Function at 0x140092aa2
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x3c8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x330], xmm6
mov qword [rbp + 0x328], 0xfffffffffffffffe
mov rsi, r9
mov edi, edx
mov rbx, rcx
mov qword [rbp + 0x220], r8
add rcx, 8
mov qword [rbp + 0x280], rcx
cmp byte [rbx + 0x30], 0
je 0x140092af5
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [rbx + 0x38], 0
je 0x140092b06
cmp qword [rbx + 0x50], 0
je 0x1400934d7
mov eax, dword [rbx + 0xb0]
shr eax, 0x14
mov ecx, dword [0x14018b054]
test ecx, ecx
mov edx, 1
cmovg edx, ecx
cmp eax, edx
jge 0x140092b30
call fcn.1400aa1fb
test al, al
je 0x140092da7
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x140092b41
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
lea rax, [rbx + 0xa0]
mov qword [rbp + 0x288], rax
xor eax, eax
mov qword [rbx + 0xa0], rax
mov qword [rbx + 0xac], rax
mov dword [rbx + 0xb4], 0x1f
mov eax, dword [rbx + 0xb4]
inc eax
mov dword [rbx + 0xb4], eax
cmp eax, 0x20
jne 0x1400934d7
mov dword [rbx + 0xb4], 0
lea rcx, [rbp + 0x258]
lea rdx, [rbp + 0x220]
call sub.api_ms_win_crt_time_l1_1_0.dll__localtime64_s
lea rcx, [rbp - 0x58]
mov edx, 2
mov r8d, 1
call fcn.140006884
mov qword [rbp + 0x228], rsi
lea rcx, [rbp - 0x58]
mov rax, qword [rcx]
movsxd rax, dword [rax + 4]
mov byte [rbp + rax], 0x30
mov edx, 0x76c
add edx, dword [rbp + 0x26c]
call fcn.1400076ce
mov rsi, rax
lea rcx, [rbp + 0xb8]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0xc0]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0xb8]
mov edx, dword [rbp + 0x268]
inc edx
mov rcx, rsi
call fcn.1400076ce
mov rsi, rax
lea rcx, [rbp + 0x290]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x298]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x290]
mov edx, dword [rbp + 0x264]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x2d
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x2f8]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x300]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x2f8]
mov edx, dword [rbp + 0x260]
mov rcx, rsi
call fcn.1400076ce
mov rsi, rax
lea rcx, [rbp + 0x2b0]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x2b0]
mov edx, dword [rbp + 0x25c]
mov rcx, rsi
call fcn.1400076ce
mov rsi, rax
lea rcx, [rbp + 0x230]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x238]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x230]
mov edx, dword [rbp + 0x258]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x2e
call fcn.140007143
mov rsi, rax
call fcn.1400aa1ef
mov rcx, rsi
mov edx, eax
call fcn.1400076ce
lea rcx, [rbp - 0x50]
lea rdx, [rbp + 0x290]
call fcn.140008e18
mov byte [rbp + 0x327], dil
cmp byte [rbx + 0x38], 0
je 0x140092dc8
lea rsi, [rbp + 0x290]
mov rcx, rbx
mov rdx, rsi
call fcn.140093d2e
test al, al
jne 0x140093193
lea rcx, str.Could_not_create_log_file
call sub.api_ms_win_crt_runtime_l1_1_0.dll_perror
mov rdi, qword [rbp + 0x290]
mov rbx, qword [rbp + 0x2a8]
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
cmp rbx, 0xf
cmova rsi, rdi
lea rdx, str.COULD_NOT_CREATE_LOGFILE__s__n
mov rcx, rax
mov r8, rsi
call fcn.140005579
lea rcx, [rbp + 0x290]
call fcn.140005a44
jmp 0x14009356c
lea rax, [rbx + 0xa0]
mov qword [rbp + 0x288], rax
cmp qword [rbx + 0xa0], 0
jne 0x140093437
jmp 0x140092b69
call fcn.1400aa064
mov rsi, rax
movaps xmm6, xmmword [section..rdata]
lea rdi, [rbp + 0xb8]
movups xmmword [rdi + 0x10], xmm6
mov byte [rdi], 0
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.14000451c
mov qword [rbp + 0x318], rbx
lea rsi, [rbp + 0x2f8]
movups xmmword [rsi + 0x10], xmm6
mov byte [rsi], 0
mov rcx, rsi
call fcn.140090124
call fcn.1400aa2b4
xorps xmm0, xmm0
lea rbx, [rbp + 0x2b0]
movups xmmword [rbx + 0x10], xmm0
mov rcx, rbx
mov rdx, rax
call fcn.14000444c
cmp qword [rbp + 0x2c0], 0
jne 0x140092e59
lea rdx, str.invalid_user
lea rcx, [rbp + 0x2b0]
mov r8d, 0xc
call fcn.14000451c
mov rax, qword [rbp + 0x318]
movsxd r14, dword [rax + 0xa8]
lea rcx, [rbp + 0x1e0]
movups xmmword [rcx + 0x10], xmm6
mov byte [rcx], 0
mov rdx, qword [rbp + 0xc8]
inc rdx
call fcn.14001175a
mov r8, qword [rbp + 0xc8]
cmp qword [rbp + 0xd0], 0xf
jbe 0x140092e9c
mov rdi, qword [rbp + 0xb8]
lea rcx, [rbp + 0x1e0]
mov rdx, rdi
call fcn.1400052c6
lea rcx, [rbp + 0x1e0]
mov dl, 0x2e
call fcn.1400118a6
mov r8, qword [rbp + 0x308]
cmp qword [rbp + 0x310], 0xf
jbe 0x140092ed1
mov rsi, qword [rbp + 0x2f8]
lea rcx, [rbp + 0x1e0]
mov rdx, rsi
call fcn.1400052c6
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x200]
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov dl, 0x2e
call fcn.1400118a6
movaps xmm0, xmmword [rbp + 0x200]
movaps xmm1, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0x1b0], xmm1
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmmword [rbp + 0x210], xmm6
mov byte [rbp + 0x200], 0
mov r8, qword [rbp + 0x2c0]
cmp qword [rbp + 0x2c8], 0xf
jbe 0x140092f45
mov rbx, qword [rbp + 0x2b0]
lea rcx, [rbp + 0x1a0]
mov rdx, rbx
call fcn.1400052c6
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x90]
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
lea rdx, str..log.
mov r8d, 5
call fcn.1400052c6
lea rcx, str.INFO
mov rsi, qword [rcx + r14*8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rdi, [rbp + 0x1c0]
movaps xmmword [rdi + 0x10], xmm1
movaps xmmword [rdi], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.1400052c6
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x2d0]
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov dl, 0x2e
call fcn.1400118a6
movaps xmm0, xmmword [rbp + 0x2d0]
movaps xmm1, xmmword [rbp + 0x2e0]
lea rsi, [rbp + 0x230]
movaps xmmword [rsi + 0x10], xmm1
movaps xmmword [rsi], xmm0
movaps xmmword [rbp + 0x2e0], xmm6
mov byte [rbp + 0x2d0], 0
lea rcx, [rbp + 0xb8]
mov rdx, rsi
call fcn.140008fca
mov rcx, rsi
call fcn.140005a44
lea rcx, [rbp + 0x2d0]
call fcn.140005a44
lea rcx, [rbp + 0x1c0]
call fcn.140005a44
lea rcx, [rbp + 0x90]
call fcn.140005a44
lea rcx, [rbp + 0x1a0]
call fcn.140005a44
lea rcx, [rbp + 0x200]
call fcn.140005a44
lea rcx, [rbp + 0x1e0]
call fcn.140005a44
call fcn.140092303
mov rbx, rax
mov r13, qword [rax]
mov rax, qword [rbp + 0x318]
lea rsi, [rax + 0x40]
lea r14, [rbp + 0x2d0]
lea r15, [0x14012a958]
lea r12, [rbp + 0x230]
lea rdi, [rbp + 0x290]
cmp r13, qword [rbx + 8]
je 0x1400934fe
movups xmmword [rbp + 0x2e0], xmm6
mov byte [rbp + 0x2d0], 0
mov rdx, qword [r13 + 0x10]
inc rdx
mov rcx, r14
call fcn.14001175a
cmp qword [r13 + 0x18], 0xf
mov rdx, r13
jbe 0x1400930d2
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, r14
call fcn.1400052c6
mov r8d, 1
mov rcx, r14
mov rdx, r15
call fcn.1400052c6
cmp qword [rbp + 0xd0], 0xf
lea rdx, [rbp + 0xb8]
jbe 0x140093107
mov rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
mov rcx, r14
call fcn.1400052c6
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x240], xmm1
movaps xmmword [rbp + 0x230], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov rcx, rsi
mov rdx, r12
call fcn.140008fca
mov rcx, r12
call fcn.140005a44
mov rcx, r14
call fcn.140005a44
mov rcx, qword [rbp + 0x318]
mov rdx, rdi
call fcn.140093d2e
add r13, 0x20
test al, al
je 0x14009309d
lea rcx, [rbp + 0x2b0]
call fcn.140005a44
lea rcx, [rbp + 0x2f8]
call fcn.140005a44
mov rbx, qword [rbp + 0x318]
lea rcx, [rbp + 0xb8]
call fcn.140005a44
lea rcx, [rbp + 0xb8]
mov edx, 2
mov r8d, 1
call fcn.140006884
lea rcx, [rbp + 0xb8]
mov rax, qword [rcx]
movsxd rax, dword [rax + 4]
mov byte [rbp + rax + 0x110], 0x30
lea rdx, str.Log_file_created_at:
call fcn.1400035ea
mov edx, 0x76c
add edx, dword [rbp + 0x26c]
mov rcx, rax
call fcn.1400076ce
mov rcx, rax
mov dl, 0x2f
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x2f8]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x300]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x2f8]
mov edx, dword [rbp + 0x268]
inc edx
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x2f
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x2b0]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x2b0]
mov edx, dword [rbp + 0x264]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x20
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x230]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x238]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x230]
mov edx, dword [rbp + 0x260]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x3a
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x2d0]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x2d8]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x2d0]
mov edx, dword [rbp + 0x25c]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0x3a
call fcn.140007143
mov rsi, rax
lea rcx, [rbp + 0x1c0]
mov edx, 2
call fcn.1400b8378
mov rdx, qword [rbp + 0x1c8]
mov rax, qword [rsi]
movsxd rcx, dword [rax + 4]
add rcx, rsi
call qword [rbp + 0x1c0]
mov edx, dword [rbp + 0x258]
mov rcx, rsi
call fcn.1400076ce
mov rcx, rax
mov dl, 0xa
call fcn.140007143
lea rdx, str.Running_on_machine:
mov rcx, rax
call fcn.1400035ea
mov rsi, rax
call fcn.1400900d4
mov r8, qword [0x14018b150]
cmp qword [0x14018b158], 0xf
jbe 0x14009336b
mov rdx, qword [0x14018b140]
jmp 0x140093372
lea rdx, [0x14018b140]
mov rcx, rsi
call fcn.14000468b
mov rcx, rax
mov dl, 0xa
call fcn.140007143
lea rdx, str.Log_line_format:__IWEF_mmdd_hh:mm:ss.uuuuuu
mov rcx, rax
call fcn.1400035ea
lea rdx, str.threadid_file:line__msg
mov rcx, rax
call fcn.1400035ea
mov rcx, rax
mov dl, 0xa
call fcn.140007143
lea rcx, [rbp + 0xc0]
lea rsi, [rbp + 0x2f8]
mov rdx, rsi
call fcn.140008e18
mov rax, qword [rbp + 0x308]
mov r9, qword [rbx + 0xa0]
movsxd rdi, eax
cmp qword [rbp + 0x310], 0xf
mov rcx, rsi
jbe 0x1400933e7
mov rcx, qword [rbp + 0x2f8]
mov edx, 1
mov r8, rdi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add dword [rbx + 0xb0], edi
add dword [rbx + 0xac], edi
mov rcx, rsi
call fcn.140005a44
lea rcx, [rbp + 0xb8]
call fcn.140006d5c
lea rcx, [rbp + 0x290]
call fcn.140005a44
mov dil, byte [rbp + 0x327]
mov rsi, qword [rbp + 0x228]
lea rcx, [rbp - 0x58]
call fcn.140006d5c
cmp byte [0x14019a168], 0
je 0x14009345b
call fcn.1400aa090
cmp rax, qword [rbx + 0xb8]
jl 0x1400934d7
mov byte [0x14019a168], 0
jmp 0x1400934d7
call sub.api_ms_win_crt_runtime_l1_1_0.dll__errno
mov rcx, rsi
mov esi, dword [rbp + 0x3b0]
mov dword [rax], 0
mov rax, qword [rbp + 0x288]
mov r9, qword [rax]
movsxd r8, esi
mov edx, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
cmp byte [0x14018b05e], 0
je 0x1400934a2
call sub.api_ms_win_crt_runtime_l1_1_0.dll__errno
cmp dword [rax], 0x1c
jne 0x1400934a2
mov byte [0x14019a168], 1
jmp 0x1400934d7
add dword [rbx + 0xb0], esi
add esi, dword [rbx + 0xac]
mov dword [rbx + 0xac], esi
cmp esi, 0xf423f
ja 0x1400934cf
test dil, dil
jne 0x1400934cf
call fcn.1400aa090
cmp rax, qword [rbx + 0xb8]
jl 0x1400934d7
mov rcx, rbx
call fcn.14009424c
lea rcx, [rbp + 0x280]
call fcn.140091120
movaps xmm6, xmmword [rbp + 0x330]
add rsp, 0x3c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, str.Could_not_create_logging_file
call sub.api_ms_win_crt_runtime_l1_1_0.dll_perror
mov rsi, qword [rbp + 0x290]
mov rbx, qword [rbp + 0x2a8]
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
cmp rbx, 0xf
cmova rdi, rsi
lea rdx, str.COULD_NOT_CREATE_A_LOGGINGFILE__s_
mov rcx, rax
mov r8, rdi
call fcn.140005579
lea rcx, [rbp + 0x2b0]
call fcn.140005a44
lea rcx, [rbp + 0x2f8]
call fcn.140005a44
lea rcx, [rbp + 0xb8]
call fcn.140005a44
lea rcx, [rbp + 0x290]
call fcn.140005a44
lea rcx, [rbp - 0x58]
call fcn.140006d5c
jmp 0x1400934d7