Function at 0x1401287b0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x41], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140a23bc8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r13d, r13d
mov dword [rbp - 0x49], r13d
mov qword [rbp - 0x39], rcx
call fcn.140157618
test eax, eax
je 0x140128808
mov ecx, eax
call fcn.140157c40
nop
mov rdi, qword [rsi + 0x90]
movdqa xmm0, xmmword [0x1401f4c10]
mov rax, qword [rdi]
cmp qword [rsi + 0x78], 0
jne 0x14012894b
mov rbx, qword [rax + 0x48]
movdqu xmmword [rbp - 1], xmm0
mov byte [rbp - 0x11], 0
mov r8d, 8
lea rdx, str.lightRed
lea rcx, [rbp - 0x11]
call fcn.140034be0
nop
movdqa xmm0, xmmword [0x1401f4c10]
movdqu xmmword [rbp - 0x21], xmm0
mov byte [rbp - 0x31], 0
mov r8d, 0x35
lea rdx, str.Could_not_restart_process:_restarter_not_initialized.
lea rcx, [rbp - 0x31]
call fcn.140034be0
nop
mov r9b, 1
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x31]
mov rcx, rdi
call rbx
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x1401288bd
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401288b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140128bbf
call fcn.140177360
movdqa xmm0, xmmword [0x1401f4c10]
movdqu xmmword [rbp - 0x21], xmm0
mov byte [rbp - 0x31], 0
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14012890a
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140128904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140128bc5
call fcn.140177360
nop
mov rcx, rsi
call fcn.14015763c
test eax, eax
je 0x14012891e
mov ecx, eax
call fcn.140157c40
nop
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1401777c0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rbx, qword [rax + 0x38]
movdqu xmmword [rbp + 0x1f], xmm0
mov byte [rbp + 0xf], 0
mov r8d, 4
lea rdx, str.gray
lea rcx, [rbp + 0xf]
call fcn.140034be0
nop
movdqa xmm0, xmmword [0x1401f4c10]
movdqu xmmword [rbp - 0x21], xmm0
mov byte [rbp - 0x31], 0
mov r8d, 0x1e
lea rdx, str.Self_restarting_miner_process.
lea rcx, [rbp - 0x31]
call fcn.140034be0
nop
mov r9b, 1
lea r8, [rbp + 0xf]
lea rdx, [rbp - 0x31]
mov rcx, rdi
call rbx
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x1401289e3
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401289de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140128bcb
call fcn.140177360
movdqa xmm0, xmmword [0x1401f4c10]
movdqu xmmword [rbp - 0x21], xmm0
mov byte [rbp - 0x31], 0
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x140128a2f
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140128a2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140128bb3
call fcn.140177360
mov rcx, rsi
call fcn.140127860
lea rbx, [rsi + 0x68]
movdqa xmm0, xmmword [0x1401f6420]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r13w
mov r15d, 1
mov dword [rbp - 0x49], r15d
mov rdx, qword [rbx + 0x10]
add rdx, 6
lea rcx, [rbp - 0x11]
call fcn.140127dc0
lea r8d, [r15 + 5]
lea rdx, str.start
lea rcx, [rbp - 0x11]
call fcn.14003e650
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x140128a8a
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp - 0x11]
call fcn.14003e650
mov rdi, r15
mov rcx, qword [rsi + 0x50]
mov rax, qword [rsi + 0x58]
sub rax, rcx
sar rax, 5
cmp rax, r15
jbe 0x140128b99
mov r14d, 0x20
nop word [rax + rax]
mov r12d, r15d
lea rbx, [r14 + rcx]
mov qword [rbp - 0x21], r13
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], r13w
or r15d, 2
mov dword [rbp - 0x49], r15d
mov rdx, qword [rbx + 0x10]
inc rdx
lea rcx, [rbp - 0x31]
call fcn.140127dc0
mov r8d, 1
lea rdx, [0x140213838]
lea rcx, [rbp - 0x31]
call fcn.14003e650
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x140128b14
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp - 0x31]
call fcn.14003e650
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
mov r8, qword [rbp - 0x21]
lea rcx, [rbp - 0x11]
call fcn.14003e650
mov r15d, r12d
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140128b7a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140128b75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140128bb9
call fcn.140177360
inc rdi
add r14, 0x20
mov rcx, qword [rsi + 0x50]
mov rax, qword [rsi + 0x58]
sub rax, rcx
sar rax, 5
cmp rdi, rax
jb 0x140128ac0
lea rcx, [rbp - 0x11]
call fcn.140126990
mov rcx, rax
call fcn.1401a9444
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.14019862c
nop
call fcn.14019862c
nop
call fcn.14019862c
nop
call fcn.14019862c
nop
call fcn.14019862c
int3