Function at 0x435f50
Capabilities:
Reference http user-agent string

Disassembly:
sub esp, 0x2c
mov eax, dword [sym.imp.kernel32.dll_CreateThread]
mov ecx, dword [esp + 0x30]
lea edx, [0x469bd0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004367d0
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x435fb1
mov ecx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436640
add esp, 0x2c
ret
lea eax, [0x994f90]
mov dword [esp], eax
call fcn.00402b30
mov eax, dword [esp + 4]
test eax, eax
jne 0x43607c
mov eax, dword [0x970248]
mov dword [esp + 0x28], eax
mov ecx, dword [0x970258]
mov dword [esp + 0x24], ecx
call fcn.00469b00
mov eax, dword [esp]
mov dword [esp + 0x20], eax
call fcn.0043af60
lea eax, [0x74ca41]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.0043b7e0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
sub eax, ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043b600
lea eax, str._already__errno_nruntime_stack:_ninvalid_g_statuscastogscanstatusbad_g_transitionschedule:_in_cgoreflect_mismatch_untyped_locals_missing_stackmapbad_symbol_tablenon_Go_function_n_not_in_ranges:_ninvalid_exchangeno_route_to_hostinvalid_argumentmessage_too_longobject_is_remoteremote_I_O_errorSetFilePointerExOpenProcessTokenRegQueryInfoKeyWRegQueryValueExWDnsNameCompare_WCreateDirectoryWFlushFileBuffersGetComputerNameWGetFullPathNameWGetLongPathNameWRemoveDirectoryWTerminateProcessNetApiBufferFreeConnect_remote_:context_canceled.WithValue_type_GODEBUG:_value__exec:_no_commandhostLookupOrder_etc_resolv.confnon_IPv4_addressnon_IPv6_addressunknown_network_no_colon_on_lineContent_Encodingbinary.BigEndian23841857910156250123456789ABCDEFtime:_bad__0_9_ssh:_MAC_failure:_value_of_type_DuplicateTokenExGetCurrentThreadRtlVirtualUnwindinvalid_dns_nameunpacking_headerRCodeFormatErrorSignatureScheme_no_renegotiationregexp:_Compile_http2.TransportWww_Authenticatecontent_encodingcontent_languagecontent_locationwww_authenticateproxy_connectionread_frame_other_s__s_HTTP_1.1_r_nUser_Agent:__s_r_nhost_unreachableAlready_ReportedMultiple_ChoicesPayment_RequiredUpgrade_RequiredContent_Length:_SETTINGS_TIMEOUTFRAME_SIZE_ERRORIV_for_ECDSA_CTRdivision_by_zerolength_too_largeImperial_AramaicMeroitic_CursiveZanabazar_Square_bisect_match_0xInstRuneAnyNotNLContent_Languageinvalid_encodinggoroutine_profileAllThreadsSyscallGC_assist_markingselect__no_cases_sync.RWMutex.Lockwait_for_GC_cycle:_missing_method_notetsleepg_on_g0bad_TinySizeClassruntime:_pointer_g_already_scannedmark___bad_statusscanobject_n__0swept_cached_spanmarkBits_overflowruntime:_summary_runtime:_level____p.searchAddr__RtlGetCurrentPeb
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.0043b7e0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.0043b4c0
lea eax, [0x73a4cc]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0043b7e0
call fcn.0043afc0
lea eax, str.runtime.newosprocruntime_internal_thread_exhaustionlocked_m0_woke_upentersyscallblock_spinningthreadsgp.waiting___nilunknown_caller_pcstack:_framesp:runtime:_nameOff_runtime:_typeOff_runtime:_textOff_permission_deniedwrong_medium_typeno_data_availableexec_format_errorLookupAccountSidWDnsRecordListFreeGetCurrentProcessGetShortPathNameWWSAEnumProtocolsWnode_disconnect:_multipartmaxparts0123456789ABCDEFX0123456789abcdefxreflect.Value.Int_nos_exec.Command_exec:_killing_Cmdexec:_not_started___DialTCP_error:1192092895507812559604644775390625invalid_bit_size_fractional_secondGTB_Standard_TimeFLE_Standard_TimeGMT_Standard_Timeresource_shortageunknown_reason__dssh:_no_key_foundreflect:_call_of_reflect.Value.Lenunknown_type_kindreflect:_New_nil_decryption_failedhandshake_failureillegal_parametermissing_extensionunrecognized_nameinvalid_stream_IDTransfer_EncodingIf_Modified_Sinceframe_ping_lengthtruncated_headersif_modified_sincetransfer_encodingx_forwarded_protoX_Idempotency_KeyMoved_PermanentlyFailed_DependencyToo_Many_RequestsHEADER_TABLE_SIZECOMPRESSION_ERRORENHANCE_YOUR_CALMHTTP_1_1_REQUIREDRegLoadMUIStringW____c_big.Int_s_invalid_BMPStringinvalid_IA5Stringinteger_too_large060102150405Z0700Old_North_ArabianOld_South_Arabianmissing_closing__missing_closing__message_too_largedontfreezetheworldtracebackancestorsadaptivestackstartgarbage_collectionsync.RWMutex.RLockGC_worker__active_stopping_the_worldsystem_page_size____but_memory_size__gc_pauses:seconds_because_dotdotdotruntime:_npages__runtime:_range__index_out_of_rangeruntime:___gp:_gpruntime:_getg:__gforEachP:_not_done_in_async_preempt_nbad_manualFreeListruntime:_textAddr_cleantimers:_bad_p_frames_elided..._n__locked_to_threadruntime.semacreateruntime.semawakeupsegmentation_faultoperation_canceledno_child_processesconnection_refusedRFS_specific_erroridentifier_removedinput_output_errormultihop_attemptedfile_name_too_longno_locks_availablestreams_pipe_errorLookupAccountNameWCreateFileMappingWGetExitCodeProcessGetFileAttributesWSetFileAttributesWCommandLineToArgvW___Read_file_error___Separator_errorcontext.Backgroundvalue_out_of_rangeflag__q_contains_flag_redefined:__sreflect.Value.Uintserver_misbehaving_etc_nsswitch.confinvalid_criteria:_298023223876953125:_day_out_of_rangeCuba_Standard_TimeOmsk_Standard_TimeArab_Standard_TimeIran_Standard_TimeRussia_Time_Zone_3Fiji_Standard_Timeecdh_sha2_nistp256ecdh_sha2_nistp384ecdh_sha2_nistp521use_of_closed_fileGetComputerNameExWGetModuleFileNameWreflect.Value.Elemreflect.Value.Typereflect:_Zero_nil_unable_to_parse_IPRCodeServerFailureunexpected_messageexport_restrictionreceived_from_peerframe_goaway_shortproxy_authenticateUNKNOWN_SETTING__dGo_http_client_2.0Go_http_client_1.1Temporary_RedirectPermanent_RedirectMethod_Not_AllowedExpectation_Failedbad_Content_LengthFLOW_CONTROL_ERRORnon_minimal_lengthtruncated_sequencesequence_truncatedbufio:_buffer_fullCaucasian_Albanianinvalid_character_decoding_error:__vGC_mark_terminationpanicwrap:_no___in_panicwrap:_no___in__called_using_nil_unknown_wait_reasonnotesleep_not_on_g0GC_work_not_flushed_gc_scan_heap:bytes_gc_heap_goal:bytes_gc_heap_live:bytesbad_kind_in_runfinqmarkroot:_bad_indexnwait___work.nprocs__gp__atomicstatusmarking_free_object_KiB_work__eager_____controller_reset_mspan.sweep:_statesysMemStat_overflowbad_sequence_numberntdll.dll_not_foundwinmm.dll_not_foundruntime:_g0_stack__missing_deferreturnpanic_during_mallocpanic_holding_lockspanic_during_panic_nunexpected_g_status___g__atomicstatusbad_runtimemstartm_not_found_in_allmstopm_holding_lockssemaRoot_rotateLeftbad_notifyList_sizeruntime:_preempt_g0runtime:_pcdata_is_bad_ABI_descriptiondodeltimer:_wrong_Padjusttimers:_bad_pillegal_instructionbad_file_descriptordisk_quota_exceededtoo_many_open_filesdevice_not_a_streamdirectory_not_emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdWaitForSingleObjectLocal__ip__address.sync.Cond_is_copiedmultipartmaxheadersfile_already_existsfile_does_not_existfile_already_closedbad_flag_syntax:__sreflect.Value.IsNilreflect.Value.Floatexec:_canceling_CmdPara
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00439230
nop
nop
lea eax, [0x994fac]
mov dword [esp], eax
call fcn.0040a350
nop
nop
lea eax, [0x994fac]
mov dword [esp], eax
call fcn.0040a350
jmp 0x435fcb