Function at 0x435150
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43545b
sub esp, 0x7c
lea edi, [esp + 0x4a]
lea esi, [0x7422f5]
call fcn.004695d4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
lea ecx, [esp + 0x4a]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.004343a0
mov eax, dword [0x995310]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4351bb
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [0x96e79c]
mov dword [edi + 4], eax
mov dword [0x96e79c], ecx
test ecx, ecx
je 0x435444
lea edi, [esp + 0x32]
lea esi, str.QueryPerformanceCounter
call fcn.004695d4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
lea ecx, [esp + 0x32]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.004343a0
mov eax, dword [0x995310]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x43521d
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [0x96e7a0]
mov dword [edi + 4], eax
mov dword [0x96e7a0], ecx
mov dword [esp + 0x62], 0x72657551
lea edi, [esp + 0x64]
lea esi, [0x743218]
call fcn.004695d4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
lea eax, [esp + 0x62]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], 0x1a
call fcn.004343a0
mov eax, dword [0x995310]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x43527f
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [0x96e7a4]
mov dword [edi + 4], eax
mov dword [0x96e7a4], ecx
mov eax, dword [0x96e7a0]
test eax, eax
je 0x43542e
test ecx, ecx
je 0x43542e
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea eax, [esp + 0x28]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436640
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
sete dl
test eax, eax
sete bl
and ebx, edx
test bl, bl
jne 0x435418
test ecx, ecx
setg cl
cmp eax, 0x7fffffff
seta bl
and ebx, edx
or ebx, ecx
test bl, bl
jne 0x435402
mov dword [esp + 0x24], eax
mov eax, dword [0x96e7a0]
lea ecx, [0x995080]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00436640
mov eax, dword [esp + 0x24]
mov ecx, 0x1e
xor edx, edx
xor ebx, ebx
mov ebp, 0x3b9aca00
jmp 0x435329
dec ecx
mov esi, dword [esp + 0x24]
mov ebx, eax
mov eax, esi
test ecx, ecx
jl 0x4353c9
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edx
mov esi, eax
sar eax, 0x1f
shl eax, cl
mov edi, esi
shl esi, cl
lea edx, [ecx - 0x20]
mov ecx, edx
shl edi, cl
mov dword [esp + 0x20], edi
neg ecx
mov ebx, dword [esp + 0x24]
shr ebx, cl
mov edi, dword [esp + 0x1c]
cmp edi, 0x20
sbb edi, edi
and esi, edi
and eax, edi
cmp ebp, esi
xchg edi, ebx
setae bl
xchg edi, ebx
cmp ecx, 0x20
sbb ecx, ecx
and ebx, ecx
or ebx, eax
cmp edx, 0x20
sbb eax, eax
mov edx, dword [esp + 0x20]
and eax, edx
or ebx, eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
sete dl
setg cl
and edx, edi
or edx, ecx
test dl, dl
je 0x4353bc
mov ecx, dword [esp + 0x1c]
cmp ecx, 0x20
sbb edx, edx
mov edi, 1
shl edi, cl
and edx, edi
mov edi, dword [esp + 0x14]
or edx, edi
sub ebp, esi
sbb eax, ebx
jmp 0x435320
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
jmp 0x435320
mov ecx, eax
sar eax, 0x1f
cmp ebx, eax
sete al
setg bl
cmp ebp, ecx
setae cl
and eax, ecx
or ebx, eax
test bl, bl
je 0x4353e8
mov edx, 0x7fffffff
mov dword [0x995088], edx
sar edx, 0x1f
mov dword [0x99508c], edx
mov byte [0x994f0d], 1
add esp, 0x7c
ret
lea eax, [0x752429]
mov dword [esp], eax
mov dword [esp + 4], 0x56
call fcn.00439230
lea eax, [0x751ffd]
mov dword [esp], eax
mov dword [esp + 4], 0x50
call fcn.00439230
lea eax, str.could_not_find_QPC_syscallsruntime:_asyncPreemptStackruntime:_thread_ID_overflowstopTheWorld:_holding_locksgcstopm:_not_waiting_for_gcinternal_lockOSThread_errorruntime:_checkdead:_nmidleruntime:_checkdead:_find_g_runlock_of_unlocked_rwmutexsigsend:_inconsistent_statemakeslice:_len_out_of_rangemakeslice:_cap_out_of_rangegrowslice:_len_out_of_rangestack_size_not_a_power_of_2too_many_callback_functionstimer_when_must_be_positive:_unexpected_return_pc_for_channel_number_out_of_rangecommunication_error_on_sendkey_was_rejected_by_servicenot_a_XENIX_named_type_fileCertEnumCertificatesInStoresocks_version_not_supportedc:windows_system32cmd.exe___Can_not_find_target_nodeabi.NewName:_tag_too_long:_invalid_boolean_flag__s:__vflag_needs_an_argument:___sError_creating_gzip_reader:363797880709171295166015625Easter_Island_Standard_Timediffie_hellman_group14_sha1administratively_prohibitedpointer_to_unsupported_typecipher:_incorrect_length_IVreflectlite.Value.Interfacereflectlite.Value.NumMethod_is_not_assignable_to_type_reflect.Value.UnsafePointerIPv6_field_has_value__216CurveP256CurveP384CurveP521tls:_short_read_from_Rand:_cryptobyte:_length_overflowinsufficient_security_levelnet_http:_use_last_responseinvalid_dependent_stream_IDhttp2:_response_body_closedDATA_frame_with_stream_ID_0frame_rststream_zero_streamframe_pushpromise_pad_shortaccess_control_allow_origininvalid_HTTP_header_name__qnet_http:_invalid_method__qunsupported_protocol_schemeboringcrypto:_not_availablecrypto_rsa:_invalid_modulusunsupported_string_type:__vx509:_malformed_certificatecurrent_time__s_is_after__shkdf:_entropy_limit_reachedexpression_nests_too_deeplyhttp_chunk_length_too_largeinput_overflows_the_modulusinvalid_P224_point_encodinginvalid_P256_point_encodinginvalid_P384_point_encodinginvalid_P521_point_encodingNAF_digits_must_fit_in_int8comparing_uncomparable_type_region_exceeds_uintptr_range_gc_heap_frees_by_size:bytes_gc_heap_tiny_allocs:objects_sched_goroutines:goroutinesgcBgMarkWorker:_mode_not_setmspan.sweep:_m_is_not_lockedfound_pointer_to_free_objectmheap.freeSpanLocked___span_runtime.semasleep_unexpectedfatal:_morestack_on_gsignal_nruntime:_casgstatus:_oldvalgcstopm:_negative_nmspinningfindrunnable:_netpoll_with_psave_on_system_g_not_allowednewproc1:_newg_missing_stacknewproc1:_new_g_is_not_GdeadFixedStack_is_not_power_of_2missing_stack_in_shrinkstack_args_stack_map_entries_for_invalid_runtime_symbol_tableruntime:_no_module_data_for__originating_from_goroutine_file_descriptor_in_bad_statedestination_address_requiredprotocol_driver_not_attachedCertCreateCertificateContextsocks_request_get_extra_data___LForward_tcp_listen_erroros:_process_already_finishedGetFileInformationByHandleExabi.NewName:_name_too_long:_errors:_target_cannot_be_nilcannot_unmarshal_DNS_messageError_reading_response_body:18189894035458564758300781259094947017729282379150390625English_name_for_time_zone__Canada_Central_Standard_TimeCen._Australia_Standard_TimeAus_Central_W._Standard_TimeCentral_Europe_Standard_Timecurve25519_sha256_libssh.orgssh_rsa_cert_v01_openssh.comssh_dss_cert_v01_openssh.comclient_to_server_compressionserver_to_client_compressionssh:_public_key_not_on_curvessh:_unsupported_key_type__Tssh:_unsupported_key_type__qssh:_padding_not_as_expectedreflect.MakeSlice:_len___capEd25519_verification_failurehttp2:_client_conn_is_closedinvalid_header_field_name__qhttp2:_header_list_too_largeaccess_control_allow_headersaccess_control_allow_methodsforgetting_unknown_stream_idhttp2:_Transport_received__sunexpected_protocol_version_general_SOCKS_server_failureTransfer_Encoding:_chunked_r_nhttp:_no_Host_in_request_URLbig:_misuse_of_expNNWindowednegative_n_for_ProbablyPrimecrypto_rsa:_decryption_errorx509:_invalid_RSA_public_keyx509:_invalid_DSA_public_keyx509:_invalid_DSA_parametersx509:_unknown_elliptic_curvecurrent_time__s_is_before__sasn1:_string_not_valid_UTF_8pending_ASN.1_child_too_longmalformed_MIME_header_line:_invalid_byte_in_chunk_lengthinvalid_proxy_address__q:__vinvalid_P224Element_encodinginvalid_P256Element_encodinginvalid_P384Element_encodinginvalid_P521El
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00439230
lea eax, [0x74d556]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.00439230
nop
call fcn.00467a60
jmp fcn.00435150