Function at 0x431410
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x20]
cmp rax, qword [rcx + 0x10]
jbe 0x431fc9
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
lea rax, [rsp + 0x10]
mov qword [rsp + 0x90], rax
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
mov qword [rsp + 0x80], rcx
jmp 0x431941
xor edx, edx
div ecx
mov dword [rsp + 0x40], edx
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x80]
mov ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x3c]
cmp ecx, edx
je 0x43153e
mov eax, dword [0x010f0b38]
test eax, eax
jne 0x43152e
mov eax, dword [rsp + 0x40]
mov rcx, qword [0x010f0078]
mov rdx, qword [0x010f0070]
cmp rax, rcx
jae 0x431fad
mov rax, qword [rdx + rax*8]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
cmp r8, 2
mov rcx, qword [rsp + 0x90]
setg byte [rcx]
call fcn.00437a40
mov rax, qword [rsp + 0x18]
test rax, rax
jne 0x43150e
inc dword [rsp + 0x38]
mov eax, dword [rsp + 0x40]
add eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x3c]
test ecx, ecx
jne 0x431470
jmp 0x431fa6
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov rax, qword [rsp + 0x90]
mov rcx, r9
jmp 0x431941
lea rax, [r8 + 1]
mov rdx, r9
cmp rax, 4
jge 0x4315f9
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 0x30]
mov ebx, dword [rcx + 0xf0]
mov esi, dword [rcx + 0xf4]
mov dword [rcx + 0xf0], esi
mov edi, ebx
shl ebx, 0x11
xor ebx, edi
mov edi, esi
xor esi, ebx
shr ebx, 7
xor ebx, esi
mov esi, edi
shr edi, 0x10
xor edi, ebx
mov dword [rcx + 0xf4], edi
lea ecx, [rdi + rsi]
mov ebx, dword [0x010f0180]
mov rsi, qword [0x010f0188]
mov rdi, qword [0x010f0190]
test ebx, ebx
je 0x431fc2
mov r8, rax
mov eax, ecx
mov r9, rdx
xor edx, edx
div ebx
test edi, edi
je 0x431fbb
mov eax, ecx
mov ecx, edx
xor edx, edx
div edi
mov edx, edx
cmp rdx, rdi
jae 0x431fb4
mov qword [rsp + 0x30], r8
mov edx, dword [rsi + rdx*4]
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x3c], ebx
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x44], edx
jmp 0x431485
mov rax, qword [rsp + 0x88]
jmp 0x43179d
mov rbx, qword [rsp + 0x30]
lea rcx, [rbx + 1]
mov rax, qword [rsp + 0x80]
movzx edx, byte [rsp + 0x27]
mov rbx, qword [rsp + 0x28]
cmp rcx, rbx
jge 0x4316aa
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x70]
mov rdx, qword [rax + rcx*8]
mov qword [rsp], rdx
call fcn.004374c0
movzx eax, byte [rsp + 8]
test al, al
jne 0x431606
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [0x010f0aa8]
mov qword [rsp + 0x88], rax
test rax, rax
je 0x431689
mov rcx, qword [rax + 0x10]
mov qword [0x010f0aa8], rcx
mov ecx, 0xffffffff
lea rdx, [0x010f0ab0]
lock xadd dword [rdx], ecx
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x88]
test rax, rax
jne 0x431bcb
mov eax, dword [0x01635f30]
test eax, eax
je 0x431903
mov rax, qword [0x010f1020]
test rax, rax
jne 0x431bc1
mov eax, dword [0x010f10a8]
mov ecx, dword [0x010f10ac]
cmp eax, ecx
jae 0x431bba
mov eax, 1
test al, al
je 0x431903
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [0x010f0aa8]
test rax, rax
je 0x431bae
mov rcx, qword [rax + 0x10]
mov qword [0x010f0aa8], rcx
mov ecx, 0xffffffff
lea rdx, [0x010f0ab0]
lock xadd dword [rdx], ecx
test rax, rax
je 0x431739
mov rcx, qword [rax + 0x1258]
test rcx, rcx
je 0x431b9e
mov qword [rsp + 0x78], rax
lea rcx, [0x010f0a70]
mov qword [rsp], rcx
call fcn.0040e630
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x431903
mov qword [rsp], rax
call fcn.004355a0
movzx eax, byte [rsp + 0x27]
test al, al
je 0x4318f6
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x30]
mov byte [rcx + 0xe4], 1
mov ecx, 1
lea rdx, [0x010f0ab4]
lock xadd dword [rdx], ecx
mov rdx, rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov ecx, dword [0x01635f30]
test ecx, ecx
je 0x43182a
test byte [rax], al
mov rcx, qword [rax + 0x1258]
test rcx, rcx
je 0x43182a
lea rcx, [rax + 0x1270]
test byte [rcx], al
mov rcx, qword [rax + 0x1270]
test rcx, rcx
je 0x431d37
mov rcx, qword [rcx + 0x10]
test rcx, rcx
jne 0x431d30
mov rcx, qword [rax + 0x1278]
mov rcx, qword [rcx + 0x10]
test rcx, rcx
sete cl
test cl, cl
je 0x431d26
mov rcx, qword [0x010f1020]
test rcx, rcx
jne 0x431d1c
mov ecx, dword [0x010f10a8]
mov ebx, dword [0x010f10ac]
cmp ecx, ebx
jae 0x431d15
mov ecx, 1
test cl, cl
jne 0x431c94
mov rax, qword [0x010f0078]
mov qword [rsp + 0x28], rax
mov rcx, qword [0x010f0070]
mov qword [rsp + 0x70], rcx
lea rdx, [0x010f0a70]
mov qword [rsp], rdx
call fcn.0040e440
mov eax, dword [0x010f0b38]
test eax, eax
jne 0x431c6f
mov rax, qword [rsp + 0x48]
test byte [rax], al
mov ecx, dword [rax + 0x22a0]
test ecx, ecx
jne 0x431c6f
mov ecx, dword [0x010f0ac8]
test ecx, ecx
jne 0x431c1f
call fcn.004357b0
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x48]
cmp rax, rcx
jne 0x431f8b
mov qword [rsp], rcx
call fcn.00437420
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x30]
movzx edx, byte [rcx + 0xe4]
test dl, dl
je 0x4318eb
mov byte [rcx + 0xe4], 0
mov ecx, 0xffffffff
lea rbx, [0x010f0ab4]
lock xadd dword [rbx], ecx
dec ecx
test ecx, ecx
jl 0x431f70
mov byte [rsp + 0x27], dl
xor ecx, ecx
jmp 0x43161c
mov rax, qword [rsp + 0x80]
jmp 0x431795
mov eax, dword [0x01635f44]
test eax, eax
je 0x43192c
mov eax, dword [0x01635f48]
test eax, eax
jbe 0x43192c
xor eax, eax
lea rcx, [0x010f0a68]
xchg qword [rcx], rax
test rax, rax
jne 0x431a4c
call fcn.00430610
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rcx + 0x30]
mov rdx, qword [rdx + 0xa0]
mov ebx, dword [0x010f0b38]
test ebx, ebx
je 0x43196d
call fcn.00431160
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
jmp 0x431941
mov qword [rsp + 0x88], rdx
test byte [rdx], al
mov ebx, dword [rdx + 0x22a0]
test ebx, ebx
jne 0x431f18
movzx ebx, byte [0x01635ed5]
test bl, bl
je 0x43199f
movzx ebx, byte [0x01635ed6]
test bl, bl
jne 0x431ed8
mov rbx, qword [0x010e3350]
mov rbx, qword [rbx]
test rbx, rbx
jne 0x431eb9
mov qword [rsp], rdx
call fcn.00437840
mov rax, qword [rsp + 8]
movzx ecx, byte [rsp + 0x10]
test rax, rax
jne 0x431e9a
mov ecx, dword [0x010f0ac8]
test ecx, ecx
jne 0x431e29
mov ecx, dword [0x01635f44]
test ecx, ecx
je 0x431a00
mov ecx, dword [0x01635f48]
test ecx, ecx
jbe 0x431a00
mov rcx, qword [0x010f0a68]
test rcx, rcx
jne 0x431d97
mov ecx, dword [0x01635f3c]
mov edx, dword [0x010f0ab0]
lea ebx, [rcx - 1]
cmp ebx, edx
je 0x431d82
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rdx + 0x30]
movzx ebx, byte [rbx + 0xe4]
test bl, bl
je 0x431d5d
mov rcx, qword [rdx + 0x30]
movzx ebx, byte [rcx + 0xe4]
test bl, bl
je 0x431d41
xor eax, eax
jmp 0x431545
mov rax, qword [rsp + 0x80]
mov rdx, qword [rax + 0x30]
mov rbx, qword [rdx + 0xa0]
test rbx, rbx
jne 0x431f55
movzx edx, byte [rdx + 0xe4]
test dl, dl
jne 0x431f3a
mov byte [rsp], 1
call fcn.00426c00
mov rax, qword [rsp + 8]
mov qword [rsp + 0x50], rax
call fcn.00455830
mov rax, qword [rsp]
lea rcx, [0x010f0a68]
xchg qword [rcx], rax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x43192c
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [0x010f0aa8]
mov qword [rsp + 0x88], rax
test rax, rax
je 0x431aea
mov rcx, qword [rax + 0x10]
mov qword [0x010f0aa8], rcx
mov ecx, 0xffffffff
lea rdx, [0x010f0ab0]
lock xadd dword [rdx], ecx
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x88]
test rax, rax
jne 0x431b1a
mov rax, qword [rsp + 0x50]
mov qword [rsp], rax
call fcn.004321a0
jmp 0x43192c
mov qword [rsp], rax
call fcn.004355a0
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0xb8]
mov qword [rsp], rcx
call fcn.004321a0
mov rax, qword [rsp + 0x50]
mov qword [rsp], rax
movabs rcx, 0x100000004
mov qword [rsp + 8], rcx
call fcn.0042e4a0
movzx eax, byte [0x01112510]
test al, al
jne 0x431b85
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov rax, qword [rsp + 0x50]
mov qword [rsp], rax
mov qword [rsp + 8], 0
call fcn.004482f0
jmp 0x431b60
mov qword [rsp], rax
call fcn.00437420
xor eax, eax
jmp 0x431739
lea rdx, [0x010f0ab0]
jmp 0x431727
xor eax, eax
jmp 0x4316e1
mov eax, 1
jmp 0x4316e1
mov qword [rsp], rax
call fcn.004355a0
movzx eax, byte [rsp + 0x27]
test al, al
je 0x431c15
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x30]
mov byte [rcx + 0xe4], 1
mov ecx, 1
lea rdx, [0x010f0ab4]
lock xadd dword [rdx], ecx
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
jmp 0x431941
mov rax, qword [rsp + 0x80]
jmp 0x431c00
mov qword [rsp], rax
mov dword [rsp + 8], 0
call fcn.004372e0
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x68], rax
lea rcx, [0x010f0a70]
mov qword [rsp], rcx
call fcn.0040e630
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
jmp 0x431941
mov qword [rax + 0x1260], 2
mov rax, qword [rax + 0x1258]
mov qword [rsp + 0x88], rax
mov qword [rsp], rax
movabs rcx, 0x100000004
mov qword [rsp + 8], rcx
call fcn.0042e4a0
movzx eax, byte [0x01112510]
test al, al
jne 0x431cf9
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
mov qword [rsp + 8], 0
call fcn.004482f0
jmp 0x431cd1
xor ecx, ecx
jmp 0x431822
mov ecx, 1
jmp 0x431822
mov ecx, 1
jmp 0x431822
xor ecx, ecx
jmp 0x4317f1
mov ecx, 1
jmp 0x4317f1
mov byte [rcx + 0xe4], 1
mov ecx, 1
lea rbx, [0x010f0ab4]
lock xadd dword [rbx], ecx
jmp 0x431a45
mov ebx, dword [0x010f0ab4]
mov esi, dword [0x010f0ab0]
shl ebx, 1
sub ecx, esi
cmp ebx, ecx
jb 0x431a32
mov rax, qword [rsp + 0x88]
jmp 0x43179d
mov rdx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
jmp 0x43179d
mov byte [rsp], 0
call fcn.00426c00
mov rax, qword [rsp + 8]
test rax, rax
je 0x431a00
mov qword [rsp + 0x58], rax
mov rcx, qword [rax + 0xb8]
mov qword [rsp], rcx
call fcn.004321a0
mov rax, qword [rsp + 0x58]
mov qword [rsp], rax
movabs rcx, 0x100000004
mov qword [rsp + 8], rcx
call fcn.0042e4a0
movzx eax, byte [0x01112510]
test al, al
jne 0x431e10
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov rax, qword [rsp + 0x58]
mov qword [rsp], rax
mov qword [rsp + 8], 0
call fcn.004482f0
jmp 0x431deb
lea rax, [0x010f0a70]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
mov dword [rsp + 8], 0
call fcn.004372e0
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x60], rax
lea rcx, [0x010f0a70]
mov qword [rsp], rcx
call fcn.0040e630
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x4319dc
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], cl
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov qword [rsp], rbx
mov qword [rsp + 8], 0
call fcn.00453280
mov rdx, qword [rsp + 0x88]
jmp 0x4319b2
call fcn.00414e40
mov rax, qword [rsp]
test rax, rax
jne 0x431f03
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jmp 0x43199f
mov qword [rsp + 8], 0
mov byte [rsp + 0x10], 1
call fcn.0042d920
jmp 0x431ee6
call fcn.0042fb20
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jmp 0x431985
lea rax, [0x008b2d2c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0042ab20
ud2
lea rax, [0x008adf18]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0042ab20
ud2
lea rax, [0x008b1887]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0042ab20
ud2
lea rax, [0x008a8139]
mov qword [rsp], rax
mov qword [rsp + 8], 0x15
call fcn.0042ab20
ud2
call fcn.004293b0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004293b0
ud2
call fcn.004293b0
ud2
call fcn.00451b80
jmp fcn.00431410