, qword [r13 + 0x360]
test rcx, rcx
je 0x140008c3e
cmp qword [rdi + 0x18], 8
jb 0x140008c29
mov r8, qword [rdi]
jmp 0x140008c2c
mov r8, rdi
mov rax, qword [rcx]
mov r9, rdx
mov rdx, qword [rbp - 0x69]
call qword [rax]
mov eax, dword [rbp - 0x79]
xor r8d, r8d
cmp r14, 0xffffffffffffffff
je 0x140008e25
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, eax
test esi, esi
je 0x140008c6a
cmp eax, esi
jae 0x140008e17
xor r8d, r8d
mov rdx, r14
mov rcx, r13
call fcn.1400088a8
add ebx, eax
test r12d, r12d
je 0x140008ca5
lea r8d, [r12 + r12]
xor r12d, r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x79]
mov rdx, qword [rbp - 0x69]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140008ca8
add ebx, dword [rbp - 0x79]
jmp 0x140008ca8
xor r12d, r12d
mov eax, dword [rbp - 0x75]
test eax, eax
je 0x140008cd9
cmp qword [rdi + 0x18], 8
jb 0x140008cb9
mov rdi, qword [rdi]
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x79]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140008cd9
add ebx, dword [rbp - 0x79]
mov rax, qword [rbp - 0x61]
test eax, eax
je 0x140008d28
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x79]
mov rdx, qword [rbp - 0x71]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140008d02
add ebx, dword [rbp - 0x79]
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x79]
mov r8d, 4
lea rdx, [0x1400cf398]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140008d28
add ebx, dword [rbp - 0x79]
test esi, esi
je 0x140008e0b
cmp ebx, esi
jb 0x140008e0b
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], r12
mov esi, 7
mov qword [rbp - 0x39], rsi
mov qword [rbp - 0x41], r12
mov word [rbp - 0x51], r12w
xor r8d, r8d
lea edx, [rsi + 0x79]
lea rcx, [rbp - 0x51]
call fcn.14000c95c
nop
lea r9, [r13 + 8]
cmp qword [r9 + 0x18], 8
jb 0x140008d70
mov r9, qword [r9]
lea rdi, [r13 + 0x110]
lea r8, str._FILE_SIZE_LIMIT_REACHED__LOGGING_DISABLED_FOR__s_MODULE_
mov edx, 0x104
mov rcx, rdi
call fcn.140004a58
cmp word [rdi], r12w
jne 0x140008d96
mov rax, r12
jmp 0x140008d9e
mov rcx, rdi
call fcn.140058be4
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.140003918
mov eax, dword [rbp - 0x41]
lea r8d, [rax + rax]
mov dword [rbp - 0x79], r8d
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rdx, qword [rbp - 0x51]
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x79]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140008ddf
add ebx, dword [rbp - 0x79]
mov eax, dword [r15 + 0x10]
mov ecx, 0x30000
and eax, ecx
cmp eax, ecx
jne 0x140008dfd
mov rax, qword [r15 + 0x18]
test rax, rax
je 0x140008dfd
mov byte [rax], 1
mov ebx, r12d
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x51]
call fcn.140003860
mov rax, qword [r15 + 0x18]
test rax, rax
je 0x140008e17
mov dword [rax + 0x28], ebx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000902b
mov qword [rbp - 0x41], r8
mov qword [rbp - 0x39], r8
mov esi, 7
mov qword [rbp - 0x39], rsi
mov qword [rbp - 0x41], r8
mov word [rbp - 0x51], r8w
mov edx, eax
mov r14, qword [rbp - 0x41]
cmp r14, rdx
ja 0x140008e7a
cmp qword [rbp - 0x39], rdx
je 0x140008e7a
mov r8b, 1
lea rcx, [rbp - 0x51]
call fcn.140003ce4
xor r8d, r8d
test al, al
je 0x140008e7a
mov qword [rbp - 0x41], r14
lea rax, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rax, qword [rbp - 0x51]
mov word [rax + r14*2], r8w
cmp qword [r13 + 0x358], r8
jne 0x140008eda
mov qword [rbp - 1], r8
mov qword [rbp + 7], r8
mov qword [rbp + 7], rsi
mov qword [rbp - 1], r8
mov word [rbp - 0x11], r8w
lea rcx, str.____Queued_Lines_Start_____r_n
call fcn.140058be4
mov r8, rax
lea rdx, str.____Queued_Lines_Start_____r_n
lea rcx, [rbp - 0x11]
call fcn.140003918
nop
lea rcx, [r13 + 0x338]
lea rdx, [rbp - 0x11]
call fcn.14000c4d4
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x11]
call fcn.140003860
xor r8d, r8d
test r12d, r12d
je 0x140008f08
mov r14, qword [rbp - 0x69]
cmp word [r14], r8w
jne 0x140008eee
mov rax, r8
jmp 0x140008ef6
mov rcx, r14
call fcn.140058be4
mov r8, rax
mov rdx, r14
lea rcx, [rbp - 0x51]
call fcn.14000e56c
xor r8d, r8d
cmp dword [rbp - 0x75], r8d
jbe 0x140008f24
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.14000e6c0
xor r8d, r8d
mov rax, qword [rbp - 0x61]
test eax, eax
je 0x140008f52
mov rdi, qword [rbp - 0x71]
cmp word [rdi], r8w
jne 0x140008f3b
mov rax, r8
jmp 0x140008f43
mov rcx, rdi
call fcn.140058be4
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.14000e56c
lea rcx, [0x1400cf398]
call fcn.140058be4
mov r8, rax
lea rdx, [0x1400cf398]
lea rcx, [rbp - 0x51]
call fcn.14000e56c
lea rcx, [r13 + 0x338]
lea rdx, [rbp - 0x51]
call fcn.14000c3a4
xor edi, edi
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x21], rdi
mov word [rbp - 0x31], di
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140008fb2
lea r9, [rbp - 0x31]
xor r8d, r8d
mov edx, eax
mov rcx, r13
call fcn.14000a238
lea rcx, str.Unable_to_open_log_file:_r_n_
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rax, qword [r15 + 0x18]
test rax, rax
je 0x140008fd6
lea rbx, [rax + 8]
cmp qword [rbx + 0x18], 8
jb 0x140008fd6
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1400cf418]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rcx, qword [rbp - 0x31]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1400cf398]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x31]
call fcn.140003860
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x51]
call fcn.140003860
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.14004be10
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret