Function at 0x140110960
Capabilities:
Print debug messages
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x538
movaps xmmword [rsp + 0x520], xmm6
mov rsi, rcx
mov rax, qword [0x14020b038]
xor rax, rsp
mov qword [rsp + 0x518], rax
lea rax, [0x1401e1980]
mov qword [rcx], rax
lea r14, [rcx + 0x10]
lea rdi, [rcx + 0x18]
lea rbx, [rsp + 0x100]
mov rcx, rdi
mov rdx, rbx
call fcn.1400517b8
movzx eax, byte [rbx + 0x17]
mov r13d, eax
and r13d, 0x7f
test al, al
jns 0x1401109cc
mov r13, qword [rsp + 0x108]
jns 0x1401109db
mov rcx, qword [rsp + 0x100]
call fcn.140111a1c
mov rax, qword [r14]
movsxd rcx, dword [rax + 4]
add rcx, r14
lea rbx, [rsp + 0x100]
mov rdx, rbx
call fcn.140066d46
lea rdx, [0x14021cc90]
mov rcx, rbx
call fcn.14006a182
mov rcx, qword [rax]
mov r8, qword [rcx + 0x38]
mov rcx, rax
mov dl, 0xa
mov rax, r8
call qword [case.0x140173f30.0]
mov ebp, eax
mov rcx, rbx
call fcn.140066e88
mov rcx, r14
mov edx, ebp
call fcn.14005161c
mov rcx, r14
call fcn.140050ed0
movabs rbp, 0xaaaaaaaaaaaaaaaa
lea r15, [rsp + 0x80]
mov qword [r15 + 0x10], rbp
movaps xmm6, xmmword [0x1401dfd10]
movaps xmmword [r15], xmm6
mov rcx, rdi
mov rdx, r15
call fcn.1400517b8
test byte [0x14020d770], 0x19
jne 0x140110e80
cmp dword [rsi + 8], 3
jne 0x140110a81
cmp byte [0x14021db34], 0
je 0x140110cb3
mov rax, qword [0x14021dae8]
test rax, rax
je 0x140110ac0
mov r9, qword [rsi + 0x118]
mov r8d, dword [rsi + 0x128]
mov rdx, qword [rsi + 0x120]
mov ecx, dword [rsi + 8]
lea r10, [rsp + 0x80]
mov qword [rsp + 0x20], r10
call qword [case.0x140173f30.0]
test al, al
jne 0x140110ba9
mov eax, dword [0x14020cf68]
test al, 2
je 0x140110af2
cmp byte [rsp + 0x97], 0
jns 0x140110ade
mov rcx, qword [rsp + 0x80]
jmp 0x140110ae6
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [0x14020cf68]
test al, 4
jne 0x140110b01
cmp dword [rsi + 8], 2
jl 0x140110b4f
cmp eax, 1
ja 0x140110b4f
lea rbx, [rsp + 0x80]
movzx ecx, byte [rbx + 0x17]
mov r14d, ecx
and r14d, 0x7f
test cl, cl
cmovs r14, qword [rbx + 8]
cmovs rbx, qword [rbx]
test r14, r14
je 0x140110b4f
xor r15d, r15d
mov r8d, r14d
sub r8d, r15d
lea rdx, [rbx + r15]
mov ecx, 2
call fcn.14012f2b8
test eax, eax
js 0x140110b49
mov eax, eax
add r15, rax
cmp r14, r15
ja 0x140110b27
mov eax, dword [0x14020cf68]
test al, 1
je 0x140110b9f
call fcn.1400447f0
test al, al
je 0x140110b9f
lea r9, [rsp + 0x100]
mov dword [r9], 0xaaaaaaaa
lea rdx, [rsp + 0x80]
movzx eax, byte [rdx + 0x17]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8d, dword [rdx + 8]
cmovs rdx, qword [rdx]
mov rcx, qword [0x14021db00]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [rsi + 8], 3
je 0x140110c42
cmp byte [rsp + 0x97], 0
jns 0x140110bc0
mov rcx, qword [rsp + 0x80]
call fcn.140111a1c
lea rcx, [rsi + 0x12c]
call fcn.140097670
mov rax, qword [rsi + 0x10]
movsxd rax, dword [rax + 4]
lea rcx, [0x1401e1768]
mov qword [rsi + rax + 0x10], rcx
lea rax, [0x1401e1770]
mov qword [rsi + 0x18], rax
cmp byte [rsi + 0x6f], 0
jns 0x140110bfa
mov rcx, qword [rsi + 0x58]
call fcn.140111a1c
sub rsi, 0xffffffffffffff80
mov rcx, rdi
call fcn.140050702
mov rcx, rdi
call fcn.140050720
mov rcx, rsi
call fcn.1400506fc
mov rcx, qword [rsp + 0x518]
xor rcx, rsp
call fcn.140113000
movaps xmm6, xmmword [rsp + 0x520]
add rsp, 0x538
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [0x14021da80]
test rcx, rcx
je 0x140110c80
lea rax, [rsp + 0x80]
movzx edx, byte [rax + 0x17]
mov r8d, edx
and r8d, 0x7f
test dl, dl
mov r9, qword [rax]
cmovns r9, rax
lea rdx, [rsp + 0x70]
mov qword [rdx], r9
cmovs r8, qword [rax + 8]
mov qword [rdx + 8], r8
call fcn.14016f490
lea rbx, [rsp + 0x100]
mov r8d, 0x400
mov rcx, rbx
mov dl, 0xaa
call fcn.140114f20
cmp byte [rsp + 0x97], 0
jns 0x140110d49
mov rdx, qword [rsp + 0x80]
jmp 0x140110d51
mov byte [0x14021db34], 1
mov eax, dword [0x14021db40]
mov ecx, dword [0x14021ad00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14011127c
mov rcx, rsi
mov rdx, rbx
call fcn.140170450
movzx eax, byte [rsp + 0x117]
mov ecx, eax
and ecx, 0x7f
test al, al
cmovs rbx, qword [rsp + 0x100]
cmovs rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0x98]
mov qword [rdx], rbx
mov qword [rdx + 8], rcx
mov rcx, qword [0x14021db38]
call fcn.14006fb00
cmp byte [rsp + 0x117], 0
jns 0x140110d3d
mov rcx, qword [rsp + 0x100]
call fcn.140111a1c
mov byte [0x14021db34], 0
jmp 0x140110a81
lea rdx, [rsp + 0x80]
mov r8d, 0x400
mov rcx, rbx
call fcn.14007ae90
mov rcx, rbx
call fcn.140050720
call fcn.1400c4490
mov rcx, qword [rax + 0x10]
cmp rcx, qword [rax + 0x18]
je 0x1401112be
mov qword [rsp + 0x98], rbp
call fcn.1400c4490
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0x18]
test rdx, rdx
cmove rdx, rcx
dec rdx
cmp rcx, rdx
jb 0x1401112c1
shl rdx, 3
add rdx, qword [rax]
lea rbx, [rsp + 0x98]
mov rcx, rbx
call fcn.140044770
mov rbx, qword [rbx]
test rbx, rbx
je 0x140110e6e
cmp byte [rsp + 0x97], 0
jns 0x140110dd9
mov r14, qword [rsp + 0x80]
jmp 0x140110de1
lea r14, [rsp + 0x80]
mov rcx, r14
add rcx, r13
mov qword [rsp + 0x60], rcx
je 0x140110df5
call fcn.140138e40
jmp 0x140110df7
xor eax, eax
mov qword [rsp + 0x68], rax
mov rax, qword [rsi + 0x118]
sub r13, rax
add r14, rax
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r13
mov r8d, dword [rsi + 0x128]
mov rdx, qword [rsi + 0x120]
mov eax, 1
lock xadd dword [rbx], eax
test eax, eax
jle 0x1401112c4
cmp eax, 0x7fffffff
je 0x1401112c7
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 8]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
mov rcx, rbx
call qword [case.0x140173f30.0]
lock dec dword [rbx]
jne 0x140110e6e
mov rcx, rbx
call fcn.1400c4280
lea rcx, [rsp + 0x98]
call fcn.1400711f0
jmp 0x140110ba9
lea r14, [rsp + 0xc0]
movaps xmmword [r14 + 0x10], xmm6
movaps xmmword [r14], xmm6
mov rax, qword [0x1401eaca0]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x20], 0
lea r8, [0x14020d770]
lea r9, str.LogMessage
mov rcx, r14
mov dl, 0x49
call fcn.140085640
mov r12, qword [r14]
mov rax, r12
btr rax, 0x3f
mov rcx, qword [0x14020e7a0]
and rcx, rax
cmp rcx, qword [0x14020e788]
sete cl
test cl, 1
mov rcx, r12
cmovne rcx, rax
test rcx, rcx
jne 0x140110f03
lea rcx, [rsp + 0xc0]
call fcn.140085530
jmp 0x140110a6e
movabs r14, 0x7fffffffffffffff
mov cl, byte [rsp + 0xd8]
mov byte [rsp + 0x40], cl
mov rcx, qword [rsp + 0xc8]
and r14, rcx
mov rdx, qword [0x14020e7a0]
mov r8, rdx
and r8, r14
mov r9, qword [0x14020e788]
cmp r8, r9
sete r8b
test r8b, 1
cmove r14, rcx
and rdx, rax
cmp rdx, r9
sete cl
test cl, 1
cmovne r12, rax
lea rcx, [rsp + 0x98]
xor edx, edx
call fcn.140053352
lea rdx, [rsp + 0x98]
mov qword [rdx + 8], r12
mov qword [rdx + 0x10], r14
xor eax, eax
mov qword [rdx + 0x18], rax
mov al, byte [rsp + 0x40]
mov byte [rdx + 0x20], al
lea r12, [rsp + 0x100]
mov rcx, r12
mov r14, rdx
call fcn.140053370
movups xmm0, xmmword [r14 + 8]
movups xmm1, xmmword [r14 + 0x11]
movups xmmword [r12 + 8], xmm0
movups xmmword [r12 + 0x11], xmm1
mov rcx, qword [r12 + 8]
mov edx, 0x15
call fcn.14005314e
mov r14, rax
mov eax, dword [rsi + 0x128]
mov rcx, qword [rsi + 0x120]
lea rdx, [rsp + 0xe8]
xor r8d, r8d
mov qword [rdx], r8
mov qword [rdx + 8], rcx
mov dword [rdx + 0x10], eax
mov rcx, r12
call fcn.140071480
mov r12, rax
mov qword [rsp + 0x40], r14
xor eax, eax
cmp qword [r14 + 0x10], rax
jne 0x140111234
lea rax, [rsp + 0x509]
mov qword [rax - 1], rbp
mov qword [rax + 6], rbp
mov byte [rax - 1], 8
lea rcx, [rsp + 0x508]
cmp r12, 0x80
jae 0x14011119a
mov r14, rcx
mov byte [rax], r12b
sub r14, rcx
add r14, 2
mov rax, qword [rsp + 0x40]
mov r12, qword [rax]
mov r8d, r14d
mov rcx, qword [r12 + 0x18]
lea rax, [rcx + r8]
mov qword [rsp + 0x48], rax
cmp rax, qword [r12 + 0x10]
ja 0x140111252
cmp r14d, 2
jne 0x1401111e6
movzx eax, word [rsp + 0x508]
mov word [rcx], ax
mov rax, qword [rsp + 0x48]
mov qword [r12 + 0x18], rax
mov rax, qword [rsp + 0x40]
add dword [rax + 0x20], r14d
movzx eax, byte [rsp + 0x97]
test al, al
jns 0x140111093
mov r8, qword [rsp + 0x88]
jmp 0x14011109a
mov r8d, eax
and r8d, 0x7f
mov rcx, qword [rsi + 0x118]
sub r8, rcx
jb 0x1401112ca
test al, al
jns 0x1401110b6
mov r15, qword [rsp + 0x80]
add r15, rcx
lea r12, [rsp + 0xe8]
mov rcx, r12
mov rdx, r15
call fcn.140052280
lea rcx, [rsp + 0x100]
mov rdx, r12
call fcn.1400c4650
mov r15, rax
mov rax, qword [rsp + 0x40]
cmp qword [rax + 0x10], 0
jne 0x140111243
lea rax, [rsp + 0x509]
mov qword [rax - 1], rbp
mov qword [rax + 6], rbp
mov byte [rax - 1], 0x10
lea rcx, [rsp + 0x508]
cmp r15, 0x80
jae 0x1401111c0
mov r14, rcx
mov byte [rax], r15b
sub r14, rcx
add r14, 2
mov rax, qword [rsp + 0x40]
mov r15, qword [rax]
mov r8d, r14d
mov rcx, qword [r15 + 0x18]
lea r12, [rcx + r8]
cmp r12, qword [r15 + 0x10]
ja 0x140111267
cmp r14d, 2
jne 0x1401111fb
movzx eax, word [rsp + 0x508]
mov word [rcx], ax
mov qword [r15 + 0x18], r12
mov rax, qword [rsp + 0x40]
add dword [rax + 0x20], r14d
cmp byte [rsp + 0xff], 0
jns 0x14011117b
mov rcx, qword [rsp + 0xe8]
call fcn.140111a1c
lea rcx, [rsp + 0x100]
call fcn.140054e5c
lea rcx, [rsp + 0x98]
call fcn.140054e5c
jmp 0x140110ef1
mov rdx, r12
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr r12, 7
inc rax
cmp rdx, 0x3fff
ja 0x14011119a
lea r14, [rax - 1]
jmp 0x140111027
mov rdx, r15
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr r15, 7
inc rax
cmp rdx, 0x3fff
ja 0x1401111c0
lea r14, [rax - 1]
jmp 0x14011111b
cmp r14d, 3
jne 0x140111210
mov al, byte [rsp + 0x50a]
mov byte [rcx + 2], al
jmp 0x14011105f
cmp r14d, 3
jne 0x140111222
mov al, byte [rsp + 0x50a]
mov byte [rcx + 2], al
jmp 0x14011114c
lea rdx, [rsp + 0x508]
call fcn.140114870
jmp 0x14011106a
lea rdx, [rsp + 0x508]
call fcn.140114870
jmp 0x140111157
mov rcx, qword [rsp + 0x40]
call fcn.140052f16
jmp 0x140110ffb
mov rcx, qword [rsp + 0x40]
call fcn.140052f16
jmp 0x1401110ef
lea rdx, [rsp + 0x508]
mov rcx, r12
call fcn.140053ca6
jmp 0x140111074
lea rdx, [rsp + 0x508]
mov rcx, r15
call fcn.140053ca6
jmp 0x14011115b
lea rcx, [0x14021db40]
call fcn.140111b40
cmp dword [0x14021db40], 0xffffffff
jne 0x140110cdf
lea rcx, str.LOG_FATAL
mov edx, 0x400
call fcn.1400c3aa0
mov qword [0x14021db38], rax
lea rcx, [0x14021db40]
call fcn.140111bd8
jmp 0x140110cdf
int3
int3
int3
int3
int3