Function at 0x14000769c
Capabilities:
Print debug messages
Write file on windows

Disassembly:
test rdx, rdx
je 0x140007c8d
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov qword [rbp - 0x61], 0xfffffffffffffffe
mov rax, qword [0x14017a140]
xor rax, rsp
mov qword [rbp + 7], rax
mov qword [rsp + 0x38], r9
mov r12, r8
mov qword [rbp - 0x71], r8
mov rbx, rdx
mov qword [rbp - 0x79], rdx
mov r13, rcx
mov rcx, qword [rdx + 0x18]
lea r15, [0x140114e10]
test rcx, rcx
je 0x140007709
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000770c
mov rcx, qword [rcx]
jmp 0x14000770c
mov rcx, r15
call fcn.1400c2d80
test rax, rax
jne 0x140007723
cmp qword [r13 + 0x360], rax
je 0x140007c6e
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x140007731
mov eax, dword [rdx + 0x28]
jmp 0x140007733
xor eax, eax
movzx esi, word [rbx + 0x10]
shl esi, 0xa
test esi, esi
je 0x140007746
cmp eax, esi
jae 0x140007c6e
test rdx, rdx
je 0x14000775b
add rdx, 8
cmp qword [rdx + 0x18], 8
jb 0x14000775e
mov rdx, qword [rdx]
jmp 0x14000775e
mov rdx, r15
call fcn.140007494
mov r14, rax
mov rdi, qword [r13 + 0x90]
test rdi, rdi
je 0x140007781
mov rdi, qword [rdi + 0x18]
test rdi, rdi
je 0x140007781
add rdi, 0x30
jmp 0x14000778c
mov rdi, qword [r13 + 0xe0]
add rdi, 0x28
test r12, r12
je 0x14000779c
mov rcx, r12
call fcn.1400c2d80
mov r12, rax
cmp qword [rdi + 0x10], 0
ja 0x1400077a7
xor ebx, ebx
jmp 0x1400077aa
mov ebx, dword [rdi + 0x10]
mov dword [rsp + 0x34], ebx
mov rdx, qword [rsp + 0x38]
test rdx, rdx
jne 0x1400077bc
xor eax, eax
jmp 0x1400077c9
mov rcx, rdx
call fcn.1400c2d80
mov rdx, qword [rsp + 0x38]
mov qword [rbp - 0x69], rax
add ebx, 3
add ebx, eax
add ebx, r12d
mov rcx, qword [r13 + 0x360]
test rcx, rcx
je 0x1400077fc
cmp qword [rdi + 0x18], 8
jb 0x1400077ed
mov r8, qword [rdi]
jmp 0x1400077f0
mov r8, rdi
mov rax, qword [rcx]
mov r9, rdx
mov rdx, qword [rbp - 0x71]
call qword [rax]
cmp r14, 0xffffffffffffffff
je 0x1400079f1
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, eax
xor r15d, r15d
test esi, esi
je 0x14000782b
cmp eax, esi
jae 0x1400079e3
mov rdx, r14
mov rcx, r13
call fcn.140007534
add ebx, eax
test r12d, r12d
je 0x140007860
lea r8d, [r12 + r12]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, qword [rbp - 0x71]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140007860
add ebx, dword [rsp + 0x30]
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x140007894
cmp qword [rdi + 0x18], 8
jb 0x140007872
mov rdi, qword [rdi]
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140007894
add ebx, dword [rsp + 0x30]
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x1400078e8
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400078c0
add ebx, dword [rsp + 0x30]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [0x140116118]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400078e8
add ebx, dword [rsp + 0x30]
test esi, esi
je 0x1400079d3
cmp ebx, esi
jb 0x1400079d3
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], r15
mov esi, 7
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x49], r15
mov word [rbp - 0x59], r15w
xor r8d, r8d
lea edx, [rsi + 0x79]
lea rcx, [rbp - 0x59]
call fcn.14000aa38
nop
lea r9, [r13 + 8]
cmp qword [r9 + 0x18], 8
jb 0x140007930
mov r9, qword [r9]
lea rdi, [r13 + 0x110]
lea r8, str._FILE_SIZE_LIMIT_REACHED__LOGGING_DISABLED_FOR__s_MODULE_
mov edx, 0x104
mov rcx, rdi
call fcn.140002db8
cmp word [rdi], r15w
jne 0x140007956
mov rax, r15
jmp 0x14000795e
mov rcx, rdi
call fcn.1400c2d80
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.140003a2c
mov eax, dword [rbp - 0x49]
lea r8d, [rax + rax]
mov dword [rsp + 0x30], r8d
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rdx, qword [rbp - 0x59]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400079a2
add ebx, dword [rsp + 0x30]
mov rdi, qword [rbp - 0x79]
mov eax, dword [rdi + 0x10]
mov ecx, 0x30000
and eax, ecx
cmp eax, ecx
jne 0x1400079c3
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x1400079c3
mov byte [rax], 1
mov ebx, r15d
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.140003bb4
jmp 0x1400079d7
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x1400079e3
mov dword [rax + 0x28], ebx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140007c6e
xor r14d, r14d
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], r14
lea esi, [r14 + 7]
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x49], r14
mov word [rbp - 0x59], r14w
mov edx, ebx
mov rbx, qword [rbp - 0x49]
cmp rbx, rdx
ja 0x140007a45
cmp qword [rbp - 0x41], rdx
je 0x140007a45
mov r8b, 1
lea rcx, [rbp - 0x59]
call fcn.140003c34
test al, al
je 0x140007a45
mov qword [rbp - 0x49], rbx
lea rax, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rax, qword [rbp - 0x59]
mov word [rax + rbx*2], r14w
cmp qword [r13 + 0x358], r14
jne 0x140007aa2
mov qword [rbp - 9], r14
mov qword [rbp - 1], r14
mov qword [rbp - 1], rsi
mov qword [rbp - 9], r14
mov word [rbp - 0x19], r14w
lea rcx, str.____Queued_Lines_Start_____r_n
call fcn.1400c2d80
mov r8, rax
lea rdx, str.____Queued_Lines_Start_____r_n
lea rcx, [rbp - 0x19]
call fcn.140003a2c
nop
lea rcx, [r13 + 0x338]
lea rdx, [rbp - 0x19]
call fcn.1400097fc
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x19]
call fcn.140003bb4
test r12d, r12d
je 0x140007acd
mov rbx, qword [rbp - 0x71]
cmp word [rbx], r14w
jne 0x140007ab6
mov rax, r14
jmp 0x140007abe
mov rcx, rbx
call fcn.1400c2d80
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x59]
call fcn.140003dfc
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x140007ae8
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.1400041fc
mov rax, qword [rbp - 0x69]
test eax, eax
je 0x140007b17
mov rdi, qword [rsp + 0x38]
cmp word [rdi], r14w
jne 0x140007b00
mov rax, r14
jmp 0x140007b08
mov rcx, rdi
call fcn.1400c2d80
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x59]
call fcn.140003dfc
lea rcx, [0x140116118]
call fcn.1400c2d80
mov r8, rax
lea rdx, [0x140116118]
lea rcx, [rbp - 0x59]
call fcn.140003dfc
lea rbx, [r13 + 0x338]
mov rax, qword [rbx + 0x20]
inc rax
cmp qword [rbx + 0x10], rax
ja 0x140007b52
mov rcx, rbx
call fcn.14000bd08
mov rax, qword [rbx + 0x10]
dec rax
and qword [rbx + 0x18], rax
mov rdx, qword [rbx + 0x18]
add rdx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x10]
dec rdi
and rdi, rdx
mov rax, qword [rbx + 8]
cmp qword [rax + rdi*8], r14
jne 0x140007b8b
mov ecx, 0x20
call fcn.1400b9fa4
mov rcx, qword [rbx + 8]
mov qword [rcx + rdi*8], rax
mov rax, qword [rbx + 8]
mov rcx, qword [rax + rdi*8]
mov qword [rbp - 0x69], rcx
mov qword [rbp - 0x71], rcx
test rcx, rcx
je 0x140007bbd
mov qword [rcx + 0x18], rsi
mov qword [rcx + 0x10], r14
mov word [rcx], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x59]
call fcn.140003cb8
nop
inc qword [rbx + 0x20]
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x29], r14
mov word [rbp - 0x39], r14w
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140007bf1
lea r9, [rbp - 0x39]
xor r8d, r8d
mov edx, eax
mov rcx, r13
call fcn.140008e70
lea rcx, str.Unable_to_open_log_file:_r_n_
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x140007c19
lea r15, [rax + 8]
cmp qword [r15 + 0x18], 8
jb 0x140007c19
mov r15, qword [r15]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x140116198]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [0x140116118]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x39]
call fcn.140003bb4
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x59]
call fcn.140003bb4
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400b9f80
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret