Function at 0x14003f9f0
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x14012a210]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov rsi, rcx
xor r15d, r15d
mov dword [rsp + 0x38], r15d
xor bl, bl
movsxd rdi, dword [0x14013295c]
mov rax, rdi
shl rax, 5
lea r14, [0x140000000]
cmp qword [rax + r14 + 0x132a10], r15
je 0x1400401f4
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x40]
call fcn.1400a83f0
lea rax, [r14 + 0x1085c8]
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x98], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov dword [rsp + 0x38], 1
lea r13, vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x68], r13
mov dword [rbp + 0x64], 0x98
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x68]
call fcn.140019590
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea r12, vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x40], r12
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.1400193f0
lea rax, vtable.std::basic_filebuf_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp - 0x38], rax
mov byte [rbp + 0x44], bl
mov byte [rbp + 0x3a], bl
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x10]
mov qword [rbp], rax
lea rax, [rbp - 8]
mov qword [rbp + 8], rax
lea rax, [rbp + 0x10]
mov qword [rbp + 0x18], rax
lea rax, [rbp + 0x14]
mov qword [rbp + 0x20], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 8], r15
mov qword [rbp + 0x10], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x10], r15
mov qword [rbp + 0x48], r15
mov rax, qword [0x140133d88]
mov qword [rbp + 0x3c], rax
mov qword [rbp + 0x30], r15
lea rcx, [0x140132930]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, r15d
cmp dword [0x14013295c], r15d
sete al
mov dword [0x14013295c], eax
mov byte [0x14012ae70], 1
lea rcx, [0x140132930]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
xor r8d, r8d
lea rdx, [0x1400ff490]
lea rcx, [rbp + 0xd0]
call fcn.140011160
nop
mov rax, rdi
shl rax, 5
lea r14, [r14 + 0x132a00]
add r14, rax
mov rdx, r14
lea rcx, [rbp + 0x100]
call fcn.140012240
nop
lea rdx, [rbp + 0x100]
lea rcx, [rsp + 0x40]
call fcn.140012240
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14002cb20
mov rbx, rax
lea rax, [rbp + 0xd0]
cmp rax, rbx
je 0x14003fc8c
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x14003fc4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fc48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004022d
call fcn.1400a59a4
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14003fcce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fcc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004022d
call fcn.1400a59a4
cmp qword [rbp + 0xe0], 0
jne 0x14003fd0f
lea rcx, str._DataEncryptionHelper::EncryptData_FAILED_to_encrypt_the_data..leaving_the_keylog_un_ecnrypted..
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0xd0]
call fcn.140011160
lea rdx, str.keyLog
lea rcx, [rbp - 0x60]
call fcn.140013af0
mov rdi, rax
call fcn.140004080
mov rcx, rax
test rax, rax
je 0x140040233
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea rdx, [0x1400ff634]
mov rbx, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x14003fd68
movzx edx, dx
lea rcx, [rsp + 0x28]
call fcn.1400112e0
jmp 0x14003fd88
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14003fd70
mov r8d, eax
lea rcx, [rsp + 0x28]
call fcn.140011410
nop
lea r8, [rsp + 0x28]
mov rdx, qword [0x1401329f0]
lea rcx, [rsp + 0x20]
call fcn.140018b90
nop
cmp qword [rdi + 0x18], 8
jb 0x14003fda9
mov rdi, qword [rdi]
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400417d0
nop
lea r8, str..log
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400417d0
nop
mov rdx, rax
lea rcx, [0x1401329e8]
call fcn.140018ce0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003fdfb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003fe19
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003fe38
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003fe57
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14003fe97
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fe92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004023e
call fcn.1400a59a4
lea rdx, [0x1401329e8]
mov rcx, rsi
call fcn.140018ce0
mov rdx, qword [0x1401329e8]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x14003fec0
mov r8, rbx
lea rcx, [rsp + 0x60]
call fcn.140011160
lea rcx, [rsp + 0x60]
call fcn.140017eb0
mov rdx, qword [0x1401329e8]
lea rcx, [rbp - 0x40]
call fcn.140041450
xor ecx, ecx
call fcn.140087504
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.ACTIVEDS.dll_FreeADsMem
mov byte [rsp + 0x40], 0
mov r8d, FreeADsMem
lea rdx, str.en_US.UTF_8
lea rcx, [rsp + 0x40]
call fcn.140006590
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x28]
call fcn.14003e680
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003ff7a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040244
call fcn.1400a59a4
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.ACTIVEDS.dll_FreeADsMem
mov byte [rsp + 0x40], 0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x70]
call fcn.140041600
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14003ffcd
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14003ffcd
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14003fff0
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14003fff0
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rdx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
lea rcx, [rbp - 0x40]
call fcn.140021090
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov rbx, qword [rbp + rcx + 8]
test rbx, rbx
je 0x1400400a4
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xf0]
call fcn.140018f80
nop
cmp byte [rbp + 0xf8], 0
je 0x14004006f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
cmp eax, 0xffffffff
jne 0x14004006f
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
mov edx, dword [rcx + 0x10]
or edx, 4
xor r8d, r8d
call fcn.1400137e0
nop
call fcn.140087f68
test al, al
jne 0x140040085
mov rcx, qword [rbp + 0xf0]
call fcn.140019540
nop
mov r8, qword [rbp + 0xf0]
mov rax, qword [r8]
movsxd rcx, dword [rax + 4]
mov rcx, qword [rcx + r8 + 0x48]
test rcx, rcx
je 0x1400400a4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
xor r8d, r8d
lea rdx, [0x1400ff490]
mov rcx, r14
call fcn.140011160
lea rcx, [rbp - 0x38]
call fcn.140041a80
test rax, rax
jne 0x1400400f0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea r9, [rbp - 0x40]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.1400137e0
mov bl, 1
mov rdx, qword [rbp + 0x118]
cmp rdx, 8
jb 0x140040139
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040133
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004024a
call fcn.1400a59a4
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x14004017f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004017a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040227
call fcn.1400a59a4
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r12
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.1400413a0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r13
mov rcx, qword [rbp - 0x40]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x10]
mov dword [rbp + rdx - 0x44], r8d
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x68], rax
lea rcx, [rbp + 0x68]
call fcn.140087fe8
nop
movzx eax, bl
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1400a5460
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400b4704
nop
call fcn.1400b4704
nop
mov ecx, 0x80004005
call fcn.140003f50
nop
call fcn.1400b4704
int3
call fcn.1400b4704
nop
call fcn.1400b4704
int3