Function at 0x42df40
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x42e399
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov eax, dword [rsp + 0x50]
lea ecx, [rax - 0x1001]
cmp ecx, 3
ja 0x42e1a7
mov ecx, eax
and eax, 0xffffefff
mov edx, dword [rsp + 0x54]
cmp edx, eax
jne 0x42dfac
mov eax, ecx
mov rbx, qword [rsp + 0x48]
lock cmpxchg dword [rbx + 0x90], edx
sete sil
test sil, sil
je 0x42dfb5
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rbx, qword [rsp + 0x48]
xor esi, esi
jmp 0x42df9d
call fcn.0042b400
lea rax, [0x008b4ec2]
mov qword [rsp], rax
mov qword [rsp + 8], 0x27
call fcn.0042bdc0
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x008943f4]
mov qword [rsp], rax
mov qword [rsp + 8], 9
call fcn.0042bdc0
mov eax, dword [rsp + 0x50]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x008943eb]
mov qword [rsp], rax
mov qword [rsp + 8], 9
call fcn.0042bdc0
mov eax, dword [rsp + 0x54]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x48]
mov edx, dword [rcx + 0x90]
mov dword [rsp + 0x1c], edx
mov rbx, qword [rcx + 0x98]
mov qword [rsp + 0x20], rbx
call fcn.0042b400
lea rax, [0x008a39ac]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042bdc0
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0088fe58]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008a5888]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov eax, dword [rsp + 0x1c]
mov eax, eax
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x28]
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x10], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x20], rdx
call fcn.0042b400
lea rax, [0x008a399c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042bdc0
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0088fe58]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008a5875]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov eax, dword [rsp + 0x10]
mov eax, eax
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b9d21]
mov qword [rsp], rax
mov qword [rsp + 8], 0x34
call fcn.0042ab20
ud2
call fcn.0042b400
lea rax, [0x008b6c11]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0042bdc0
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x008943f4]
mov qword [rsp], rax
mov qword [rsp + 8], 9
call fcn.0042bdc0
mov eax, dword [rsp + 0x50]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x008943eb]
mov qword [rsp], rax
mov qword [rsp + 8], 9
call fcn.0042bdc0
mov eax, dword [rsp + 0x54]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x48]
mov edx, dword [rcx + 0x90]
mov dword [rsp + 0x18], edx
mov rbx, qword [rcx + 0x98]
mov qword [rsp + 0x20], rbx
call fcn.0042b400
lea rax, [0x008a39ac]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042bdc0
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0088fe58]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008a5888]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov eax, dword [rsp + 0x18]
mov eax, eax
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x14], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x20], rdx
call fcn.0042b400
lea rax, [0x008a399c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0088fe58]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008a5875]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov eax, dword [rsp + 0x14]
mov eax, eax
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008bad25]
mov qword [rsp], rax
mov qword [rsp + 8], 0x37
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.0042df40