Function at 0x140057c98
Capabilities:
Print debug messages
Write file on windows

Disassembly:
test rdx, rdx
je 0x140058223
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
mov qword [rbp - 0x61], 0xfffffffffffffffe
mov rax, qword [0x140216b40]
xor rax, rsp
mov qword [rbp + 7], rax
mov qword [rsp + 0x40], r9
mov r12, r8
mov qword [rbp - 0x71], r8
mov rdi, rdx
mov qword [rsp + 0x48], rdx
mov rsi, rcx
mov qword [rsp + 0x38], rcx
mov rcx, qword [rdx + 0x18]
lea rbx, [0x1401cc718]
test rcx, rcx
je 0x140057d0b
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140057d0e
mov rcx, qword [rcx]
jmp 0x140057d0e
mov rcx, rbx
call fcn.14016bfdc
test rax, rax
jne 0x140057d25
cmp qword [rsi + 0x360], rax
je 0x140058204
mov rdx, qword [rdi + 0x18]
test rdx, rdx
je 0x140057d33
mov eax, dword [rdx + 0x28]
jmp 0x140057d35
xor eax, eax
movzx r14d, word [rdi + 0x10]
shl r14d, 0xa
test r14d, r14d
je 0x140057d4c
cmp eax, r14d
jae 0x140058204
test rdx, rdx
je 0x140057d61
add rdx, 8
cmp qword [rdx + 0x18], 8
jb 0x140057d64
mov rdx, qword [rdx]
jmp 0x140057d64
mov rdx, rbx
mov r8d, 0x78
call fcn.1400579d8
mov r15, rax
mov rcx, rsi
call fcn.14005748c
mov rsi, rax
test r12, r12
je 0x140057d8d
mov rcx, r12
call fcn.14016bfdc
mov r12, rax
cmp qword [rsi + 0x10], 0
ja 0x140057d99
xor r13d, r13d
jmp 0x140057d9d
mov r13d, dword [rsi + 0x10]
mov dword [rsp + 0x30], r13d
mov rdx, qword [rsp + 0x40]
test rdx, rdx
jne 0x140057db0
xor eax, eax
jmp 0x140057dbd
mov rcx, rdx
call fcn.14016bfdc
mov rdx, qword [rsp + 0x40]
mov qword [rbp - 0x69], rax
add eax, 3
add eax, r13d
add eax, r12d
mov dword [rbp - 0x79], eax
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x360]
test rcx, rcx
je 0x140057dfc
cmp qword [rsi + 0x18], 8
jb 0x140057dea
mov r8, qword [rsi]
jmp 0x140057ded
mov r8, rsi
mov rax, qword [rcx]
mov r9, rdx
mov rdx, qword [rbp - 0x71]
call qword [rax]
mov eax, dword [rbp - 0x79]
or rdi, 0xffffffffffffffff
cmp r15, rdi
je 0x14005800c
lea r9d, [rdi + 3]
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, eax
test r14d, r14d
je 0x140057e2b
cmp eax, r14d
jae 0x140057ffe
xor r8d, r8d
mov rdx, r15
mov rcx, qword [rsp + 0x38]
call fcn.140057a7c
add ebx, eax
test r12d, r12d
je 0x140057e6a
lea r8d, [r12 + r12]
xor r12d, r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov rdx, qword [rbp - 0x71]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057e6d
add ebx, dword [rsp + 0x30]
jmp 0x140057e6d
xor r12d, r12d
test r13d, r13d
je 0x140057ea2
cmp qword [rsi + 0x18], 8
jb 0x140057e7c
mov rsi, qword [rsi]
lea r8d, [r13*2]
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057ea2
add ebx, dword [rsp + 0x30]
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x140057ef6
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057ece
add ebx, dword [rsp + 0x30]
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [0x1401d3368]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057ef6
add ebx, dword [rsp + 0x30]
test r14d, r14d
je 0x140057fed
cmp ebx, r14d
jb 0x140057fed
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], r12
mov r13d, 7
mov qword [rbp - 0x41], r13
mov qword [rbp - 0x49], r12
mov word [rbp - 0x59], r12w
xor r8d, r8d
lea edx, [r13 + 0x79]
lea rcx, [rbp - 0x59]
call fcn.14005b854
nop
mov rax, qword [rsp + 0x38]
lea r9, [rax + 8]
cmp qword [r9 + 0x18], 8
jb 0x140057f47
mov r9, qword [r9]
lea rsi, [rax + 0x110]
lea r8, str._FILE_SIZE_LIMIT_REACHED__LOGGING_DISABLED_FOR__s_MODULE_
mov edx, 0x104
mov rcx, rsi
call fcn.1400471bc
cmp word [rsi], r12w
jne 0x140057f6d
mov rdi, r12
jmp 0x140057f77
inc rdi
cmp word [rsi + rdi*2], r12w
jne 0x140057f6d
mov r8, rdi
mov rdx, rsi
lea rcx, [rbp - 0x59]
call fcn.14003c268
mov eax, dword [rbp - 0x49]
lea r8d, [rax + rax]
mov dword [rsp + 0x30], r8d
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rdx, qword [rbp - 0x59]
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057fbb
add ebx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0x48]
mov eax, dword [rdi + 0x10]
mov ecx, 0x30000
and eax, ecx
cmp eax, ecx
jne 0x140057fdd
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x140057fdd
mov byte [rax], 1
mov ebx, r12d
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.14003d54c
jmp 0x140057ff2
mov rdi, qword [rsp + 0x48]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x140057ffe
mov dword [rax + 0x28], ebx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140058204
xor r15d, r15d
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], r15
lea r13d, [r15 + 7]
mov qword [rbp - 0x41], r13
mov qword [rbp - 0x49], r15
mov word [rbp - 0x59], r15w
mov edx, eax
mov r14, qword [rbp - 0x49]
cmp r14, rdx
ja 0x140058060
cmp qword [rbp - 0x41], rdx
je 0x140058060
mov r8b, 1
lea rcx, [rbp - 0x59]
call fcn.14003cea8
test al, al
je 0x140058060
mov qword [rbp - 0x49], r14
lea rax, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rax, qword [rbp - 0x59]
mov word [rax + r14*2], r15w
mov r14, qword [rsp + 0x38]
cmp qword [r14 + 0x358], r15
jne 0x1400580b9
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp - 1], r13
mov qword [rbp - 9], r15
mov word [rbp - 0x19], r15w
mov r8d, 0x1c
lea rdx, str.____Queued_Lines_Start_____r_n
lea rcx, [rbp - 0x19]
call fcn.14003c268
nop
lea rcx, [r14 + 0x338]
lea rdx, [rbp - 0x19]
call fcn.14005b410
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x19]
call fcn.14003d54c
test r12d, r12d
je 0x1400580e6
mov rax, qword [rbp - 0x71]
cmp word [rax], r15w
jne 0x1400580cd
mov r8, r15
jmp 0x1400580da
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x1400580d0
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.14003bb58
cmp dword [rsp + 0x30], r15d
jbe 0x1400580ff
mov r9, rdi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp - 0x59]
call fcn.14003bcb4
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x140058130
mov rax, qword [rsp + 0x40]
cmp word [rax], r15w
jne 0x140058117
mov rdi, r15
jmp 0x140058121
inc rdi
cmp word [rax + rdi*2], r15w
jne 0x140058117
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.14003bb58
mov r8d, 2
lea rdx, [0x1401d3368]
lea rcx, [rbp - 0x59]
call fcn.14003bb58
lea rcx, [r14 + 0x338]
lea rdx, [rbp - 0x59]
call fcn.14005b2e0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x21], r13
mov qword [rbp - 0x29], r15
mov word [rbp - 0x39], r15w
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140058186
lea r9, [rbp - 0x39]
xor r8d, r8d
mov edx, eax
mov rcx, r14
call fcn.14005939c
lea rcx, str.Unable_to_open_log_file:_r_n_
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x48]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x1400581af
lea rbx, [rax + 8]
cmp qword [rbx + 0x18], 8
jb 0x1400581af
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1401d33e8]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x1401d3368]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x39]
call fcn.14003d54c
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.14003d54c
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400dd830
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret