Function at 0x140003b30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r14
sub rsp, 0xa0
mov rax, qword [0x140106b98]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x50], rcx
lea rax, vtable.nvc::HostBase.0
mov qword [rcx], rax
xor esi, esi
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], rsi
mov rax, qword [rdx + 8]
test rax, rax
je 0x140003b80
lock inc dword [rax + 8]
mov rax, qword [rdx]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov qword [rcx + 0x20], rsi
mov rax, qword [r8 + 8]
test rax, rax
je 0x140003ba4
lock inc dword [rax + 8]
mov rax, qword [r8]
mov qword [rcx + 0x18], rax
mov rax, qword [r8 + 8]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rsi
mov qword [rcx + 0x30], rsi
mov qword [rcx + 0x138], rsi
mov dword [rcx + 0x140], esi
mov byte [rcx + 0x144], 0
mov qword [rcx + 0x148], rsi
mov qword [rcx + 0x150], rsi
mov qword [rcx + 0x158], rsi
mov word [rcx + 0x160], 0
mov byte [rcx + 0x162], 0
lea rax, [rcx + 0x168]
mov ecx, 0xa
mov dword [rax], esi
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm0
lea rax, [rax + 0x38]
sub rcx, 1
jne 0x140003c00
mov qword [rdi + 0x398], rsi
mov dword [rdi + 0x3a0], esi
call sub.KERNEL32.dll_GetCurrentThreadId
mov dword [rdi + 0x3a4], eax
mov dword [rdi + 0x3a8], 0x8000
mov qword [rdi + 0x3b0], rsi
mov byte [rdi + 0x5c0], 0
mov rcx, qword [rdi + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x1400d7670]
test al, al
je 0x140003c8d
lea rdx, [0x1400e2104]
mov ecx, 0x28
call fcn.14006be84
mov qword [rdi + 0x148], rax
test rax, rax
je 0x140003c8d
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov dword [rsp + 0x60], 0x63764e5c
mov dword [rsp + 0x64], 0x74736f48
mov dword [rsp + 0x68], 0x7070632e
mov byte [rsp + 0x6c], 0
lea rax, str.Base_host
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8d, [r9 + 0x2f]
lea rdx, [rsp + 0x60]
mov rcx, qword [rdi + 8]
call fcn.140022460
lea rcx, [rdi + 0x3b8]
mov edx, 0x104
call fcn.14001e220
test al, al
jne 0x140003d30
mov dword [rsp + 0x70], 0x63764e5c
mov dword [rsp + 0x74], 0x74736f48
mov dword [rsp + 0x78], 0x7070632e
mov byte [rsp + 0x7c], al
mov rbx, qword [rdi + 8]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea rax, str.Failed_to_retrieve_user_name_associated_with_current_process._GetLastError___u
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8d, [r9 + 0x37]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140022460
nop
lea rcx, [rsp + 0x38]
call fcn.140029d80
mov r14, rax
mov rbx, qword [rax]
mov rax, rsi
test rbx, rbx
je 0x140003d7e
mov ecx, 0x18
call fcn.14006b878
test rax, rax
je 0x140003d75
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rcx, vtable.std::_Ref_count_resource_struct_nvc::IMessageQueue____ptr64__struct_std::default_delete_struct_nvc::IMessageQueue__.0
mov qword [rax], rcx
mov qword [rax + 0x10], rbx
jmp 0x140003d78
mov rax, rsi
mov qword [r14], rsi
mov rsi, rbx
mov qword [rdi + 0x150], rsi
mov rbx, qword [rdi + 0x158]
mov qword [rdi + 0x158], rax
test rbx, rbx
je 0x140003dd3
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140003dd3
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [0x1400d7670]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140003dd3
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [0x1400d7670]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140003dee
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [0x1400d7670]
mov byte [rdi + 0x160], 1
mov al, 1
jmp 0x140003e1d
mov dword [rsp + 0x50], 0x63764e5c
mov dword [rsp + 0x54], 0x74736f48
mov dword [rsp + 0x58], 0x7070632e
mov byte [rsp + 0x5c], 0
lea rcx, str.initialized_successfully
lea rdx, str.failed
test al, al
cmovne rdx, rcx
mov qword [rsp + 0x28], rdx
lea rax, str.Base_host__s
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8d, [r9 + 0x4a]
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 8]
call fcn.140022460
nop
mov rax, rdi
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14006b950
mov rbx, qword [rsp + 0xd8]
add rsp, 0xa0
pop r14
pop rdi
pop rsi
ret