Function at 0x14004a9c0
Capabilities:
Print debug messages
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x518
movaps xmmword [rsp + 0x500], xmm6
mov rsi, rcx
mov rax, qword [0x140213038]
xor rax, rsp
mov qword [rsp + 0x4f8], rax
lea rax, [0x1401de6d0]
mov qword [rcx], rax
lea rdi, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
movsxd rcx, dword [rax + 4]
test byte [rsi + rcx + 0x30], 5
jne 0x14004ac26
mov rcx, qword [rdi + rcx + 0x28]
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0x10
lea rbx, [rsp + 0xe0]
mov rdx, rbx
xor r8d, r8d
mov r9d, 1
call qword [rax + 0x18]
mov r14, qword [rbx + 8]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
add rcx, rdi
lea rbp, [rsp + 0xe0]
mov rdx, rbp
call fcn.1400d4240
lea rdx, [0x14021a468]
mov rcx, rbp
call fcn.1400d44f0
mov rbx, qword [rax]
mov rcx, rax
mov dl, 0xa
call qword [rbx + 0x38]
mov ebx, eax
mov rcx, rbp
call fcn.1400d4350
mov rcx, rdi
mov edx, ebx
call fcn.14001adc0
mov rcx, rdi
call fcn.140019b30
lea r15, [rsi + 0x18]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], r13
movaps xmm6, xmmword [0x1401d9dd0]
movaps xmmword [rbx], xmm6
mov rcx, r15
mov rdx, rbx
call fcn.14001b010
test byte [0x140215d60], 0x19
jne 0x14004ac32
mov rax, qword [0x14021b2a0]
test rax, rax
je 0x14004ab03
mov r9, qword [rsi + 0x118]
mov r8d, dword [rsi + 0x128]
mov rdx, qword [rsi + 0x120]
mov ecx, dword [rsi + 8]
lea rbp, [rsp + 0x80]
mov qword [rsp + 0x20], rbp
call rax
test al, al
jne 0x14004ad65
mov eax, dword [0x140215348]
test al, 2
jne 0x14004acfa
test al, 4
jne 0x14004abda
cmp eax, 1
ja 0x14004ab28
cmp dword [rsi + 8], 2
jge 0x14004abda
test al, 1
jne 0x14004ad15
cmp dword [rsi + 8], 3
je 0x14004ac93
lea rbp, [rsp + 0x80]
cmp byte [rbp + 0x17], 0
jns 0x14004ab55
mov rcx, qword [rsp + 0x80]
call fcn.140100564
lea rcx, [rsi + 0x138]
call fcn.1400e5eb0
lea rbx, [rsi + 0x80]
mov rax, qword [rsi + 0x10]
movsxd rax, dword [rax + 4]
lea rcx, [0x1401d9ed8]
mov qword [rsi + rax + 0x10], rcx
lea rax, [0x1401d9ef0]
mov qword [rsi + 0x18], rax
cmp byte [rsi + 0x6f], 0
jns 0x14004ab96
mov rcx, qword [rdi + 0x48]
call fcn.140100564
mov rcx, r15
call fcn.1400cca00
mov rcx, r15
call fcn.140019a90
mov rcx, rbx
call fcn.1400cc9f0
mov rcx, qword [rsp + 0x4f8]
xor rcx, rsp
call fcn.1401013e0
movaps xmm6, xmmword [rsp + 0x500]
add rsp, 0x518
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.140104c58
lea rcx, [rsp + 0x80]
movzx edx, byte [rcx + 0x17]
test dl, dl
cmovs rdx, qword [rcx + 8]
cmovs rcx, qword [rcx]
mov r8d, 1
mov r9, rax
call fcn.140119bf0
mov ecx, 2
call fcn.140104c58
mov rcx, rax
call fcn.140118e68
mov eax, dword [0x140215348]
jmp 0x14004ab28
mov r14, 0xffffffffffffffff
jmp 0x14004aa3f
lea rbp, [rsp + 0xb0]
mov qword [rbp + 0x10], r13
movaps xmmword [rbp], xmm6
mov rax, qword [0x1401eeb70]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x20], 0
lea r8, [0x140215d60]
lea r9, str.LogMessage
mov rcx, rbp
mov dl, 0x49
call fcn.1400e6220
mov rbp, qword [rbp]
test rbp, rbp
jne 0x14004af36
lea rcx, [rsp + 0xb0]
call fcn.1400e6200
jmp 0x14004aac8
mov rcx, qword [0x14021d6d0]
lea rbp, [rsp + 0x80]
test rcx, rcx
je 0x14004accb
movzx eax, byte [rbp + 0x17]
test al, al
mov rbx, qword [rbp]
cmovns rbx, rbp
lea rdx, [rsp + 0x70]
mov qword [rdx], rbx
cmovs rax, qword [rbp + 8]
mov qword [rdx + 8], rax
call fcn.1401733c0
lea rbx, [rsp + 0xe0]
mov r8d, 0x400
mov rcx, rbx
mov dl, 0xaa
call fcn.140103d70
cmp byte [rbp + 0x17], 0
jns 0x14004ad78
mov rdx, qword [rsp + 0x80]
jmp 0x14004ad80
cmp byte [rsp + 0x97], 0
jns 0x14004aeb0
mov rcx, qword [rsp + 0x80]
jmp 0x14004aeb8
call fcn.140158b20
test al, al
je 0x14004ab30
lea r9, [rsp + 0xe0]
mov dword [r9], 0xaaaaaaaa
lea rdx, [rsp + 0x80]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
cmovs r8d, dword [rdx + 8]
cmovs rdx, qword [rdx]
mov rcx, qword [0x14021b2b8]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14004ab30
cmp byte [rsp + 0x97], 0
jns 0x14004ab55
jmp 0x14004ab48
lea rdx, [rsp + 0x80]
mov r8d, 0x400
mov rcx, rbx
call fcn.1400dcd90
mov rcx, rbx
call fcn.1400d0fb0
mov eax, dword [0x14021b2e0]
mov ecx, dword [0x140216fcc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14004ade9
lea rcx, [0x14021b2e0]
call fcn.140100680
cmp dword [0x14021b2e0], 0xffffffff
jne 0x14004ade9
xorps xmm0, xmm0
movups xmmword [0x14021b2d0], xmm0
movups xmmword [0x14021b2c0], xmm0
lea rcx, [0x14021b2e0]
call fcn.140100718
mov rax, qword [0x14021b2d0]
cmp rax, qword [0x14021b2d8]
je 0x14004b3dd
mov qword [rsp + 0xc8], r13
mov eax, dword [0x14021b2e0]
mov ecx, dword [0x140216fcc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14004ae58
lea rcx, [0x14021b2e0]
call fcn.140100680
cmp dword [0x14021b2e0], 0xffffffff
jne 0x14004ae58
xorps xmm0, xmm0
movups xmmword [0x14021b2d0], xmm0
movups xmmword [0x14021b2c0], xmm0
lea rcx, [0x14021b2e0]
call fcn.140100718
mov rdx, qword [0x14021b2d8]
test rdx, rdx
mov rax, qword [0x14021b2c8]
cmove rdx, rax
dec rdx
cmp rax, rdx
jb 0x14004b3e0
shl rdx, 3
add rdx, qword [0x14021b2c0]
lea rbx, [rsp + 0xc8]
mov rcx, rbx
call fcn.1400d6d90
mov r12, qword [rbx]
test r12, r12
je 0x14004af20
cmp byte [rbp + 0x17], 0
jns 0x14004aec9
mov rbx, qword [rsp + 0x80]
jmp 0x14004aed1
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [0x140215348]
jmp 0x14004ab11
lea rbx, [rsp + 0x80]
mov rcx, rbx
add rcx, r14
mov qword [rsp + 0x60], rcx
je 0x14004af32
call fcn.14011bc60
lea rcx, [rsp + 0x60]
mov qword [rcx + 8], rax
mov rax, qword [rsi + 0x118]
sub r14, rax
add rbx, rax
lea r9, [rsp + 0x50]
mov qword [r9], rbx
mov qword [r9 + 8], r14
mov r8d, dword [rsi + 0x128]
mov rdx, qword [rsi + 0x120]
mov qword [rsp + 0x20], rcx
mov rcx, r12
call qword [r12 + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rsp + 0xc8]
call fcn.1400d6d70
jmp 0x14004ab42
xor eax, eax
jmp 0x14004aee3
mov r12, qword [rsp + 0xb8]
lea rcx, [rsp + 0x98]
xor edx, edx
call fcn.1400d0a20
lea rax, [rsp + 0x98]
mov qword [rax + 8], rbp
mov qword [rax + 0x10], r12
mov r12, rax
mov rcx, rbp
mov edx, 0x15
call fcn.1400d0760
mov qword [rsp + 0x38], rax
movsxd rax, dword [rsi + 0x128]
mov rcx, qword [rsi + 0x120]
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], rax
mov rcx, qword [r12 + 0x10]
call fcn.1400d96b0
mov rbp, qword [rax + 0x20]
lea rcx, [rax + 8]
inc rbp
mov rax, qword [rsp + 0xd8]
lea r8, [rsp + 0xe0]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsp + 0xc8]
movaps xmmword [r8], xmm0
mov qword [r8 + 0x18], rbp
lea r12, [rsp + 0x4e8]
mov rdx, r12
mov qword [rsp + 0x40], r8
mov r9, r8
call fcn.1400d9fa0
cmp byte [r12 + 8], 0
jne 0x14004b2b8
mov rax, qword [rsp + 0x4e8]
mov rbp, qword [rax + 0x28]
mov rax, qword [rsp + 0x38]
cmp qword [rax + 0x10], 0
jne 0x14004b371
lea rax, [rsp + 0x4e9]
mov qword [rax - 1], r13
mov qword [rax + 6], r13
mov byte [rax - 1], 8
cmp rbp, 0x80
jae 0x14004b22d
lea r12, [rsp + 0x4e8]
mov rcx, rbp
lea rax, [rsp + 0x4e9]
mov byte [rax], cl
lea rax, [rsp + 0x4e8]
sub r12, rax
add r12, 2
mov rax, qword [rsp + 0x38]
mov rbp, qword [rax]
mov r8d, r12d
mov rcx, qword [rbp + 0x18]
lea rax, [rcx + r8]
mov qword [rsp + 0x48], rax
cmp rax, qword [rbp + 0x10]
ja 0x14004b3b3
cmp r12d, 2
jne 0x14004b28f
movzx eax, word [rsp + 0x4e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x18], rax
mov rax, qword [rsp + 0x38]
add dword [rax + 0x20], r12d
movzx ecx, byte [rsp + 0x97]
mov rbp, rcx
test cl, cl
jns 0x14004b0ba
mov rbp, qword [rsp + 0x88]
mov rax, qword [rsi + 0x118]
cmp rbp, rax
jb 0x14004b3e3
test cl, cl
jns 0x14004b0d6
mov rbx, qword [rsp + 0x80]
sub rbp, rax
je 0x14004b211
cmp rbp, 0xfffffffffffffff0
jae 0x14004b3e6
add rbx, rax
cmp rbp, 0x16
ja 0x14004b1da
mov byte [rsp + 0xf7], bpl
mov r12, qword [rsp + 0x40]
mov rcx, r12
mov rdx, rbx
mov r8, rbp
call fcn.140103960
mov byte [r12 + rbp], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0xe0]
call fcn.1401591e0
mov rbx, rax
mov rax, qword [rsp + 0x38]
cmp qword [rax + 0x10], 0
jne 0x14004b380
lea rax, [rsp + 0x4e8]
mov qword [rax], r13
mov qword [rax + 7], r13
mov byte [rax], 0x10
cmp rbx, 0x80
jae 0x14004b25e
mov rbp, rax
mov rdx, rbx
lea rcx, [rsp + 0x4e9]
mov byte [rcx], dl
sub rbp, rax
add rbp, 2
mov rax, qword [rsp + 0x38]
mov rbx, qword [rax]
mov r8d, ebp
mov rcx, qword [rbx + 0x18]
lea r12, [rcx + r8]
cmp r12, qword [rbx + 0x10]
ja 0x14004b3c8
cmp ebp, 2
jne 0x14004b2a4
movzx eax, word [rsp + 0x4e8]
mov word [rcx], ax
mov qword [rbx + 0x18], r12
mov rax, qword [rsp + 0x38]
add dword [rax + 0x20], ebp
cmp byte [rsp + 0xf7], 0
jns 0x14004b1c8
mov rcx, qword [rsp + 0xe0]
call fcn.140100564
lea rcx, [rsp + 0x98]
call fcn.1400d19b0
jmp 0x14004ac81
lea r12, [rbp + 0x10]
and r12, 0xfffffffffffffff0
mov rcx, r12
call fcn.140100528
mov qword [rsp + 0x40], rax
mov qword [rsp + 0xe0], rax
bts r12, 0x3f
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xe8], rbp
jmp 0x14004b0fe
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
jmp 0x14004b116
mov ecx, ebp
or cl, 0x80
lea rax, [rsp + 0x4ea]
mov byte [rax - 1], cl
mov rcx, rbp
shr rcx, 7
cmp rbp, 0x4000
jae 0x14004b32b
lea r12, [rsp + 0x4e9]
jmp 0x14004b049
mov edx, ebx
or dl, 0x80
lea rcx, [rsp + 0x4ea]
mov byte [rcx - 1], dl
mov rdx, rbx
shr rdx, 7
cmp rbx, 0x4000
jae 0x14004b34e
lea rbp, [rsp + 0x4e9]
jmp 0x14004b16b
cmp r12d, 3
jne 0x14004b2d9
mov al, byte [rsp + 0x4ea]
mov byte [rcx + 2], al
jmp 0x14004b086
cmp ebp, 3
jne 0x14004b303
mov al, byte [rsp + 0x4ea]
mov byte [rcx + 2], al
jmp 0x14004b19a
mov rcx, qword [rsp + 0xa8]
sub rcx, 0xffffffffffffff80
lea r8, [rsp + 0xc8]
mov rdx, rbp
call fcn.1400e6490
jmp 0x14004b005
cmp r12d, 4
je 0x14004b2f5
cmp r12d, 6
jne 0x14004b38f
movzx eax, word [rsp + 0x4ec]
mov word [rcx + 4], ax
mov eax, dword [rsp + 0x4e8]
mov dword [rcx], eax
jmp 0x14004b091
cmp ebp, 4
je 0x14004b31d
cmp ebp, 6
jne 0x14004b3a1
movzx eax, word [rsp + 0x4ec]
mov word [rcx + 4], ax
mov eax, dword [rsp + 0x4e8]
mov dword [rcx], eax
jmp 0x14004b1a5
mov rbp, rcx
mov edx, ebp
or dl, 0x80
mov byte [rax], dl
shr rcx, 7
inc rax
cmp rbp, 0x3fff
ja 0x14004b32b
lea r12, [rax - 1]
jmp 0x14004b049
mov rbp, rdx
mov ebx, ebp
or bl, 0x80
mov byte [rcx], bl
shr rdx, 7
inc rcx
cmp rbp, 0x3fff
ja 0x14004b34e
lea rbp, [rcx - 1]
jmp 0x14004b16b
mov rcx, qword [rsp + 0x38]
call fcn.1400d03a0
jmp 0x14004b015
mov rcx, qword [rsp + 0x38]
call fcn.1400d03a0
jmp 0x14004b13e
lea rdx, [rsp + 0x4e8]
call fcn.140103960
jmp 0x14004b091
lea rdx, [rsp + 0x4e8]
call fcn.140103960
jmp 0x14004b1a5
lea rdx, [rsp + 0x4e8]
mov rcx, rbp
call fcn.1400d0fe0
jmp 0x14004b09a
lea rdx, [rsp + 0x4e8]
mov rcx, rbx
call fcn.1400d0fe0
jmp 0x14004b1a9
int3
int3
int3
lea rcx, [rsp + 0xe0]
call fcn.140154d80
int3