Function at 0x140083a30
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x30
movzx eax, word [rcx + 0x298]
xor r14d, r14d
mov rdi, rcx
mov esi, r14d
cmp ax, 0x50
jne 0x140083b36
nop dword [rax + rax]
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x40]
cmp byte [rdi + 0x2b0], r14b
je 0x140083a7f
mov rcx, qword [rdi + 0x2a8]
call fcn.1400447e0
jmp 0x140083a8b
mov rcx, qword [rdi + 0x2a0]
call fcn.1400448d0
mov esi, eax
shr eax, 0x1f
test al, al
jne 0x140083ca4
cmp esi, 1
je 0x140083ac3
mov r8d, dword [rbp + 0x30]
test r8d, r8d
je 0x140083a60
mov rdx, qword [rbp + 0x40]
lea r9, [rbp + 0x38]
mov rcx, qword [rdi + 0x38]
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140083a60
cmp byte [rdi + 0x2b0], r14b
je 0x140083b01
mov rbx, qword [rdi + 0x2a8]
test rbx, rbx
je 0x140083aed
mov rcx, rbx
call fcn.140043f80
mov edx, 0x2438
mov rcx, rbx
call fcn.1400b6094
mov qword [rdi + 0x2a8], r14
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rbx, qword [rdi + 0x2a0]
test rbx, rbx
je 0x140083b22
mov rcx, rbx
call fcn.140043f90
mov edx, gethostbyname
mov rcx, rbx
call fcn.1400b6094
mov qword [rdi + 0x2a0], r14
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp ax, 0x11
jne 0x140083bc8
mov r9d, dword [rcx + 0x560]
test r9d, r9d
je 0x140083baf
lea eax, [r9 - 1]
and eax, 7
je 0x140083b7b
mov rcx, qword [rcx + 0x558]
mov ebx, 8
sub ebx, eax
mov edx, r9d
mov r8d, ebx
call fcn.1400288c0
add dword [rdi + 0x560], ebx
mov r9d, dword [rdi + 0x560]
lea r8, [rbp + 0x30]
mov rcx, rdi
lea rdx, [rbp + 0x40]
call fcn.140083870
mov r8d, dword [rbp + 0x30]
test r8d, r8d
je 0x140083baf
mov rdx, qword [rbp + 0x40]
lea r9, [rbp + 0x38]
mov rcx, qword [rdi + 0x38]
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rdi + 0x2a0]
call fcn.14003dc80
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp ax, 2
jne 0x140083c24
mov r9d, dword [rcx + 0x560]
test r9d, r9d
je 0x140083c0b
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x40]
call fcn.1400839f0
mov r8d, dword [rbp + 0x30]
test r8d, r8d
je 0x140083c0b
mov rdx, qword [rbp + 0x40]
lea r9, [rbp + 0x38]
mov rcx, qword [rdi + 0x38]
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rdi + 0x2a0]
call fcn.140046ba0
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp ax, 0x40
je 0x140083c8c
cmp ax, 0x14
je 0x140083c8c
cmp ax, 0x31
jne 0x140083ca4
mov r9d, dword [rcx + 0x560]
test r9d, r9d
je 0x140083c73
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x40]
call fcn.1400837f0
mov r8d, dword [rbp + 0x30]
test r8d, r8d
je 0x140083c73
mov rdx, qword [rbp + 0x40]
lea r9, [rbp + 0x38]
mov rcx, qword [rdi + 0x38]
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rdi + 0x2a0]
call fcn.140038fc0
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
add rcx, 0x530
call fcn.140023bc0
lea rcx, [rdi + 0x2a0]
call fcn.14002ecf0
mov eax, esi
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret