Function at 0x140162520
Capabilities:
Get system information on windows
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
lea rdi, [0x14016d0f6]
lea rbp, str.algo
mov rbx, rdx
mov esi, ecx
call fcn.1400a9560
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll__strdup
mov rcx, rdi
lea rdi, str.a:c:Dhp:Px:qr:R:s:t:T:o:u:O:V
mov qword [0x1401b94d8], rax
call sub.api_ms_win_crt_string_l1_1_0.dll__strdup
mov r12, qword [0x140185670]
mov qword [0x1401b94d0], rax
jmp 0x14016257c
mov rdx, qword [r12]
mov r8, qword [rbx]
call fcn.1400018a0
mov ecx, esi
mov r9, rbp
mov r8, rdi
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400abe10
mov ecx, eax
test eax, eax
jns 0x140162570
mov rax, qword [0x140185680]
movsxd rdx, dword [rax]
cmp esi, edx
jg 0x140162a6b
cmp byte [0x1401b94fd], 0
je 0x1401627e1
cmp qword [0x1401b94e0], 0
je 0x140162862
xor edx, edx
lea rcx, [0x1401b9080]
call fcn.14009a200
xor edx, edx
lea rcx, [0x1401b9070]
call fcn.14009a200
xor edx, edx
lea rcx, [0x1401b9220]
call fcn.14009a200
xor edx, edx
lea rcx, [0x1401b90d8]
call fcn.14009a200
xor edx, edx
lea rcx, [0x1401b9370]
call fcn.14009a200
xor edx, edx
lea rcx, [0x1401b9408]
call fcn.14009a200
cmp byte [0x1401b94fd], 0
je 0x140162833
mov ecx, 2
call fcn.140048270
test eax, eax
jne 0x140162823
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [rsp + 0x50]
mov r8d, 1
test ecx, ecx
cmovle ecx, r8d
cmp dword [0x1401b94f4], 0
mov dword [0x1401b94f0], ecx
jne 0x14016266b
mov dword [0x1401b94f4], ecx
cmp dword [0x1401b94f8], 0
je 0x140162819
mov r8d, dword [0x1401b94f4]
xor edx, edx
lea rcx, [0x1401b9078]
call fcn.1400984f0
test eax, eax
jne 0x140162a55
movsxd r12, dword [0x1401b94f4]
mov edx, pe_nt_image_headers64
mov rcx, r12
call sub.api_ms_win_crt_heap_l1_1_0.dll_calloc
mov qword [0x1401b9090], rax
test rax, rax
je 0x1401627cf
lea r9d, [r12 + 3]
mov edx, 0x18
movsxd rcx, r9d
call sub.api_ms_win_crt_heap_l1_1_0.dll_calloc
mov qword [0x1401b9098], rax
mov rbx, rax
test rax, rax
je 0x1401627cf
mov edx, 8
mov rcx, r12
call sub.api_ms_win_crt_heap_l1_1_0.dll_calloc
mov qword [0x1401b9210], rax
test rax, rax
je 0x1401627cf
imul r10, r12, 0x18
mov dword [0x1401b9410], r12d
add rbx, r10
mov dword [rbx], r12d
call fcn.14000bf40
mov qword [rbx + 0x10], rax
test rax, rax
je 0x1401627cf
lea rcx, [rbx + 8]
mov r9, rbx
lea r8, [0x140004de0]
xor edx, edx
call fcn.14009c660
mov edi, eax
test eax, eax
jne 0x1401629e4
cmp byte [0x14016501f], 0
mov r8d, dword [0x1401b94f4]
jne 0x1401628b7
cmp byte [0x14016501c], 0
jne 0x140162929
test r8d, r8d
jle 0x1401629f7
xor esi, esi
xor ebp, ebp
lea r12, [0x140005db0]
jmp 0x14016278f
mov r8d, dword [0x1401b94f4]
add esi, 1
add rbp, 0x18
cmp r8d, esi
jle 0x1401629f7
mov rbx, qword [0x1401b9098]
add rbx, rbp
mov dword [rbx], esi
call fcn.14000bf40
mov qword [rbx + 0x10], rax
test rax, rax
je 0x1401627cf
xor edx, edx
lea rcx, [rbx + 8]
mov r9, rbx
mov r8, r12
call fcn.14009c660
test eax, eax
je 0x140162778
mov r8d, esi
lea rdx, str.thread__d_create_failed
xor ecx, ecx
call fcn.140007630
mov edi, 1
mov eax, edi
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
cmp qword [0x1401b94e8], 0
jne 0x1401625ba
mov rdi, qword [rbx]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str._s:_no_URL_supplied_n
mov rcx, rax
mov r8, rdi
call fcn.140001480
mov ecx, 1
call fcn.140001500
call fcn.140006e60
jmp 0x140162678
lea rdx, [0x14016da4e]
xor ecx, ecx
call fcn.140007630
jmp 0x1401627cf
mov rcx, qword [0x1401b94e8]
mov rdi, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strnicmp]
mov r8d, 8
lea rdx, str.https:__
call rdi
test eax, eax
jne 0x1401629c1
mov ecx, 3
jmp 0x14016262e
mov rsi, qword [0x1401b94d8]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbp, qword [0x1401b94d0]
mov rbx, rax
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rcx, [rbx + rax + 2]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [0x1401b94e0], rax
mov rcx, rax
test rax, rax
je 0x1401627cf
mov r9, rbp
mov r8, rsi
lea rdx, [0x14016e0b2]
call fcn.140001540
jmp 0x1401625c8
cmp byte [0x1401b90bd], 0
jne 0x140162751
add r8d, 1
movsxd r11, r8d
mov dword [0x14016500c], r8d
imul rsi, r11, 0x18
add rsi, qword [0x1401b9098]
mov dword [rsi], r8d
call fcn.14000bf40
mov qword [rsi + 0x10], rax
test rax, rax
je 0x1401627cf
lea r8, [0x1400054d0]
lea rcx, [rsi + 8]
mov r9, rsi
xor edx, edx
call fcn.14009c660
mov r8d, dword [0x1401b94f4]
test eax, eax
je 0x140162751
lea rdx, str.longpoll_thread_create_failed
xor ecx, ecx
call fcn.140007630
jmp 0x1401627cf
add r8d, 2
movsxd rax, r8d
mov dword [0x140165008], r8d
imul r12, rax, 0x18
add r12, qword [0x1401b9098]
mov dword [r12], r8d
call fcn.14000bf40
mov qword [r12 + 0x10], rax
test rax, rax
je 0x1401627cf
xor edx, edx
lea rcx, [r12 + 8]
mov r9, r12
lea r8, [0x140002ea0]
call fcn.14009c660
test eax, eax
jne 0x140162a42
cmp byte [0x1401b90bd], 0
mov r8d, dword [0x1401b94f4]
je 0x14016275e
mov rcx, qword [0x1401b94e8]
call sub.api_ms_win_crt_string_l1_1_0.dll__strdup
movsxd rdx, dword [0x140165008]
imul rcx, rdx, 0x18
add rcx, qword [0x1401b9098]
mov rdx, rax
mov rcx, qword [rcx + 0x10]
call fcn.14000c070
mov r8d, dword [0x1401b94f4]
jmp 0x14016275e
mov rcx, qword [0x1401b94e8]
mov r8d, 0xf
lea rdx, str.stratumtcps:__
call rdi
test eax, eax
je 0x140162858
jmp 0x140162629
lea rdx, str.workio_thread_create_failed
xor ecx, ecx
call fcn.140007630
jmp 0x1401627cf
lea r9, str.randomx
lea rdx, str._d_miner_threads_started__using__s_algorithm.
mov ecx, 3
call fcn.140007630
movsxd r8, dword [0x1401b9410]
xor edx, edx
imul r9, r8, 0x18
add r9, qword [0x1401b9098]
mov rcx, qword [r9 + 8]
call fcn.14009c920
lea rdx, str.workio_thread_dead__exiting.
mov ecx, 3
call fcn.140007630
jmp 0x1401627d4
lea rdx, str.stratum_thread_create_failed
xor ecx, ecx
call fcn.140007630
jmp 0x1401627cf
lea rcx, str.pthread_barrier_init_failed__n
call fcn.1400014b0
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
mov rsi, qword [rbx + rdx*8]
mov rbp, qword [rbx]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str._s:_unsupported_non_option_argument_____s_n
mov rcx, rax
mov r9, rsi
mov r8, rbp
call fcn.140001480
mov ecx, 1
call fcn.140001500
nop
nop
nop
nop