Function at 0x4434c0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x80]
cmp rax, qword [rcx + 0x10]
jbe 0x443b63
sub rsp, 0x100
mov qword [rsp + 0xf8], rbp
lea rbp, [rsp + 0xf8]
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax]
mov rdx, qword [rax]
mov ecx, dword [rcx]
mov dword [rsp + 0x24], ecx
cmp ecx, 0xfffffffb
jne 0x443aa3
movzx ebx, byte [rdx + 4]
test bl, bl
jne 0x443aa3
movzx ebx, byte [rdx + 5]
test bl, bl
jne 0x443aa3
movzx ebx, byte [rdx + 6]
cmp bl, 1
jne 0x443aa3
movzx ebx, byte [rdx + 7]
cmp bl, 8
jne 0x443aa3
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea rbx, [rcx - 1]
xor esi, esi
jmp 0x443558
mov rsi, r11
cmp rsi, rbx
jge 0x443831
mov r8, rsi
shl rsi, 4
mov r9, qword [rsi + rdx]
lea r10, [r8 + 1]
cmp r10, rcx
jae 0x443a9c
mov r11, r10
shl r10, 4
mov r12, qword [rdx + r10]
cmp r9, r12
jbe 0x443555
mov rcx, qword [rax + 8]
mov rdi, qword [rax]
mov r9, qword [rsi + rdx + 8]
cmp r9, rcx
jae 0x443a95
add r9, rdi
mov rdx, qword [rdx + r10 + 8]
cmp rdx, rcx
jae 0x443a8e
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x68], r11
mov qword [rsp + 0x60], rsi
lea rcx, [rdx + rdi]
cmp r11, rbx
jl 0x4437fc
mov ecx, 3
lea rdx, [0x0088b437]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp], r9
mov qword [rsp + 8], rax
call fcn.004443d0
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 0x20]
mov rbx, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x70]
cmp rdi, rdx
jae 0x443a87
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + rcx]
mov r9, qword [rsp + 0x68]
cmp r9, rdx
jae 0x443a87
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x58], r8
mov rax, qword [rsp + 0x78]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x50], rax
call fcn.0042b400
lea rax, [0x008ba2d6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x35
call fcn.0042bdc0
mov rax, qword [rsp + 0x58]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0xa0]
mov qword [rsp], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088b041]
mov qword [rsp], rax
mov qword [rsp + 8], 3
call fcn.0042bdc0
mov rax, qword [rsp + 0x50]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x80]
mov qword [rsp], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 8], rax
call fcn.0042bdc0
call fcn.0042b6b0
call fcn.0042b490
xor eax, eax
jmp 0x443770
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x78]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
call fcn.0042b400
lea rax, [0x0088ae7a]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0x58]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0xa0]
mov qword [rsp], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 8], rax
call fcn.0042bdc0
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x68]
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
jg 0x443a6c
mov rdx, qword [rsp + 0x108]
mov rbx, qword [rdx]
mov rsi, qword [rdx + 8]
mov rdi, qword [rdx + 0x18]
mov r8, qword [rdx + 0x20]
cmp rax, r8
jae 0x443a65
mov r8, rax
shl rax, 4
mov rdi, qword [rax + rdi + 8]
cmp rdi, rsi
jae 0x443a65
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x68], r8
lea rax, [rbx + rdi]
mov qword [rsp], rax
mov qword [rsp + 8], rdx
call fcn.004443d0
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 0x20]
mov rbx, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x68]
cmp rdi, rdx
jb 0x4436f7
jmp 0x443a65
mov qword [rsp + 0x98], r9
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004443d0
mov rdx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rsp + 0x108]
mov r9, qword [rsp + 0x98]
jmp 0x4435dc
mov r8, qword [rax + 0x50]
test rcx, rcx
jbe 0x443a43
mov r9, qword [rdx]
cmp r8, r9
jne 0x443a4a
mov r8, qword [rax + 0x58]
cmp rbx, rcx
jae 0x443a3c
shl rbx, 4
mov rcx, qword [rbx + rdx]
cmp r8, rcx
jne 0x443a4a
mov rcx, qword [rax + 0x170]
mov rdx, qword [rax + 0x178]
mov qword [rsp + 0x78], rdx
xor ebx, ebx
jmp 0x4438a1
mov r8, qword [rsp + 0x90]
lea rcx, [r8 + 0x28]
mov r8, qword [rsp + 0x70]
lea rbx, [r8 + 1]
mov rax, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x78]
cmp rbx, rdx
jge 0x443962
mov r8, qword [rcx]
mov qword [rsp + 0xd0], r8
lea rsi, [rcx + 8]
lea rdi, [rsp + 0xd8]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00454a44
mov rbp, qword [rbp]
mov r8, qword [rsp + 0xd0]
mov qword [rsp + 0xa8], r8
lea rdi, [rsp + 0xb0]
lea rsi, [rsp + 0xd8]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00454a44
mov rbp, qword [rbp]
mov r8, qword [rsp + 0xc8]
mov r9, qword [rsp + 0xb8]
mov r10, qword [rsp + 0xc0]
mov r11, qword [r8 + 8]
mov r8, qword [r8]
cmp r10, r11
jne 0x443972
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x90], rcx
mov qword [rsp], r9
mov qword [rsp + 8], r8
mov qword [rsp + 0x10], r10
call fcn.004539e0
movzx eax, byte [rsp + 0x18]
test al, al
jne 0x44387f
mov rax, qword [rsp + 0x108]
jmp 0x443972
mov rbp, qword [rsp + 0xf8]
add rsp, 0x100
ret
mov rcx, qword [rax + 0x160]
mov qword [rsp + 0xa0], rcx
mov rax, qword [rax + 0x168]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0xb0]
mov qword [rsp + 0x70], rdx
mov rbx, qword [rsp + 0xa8]
mov qword [rsp + 0x88], rbx
call fcn.0042b400
lea rax, [0x008af7e4]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0042bdc0
mov rax, qword [rsp + 0xa0]
mov qword [rsp], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088c7fb]
mov qword [rsp], rax
mov qword [rsp + 8], 5
call fcn.0042bdc0
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 8], rax
call fcn.0042bdc0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x0089b2d2]
mov qword [rsp], rax
mov qword [rsp + 8], 0xc
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x008a8fe0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
lea rax, [0x008ae04c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
movzx eax, byte [rdx + 4]
mov qword [rsp + 0x48], rax
movzx ecx, byte [rdx + 5]
mov qword [rsp + 0x40], rcx
movzx ebx, byte [rdx + 6]
mov qword [rsp + 0x38], rbx
movzx edx, byte [rdx + 7]
mov qword [rsp + 0x30], rdx
call fcn.0042b400
lea rax, [0x008b4ee9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x27
call fcn.0042bdc0
mov eax, dword [rsp + 0x24]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008afa3c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.004434c0