Function at 0x433ea0
Capabilities:
Reference http user-agent string
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x43438f
sub rsp, 0x80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x434366
mov rdx, qword [rax + 0x30]
inc dword [rdx + 0xd0]
mov edx, dword [rsp + 0x98]
lea ebx, [rdx + 7]
and ebx, 0xfffffff8
cmp ebx, 0x7d8
jge 0x43434b
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x2c], ebx
mov rcx, qword [rax + 0x30]
mov rcx, qword [rcx + 0xa0]
mov qword [rsp + 0x60], rcx
mov qword [rsp], rcx
call fcn.004345c0
mov rax, qword [rsp + 8]
test rax, rax
je 0x4342cf
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x434330
mov ecx, dword [rax + 0x90]
cmp ecx, 6
jne 0x434315
mov qword [rsp + 0x48], rax
mov ecx, dword [rsp + 0x2c]
movsxd rcx, ecx
add rcx, 0x20
mov rdx, qword [rax + 8]
sub rdx, rcx
mov qword [rsp + 0x30], rdx
mov ecx, dword [rsp + 0x98]
test ecx, ecx
jg 0x4341ea
lea rcx, [rax + 0x38]
mov qword [rsp + 0x58], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], 0x38
call fcn.00454a70
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0x38], rax
mov qword [rcx + 0x80], rax
lea rax, [0x007ddee0]
mov qword [rsp + 0x68], rax
lea rax, [0x008c59d0]
mov qword [rsp + 0x70], rax
test byte [rax], al
lea rax, [rsp + 0x70]
test byte [rax], al
mov rax, qword [0x008c59d0]
inc rax
mov qword [rcx + 0x40], rax
mov rax, rcx
mov qword [rax + 0x48], rcx
mov rcx, qword [rsp + 0x58]
test byte [rcx], al
mov rcx, qword [rax + 0x38]
add rcx, 0xfffffffffffffff8
mov rdx, rcx
mov rbx, qword [rsp + 0x88]
mov rsi, qword [rbx]
mov rdi, qword [rax + 0x40]
mov qword [rcx], rdi
mov qword [rax + 0x38], rdx
mov qword [rax + 0x40], rsi
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x50]
test ecx, ecx
jne 0x4341d7
mov qword [rax + 0x50], rbx
mov rcx, qword [rsp + 0xa0]
mov qword [rax + 0x120], rcx
mov rcx, qword [rbx]
mov qword [rax + 0x128], rcx
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rcx + 0x30]
mov rdx, qword [rdx + 0x90]
test rdx, rdx
je 0x43407f
mov ebx, dword [0x01636820]
lea rdi, [rax + 0x158]
mov rdx, qword [rdx + 0x158]
test ebx, ebx
jne 0x4341c4
mov qword [rax + 0x158], rdx
mov qword [rsp], rax
call fcn.0044bb10
movzx eax, byte [rsp + 8]
test al, al
je 0x4340a1
mov eax, 1
lea rcx, [0x010f0aa0]
lock xadd dword [rcx], eax
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xc4], 0
mov qword [rsp], rax
movabs rcx, 0x100000006
mov qword [rsp + 8], rcx
call fcn.0042e4a0
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x5d0]
mov rdx, qword [rax + 0x5d8]
cmp rcx, rdx
jne 0x434104
mov ecx, 0x10
lea rdx, [0x010f0a60]
lock xadd qword [rdx], rcx
lea rdx, [rcx + 1]
mov qword [rax + 0x5d0], rdx
add rcx, 0x11
mov qword [rax + 0x5d8], rcx
mov rcx, qword [rax + 0x5d0]
mov rdx, qword [rsp + 0x48]
mov qword [rdx + 0x98], rcx
inc qword [rax + 0x5d0]
movzx ecx, byte [0x01112510]
test cl, cl
jne 0x4341a0
mov qword [rsp], rax
mov qword [rsp + 8], rdx
mov byte [rsp + 0x10], 1
call fcn.00437500
mov eax, dword [0x010f0ab0]
test eax, eax
je 0x43415b
mov eax, dword [0x010f0ab4]
test eax, eax
jne 0x43415b
movzx eax, byte [0x01635ede]
test al, al
jne 0x434199
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x30]
add dword [rcx + 0xd0], 0xffffffff
mov rcx, qword [rax + 0x30]
mov ecx, dword [rcx + 0xd0]
test ecx, ecx
jne 0x43418c
movzx ecx, byte [rax + 0xc0]
test cl, cl
je 0x43418c
mov qword [rax + 0x10], 0xfffffffffffffade
mov rbp, qword [rsp + 0x78]
add rsp, 0x80
ret
call fcn.00430d20
jmp 0x43415b
mov rax, qword [rdx + 0x128]
mov qword [rsp + 8], rax
mov qword [rsp], rdx
call fcn.00447e30
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
jmp 0x434129
mov rbx, rax
mov rax, rdx
call fcn.004544a0
mov rax, rbx
jmp 0x43407f
mov rcx, rax
mov rax, rbx
call fcn.004544a0
mov rax, rcx
jmp 0x43402e
mov qword [rsp], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 8], rdx
movsxd rcx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x10], rcx
call fcn.00454d00
movzx eax, byte [0x01636824]
test al, al
je 0x4342c5
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x30]
mov rcx, qword [rcx + 0x90]
movzx ecx, byte [rcx + 0xc3]
test cl, cl
je 0x434241
mov rax, qword [rsp + 0x48]
jmp 0x433f86
mov rax, qword [rsp + 0x88]
mov rcx, qword [rax]
mov qword [rsp], rcx
call fcn.00443c90
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], 0
call fcn.004449f0
mov rax, qword [rsp + 0x18]
mov qword [rsp], rax
mov dword [rsp + 8], 0
call fcn.00444d00
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x30]
mov qword [rsp], rcx
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 0
mov qword [rsp + 0x20], rax
call fcn.00412100
mov rax, qword [rsp + 0x50]
jmp 0x434237
mov rax, qword [rsp + 0x50]
jmp 0x434237
mov dword [rsp], 0x800
call fcn.00433d70
mov rax, qword [rsp + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp], rax
movabs rcx, 0x600000000
mov qword [rsp + 8], rcx
call fcn.0042e4a0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042d310
mov rax, qword [rsp + 0x40]
jmp 0x433f3f
lea rax, [0x008ae0d8]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0042ab20
ud2
lea rax, [0x008ae0f4]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0042ab20
ud2
lea rax, [0x008bae6f]
mov qword [rsp], rax
mov qword [rsp + 8], 0x37
call fcn.0042ab20
ud2
mov rax, qword [rax + 0x30]
mov dword [rax + 0xbc], 0xffffffff
lea rax, [0x008a731f]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.00433ea0