Function at 0x140058430
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xbe0]
sub rsp, 0xce0
mov rax, qword [0x140164030]
xor rax, rsp
mov qword [rbp + 0xbd0], rax
mov r14, r9
mov rsi, rcx
mov rbx, qword [rbp + 0xc48]
mov r12, qword [rbp + 0xc50]
mov qword [rsp + 0x68], r12
mov r15d, 0x78
xor r13d, r13d
test r12, r12
je 0x14005848b
mov dword [r12], r13d
lea eax, [rdx - 0x40002]
cmp eax, 7
ja case.0x1400584ab.262147
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x59fa8]
add rcx, rdx
jmp rcx
cmp r8d, 0x224
jb 0x1400584e0
mov eax, dword [r9 + 0x10]
dec eax
cdqe
imul rcx, rax, 0x210
add rcx, 0x224
mov eax, r8d
cmp rax, rcx
je 0x1400584eb
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____ERROR_INVALID_PARAMETER_n
call fcn.140095ab0
mov r15d, 0x57
jmp case.0x1400584ab.262147
mov r15d, r13d
xor eax, eax
mov qword [rbp + 0x108], rax
mov byte [rbp + 0x118], al
xor edx, edx
lea rcx, [rbp + 0x120]
call fcn.14001fb30
nop
mov byte [rbp + 0x128], 0
xor edx, edx
lea rcx, [rbp + 0x130]
call fcn.14001fb30
nop
mov byte [rbp], 0
xor edx, edx
lea rcx, [rbp + 8]
call fcn.14001fb30
nop
mov byte [rbp + 0x40], 2
lfence
mov ecx, 0x18
call fcn.1400c2704
mov rbx, rax
mov qword [rsp + 0x70], rax
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
movzx edx, byte [rbp + 0x128]
mov byte [rbp + 0x128], 2
mov byte [rbp + 0x40], dl
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.14001f060
mov qword [rsp + 0x60], r13
mov ecx, 0x58
call fcn.1400c2704
mov r13, rax
mov qword [rbp - 0x78], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm0
movups xmmword [r13 + 0x20], xmm0
movups xmmword [r13 + 0x30], xmm0
movups xmmword [r13 + 0x40], xmm0
mov qword [r13 + 0x50], rax
mov edx, dword [r14 + 0x10]
mov rax, qword [r14 + 8]
xor edi, edi
mov qword [r13], rdi
mov qword [r13 + 8], rax
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], rdi
mov qword [r13 + 0x20], rdi
mov dword [r13 + 0x28], edi
mov word [r13 + 0x2c], di
mov qword [r13 + 0x30], rdi
mov qword [r13 + 0x38], rdi
mov byte [r13 + 0x40], dil
mov qword [r13 + 0x48], rdi
mov dword [r13 + 0x50], edx
lea ecx, [rdi + 0x18]
call fcn.1400c2704
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov qword [r13], rax
mov qword [rbp + 0x38], r13
mov ecx, edi
mov dword [rsp + 0x58], ecx
mov edi, 1
lea r12, [rdi - 2]
cmp dword [r14 + 0x10], ecx
jle 0x140058ccc
lea rax, [r14 + 0x14]
mov qword [rsp + 0x68], rax
test r15d, r15d
jne 0x140058cc7
mov rdi, r12
cmp word [rax + 8], r15w
jne 0x14005865f
mov r8, qword [rax]
mov rdx, qword [r14 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____session_id:0x_I64X__file_id:__d__path_is_empty._skip_it._n
call fcn.140095ab0
movsxd rbx, dword [rsp + 0x58]
jmp 0x1400586cb
movsxd rbx, ecx
imul r13, rbx, 0x210
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rax + 3]
lea rcx, [r14 + 0x1c]
add rcx, r13
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400586cb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea r9, [r14 + 0x1c]
add r9, r13
mov r8, qword [rsp + 0x68]
mov r8, qword [r8]
mov rdx, qword [r14 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____session_id:0x_I64X__file_id:__d__path:__s__can_not_be_opened__error_code:__d._n
call fcn.140095ab0
imul rax, rbx, 0x210
lea r13, [r14 + 0x1c]
add r13, rax
mov qword [rsp + 0x78], r13
mov edx, 0x5c
mov rcx, r13
call fcn.1400c46bc
mov rbx, rax
test rax, rax
je 0x1400586f7
add rbx, 2
cmp rdi, 0xffffffffffffffff
jne 0x14005870c
xor r13d, r13d
mov qword [rbp + 0x108], r13
jmp 0x14005879f
lea rdx, [rbp + 0x108]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileSizeEx]
cmp qword [rbp + 0x108], 0
jle 0x14005879c
xor eax, eax
mov dword [rbp + 0x158], eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x158]
lea r8d, [rax + 1]
lea rdx, [rbp + 0x111]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
mov rcx, rdi
test eax, eax
jne 0x14005878e
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rdi, r12
xor eax, eax
mov qword [rbp + 0x108], rax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9, r13
mov rax, qword [rsp + 0x68]
mov r8, qword [rax]
mov rdx, qword [r14 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____session_id:0x_I64X__file_id:__d__path:__s__can_not_be_accessed__error_code:__d._n
call fcn.140095ab0
jmp 0x14005879c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFilePointer]
xor r13d, r13d
cmp rdi, 0xffffffffffffffff
jne 0x140058881
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1c0]
call fcn.1400c5120
mov r8d, 0x104
lea rdx, [rbp + 0x1c0]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
lea edx, [rdi + 0x5d]
lea rcx, [rbp + 0x1c0]
call fcn.1400c46bc
test rax, rax
je 0x1400587eb
mov word [rax + 2], r13w
lea r8, str.AsusLinkWP2P.exe
mov edx, 0x104
lea rcx, [rbp + 0x1c0]
call fcn.1400d6ec0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x3d0]
call fcn.1400c5120
lea rax, [rsi + 0xa8]
cmp qword [rax + 0x18], 8
jb 0x140058828
mov rax, qword [rax]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
lea rax, str.B9ECED6F.ASUSPCAssistant.asToastNotifier.exe
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1c0]
lea r8, str.__s___toast___s___file_CannotbeAccess___s____s_
mov edx, 0x400
lea rcx, [rbp + 0x3d0]
call fcn.140017d20
lea rdx, [rbp + 0x3d0]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____show_toast_:__s_n
call fcn.140095ab0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x3d0]
call fcn.140097090
mov ecx, 0x88
call fcn.1400c2704
mov r13, rax
mov qword [rbp + 0xf0], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm0
movups xmmword [r13 + 0x20], xmm0
movups xmmword [r13 + 0x30], xmm0
movups xmmword [r13 + 0x40], xmm0
movups xmmword [r13 + 0x50], xmm0
movups xmmword [r13 + 0x60], xmm0
movups xmmword [r13 + 0x70], xmm0
mov qword [r13 + 0x80], rax
lea rax, [rbp + 0x90]
mov qword [rbp + 0x30], rax
xor eax, eax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], 7
mov r8, r12
mov rdx, qword [rsp + 0x78]
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], ax
jne 0x140058900
lea rcx, [rbp + 0x90]
call fcn.140017c00
nop
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], 7
mov r8, r12
inc r8
cmp word [rbx + r8*2], ax
jne 0x140058935
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.140017c00
mov ecx, dword [rsp + 0x58]
inc ecx
mov dword [rsp + 0x58], ecx
mov eax, dword [r14 + 0x10]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x108]
mov rax, qword [rsp + 0x68]
mov r8, qword [rax]
mov rdx, qword [r14 + 8]
mov rcx, r13
call fcn.140053b70
mov qword [rsp + 0x78], rax
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140058c91
lea rax, [rbp - 0x40]
mov qword [rbp - 0x80], rax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov byte [rbp - 0x40], 6
mov qword [rbp - 0x38], rax
lea rdx, [0x14012870c]
lea rcx, [rbp]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x40]
mov byte [rdx], al
mov byte [rbp - 0x40], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x38]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x38], rax
movzx edx, byte [rbp - 0x40]
lea rcx, [rbp - 0x38]
call fcn.14001f060
lea rax, [rbp - 0x30]
mov qword [rbp - 0x80], rax
mov byte [rbp - 0x30], 5
mov rax, qword [rbp + 0x108]
mov qword [rbp - 0x28], rax
lea rdx, str.size
lea rcx, [rbp]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x30]
mov byte [rdx], al
mov byte [rbp - 0x30], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x28]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x28], rax
movzx edx, byte [rbp - 0x30]
lea rcx, [rbp - 0x28]
call fcn.14001f060
lea rax, [rbp - 0x20]
mov qword [rbp - 0x80], rax
xor edi, edi
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], di
mov r8, r12
inc r8
cmp word [rbx + r8*2], di
jne 0x140058a76
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.140017c00
nop
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae r8, qword [rbp + 0x10]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, r12d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
mov edi, eax
inc eax
movsxd rbx, eax
mov rcx, rbx
call fcn.1400c26fc
mov r13, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400c5120
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae r8, qword [rbp + 0x10]
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r13
mov r9d, r12d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], bl
mov r8, r12
inc r8
cmp byte [r8 + r13], bl
jne 0x140058b26
mov rdx, r13
lea rcx, [rbp + 0x50]
call fcn.140028190
mov rcx, r13
call fcn.1400c2470
nop
xor eax, eax
mov qword [rbp - 0x18], rax
mov byte [rbp - 0x20], 3
lfence
lea ecx, [rax + 0x20]
call fcn.1400c2704
movups xmm0, xmmword [rbp + 0x50]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp + 0x60]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
mov qword [rbp - 0x18], rax
lea rdx, [0x140117c48]
lea rcx, [rbp]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x20]
mov byte [rdx], al
mov byte [rbp - 0x20], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x18]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x18], rax
movzx edx, byte [rbp - 0x20]
lea rcx, [rbp - 0x18]
call fcn.14001f060
nop
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140058bfd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058bf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059f99
call fcn.1400c2470
mov word [rbp + 0x10], bx
mov rbx, qword [rsp + 0x70]
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
je 0x140058c23
lea rdx, [rbp]
mov rcx, rax
call fcn.14001ce10
add qword [rbx + 8], 0x10
jmp 0x140058c32
lea r8, [rbp]
mov rdx, rax
mov rcx, rbx
call fcn.14004d750
mov r13, qword [rbp - 0x78]
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140058c53
mov rax, qword [rsp + 0x78]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140058c61
lea r8, [rbp + 0x30]
call fcn.14000a170
mov rax, qword [rsp + 0x78]
cmp byte [rsi + 0x15], 0
je 0x140058c7e
mov r9, qword [rax + 0x10]
mov r8, qword [rax + 8]
mov rdx, qword [rax]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____session:_0x_I64X__file_id:_d___size:_I64d_n
call fcn.140095ab0
mov rax, qword [rsp + 0x60]
add rax, qword [rbp + 0x108]
mov qword [rsp + 0x60], rax
jmp 0x140058ca9
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov r15d, 8
mov r13, qword [rbp - 0x78]
mov rbx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
add rax, 0x210
mov qword [rsp + 0x68], rax
mov ecx, dword [rsp + 0x58]
cmp ecx, dword [r14 + 0x10]
jl 0x140058632
mov edi, 1
mov rax, qword [rsp + 0x60]
mov qword [r13 + 0x10], rax
mov rax, qword [rbx + 8]
sub rax, qword [rbx]
sar rax, 4
test rax, rax
je 0x140059073
cmp qword [rsi + 0xe0], 0
je 0x140059073
lea rax, [rbp - 0x50]
mov qword [rbp - 0x80], rax
mov rax, qword [r14 + 8]
mov byte [rbp - 0x50], 6
mov qword [rbp - 0x48], rax
lea rdx, str.sessionId
lea rcx, [rbp + 0x118]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x50]
mov byte [rdx], al
mov byte [rbp - 0x50], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x48]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x48], rax
movzx edx, byte [rbp - 0x50]
lea rcx, [rbp - 0x48]
call fcn.14001f060
lea rax, [rbp - 0x60]
mov qword [rbp - 0x80], rax
mov rax, qword [rbx + 8]
sub rax, qword [rbx]
sar rax, 4
mov byte [rbp - 0x60], 6
mov qword [rbp - 0x58], rax
lea rdx, str.numOfFiles
lea rcx, [rbp + 0x118]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x60]
mov byte [rdx], al
mov byte [rbp - 0x60], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x58]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x58], rax
movzx edx, byte [rbp - 0x60]
lea rcx, [rbp - 0x58]
call fcn.14001f060
lea rax, [rbp + 0xf8]
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0xf8]
call fcn.14001ce10
mov rbx, rax
lea rdx, str.files
lea rcx, [rbp + 0x118]
call fcn.140025520
mov r8, rax
movzx ecx, byte [rax]
movzx eax, byte [rbx]
mov byte [r8], al
mov byte [rbx], cl
lea rcx, [rbx + 8]
mov rax, qword [r8 + 8]
mov rdx, qword [rcx]
mov qword [r8 + 8], rdx
mov qword [rcx], rax
movzx edx, byte [rbx]
call fcn.14001f060
lea rax, [rbp - 0x10]
mov qword [rbp - 0x80], rax
mov byte [rbp - 0x10], 5
mov qword [rbp - 8], rdi
lea rdx, str.transferType
lea rcx, [rbp + 0x118]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x10]
mov byte [rdx], al
mov byte [rbp - 0x10], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 8]
mov qword [rdx + 8], rcx
mov qword [rbp - 8], rax
movzx edx, byte [rbp - 0x10]
lea rcx, [rbp - 8]
call fcn.14001f060
lea rax, [rbp - 0x70]
mov qword [rbp - 0x80], rax
mov byte [rbp - 0x70], 0
xor eax, eax
mov qword [rbp - 0x68], rax
xor ebx, ebx
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], al
xor r8d, r8d
lea rdx, [0x140111ac0]
lea rcx, [rbp + 0x70]
call fcn.140028190
nop
mov byte [rbp - 0x70], 3
lfence
lea ecx, [rbx + 0x20]
call fcn.1400c2704
movups xmm0, xmmword [rbp + 0x70]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp + 0x80]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x68], rax
lea rdx, str.path
lea rcx, [rbp + 0x118]
call fcn.140025520
mov rdx, rax
movzx ecx, byte [rax]
movzx eax, byte [rbp - 0x70]
mov byte [rdx], al
mov byte [rbp - 0x70], cl
mov rax, qword [rdx + 8]
mov rcx, qword [rbp - 0x68]
mov qword [rdx + 8], rcx
mov qword [rbp - 0x68], rax
movzx edx, byte [rbp - 0x70]
lea rcx, [rbp - 0x68]
call fcn.14001f060
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x118]
call fcn.14001cad0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140058f12
mov rax, qword [rax]
mov qword [rbp + 0x138], rbx
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x138], 0
inc r12
cmp byte [rax + r12], 0
jne 0x140058f32
mov r8, r12
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.140028190
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140058f90
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058f8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059f93
call fcn.1400c2470
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
cmp byte [rsi + 0x16], 0
jne 0x140058fe5
lea r8, [rbp + 0x138]
cmp qword [rbp + 0x150], 0x10
cmovae r8, qword [rbp + 0x138]
mov r9d, dword [rbp + 0x148]
mov dl, 1
mov rcx, qword [rsi + 0xa0]
mov rax, qword [rsi + 0xe0]
call qword [0x1400fac68]
jmp 0x140059018
lea rcx, [rsi + 0x18]
lea rax, [rbp + 0x138]
cmp rcx, rax
je 0x140059018
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0x10
cmovae rdx, qword [rbp + 0x138]
mov r8, qword [rbp + 0x148]
call fcn.140028190
movzx r9d, byte [rsi + 0x16]
mov r8d, dword [r13 + 0x50]
mov rdx, qword [r13 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_SEND____send_session_list_id:_0x_I64X___session:_d___PendingModuleRequest:_d_n
call fcn.140095ab0
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x140059073
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005906e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059f9f
call fcn.1400c2470
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x14005908a
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
lea rcx, [rsi + 0x80]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x1400590a5
mov qword [rdx], r13
add qword [rcx + 8], 8
jmp 0x1400590ae
lea r8, [rbp + 0x38]
call fcn.14000a170
mov rcx, rsi
call fcn.140054580
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x1400590c9
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
nop
movzx edx, byte [rbp]
lea rcx, [rbp + 8]
call fcn.14001f060
nop
movzx edx, byte [rbp + 0x128]
lea rcx, [rbp + 0x130]
call fcn.14001f060
nop
movzx edx, byte [rbp + 0x118]
lea rcx, [rbp + 0x120]
call fcn.14001f060
jmp case.0x1400584ab.262147
cmp r8d, 0x11
jne 0x1400584e0
mov r9b, 1
movzx r8d, byte [r14 + 0x10]
mov rdx, qword [r14 + 8]
mov rcx, rsi
call fcn.140057210
test al, al
je 0x14005916e
mov r10, qword [rsi + 0xe0]
test r10, r10
je 0x140059166
movzx eax, byte [r14 + 0x10]
mov byte [rbp + 0x160], al
mov rax, qword [r14 + 8]
mov qword [rbp + 0x161], rax
mov r9d, 9
lea r8, [rbp + 0x160]
mov dl, 3
mov rcx, qword [rsi + 0xa0]
mov rax, r10
call qword [0x1400fac68]
mov r15d, r13d
jmp case.0x1400584ab.262147
mov r15d, 2
jmp case.0x1400584ab.262147
cmp r8d, 0x19
jne 0x1400584e0
mov rbx, r13
cmp byte [r9 + 0x18], 1
jne 0x1400592b6
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x1400591a8
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r15d, r13d
mov rdx, qword [rsi + 0x88]
mov r8, qword [rsi + 0x80]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x1400592aa
mov rdi, r13
mov r12, 0xffffffffffffffff
test rbx, rbx
jne 0x1400592aa
sub rdx, r8
sar rdx, 3
cmp rdx, rdi
jbe 0x140059f8d
lfence
mov rax, qword [rsi + 0x80]
mov r9, qword [rax + rdi*8]
mov rax, qword [r14 + 8]
cmp qword [r9 + 8], rax
jne 0x140059280
mov r8d, r13d
mov rdx, r13
mov r9, qword [r9]
mov r11, qword [r9]
mov r10, qword [r9 + 8]
sub r10, r11
sar r10, 3
test r10, r10
je 0x140059280
cmp r10, rdx
jbe 0x140059f87
lfence
mov rbx, qword [r11 + rdx*8]
mov rax, qword [r14 + 0x10]
cmp qword [rbx + 8], rax
je 0x14005925b
mov rbx, r13
inc r8d
inc rdx
mov rcx, qword [r9 + 8]
sub rcx, qword [r9]
sar rcx, 3
movsxd rax, r8d
cmp rax, rcx
jb 0x140059223
jmp 0x140059280
cmp dword [rbx + 0x60], 0x64
je 0x140059280
cmp byte [rbx + 0x79], r13b
jne 0x140059280
mov word [rbx + 0x78], 0x101
mov rcx, qword [rbx + 0x70]
cmp rcx, r12
je 0x140059280
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0x70], r12
inc r15d
inc rdi
mov rdx, qword [rsi + 0x88]
mov r8, qword [rsi + 0x80]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x1400591d6
mov rcx, qword [rsi + 0x98]
jmp 0x1400593c5
mov rcx, qword [rsi + 0x70]
test rcx, rcx
je 0x1400592ca
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r15d, r13d
mov rdx, qword [rsi + 0x60]
mov r8, qword [rsi + 0x58]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x1400593c1
mov rdi, r13
mov r12, 0xffffffffffffffff
test rbx, rbx
jne 0x1400593c1
sub rdx, r8
sar rdx, 3
cmp rdx, rdi
jbe 0x140059f8d
lfence
mov rax, qword [rsi + 0x58]
mov r9, qword [rax + rdi*8]
mov rax, qword [r14 + 8]
cmp qword [r9 + 8], rax
jne 0x14005939d
mov r8d, r13d
mov rdx, r13
mov r9, qword [r9]
mov r11, qword [r9]
mov r10, qword [r9 + 8]
sub r10, r11
sar r10, 3
test r10, r10
je 0x14005939d
nop dword [rax]
cmp r10, rdx
jbe 0x140059f87
lfence
mov rbx, qword [r11 + rdx*8]
mov rax, qword [r14 + 0x10]
cmp qword [rbx + 8], rax
je 0x140059378
mov rbx, r13
inc r8d
inc rdx
mov rcx, qword [r9 + 8]
sub rcx, qword [r9]
sar rcx, 3
movsxd rax, r8d
cmp rax, rcx
jb 0x140059340
jmp 0x14005939d
cmp dword [rbx + 0x60], 0x64
je 0x14005939d
cmp byte [rbx + 0x79], r13b
jne 0x14005939d
mov word [rbx + 0x78], 0x101
mov rcx, qword [rbx + 0x70]
cmp rcx, r12
je 0x14005939d
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0x70], r12
inc r15d
inc rdi
mov rdx, qword [rsi + 0x60]
mov r8, qword [rsi + 0x58]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x1400592f2
mov rcx, qword [rsi + 0x70]
test rcx, rcx
je 0x1400593d0
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
test rbx, rbx
je 0x14005916e
mov r10, qword [rsi + 0xe0]
test r10, r10
je 0x140059166
movzx eax, byte [r14 + 0x18]
mov byte [rbp + 0x170], al
mov rax, qword [r14 + 8]
mov qword [rbp + 0x171], rax
mov rax, qword [r14 + 0x10]
mov qword [rbp + 0x179], rax
mov r9d, send
lea r8, [rbp + 0x170]
mov dl, 4
jmp 0x140059156
mov eax, dword [rbp + 0xc40]
cmp eax, 0x21d
jb 0x1400584e0
mov ecx, eax
movabs rax, 0x3c91beb2de672839
mul rcx
mov r8, rdx
shr r8, 7
mov qword [rsp + 0x58], r8
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x140059466
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r8, qword [rsp + 0x58]
xor r14b, r14b
mov rdx, qword [rsi + 0x88]
mov rcx, rdx
sub rcx, qword [rsi + 0x80]
sar rcx, 3
sub ecx, 1
mov qword [rsp + 0x60], rcx
js 0x14005963e
nop dword [rax]
movsxd rdx, ecx
mov rax, qword [rsi + 0x88]
sub rax, qword [rsi + 0x80]
sar rax, 3
cmp rax, rdx
jbe 0x140059f8d
lfence
lea rdx, [rdx*8]
mov qword [rbp - 0x78], rdx
mov rax, qword [rsi + 0x80]
mov rdi, qword [rdx + rax]
mov qword [rsp + 0x70], rdi
xor eax, eax
mov r12d, eax
mov r15d, eax
mov rdx, qword [rdi]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x1400595b9
nop dword [rax]
cmp r13d, r8d
jge 0x1400595b4
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, r15
jbe 0x140059f87
lfence
mov rax, qword [rdx]
mov rdi, qword [rax + r15*8]
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
lea r8, [rdi + 0x20]
cmp qword [r8 + 0x18], 8
jb 0x140059533
mov r8, qword [r8]
lea rcx, [rbx + 0x10]
mov edx, 0x104
call fcn.1400cc908
mov eax, dword [rdi + 0x60]
mov dword [rbx + 0x218], eax
movzx eax, byte [rdi + 0x79]
mov byte [rbx + 0x21c], al
add rbx, 0x21d
inc r13d
cmp dword [rdi + 0x60], 0x64
je 0x14005956a
cmp byte [rdi + 0x79], 0
je 0x14005956e
mov byte [rdi + 0x7a], 1
mov eax, dword [rdi + 0x7c]
cmp dword [rdi + 0x80], eax
jne 0x14005958a
movzx r14d, r14b
cmp byte [rdi + 0x7a], 1
mov eax, 1
cmove r14d, eax
inc r12d
inc r15
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rdi]
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
movsxd rax, r12d
cmp rax, rcx
mov r8, qword [rsp + 0x58]
jb 0x1400594f0
mov rcx, qword [rsp + 0x60]
test r14b, r14b
je 0x14005961f
mov rdx, qword [rdi + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_GET_SEND_STATUS____Clean_Session:0x_I64X_n
call fcn.140095ab0
nop
mov rcx, rdi
call fcn.140053ce0
nop
mov edx, 0x58
mov rcx, rdi
call fcn.1400c2470
mov rcx, qword [rbp - 0x78]
add rcx, qword [rsi + 0x80]
lea rdx, [rcx + 8]
mov r8, qword [rsi + 0x88]
sub r8, rdx
call fcn.1400c4a50
add qword [rsi + 0x88], 0xfffffffffffffff8
mov rcx, qword [rsi + 0x88]
sub rcx, qword [rsi + 0x80]
sar rcx, 3
dec ecx
sub ecx, 1
mov qword [rsp + 0x60], rcx
mov r8, qword [rsp + 0x58]
jns 0x140059490
mov rdx, qword [rsi + 0x88]
mov r12, qword [rsp + 0x68]
xor ebx, ebx
mov r11d, ebx
mov r10d, ebx
mov r8, qword [rsi + 0x80]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x1400596ae
mov r9d, ebx
nop
sub rdx, r8
sar rdx, 3
cmp rdx, r9
jbe 0x140059f8d
lfence
mov r8, qword [rsi + 0x80]
mov rax, qword [r8 + r9*8]
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
add r11d, eax
inc r10d
inc r9
mov rdx, qword [rsi + 0x88]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r10d
cmp rax, rcx
jb 0x140059660
mov dword [rsi + 0xc], r11d
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x1400596c4
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
test r12, r12
je 0x1400596d4
imul eax, r13d, 0x21d
mov dword [r12], eax
mov r15d, 0xe8
test r13d, r13d
cmovne r15d, ebx
jmp case.0x1400584ab.262147
mov eax, dword [rbp + 0xc40]
cmp eax, 0x21d
jb 0x1400584e0
mov ecx, eax
movabs rax, 0x3c91beb2de672839
mul rcx
mov r8, rdx
shr r8, 7
mov qword [rsp + 0x60], r8
mov rcx, qword [rsi + 0x70]
test rcx, rcx
je 0x14005972b
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsi + 0x60]
mov rcx, rdx
sub rcx, qword [rsi + 0x58]
sar rcx, 3
sub ecx, 1
mov qword [rsp + 0x70], rcx
js 0x1400598e4
nop dword [rax + rax]
movsxd rdx, ecx
mov rax, qword [rsi + 0x60]
sub rax, qword [rsi + 0x58]
sar rax, 3
cmp rax, rdx
jbe 0x140059f8d
lfence
lea rdx, [rdx*8]
mov qword [rsp + 0x78], rdx
mov rax, qword [rsi + 0x58]
mov rdi, qword [rdx + rax]
mov qword [rbp - 0x78], rdi
xor r14b, r14b
xor eax, eax
mov r12d, eax
mov r15d, eax
mov rdx, qword [rdi]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x1400598c8
cmp r13d, r8d
jge 0x140059869
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, r15
jbe 0x140059f87
lfence
mov rax, qword [rdx]
mov rdi, qword [rax + r15*8]
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
lea r8, [rdi + 0x20]
cmp qword [r8 + 0x18], 8
jb 0x1400597e9
mov r8, qword [r8]
lea rcx, [rbx + 0x10]
mov edx, 0x104
call fcn.1400cc908
mov eax, dword [rdi + 0x60]
mov dword [rbx + 0x218], eax
movzx eax, byte [rdi + 0x79]
mov byte [rbx + 0x21c], al
add rbx, 0x21d
inc r13d
cmp dword [rdi + 0x60], 0x64
je 0x140059820
cmp byte [rdi + 0x79], 0
je 0x140059824
mov byte [rdi + 0x7a], 1
mov eax, dword [rdi + 0x7c]
cmp dword [rdi + 0x80], eax
jne 0x140059840
movzx r14d, r14b
cmp byte [rdi + 0x7a], 1
mov eax, 1
cmove r14d, eax
inc r12d
inc r15
mov rdi, qword [rbp - 0x78]
mov rdx, qword [rdi]
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
movsxd rax, r12d
cmp rax, rcx
mov r8, qword [rsp + 0x60]
jb 0x1400597a6
test r14b, r14b
je 0x1400598c3
mov rdx, qword [rdi + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_GET_SEND_STATUS____Clean_Session:0x_I64X_n
call fcn.140095ab0
nop
mov rcx, rdi
call fcn.140053ce0
nop
mov edx, 0x58
mov rcx, rdi
call fcn.1400c2470
mov rcx, qword [rsp + 0x78]
add rcx, qword [rsi + 0x58]
lea rdx, [rcx + 8]
mov r8, qword [rsi + 0x60]
sub r8, rdx
call fcn.1400c4a50
add qword [rsi + 0x60], 0xfffffffffffffff8
mov rcx, qword [rsi + 0x60]
sub rcx, qword [rsi + 0x58]
sar rcx, 3
dec ecx
jmp 0x1400598c8
mov rcx, qword [rsp + 0x70]
sub ecx, 1
mov qword [rsp + 0x70], rcx
mov r8, qword [rsp + 0x60]
jns 0x140059750
mov rdx, qword [rsi + 0x60]
mov r12, qword [rsp + 0x68]
xor ebx, ebx
mov r11d, ebx
mov r10d, ebx
mov r8, qword [rsi + 0x58]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x140059958
mov r9d, ebx
nop dword [rax]
nop word [rax + rax]
sub rdx, r8
sar rdx, 3
cmp rdx, r9
jbe 0x140059f8d
lfence
mov r8, qword [rsi + 0x58]
mov rax, qword [r8 + r9*8]
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
add r11d, eax
inc r10d
inc r9
mov rdx, qword [rsi + 0x60]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r10d
cmp rax, rcx
jb 0x140059910
mov dword [rsi + 0x10], r11d
mov rcx, qword [rsi + 0x70]
jmp 0x1400596b9
mov eax, dword [rbp + 0xc40]
cmp eax, 0x25a
jb 0x1400584e0
mov ecx, eax
movabs rax, 0xd9ba4256c0366e91
mul rcx
mov r8, rdx
shr r8, 9
mov qword [rsp + 0x58], r8
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x1400599ad
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsi + 0x88]
mov rdi, rdx
sub rdi, qword [rsi + 0x80]
sar rdi, 3
sub edi, 1
mov qword [rsp + 0x60], rdi
js 0x140059bcd
movsxd rcx, edi
mov rax, qword [rsi + 0x88]
sub rax, qword [rsi + 0x80]
sar rax, 3
cmp rax, rcx
jbe 0x140059f8d
lfence
lea rcx, [rcx*8]
mov qword [rsp + 0x70], rcx
mov rax, qword [rsi + 0x80]
mov r14, qword [rcx + rax]
mov byte [rsp + 0x50], 0
xor eax, eax
mov r12d, eax
mov r15d, eax
mov rdx, qword [r14]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x140059b3b
nop dword [rax]
cmp r13d, r8d
jge 0x140059b36
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, r15
jbe 0x140059f87
lfence
mov rax, qword [rdx]
mov rdi, qword [rax + r15*8]
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
lea r8, [rdi + 0x20]
cmp qword [r8 + 0x18], 8
jb 0x140059a73
mov r8, qword [r8]
lea rcx, [rbx + 0x10]
mov edx, 0x104
call fcn.1400cc908
mov eax, dword [rdi + 0x60]
mov dword [rbx + 0x218], eax
movzx eax, byte [rdi + 0x79]
mov byte [rbx + 0x21c], al
mov rax, qword [rdi + 0x18]
mov qword [rbx + 0x226], rax
mov rax, qword [rdi + 0x10]
mov qword [rbx + 0x21e], rax
movzx eax, byte [rdi + 0x78]
mov byte [rbx + 0x21d], al
mov eax, dword [r14 + 0x28]
mov dword [rbx + 0x22e], eax
mov rax, qword [r14 + 0x48]
mov qword [rbx + 0x232], rax
movzx eax, byte [rsi + 0x78]
mov byte [rbx + 0x23a], al
add rbx, 0x25a
inc r13d
cmp dword [rdi + 0x60], 0x64
je 0x140059ae9
cmp byte [rdi + 0x79], 0
je 0x140059aed
mov byte [rdi + 0x7a], 1
mov eax, dword [rdi + 0x7c]
cmp dword [rdi + 0x80], eax
jne 0x140059b11
cmp byte [rdi + 0x7a], 1
jne 0x140059b11
cmp dword [r14 + 0x28], 0x64
je 0x140059b0c
cmp byte [r14 + 0x2c], 1
jne 0x140059b11
mov byte [rsp + 0x50], 1
inc r12d
inc r15
mov rdx, qword [r14]
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
movsxd rax, r12d
cmp rax, rcx
mov r8, qword [rsp + 0x58]
jb 0x140059a30
mov rdi, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
mov qword [r14 + 0x38], rax
cmp byte [rsp + 0x50], 0
je 0x140059bae
mov rdx, qword [r14 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_GET_SEND_STATUS_EX____Clean_Session:0x_I64X_n
call fcn.140095ab0
nop
mov rcx, r14
call fcn.140053ce0
nop
mov edx, 0x58
mov rcx, r14
call fcn.1400c2470
mov rcx, qword [rsp + 0x70]
add rcx, qword [rsi + 0x80]
lea rdx, [rcx + 8]
mov r8, qword [rsi + 0x88]
sub r8, rdx
call fcn.1400c4a50
add qword [rsi + 0x88], 0xfffffffffffffff8
mov rdi, qword [rsi + 0x88]
sub rdi, qword [rsi + 0x80]
sar rdi, 3
dec edi
sub edi, 1
mov qword [rsp + 0x60], rdi
mov r8, qword [rsp + 0x58]
jns 0x1400599d0
mov rdx, qword [rsi + 0x88]
mov r12, qword [rsp + 0x68]
xor ebx, ebx
mov r11d, ebx
mov r10d, ebx
mov r8, qword [rsi + 0x80]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x140059c3e
mov r9d, ebx
nop
sub rdx, r8
sar rdx, 3
cmp rdx, r9
jbe 0x140059f8d
lfence
mov r8, qword [rsi + 0x80]
mov rax, qword [r8 + r9*8]
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
add r11d, eax
inc r10d
inc r9
mov rdx, qword [rsi + 0x88]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r10d
cmp rax, rcx
jb 0x140059bf0
mov dword [rsi + 0xc], r11d
mov rcx, qword [rsi + 0x98]
test rcx, rcx
je 0x140059c54
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
test r12, r12
je 0x1400596d4
imul eax, r13d, 0x25a
jmp 0x1400596d0
mov eax, dword [rbp + 0xc40]
cmp eax, 0x25a
jb 0x1400584e0
mov ecx, eax
movabs rax, 0xd9ba4256c0366e91
mul rcx
mov rcx, rdx
shr rcx, 9
mov qword [rsp + 0x78], rcx
mov r8d, r13d
mov dword [rsp + 0x58], r13d
mov rax, qword [rsi + 0x70]
test rax, rax
je 0x140059cbc
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov r8d, r13d
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsi + 0x60]
mov rdi, rdx
sub rdi, qword [rsi + 0x58]
sar rdi, 3
sub edi, 1
mov qword [rsp + 0x60], rdi
js 0x140059ec2
nop dword [rax]
movsxd rdx, edi
mov rax, qword [rsi + 0x60]
sub rax, qword [rsi + 0x58]
sar rax, 3
cmp rax, rdx
jbe 0x140059f8d
lfence
lea rdx, [rdx*8]
mov qword [rsp + 0x70], rdx
mov rax, qword [rsi + 0x58]
mov r12, qword [rdx + rax]
xor r14b, r14b
xor eax, eax
mov r15d, eax
mov rdx, qword [r12]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x140059e36
cmp r8d, ecx
jge 0x140059e31
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, r15
jbe 0x140059f87
lfence
mov rax, qword [rdx]
mov rdi, qword [rax + r15*8]
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
lea r8, [rdi + 0x20]
cmp qword [r8 + 0x18], 8
jb 0x140059d73
mov r8, qword [r8]
lea rcx, [rbx + 0x10]
mov edx, 0x104
call fcn.1400cc908
mov eax, dword [rdi + 0x60]
mov dword [rbx + 0x218], eax
movzx eax, byte [rdi + 0x79]
mov byte [rbx + 0x21c], al
mov rax, qword [rdi + 0x18]
mov qword [rbx + 0x226], rax
mov rax, qword [rdi + 0x10]
mov qword [rbx + 0x21e], rax
movzx eax, byte [rdi + 0x78]
mov byte [rbx + 0x21d], al
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x22e], eax
mov rax, qword [r12 + 0x48]
mov qword [rbx + 0x232], rax
add rbx, 0x25a
mov r8d, dword [rsp + 0x58]
inc r8d
mov dword [rsp + 0x58], r8d
cmp dword [rdi + 0x60], 0x64
je 0x140059deb
cmp byte [rdi + 0x79], 0
je 0x140059def
mov byte [rdi + 0x7a], 1
mov eax, dword [rdi + 0x7c]
cmp dword [rdi + 0x80], eax
jne 0x140059e0b
movzx r14d, r14b
cmp byte [rdi + 0x7a], 1
mov eax, 1
cmove r14d, eax
inc r13d
inc r15
mov rdx, qword [r12]
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
movsxd rax, r13d
cmp rax, rcx
mov rcx, qword [rsp + 0x78]
jb 0x140059d30
mov rdi, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
mov qword [r12 + 0x38], rax
test r14b, r14b
je 0x140059e9a
mov rdx, qword [r12 + 8]
lea rcx, str._AsusSync_FileTransfer__RPCCmdHandler_RPCCMD_FILE_GET_RECEIVE_STATUS_EX____Clean_Session:0x_I64X_n
call fcn.140095ab0
nop
mov rcx, r12
call fcn.140053ce0
nop
mov edx, 0x58
mov rcx, r12
call fcn.1400c2470
mov rcx, qword [rsp + 0x70]
add rcx, qword [rsi + 0x58]
lea rdx, [rcx + 8]
mov r8, qword [rsi + 0x60]
sub r8, rdx
call fcn.1400c4a50
add qword [rsi + 0x60], 0xfffffffffffffff8
mov rdi, qword [rsi + 0x60]
sub rdi, qword [rsi + 0x58]
sar rdi, 3
dec edi
sub edi, 1
mov qword [rsp + 0x60], rdi
js 0x140059eb6
mov r8d, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x78]
xor r13d, r13d
jmp 0x140059ce0
mov rdx, qword [rsi + 0x60]
mov r12, qword [rsp + 0x68]
xor r13d, r13d
mov r11d, r13d
mov r10d, r13d
mov r8, qword [rsi + 0x58]
mov rax, rdx
sub rax, r8
sar rax, 3
test rax, rax
je 0x140059f28
mov r9, r13
nop
sub rdx, r8
sar rdx, 3
cmp rdx, r9
jbe 0x140059f8d
lfence
mov r8, qword [rsi + 0x58]
mov rax, qword [r8 + r9*8]
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
add r11d, eax
inc r10d
inc r9
mov rdx, qword [rsi + 0x60]
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r10d
cmp rax, rcx
jb 0x140059ee0
mov dword [rsi + 0x10], r11d
mov rcx, qword [rsi + 0x70]
test rcx, rcx
je 0x140059f3b
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
mov ecx, dword [rsp + 0x58]
test r12, r12
je 0x140059f4e
imul eax, ecx, 0x25a
mov dword [r12], eax
mov r15d, 0xe8
test ecx, ecx
cmovne r15d, r13d
mov eax, r15d
mov rcx, qword [rbp + 0xbd0]
xor rcx, rsp
call fcn.1400c2450
mov rbx, qword [rsp + 0xd28]
add rsp, 0xce0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14000a150
int3
call fcn.14000a150
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
int3
call fcn.1400c8b64
int3