Function at 0x7ff72e2c3a60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r14
sub rsp, 0xa0
mov rax, qword [0x7ff72e3c3a28]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x50], rcx
lea rax, [0x7ff72e396058]
mov qword [rcx], rax
xor esi, esi
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], rsi
mov rax, qword [rdx + 8]
test rax, rax
je 0x7ff72e2c3ab0
lock inc dword [rax + 8]
mov rax, qword [rdx]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov qword [rcx + 0x20], rsi
mov rax, qword [r8 + 8]
test rax, rax
je 0x7ff72e2c3ad4
lock inc dword [rax + 8]
mov rax, qword [r8]
mov qword [rcx + 0x18], rax
mov rax, qword [r8 + 8]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rsi
mov qword [rcx + 0x30], rsi
mov qword [rcx + 0x138], rsi
mov dword [rcx + 0x140], esi
mov byte [rcx + 0x144], 0
mov qword [rcx + 0x148], rsi
mov qword [rcx + 0x150], rsi
mov qword [rcx + 0x158], rsi
mov word [rcx + 0x160], 0
mov byte [rcx + 0x162], 0
lea rax, [rcx + 0x168]
mov ecx, 0xa
mov dword [rax], esi
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm0
lea rax, [rax + 0x38]
sub rcx, 1
jne 0x7ff72e2c3b30
mov qword [rdi + 0x398], rsi
mov dword [rdi + 0x3a0], esi
call sub.KERNEL32.dll_GetCurrentThreadId
mov dword [rdi + 0x3a4], eax
mov dword [rdi + 0x3a8], 0x8000
mov qword [rdi + 0x3b0], rsi
mov byte [rdi + 0x5c0], 0
mov rcx, qword [rdi + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x7ff72e395670]
test al, al
je 0x7ff72e2c3bbd
lea rdx, [0x7ff72e3a00b4]
mov ecx, 0x28
call fcn.7ff72e32a284
mov qword [rdi + 0x148], rax
test rax, rax
je 0x7ff72e2c3bbd
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov dword [rsp + 0x60], 0x63764e5c
mov dword [rsp + 0x64], 0x74736f48
mov dword [rsp + 0x68], 0x7070632e
mov byte [rsp + 0x6c], 0
lea rax, str.Base_host
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8d, [r9 + 0x2f]
lea rdx, [rsp + 0x60]
mov rcx, qword [rdi + 8]
call fcn.7ff72e2d6af0
lea rcx, [rdi + 0x3b8]
mov edx, 0x104
call fcn.7ff72e2d2790
test al, al
jne 0x7ff72e2c3c60
mov dword [rsp + 0x70], 0x63764e5c
mov dword [rsp + 0x74], 0x74736f48
mov dword [rsp + 0x78], 0x7070632e
mov byte [rsp + 0x7c], al
mov rbx, qword [rdi + 8]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea rax, str.Failed_to_retrieve_user_name_associated_with_current_process._GetLastError___u
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8d, [r9 + 0x37]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.7ff72e2d6af0
nop
lea rcx, [rsp + 0x38]
call fcn.7ff72e2de5a0
mov r14, rax
mov rbx, qword [rax]
mov rax, rsi
test rbx, rbx
je 0x7ff72e2c3cae
mov ecx, 0x18
call fcn.7ff72e329c7c
test rax, rax
je 0x7ff72e2c3ca5
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rcx, [0x7ff72e396f98]
mov qword [rax], rcx
mov qword [rax + 0x10], rbx
jmp 0x7ff72e2c3ca8
mov rax, rsi
mov qword [r14], rsi
mov rsi, rbx
mov qword [rdi + 0x150], rsi
mov rbx, qword [rdi + 0x158]
mov qword [rdi + 0x158], rax
test rbx, rbx
je 0x7ff72e2c3d03
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x7ff72e2c3d03
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [0x7ff72e395670]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x7ff72e2c3d03
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [0x7ff72e395670]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x7ff72e2c3d1e
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [0x7ff72e395670]
mov byte [rdi + 0x160], 1
mov al, 1
jmp 0x7ff72e2c3d4d
mov dword [rsp + 0x50], 0x63764e5c
mov dword [rsp + 0x54], 0x74736f48
mov dword [rsp + 0x58], 0x7070632e
mov byte [rsp + 0x5c], 0
lea rcx, str.initialized_successfully
lea rdx, str.failed
test al, al
cmovne rdx, rcx
mov qword [rsp + 0x28], rdx
lea rax, str.Base_host__s
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8d, [r9 + 0x4a]
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 8]
call fcn.7ff72e2d6af0
nop
mov rax, rdi
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.7ff72e329d50
mov rbx, qword [rsp + 0xd8]
add rsp, 0xa0
pop r14
pop rdi
pop rsi
ret