Function at 0x140085810
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xed0]
sub rsp, 0xfd0
mov rax, qword [0x140164030]
xor rax, rsp
mov qword [rbp + 0xec0], rax
mov r14d, r8d
mov r15, rdx
mov r12, rcx
mov qword [rbp - 0x60], rcx
xor r13d, r13d
mov dword [rbp - 0x68], r13d
mov rcx, qword [rcx + 0x38]
test rcx, rcx
je 0x140085868
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
movsxd rbx, dword [r15]
sub r14d, ebx
lea eax, [rbx + 1]
movsxd rdi, eax
mov rcx, rdi
call fcn.1400c26fc
mov rsi, rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1400c5120
lea rdx, [r15 + 8]
mov r8, rbx
mov rcx, rsi
call fcn.1400c4a50
mov qword [rbp + 0x450], r13
mov qword [rbp + 0x460], r13
mov qword [rbp + 0x468], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x450], r13b
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], r13b
jne 0x1400858c2
mov rdx, rsi
lea rcx, [rbp + 0x450]
call fcn.140028190
nop
mov edx, 1
mov rcx, rsi
call fcn.1400c2470
lea rax, [rbp + 0x138]
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x170], r13
lea rcx, [rbp + 0x450]
mov r8, qword [rbp + 0x460]
cmp qword [rbp + 0x468], 0x10
jb 0x14008591e
mov rdx, qword [rbp + 0x450]
add r8, rdx
jmp 0x140085928
add r8, rcx
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0xf8]
call fcn.1400272f0
nop
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x478]
call fcn.14001c710
nop
cmp byte [rbp + 0x478], 8
je 0x140086a01
lea rdx, str.data
lea rcx, [rbp + 0x478]
call fcn.140025520
cmp byte [rax], 1
jne 0x1400869f8
lea rdx, str.data
lea rcx, [rbp + 0x478]
call fcn.140025520
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14001ce10
nop
lea rdx, str.notificationActionType
lea rcx, [rbp - 0x80]
call fcn.140025520
movzx ecx, byte [rax]
lea eax, [rcx - 5]
cmp al, 1
jbe 0x1400859bc
cmp cl, 7
jne 0x1400869dc
lea rdx, str.notificationType
lea rcx, [rbp - 0x80]
call fcn.140025520
movzx ecx, byte [rax]
lea eax, [rcx - 5]
cmp al, 1
jbe 0x1400859df
cmp cl, 7
jne 0x1400869dc
lea rdx, str.packageName
lea rcx, [rbp - 0x80]
call fcn.140025520
cmp byte [rax], 3
jne 0x1400869dc
lea rdx, str.notificationId
lea rcx, [rbp - 0x80]
call fcn.140025520
cmp byte [rax], 3
jne 0x1400869dc
lea rdx, str.notificationKey
lea rcx, [rbp - 0x80]
call fcn.140025520
cmp byte [rax], 3
jne 0x1400869dc
lea rdx, str.notificationTimestamp
lea rcx, [rbp - 0x80]
call fcn.140025520
movzx ecx, byte [rax]
lea eax, [rcx - 5]
cmp al, 1
jbe 0x140085a4d
cmp cl, 7
jne 0x1400869dc
lea rdx, str.notificationTitle
lea rcx, [rbp - 0x80]
call fcn.140025520
cmp byte [rax], 3
jne 0x1400869dc
lea rdx, str.notificationText
lea rcx, [rbp - 0x80]
call fcn.140025520
cmp byte [rax], 3
jne 0x1400869dc
lea rdx, str.notificationId
lea rcx, [rbp - 0x80]
call fcn.140025520
nop
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe8], r13
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xf0], rdx
mov byte [rbp + 0xd8], 0
mov dword [rbp - 0x68], 1
cmp byte [rax], 3
jne 0x140086a9f
mov r8, qword [rax + 8]
lea rax, [rbp + 0xd8]
cmp rax, r8
je 0x140085af5
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140085ade
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.140028190
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0xd8]
cmp rdx, 0x10
cmovae rcx, qword [rbp + 0xd8]
call fcn.1400cdff0
mov esi, eax
mov dword [rsp + 0x78], eax
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x140085b54
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085b4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086af6
call fcn.1400c2470
mov byte [rbp + 0xd8], 0
lea rdx, str.notificationActionType
lea rcx, [rbp - 0x80]
call fcn.140025520
mov rcx, rax
call fcn.14004d350
movzx r8d, al
mov dword [rbp - 0x70], r8d
lea rdx, str.notificationType
lea rcx, [rbp - 0x80]
call fcn.140025520
mov rcx, rax
call fcn.14004d350
mov byte [rsp + 0x70], al
lea rdx, str.notificationTimestamp
lea rcx, [rbp - 0x80]
call fcn.140025520
mov rcx, rax
call fcn.14004d460
mov qword [rbp - 0x30], rax
lea rdx, str.packageName
lea rcx, [rbp - 0x80]
call fcn.140025520
nop
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov dword [rbp - 0x68], 2
cmp byte [rax], 3
jne 0x140086afc
mov r8, qword [rax + 8]
lea rax, [rbp - 0x50]
cmp rax, r8
je 0x140085c0f
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140085c02
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x50]
call fcn.140028190
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x430]
call fcn.140097be0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140085c5b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085c56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086b53
call fcn.1400c2470
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
lea rdx, str.notificationKey
lea rcx, [rbp - 0x80]
call fcn.140025520
nop
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov dword [rbp - 0x68], 4
cmp byte [rax], 3
jne 0x140086b59
mov r8, qword [rax + 8]
lea rax, [rbp - 0x28]
cmp rax, r8
je 0x140085cc7
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140085cba
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x28]
call fcn.140028190
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x488]
call fcn.140097be0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x140085d13
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086bb0
call fcn.1400c2470
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
lea rdx, str.notificationTitle
lea rcx, [rbp - 0x80]
call fcn.140025520
nop
mov qword [rbp - 8], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], 0
mov dword [rbp - 0x68], 8
cmp byte [rax], 3
jne 0x140086bb6
mov r8, qword [rax + 8]
lea rax, [rbp - 8]
cmp rax, r8
je 0x140085d7f
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140085d72
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 8]
call fcn.140028190
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x3f0]
call fcn.140097be0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x140085dcb
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085dc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c0d
call fcn.1400c2470
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], 0
lea rdx, str.notificationText
lea rcx, [rbp - 0x80]
call fcn.140025520
nop
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
mov dword [rbp - 0x68], reloc.WS2_32.dll_recv
cmp byte [rax], 3
jne 0x140086c13
mov r8, qword [rax + 8]
lea rax, [rbp + 0x98]
cmp rax, r8
je 0x140085e49
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140085e39
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0x98]
call fcn.140028190
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x410]
call fcn.140097be0
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x140085e9e
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085e99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c6a
call fcn.1400c2470
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
lea r8, [rbp + 0x430]
mov rdx, r12
lea rcx, [rbp + 0x108]
call fcn.1400258c0
nop
mov r8d, 4
lea rdx, str..bmp
mov rcx, rax
call fcn.140027070
mov qword [rbp + 0x3d0], r13
mov qword [rbp + 0x3e0], r13
mov qword [rbp + 0x3e8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3e0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x140085f63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085f5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c70
call fcn.1400c2470
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], 7
mov word [rbp + 0x108], r13w
lea rcx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 8
cmovae rcx, qword [rbp + 0x3d0]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 4
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10000000
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140085fe8
lea rdx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 8
cmovae rdx, qword [rbp + 0x3d0]
lea rcx, str._AsusSync_Notification__Receive___Fail_to_create_icon_file:__s_n
call fcn.140095ab0
jmp 0x140086018
mov dword [rbp + 0x470], r13d
lea rdx, [r15 + 8]
add rdx, rbx
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x470]
lea r8d, [r14 - 8]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov ebx, r13d
lea r15, [r12 + 0x20]
mov r10, qword [r15]
mov r9, qword [r15 + 8]
sub r9, r10
sar r9, 3
mov r13, qword [rbp + 0x430]
mov r14, qword [rbp + 0x440]
mov r12, qword [rbp + 0x448]
test r9, r9
je 0x1400860bc
xor ecx, ecx
mov r8d, ecx
mov r11d, dword [rsp + 0x78]
cmp r9, r8
jbe 0x140086c76
mov rsi, qword [r10 + r8*8]
lea rcx, [rbp + 0x430]
cmp r12, 8
cmovae rcx, r13
lea rdx, [rsi + 0x18]
cmp qword [rsi + 0x30], 8
jb 0x14008607d
mov rdx, qword [rsi + 0x18]
mov rdi, qword [rsi + 0x28]
cmp rdi, r14
jne 0x1400860ac
test rdi, rdi
je 0x1400860a6
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [rdx], ax
jne 0x1400860ac
add rdx, 2
add rcx, 2
sub rdi, 1
jne 0x140086090
cmp dword [rsi + 0xc], r11d
je 0x140086110
inc ebx
inc r8
movsxd rax, ebx
cmp rax, r9
jb 0x140086052
mov esi, r11d
cmp dword [rbp - 0x70], 1
jne 0x140086154
lea rcx, [rbp + 0x430]
cmp r12, 8
cmovae rcx, r13
cmp r14, 7
jne 0x140086154
mov rdi, r14
lea rdx, str.android
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140086154
add rcx, 2
add rdx, 2
sub rdi, 1
jne 0x1400860e5
cmp esi, 0x13
jne 0x140086154
mov rax, qword [rbp - 0x60]
cmp byte [rax + 0x48], dil
jne 0x14008614d
mov byte [rax + 0x48], 1
jmp 0x140086154
mov rcx, rsi
call fcn.140085550
mov edx, 0xb8
mov rcx, rsi
call fcn.1400c2470
mov rax, qword [r15]
movsxd rcx, ebx
lea rcx, [rax + rcx*8]
mov r8, qword [r15 + 8]
lea rdx, [rcx + 8]
sub r8, rdx
call fcn.1400c4a50
add qword [r15 + 8], 0xfffffffffffffff8
mov esi, dword [rsp + 0x78]
jmp 0x1400860bc
mov dword [rbp - 0x70], 3
mov r14d, 0x31
mov rsi, qword [rbp + 0x400]
cmp rsi, r14
jbe 0x140086193
mov qword [rbp + 0x400], r14
lea rax, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rax, qword [rbp + 0x3f0]
xor edi, edi
mov word [rax + 0x62], di
mov rsi, qword [rbp + 0x400]
jmp 0x140086195
xor edi, edi
mov rbx, qword [rbp + 0x420]
cmp rbx, r14
jbe 0x1400861ca
mov qword [rbp + 0x420], r14
lea rax, [rbp + 0x410]
cmp qword [rbp + 0x428], 8
cmovae rax, qword [rbp + 0x410]
mov word [rax + 0x62], di
mov rbx, qword [rbp + 0x420]
mov ecx, 0xb8
call fcn.1400c2704
mov r12, rax
mov qword [rbp - 0x58], rax
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x470], rax
lea rax, [rbp + 0x78]
mov qword [rbp - 0x68], rax
lea rax, [rbp + 0x58]
mov qword [rbp + 0x128], rax
lea rax, [rbp + 0x38]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], rdi
mov r14, qword [rbp + 0x3e0]
lea r15, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 8
cmovae r15, qword [rbp + 0x3d0]
movabs rcx, 0x7ffffffffffffffe
cmp r14, 8
jae 0x140086262
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xd0], 7
jmp 0x1400862bb
mov rdi, r14
or rdi, 7
cmp rdi, rcx
cmova rdi, rcx
mov rdx, rdi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.140017d80
mov qword [rbp + 0xb8], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400c4a50
mov qword [rbp + 0xd0], rdi
xor edi, edi
movabs rcx, 0x7ffffffffffffffe
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], rdi
lea r14, [rbp + 0x410]
cmp qword [rbp + 0x428], 8
setae byte [rsp + 0x71]
mov r13, qword [rbp + 0x410]
cmovae r14, r13
cmp rbx, 8
jae 0x14008630e
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x90], 7
jmp 0x140086357
mov rdi, rbx
or rdi, 7
cmp rdi, rcx
cmova rdi, rcx
mov rdx, rdi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140017d80
mov qword [rbp + 0x78], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400c4a50
mov qword [rbp + 0x90], rdi
xor edi, edi
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], rdi
lea rbx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
setae byte [rsp + 0x72]
mov r15, qword [rbp + 0x3f0]
cmovae rbx, r15
cmp rsi, 8
jae 0x1400863a0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x70], 7
jmp 0x1400863f0
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
mov rdx, rdi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140017d80
mov qword [rbp + 0x58], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1400c4a50
mov qword [rbp + 0x70], rdi
xor edi, edi
mov qword [rbp + 0x68], rsi
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rdi
lea rbx, [rbp + 0x488]
cmp qword [rbp + 0x4a0], 8
setae byte [rsp + 0x73]
mov r14, qword [rbp + 0x488]
cmovae rbx, r14
mov rsi, qword [rbp + 0x498]
cmp rsi, 8
jae 0x14008643d
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x50], 7
jmp 0x14008648d
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
mov rdx, rdi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140017d80
mov qword [rbp + 0x38], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1400c4a50
mov qword [rbp + 0x50], rdi
xor edi, edi
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rdi
lea rbx, [rbp + 0x430]
cmp qword [rbp + 0x448], 8
setae byte [rsp + 0x74]
cmovae rbx, qword [rbp + 0x430]
mov rsi, qword [rbp + 0x440]
cmp rsi, 8
jae 0x1400864d7
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x30], 7
jmp 0x140086525
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
mov rdx, rdi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0x18]
call fcn.140017d80
mov qword [rbp + 0x18], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1400c4a50
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x20], rax
movzx r9d, byte [rsp + 0x70]
mov r8d, dword [rbp - 0x70]
mov edx, dword [rsp + 0x78]
mov rcx, r12
call fcn.1400852b0
mov rdi, rax
mov qword [rbp - 0x58], rax
mov r12, qword [rbp - 0x60]
test rax, rax
je 0x140086863
cmp byte [r12 + 0x4a], 0
jne 0x140086840
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x4b0]
call fcn.1400c5120
mov r8d, 0x104
lea rdx, [rbp + 0x4b0]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
mov edx, 0x5c
lea rcx, [rbp + 0x4b0]
call fcn.1400c46bc
test rax, rax
je 0x1400865dd
xor ecx, ecx
mov word [rax + 2], cx
lea r8, str.AsusLinkWP2P.exe
mov edx, 0x104
lea rcx, [rbp + 0x4b0]
call fcn.1400d6ec0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x6c0]
call fcn.1400c5120
mov eax, dword [rdi + 4]
cmp eax, 1
jne 0x1400866e4
cmp byte [r12 + 0x49], 0
jne 0x1400866dc
lea r10, [rdi + 0x18]
cmp qword [r10 + 0x18], 8
jb 0x14008662f
mov r10, qword [r10]
lea r9, [rdi + 0x98]
cmp qword [r9 + 0x18], 8
jb 0x140086640
mov r9, qword [r9]
lea r8, [rdi + 0x78]
cmp qword [r8 + 0x18], 8
jb 0x14008664e
mov r8, qword [r8]
lea rdx, [rdi + 0x58]
cmp qword [rdx + 0x18], 8
jb 0x14008665c
mov rdx, qword [rdx]
lea rbx, str.true
lea r11, str.false
mov rax, r11
cmp byte [rdi + 8], 3
cmove rax, rbx
cmp byte [rdi + 8], 2
cmove r11, rbx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], r11
mov eax, dword [rdi + 0xc]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x48], r10
mov rax, qword [r12 + 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
lea rax, str.B9ECED6F.ASUSPCAssistant.asToastNotifier.exe
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, str.__s___toast___s___send_android_notify___s____s____s____llX__s__d__false__s__s
mov edx, 0x400
lea rcx, [rbp + 0x6c0]
call fcn.140017d20
jmp 0x14008680d
cmp byte [r12 + 0x49], 1
jmp 0x140086740
cmp eax, 2
jne 0x14008673d
lea rcx, [rdi + 0x18]
cmp qword [rcx + 0x18], 8
jb 0x1400866f7
mov rcx, qword [rcx]
mov eax, dword [rdi + 0xc]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rcx
mov rax, qword [r12 + 0x40]
mov qword [rsp + 0x28], rax
lea rax, str.B9ECED6F.ASUSPCAssistant.asToastNotifier.exe
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, str.__s___toast___s___remove_android_notify___llX__s__d_
mov edx, 0x400
lea rcx, [rbp + 0x6c0]
call fcn.140017d20
jmp 0x14008680d
cmp eax, 3
jne 0x14008680d
cmp dword [r12 + 0x4c], 0xa
jae 0x14008680d
lea r10, [rdi + 0x18]
cmp qword [r10 + 0x18], 8
jb 0x140086760
mov r10, qword [r10]
lea r9, [rdi + 0x98]
cmp qword [r9 + 0x18], 8
jb 0x140086771
mov r9, qword [r9]
lea r8, [rdi + 0x78]
cmp qword [r8 + 0x18], 8
jb 0x14008677f
mov r8, qword [r8]
lea rdx, [rdi + 0x58]
cmp qword [rdx + 0x18], 8
jb 0x14008678d
mov rdx, qword [rdx]
lea rbx, str.true
lea r11, str.false
mov rax, r11
cmp byte [rdi + 8], 3
cmove rax, rbx
cmp byte [rdi + 8], 2
cmove r11, rbx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], r11
mov eax, dword [rdi + 0xc]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x48], r10
mov rax, qword [r12 + 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
lea rax, str.B9ECED6F.ASUSPCAssistant.asToastNotifier.exe
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, str.__s___toast___s___send_android_notify___s____s____s____llX__s__d__true__s__s
mov edx, 0x400
lea rcx, [rbp + 0x6c0]
call fcn.140017d20
inc dword [r12 + 0x4c]
lea rcx, [rbp + 0x6c0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140086820
test rax, rax
je 0x140086840
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x6c0]
call fcn.140097090
lea rcx, [r12 + 0x20]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140086859
mov qword [rdx], rdi
add qword [rcx + 8], 8
jmp 0x140086863
lea r8, [rbp - 0x58]
call fcn.14000a170
nop
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 8
jb 0x1400868a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400868a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c7c
call fcn.1400c2470
xor eax, eax
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x3e8], 7
mov word [rbp + 0x3d0], ax
cmp byte [rsp + 0x71], al
je 0x140086907
mov rdx, qword [rbp + 0x428]
lea rdx, [rdx*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x1400868fe
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c82
mov rcx, r13
call fcn.1400c2470
nop
cmp byte [rsp + 0x72], 0
je 0x14008694b
mov rdx, qword [rbp + 0x408]
lea rdx, [rdx*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140086942
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c88
mov rcx, r15
call fcn.1400c2470
nop
cmp byte [rsp + 0x73], 0
je 0x14008698f
mov rdx, qword [rbp + 0x4a0]
lea rdx, [rdx*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140086986
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c8e
mov rcx, r14
call fcn.1400c2470
nop
cmp byte [rsp + 0x74], 0
je 0x1400869e9
mov r12, qword [rbp + 0x448]
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400869d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086c94
call fcn.1400c2470
mov r12, qword [rbp - 0x60]
jmp 0x1400869e9
lea rcx, str._AsusSync_Notification__Receive___invalid_notification_data_n
call fcn.140095ab0
nop
movzx edx, byte [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.14001f060
jmp 0x140086a0e
lea rcx, str._AsusSync_Notification__Receive___invalid_notification_data_n
jmp 0x140086a08
lea rcx, str._AsusSync_Notification__Receive___fail_to_parse_app_info_data_n
call fcn.140095ab0
nop
movzx edx, byte [rbp + 0x478]
lea rcx, [rbp + 0x480]
call fcn.14001f060
nop
mov rdx, qword [rbp + 0x468]
cmp rdx, 0x10
jb 0x140086a5f
inc rdx
mov rcx, qword [rbp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086a5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086a99
call fcn.1400c2470
mov rcx, qword [r12 + 0x38]
test rcx, rcx
je 0x140086a6f
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
mov rcx, qword [rbp + 0xec0]
xor rcx, rsp
call fcn.1400c2450
mov rbx, qword [rsp + 0x1028]
add rsp, 0xfd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400c8b64
nop
mov rcx, rax
call fcn.14001f2a0
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.14001da20
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x2b0]
call fcn.140024f50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x1b0]
call fcn.140018ad0
lea rdx, [0x14015fe98]
lea rcx, [rbp + 0x1b0]
call fcn.1400c4980
nop
call fcn.1400c8b64
nop
mov rcx, rax
call fcn.14001f2a0
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.14001da20
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x2f0]
call fcn.140024f50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x178]
call fcn.140018ad0
lea rdx, [0x14015fe98]
lea rcx, [rbp + 0x178]
call fcn.1400c4980
nop
call fcn.1400c8b64
nop
mov rcx, rax
call fcn.14001f2a0
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.14001da20
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x3b0]
call fcn.140024f50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x1e8]
call fcn.140018ad0
lea rdx, [0x14015fe98]
lea rcx, [rbp + 0x1e8]
call fcn.1400c4980
nop
call fcn.1400c8b64
nop
mov rcx, rax
call fcn.14001f2a0
mov rdx, rax
lea rcx, [rbp + 0x330]
call fcn.14001da20
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x350]
call fcn.140024f50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x220]
call fcn.140018ad0
lea rdx, [0x14015fe98]
lea rcx, [rbp + 0x220]
call fcn.1400c4980
nop
call fcn.1400c8b64
nop
mov rcx, rax
call fcn.14001f2a0
mov rdx, rax
lea rcx, [rbp + 0x370]
call fcn.14001da20
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x390]
call fcn.140024f50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x258]
call fcn.140018ad0
lea rdx, [0x14015fe98]
lea rcx, [rbp + 0x258]
call fcn.1400c4980
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
int3
call fcn.14000a150
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
nop
call fcn.1400c8b64
int3