Function at 0x43e540
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x18]
jbe 0x43e85e
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rcx, qword [rax + 0x30]
mov rdx, qword [rcx]
cmp rax, rdx
jne 0x43e843
mov eax, dword [rsp + 0x70]
lea edx, [rax - 1]
test eax, edx
jne 0x43e828
mov edx, dword [0x01636a48]
test edx, edx
jne 0x43e78a
cmp eax, 0x8000
jae 0x43e6b7
mov edx, eax
xor ebx, ebx
jmp 0x43e5ba
inc ebx
shr eax, 1
cmp eax, 0x2000
ja 0x43e5b6
mov byte [rsp + 0x27], bl
mov rax, qword [rcx + 0x130]
test rax, rax
je 0x43e5dd
mov rsi, qword [rcx + 0xc8]
test rsi, rsi
je 0x43e637
lea rax, [0x016366b8]
mov qword [rsp], rax
call fcn.0040e440
movzx eax, byte [rsp + 0x27]
mov byte [rsp], al
call fcn.0043ded0
mov rax, qword [rsp + 8]
mov qword [rsp + 0x28], rax
lea rcx, [0x016366b8]
mov qword [rsp], rcx
call fcn.0040e630
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x78], rax
mov ecx, dword [rsp + 0x70]
add rax, rcx
mov qword [rsp + 0x80], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov ecx, dword [rcx + 0xe0]
test ecx, ecx
jne 0x43e5dd
movzx ecx, bl
cmp rcx, 2
jae 0x43e806
shl rcx, 4
mov rsi, qword [rax + rcx + 0x458]
mov rdi, rsi
test rsi, rsi
je 0x43e688
mov rbx, rdi
mov rsi, qword [rdi]
mov qword [rax + rcx + 0x458], rsi
mov rsi, qword [rax + rcx + 0x460]
sub rsi, rdx
mov qword [rax + rcx + 0x460], rsi
mov rax, rbx
jmp 0x43e619
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rcx
mov qword [rsp], rax
mov byte [rsp + 8], bl
call fcn.0043e230
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov rdi, qword [rax + rcx + 0x458]
mov edx, dword [rsp + 0x70]
jmp 0x43e662
shr rax, 0xd
mov qword [rsp + 0x38], rax
mov qword [rsp], rax
call fcn.0043deb0
mov rax, qword [rsp + 8]
mov qword [rsp + 0x30], rax
lea rcx, [0x010f0ba0]
mov qword [rsp], rcx
call fcn.0040e440
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jae 0x43e7ff
shl rax, 4
lea rcx, [0x010f0ba0]
lea rdx, [rcx + rax + 8]
mov rax, qword [rcx + rax + 8]
test rax, rax
jne 0x43e770
xor eax, eax
mov qword [rsp + 0x48], rax
lea rcx, [0x010f0ba0]
mov qword [rsp], rcx
call fcn.0040e630
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x43e736
mov rax, qword [rax + 0x18]
jmp 0x43e619
lea rax, [0x0110afe0]
mov qword [rsp], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 8], rax
lea rax, [0x0163d120]
mov qword [rsp + 0x10], rax
call fcn.00421350
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x43e7e4
mov ecx, dword [rsp + 0x70]
mov qword [rax + 0x68], rcx
jmp 0x43e72d
mov qword [rsp + 0x58], rax
mov qword [rsp], rdx
mov qword [rsp + 8], rax
call fcn.00422740
mov rax, qword [rsp + 0x58]
jmp 0x43e70e
mov rcx, qword [0x01636678]
lea rax, [rcx + rax - 1]
dec rcx
not rcx
and rax, rcx
mov eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp], rax
lea rcx, [0x0163d128]
mov qword [rsp + 8], rcx
call fcn.004144c0
mov rax, qword [rsp + 0x10]
test rax, rax
je 0x43e80d
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x38]
add rax, rcx
mov qword [rsp + 0x80], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
lea rax, [0x0089e67d]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x008ac957]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1a
call fcn.0042ab20
ud2
lea rax, [0x008ad6bb]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1b
call fcn.0042ab20
ud2
lea rax, [0x008b1d4c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0042ab20
ud2
call fcn.00440dc0
jmp fcn.0043e540