Function at 0x14009d730
Capabilities:
Accept command line arguments
Check mutex on windows
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x14061da68]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov rsi, rdx
mov r14d, ecx
xor r12d, r12d
mov dword [rsp + 0x24], r12d
lea ecx, [r12 + 2]
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov byte [rsp + 0x21], r12b
mov byte [rsp + 0x20], r12b
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], r12w
lea rcx, [rsp + 0x140]
call fcn.140094b30
lea rcx, [rsp + 0x140]
call fcn.140094b30
test al, al
je 0x14009da2d
mov cl, 1
call fcn.140276670
mov r13, rax
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
mov r8, qword [rsp + 0x158]
cmp r8, 8
cmovae rcx, rdx
mov r9, qword [rsp + 0x150]
lea r15, [rcx + r9*2]
lea rdi, [rsp + 0x140]
cmovae rdi, rdx
cmp rdi, r15
je 0x14009d851
nop dword [rax]
movzx ebx, word [rdi]
lea rcx, [rsp + 0xa8]
call fcn.1400a2c70
mov r8, qword [rax]
movzx edx, bx
mov rcx, rax
call qword [r8 + 0x40]
mov word [rdi], ax
add rdi, 2
cmp rdi, r15
jne 0x14009d810
mov r8, qword [rsp + 0x158]
mov r9, qword [rsp + 0x150]
mov rdx, qword [rsp + 0x140]
test r13, r13
je 0x14009d88b
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x14009d873
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
mov rdx, qword [rsp + 0x140]
mov r9, qword [rsp + 0x150]
mov r8, qword [rsp + 0x158]
lea r11, [rsp + 0x140]
cmp r8, 8
cmovae r11, rdx
mov edi, 0xa
cmp r9, rdi
jne 0x14009d8d4
mov r10d, edi
lea rcx, str.chrome.exe
sub r11, rcx
movzx eax, word [rcx]
cmp word [rcx + r11], ax
jne 0x14009d8d4
add rcx, 2
sub r10, 1
jne 0x14009d8b2
lea r13d, [r10 + 0xc]
mov byte [rsp + 0x20], 1
jmp 0x14009da36
lea r11, [rsp + 0x140]
cmp r8, 8
cmovae r11, rdx
cmp r9, 0xa
jne 0x14009d922
mov r10, rdi
lea rcx, str.msedge.exe
sub r11, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [rcx + r11], ax
jne 0x14009d922
add rcx, 2
sub r10, 1
jne 0x14009d900
lea r13d, [r10 + 0xc]
mov byte [rsp + 0x20], 1
jmp 0x14009da36
lea r11, [rsp + 0x140]
cmp r8, 8
cmovae r11, rdx
mov r13d, ntohs
cmp r9, r13
jne 0x14009d96e
mov r10d, r13d
lea rcx, str.iexplore.exe
sub r11, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [rcx + r11], ax
jne 0x14009d96e
add rcx, 2
sub r10, 1
jne 0x14009d950
mov byte [rsp + 0x20], 1
jmp 0x14009da36
lea r11, [rsp + 0x140]
cmp r8, 8
cmovae r11, rdx
cmp r9, 0xb
jne 0x14009d9af
mov r10, r9
lea rcx, str.firefox.exe
sub r11, rcx
movzx eax, word [rcx]
cmp word [rcx + r11], ax
jne 0x14009d9af
add rcx, 2
sub r10, 1
jne 0x14009d991
mov byte [rsp + 0x20], 1
jmp 0x14009da36
lea r11, [rsp + 0x140]
cmp r8, 8
cmovae r11, rdx
cmp r9, 9
jne 0x14009d9ed
mov r10, r9
lea rcx, str.opera.exe
sub r11, rcx
movzx eax, word [rcx]
cmp word [rcx + r11], ax
jne 0x14009d9ed
add rcx, 2
sub r10, 1
jne 0x14009d9d2
mov byte [rsp + 0x20], 1
jmp 0x14009da36
lea r10, [rsp + 0x140]
cmp r8, 8
cmovae r10, rdx
cmp r9, 0x16
jne 0x14009da36
mov rdx, r9
lea rcx, str.nicehashquickminer.exe
sub r10, rcx
movzx eax, word [rcx]
cmp word [rcx + r10], ax
jne 0x14009da36
add rcx, 2
sub rdx, 1
jne 0x14009da10
mov byte [0x140671b07], 1
jmp 0x14009da36
mov edi, 0xa
lea r13d, [rdi + 2]
mov byte [rsp + 0x22], 0
mov byte [rsp + 0x23], 0
mov ebx, 1
lea r15, [rbx - 2]
cmp r14d, ebx
jle 0x14009dd8d
lea r8, [0x140000000]
nop dword [rax]
movsxd rax, ebx
mov rdx, qword [rsi + rax*8]
cmp byte [rdx], 0x2d
jne case.0x14009da8d.101
movsx eax, byte [rdx + 1]
add eax, 0xffffff9d
cmp eax, 0x14
ja case.0x14009da8d.101
cdqe
mov ecx, dword [r8 + rax*4 + 0x9ec94]
add rcx, r8
jmp rcx
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rcx, qword [rsi + rbx*8]
call fcn.1402d991c
mov dword [0x140671bb0], eax
lea r8, [0x140000000]
jmp case.0x14009da8d.101
mov byte [rsp + 0x22], 1
jmp case.0x14009da8d.101
movsx ecx, byte [rdx + 2]
sub ecx, 0x63
je 0x14009db62
sub ecx, 9
je 0x14009db2c
sub ecx, 1
je 0x14009db22
sub ecx, 8
je 0x14009daf2
cmp ecx, 3
jne case.0x14009da8d.101
mov byte [rsp + 0x21], 1
jmp case.0x14009da8d.101
inc ebx
movsxd rax, ebx
mov rdx, qword [rsi + rax*8]
mov r8, r15
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14009db00
lea rcx, [0x140621870]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
mov byte [rsp + 0x20], 1
jmp case.0x14009da8d.101
inc ebx
movsxd rax, ebx
mov rdx, qword [rsi + rax*8]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14009db40
lea rcx, [0x140621910]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
mov byte [0x140671b05], 1
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009db84
lea rcx, [0x1406218f0]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rcx, qword [rsi + rbx*8]
call fcn.1402d991c
mov dword [reloc.WS2_32.dll_bind], eax
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp byte [rdx + 2], 0x6e
je 0x14009dc00
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rcx, qword [rsi + rbx*8]
call fcn.1402d991c
mov dword [reloc.WS2_32.dll_getsockname], eax
lea r8, [0x140000000]
jmp case.0x14009da8d.101
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009dc13
lea rcx, [0x140621830]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rcx, qword [rsi + rbx*8]
call fcn.1402d991c
mov dword [0x140671b98], eax
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009dc75
lea rcx, [0x1406218d0]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
movzx eax, byte [rdx + 2]
cmp al, 0x61
je 0x14009dd43
cmp al, 0x69
je 0x14009dd12
cmp al, 0x6c
je 0x14009dcdd
cmp al, 0x70
jne case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rcx, qword [rsi + rbx*8]
call fcn.1402d991c
mov dword [0x140671ba0], eax
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009dcf3
lea rcx, [0x140621890]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009dd24
lea rcx, [0x1406218b0]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
lea eax, [rbx + 1]
cmp r14d, eax
jle case.0x14009da8d.101
movsxd rbx, eax
mov rdx, qword [rsi + rbx*8]
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14009dd55
lea rcx, [0x140621930]
call fcn.14001dd60
lea r8, [0x140000000]
jmp case.0x14009da8d.101
mov byte [0x140671ba4], 1
jmp case.0x14009da8d.101
mov byte [rsp + 0x23], 1
inc ebx
cmp ebx, r14d
jl 0x14009da60
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0x81
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, str.Excavator_v1.6.11f
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov rax, qword [0x14066dfb0]
movsxd rcx, dword [rax + 4]
lea rsi, [0x14066dfb0]
add rcx, rsi
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rsi
call fcn.140021a60
mov rcx, rsi
call fcn.14001f6f0
lea rdx, str._www.nicehash.com_
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str.___________Excavator_v1.6.11f_GPU_Miner_for_NiceHash.
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str.___________Copyright__C__2021_NiceHash._All_rights_reserved.
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str._www.nicehash.com_
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
mov rax, qword [0x14066dfb0]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rsi
call fcn.140021a60
mov rcx, rsi
call fcn.14001f6f0
lea rdx, str.Build_time:_2021_04_01_17:10:09
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str.Build_number:
mov rcx, rsi
call fcn.14002bbb0
mov rcx, rax
mov edx, 0x333
call fcn.14002a280
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14009df80
mov rdx, rax
lea rbx, [0x140621850]
mov rcx, rbx
call fcn.14005c800
mov r10, qword [0x140621860]
test r10, r10
je 0x14009e52e
mov rcx, qword [reloc.WS2_32.dll_getsockopt]
mov rax, rbx
mov r11, qword [0x140621850]
cmp rcx, 8
cmovae rax, r11
cmp word [rax], 0x22
jne 0x14009e266
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], 7
mov word [rsp + 0x180], r12w
cmp r10, 1
jb 0x14009ec2f
lea rax, [r10 - 1]
mov r8, r15
cmp rax, 0xffffffffffffffff
cmovb r8, rax
mov rdx, rbx
cmp rcx, 8
cmovae rdx, r11
add rdx, 2
lea rcx, [rsp + 0x180]
call fcn.14005c800
mov dword [rsp + 0x24], 1
mov rdx, qword [reloc.WS2_32.dll_getsockopt]
cmp rdx, 8
jb 0x14009e070
mov rcx, qword [0x140621850]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14009e06b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009ec29
mov rcx, r8
call fcn.1402bf814
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [0x140621850], xmm0
movups xmm1, xmmword [rsp + 0x190]
movups xmmword [0x140621860], xmm1
mov rsi, rbx
movq r13, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
mov qword [rsp + 0x38], rax
cmp rax, 8
cmovae rsi, r13
movq r11, xmm1
cmp r11, 1
jb 0x14009e25b
lea r14, [rsi + r11*2]
mov rdx, rsi
mov eax, dword [0x1405ab6a8]
lea r8, [0x1405ab6a8]
mov rcx, r14
sub rcx, rdx
sar rcx, 1
je 0x14009e25b
cmp word [rdx], ax
je 0x14009e14a
add rdx, 2
sub rcx, 1
jmp 0x14009e0dd
call fcn.14009d2b0
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
jb 0x14009e140
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e13b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009ec8c
call fcn.1402bf814
mov eax, 0x3e9
jmp 0x14009ebfc
mov r9d, 1
mov r10, rdx
lea rcx, [0x1405ab6a8]
sub r10, rcx
nop dword [rax]
movzx ecx, word [r8]
cmp word [r8 + r10], cx
jne 0x14009e252
add r8, 2
sub r9, 1
jne 0x14009e160
sub rdx, rsi
sar rdx, 1
cmp rdx, 0xffffffffffffffff
je 0x14009e25b
inc rdx
cmp r11, rdx
jb 0x14009e25b
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
sub r11, rdx
mov r8, r15
cmp r11, 0xffffffffffffffff
cmovb r8, r11
mov rax, rbx
cmp qword [rsp + 0x38], 8
cmovae rax, r13
lea rdx, [rax + rdx*2]
lea rcx, [rsp + 0x160]
call fcn.14005c800
mov esi, 3
mov rdx, qword [reloc.WS2_32.dll_getsockopt]
cmp rdx, 8
jb 0x14009e229
mov rcx, qword [0x140621850]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14009e224
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009ec29
mov rcx, r8
call fcn.1402bf814
movups xmm0, xmmword [rsp + 0x160]
movups xmmword [0x140621850], xmm0
movups xmm1, xmmword [rsp + 0x170]
movups xmmword [0x140621860], xmm1
mov r13d, ntohs
jmp 0x14009e3cc
add rdx, 2
jmp 0x14009e0cd
mov r13d, ntohs
jmp 0x14009e3c8
mov rsi, rbx
cmp rcx, 8
cmovae rsi, r11
cmp r10, 1
jb 0x14009e3b6
lea r14, [rsi + r10*2]
mov rax, rsi
lea rdx, [0x1405abe70]
mov rcx, r14
sub rcx, rax
sar rcx, 1
je 0x14009e3b6
cmp word [rax], 0x20
je 0x14009e2a8
add rax, 2
sub rcx, 1
jmp 0x14009e292
mov r8d, 1
mov r9, rax
lea rcx, [0x1405abe70]
sub r9, rcx
nop dword [rax + rax]
movzx ecx, word [rdx]
cmp word [r9 + rdx], cx
jne 0x14009e3a7
add rdx, 2
sub r8, 1
jne 0x14009e2c0
sub rax, rsi
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14009e3b6
cmp r10, rax
jb 0x14009e3b0
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
sub r10, rax
mov r8, r15
cmp r10, 0xffffffffffffffff
cmovb r8, r10
mov rcx, rbx
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae rcx, r11
lea rdx, [rcx + rax*2]
lea rcx, [rsp + 0x160]
call fcn.14005c800
mov esi, 4
mov rdx, qword [reloc.WS2_32.dll_getsockopt]
cmp rdx, 8
jb 0x14009e387
mov rcx, qword [0x140621850]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14009e382
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009ec29
mov rcx, r8
call fcn.1402bf814
movups xmm0, xmmword [rsp + 0x160]
movups xmmword [0x140621850], xmm0
movups xmm1, xmmword [rsp + 0x170]
movups xmmword [0x140621860], xmm1
jmp 0x14009e3cc
add rax, 2
jmp 0x14009e282
mov esi, dword [rsp + 0x24]
jmp 0x14009e3da
xor r8d, r8d
lea rdx, [0x1405ab6a4]
mov rcx, rbx
call fcn.14005c800
mov esi, dword [rsp + 0x24]
mov r11, qword [0x140621850]
mov r10, qword [0x140621860]
test r10, r10
je 0x14009e4e2
nop dword [rax]
nop word [rax + rax]
mov rax, rbx
mov rcx, qword [reloc.WS2_32.dll_getsockopt]
cmp rcx, 8
cmovae rax, r11
cmp word [rax], 0x20
jne 0x14009e4e2
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
cmp r10, 1
jb 0x14009ec2f
lea rax, [r10 - 1]
mov r8, r15
cmp rax, 0xffffffffffffffff
cmovb r8, rax
mov rdx, rbx
cmp rcx, 8
cmovae rdx, r11
add rdx, 2
lea rcx, [rsp + 0x1a0]
call fcn.14005c800
or esi, 8
mov rdx, qword [reloc.WS2_32.dll_getsockopt]
cmp rdx, 8
jb 0x14009e4a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x140621850]
cmp rdx, 0x1000
jb 0x14009e4a2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009ec29
mov rcx, r8
call fcn.1402bf814
movups xmm0, xmmword [rsp + 0x1a0]
movups xmmword [0x140621850], xmm0
movups xmm1, xmmword [rsp + 0x1b0]
movups xmmword [0x140621860], xmm1
movq rax, xmm1
test rax, rax
je 0x14009e4e2
mov r10, qword [0x140621860]
mov r11, qword [0x140621850]
jmp 0x14009e3f0
lea rdx, str.Provided_startup_commandline:
lea rcx, [0x14066e400]
call fcn.14009fb80
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae rbx, qword [0x140621850]
mov r8, qword [0x140621860]
mov rdx, rbx
mov rcx, rax
call fcn.1400a2d80
mov rcx, rax
call fcn.14009feb0
mov rcx, rax
call fcn.14009feb0
lea rsi, [0x14066dfb0]
cmp byte [rsp + 0x20], 0
je 0x14009e549
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [rsp + 0x21], 0
jne 0x14009e70c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea rdx, [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ebx, 8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._t_t_tVersion:_NiceHash_QuickMiner
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str._t_tAutomatic_hardware_detection_and_mining_tryout.
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str._t_tPlease__do_not_close_this_window_
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str._t_tTo_manage_this_miner__use_your_web_browser_
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
lea rdx, str._t_tgo_to:_https:__www.nicehash.com_quick_miner
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
mov rax, qword [0x14066dfb0]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rsi
call fcn.140021a60
mov rcx, rsi
call fcn.14001f6f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, word [rsp + 0x1c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, dword [0x140671ba0]
mov ecx, 0x4650
test eax, eax
cmove eax, ecx
mov dword [0x140671ba0], eax
cmp byte [rsp + 0x22], 0
je 0x14009e730
lea r8, str.NiceHash_Excavator
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140671ba8], rax
jmp 0x14009e86e
lea r8, str.NiceHash_Excavator
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140671ba8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14009e833
mov rcx, qword [0x140671ba8]
test rcx, rcx
je 0x14009e76b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Another_instance_of_this_program_is_already_running..._Closing_in
mov rcx, rsi
call fcn.14002bbb0
mov rcx, rax
mov edx, edi
call fcn.14002a280
mov rcx, rax
lea rdx, str._seconds..._r
call fcn.14002bbb0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
dec edi
test edi, edi
jg 0x14009e730
jne 0x14009e86e
lea rdx, str.Another_instance_of_this_program_prevented_start
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
jb 0x14009e829
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14009e824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14009ec8c
call fcn.1402bf814
mov eax, 2
jmp 0x14009ebfc
cmp edi, 0xa
je 0x14009e86e
lea rdx, [0x1405ac070]
mov rcx, rsi
call fcn.14002bbb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14001ff50
movzx edx, al
mov rcx, rbx
call fcn.140021a60
mov rcx, rbx
call fcn.14001f6f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x140094d10]
mov qword [rsp + 0x60], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
call fcn.1400a59e0
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14009e8d3
lock inc dword [rax + 8]
lea rcx, [rsp + 0x28]
call fcn.14029c0f0
test al, al
je 0x14009ec35
call fcn.14009b510
xor ecx, ecx
call fcn.1402d8c2c
mov rcx, rax
call fcn.1402d43d4
nop
lea rcx, [rsp + 0x48]
call fcn.1400018a0
test eax, eax
je 0x14009e912
mov r14d, r12d
mov dword [rsp + 0x24], r12d
jmp 0x14009e926
mov r14d, dword [rsp + 0x48]
mov dword [rsp + 0x24], r14d
test r14d, r14d
jle 0x14009e926
call fcn.1400ae5c0
cmp byte [rsp + 0x23], 0
je 0x14009ea97
call fcn.14029d750
mov rbx, rax
mov rcx, qword [rax + 8]
call fcn.14029e880
test al, al
je 0x14009e981
mov qword [rsp + 0xa0], rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
nop
call fcn.14029d9c0
mov dword [rax], 2
lea r8, [rbx + 0x18]
lea rdx, [rsp + 0x50]
mov rcx, qword [rbx + 8]
call fcn.14029ea10
nop
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
jmp 0x14009e986
mov qword [rsp + 0x50], r12
nop word [rax + rax]
cmp qword [rsp + 0x50], 0
je 0x14009ea23
call fcn.14029d750
mov rdi, rax
mov qword [rsp + 0xe0], rax
lea rcx, [rsp + 0x50]
call fcn.14029c970
mov rbx, rax
mov qword [rsp + 0xe8], rax
call fcn.140276450
mov esi, eax
mov dword [rsp + 0xf0], eax
lea rcx, [rbx + 8]
mov r8d, 0x1b
lea rdx, str.Restarting_NVIDIA_driver...
call fcn.14001f1f0
nop
test rdi, rdi
je 0x14009e990
mov qword [rsp + 0x70], rbx
call fcn.140276450
cmp esi, eax
jb 0x14009ea16
lea rcx, [rbx + 0x98]
call fcn.14001f6f0
mov rdx, qword [rbx + 0x108]
mov rcx, qword [rdi + 8]
call fcn.14029ea30
nop
mov rcx, rbx
call fcn.14029d080
jmp 0x14009e990
call fcn.140275eb0
mov rbx, rax
call fcn.140275e94
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x14009ea62
add rax, 0x3b9aca00
jmp 0x14009ea6c
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x38]
call fcn.140098470
mov rax, qword [0x140671c38]
test rax, rax
je 0x14009ec4c
call rax
test eax, eax
jne 0x14009ec4c
jmp 0x14009eaa2
xor edx, edx
mov ecx, r14d
call fcn.140055e40
nop
jmp 0x14009eab1
test r14d, r14d
jle 0x14009eaca
mov rax, qword [0x140671c98]
test rax, rax
je 0x14009eac4
call rax
call fcn.14018a3e0
nop
jmp 0x14009ead4
mov dword [0x14067282c], r12d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x28]
call fcn.14029b1d0
mov rbx, rax
lea rcx, [rsp + 0x5c]
call fcn.14029b1b0
mov ecx, dword [rbx]
cmp dword [rax], ecx
je 0x14009ec75
lea rcx, [rsp + 0x28]
call fcn.14029b6a0
lea rcx, [rsp + 0xd0]
call fcn.14029e780
nop
mov rcx, qword [rax]
call fcn.14029ef50
nop
mov rbx, qword [rsp + 0xd8]
test rbx, rbx
je 0x14009eb5b
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14009eb5b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14009eb5b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140671ba8]
test rcx, rcx
je 0x14009eb6d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [0x140671b9c]
lea rcx, [rsp + 0x28]
call fcn.14029ae90
mov rbx, qword [rsp + 0x28]
test rbx, rbx
je 0x14009ebb2
lock xadd dword [rbx + 8], r15d
cmp r15d, 1
jne 0x14009ebb2
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
jb 0x14009ebfa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009ebf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009ec8c
call fcn.1402bf814
mov eax, edi
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.1402bf7f0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1402d3d9c
nop
call fcn.140020080
nop
lea rcx, [rsp + 0x1e0]
call fcn.140017790
nop
mov rcx, rax
call fcn.1400201e0
nop
lea rdx, str.Failed_to_restart_NVIDIA_driver
lea rcx, [rsp + 0x128]
call fcn.140015190
lea rdx, [0x140604a78]
lea rcx, [rsp + 0x128]
call fcn.1402c1d38
nop
lea rcx, [rsp + 0x1e0]
call fcn.14003a6d0
nop
mov rcx, rax
call fcn.1400201e0
nop
call fcn.1402d3d9c
int3