Function at 0x423c70
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x423fa5
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov rcx, qword [0x010ee600]
test rcx, rcx
je 0x423f23
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
xor eax, eax
xor ebx, ebx
jmp 0x423cd7
mov rsi, qword [rcx + rax*8]
inc rax
add rsi, rbx
mov rdi, rsi
shl rsi, 0xa
lea rbx, [rdi + rsi]
mov rsi, rbx
shr rbx, 6
xor rbx, rsi
cmp rax, rdx
jl 0x423cb8
mov rsi, qword [0x010ee600]
test byte [rsi], al
mov rdi, qword [rsp + 0x68]
add rbx, rdi
mov r8, rbx
shl rbx, 0xa
add rbx, r8
mov r8, rbx
shr rbx, 6
xor r8, rbx
lea rbx, [r8 + r8*8]
mov r8, rbx
shr rbx, 0xb
xor r8, rbx
movabs rax, 0xba6a1fbc53191a92
mov rbx, rdx
mul r8
shr rdx, 0x11
imul rdx, rdx, 0x2bf1f
mov r9, r8
sub r8, rdx
cmp r8, 0x2bf1f
jae 0x423f83
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], r8
mov rax, qword [rsi + r8*8]
jmp 0x423d50
mov rax, qword [rax]
test rax, rax
je 0x423e04
mov rdx, qword [rax + 0x10]
mov rsi, qword [rsp + 0x60]
cmp rdx, rsi
jne 0x423d4d
mov rdx, qword [rax + 0x18]
cmp r9, rdx
jne 0x423d4d
mov rdx, qword [rax + 0x20]
cmp rdi, rdx
jne 0x423d4d
lea rdx, [rax + 0x30]
test byte [rdx], al
mov r10, qword [rax + 0x28]
cmp r10, 0x20
ja 0x423f7c
mov qword [rsp + 0x48], rax
mov qword [rsp], rdx
mov qword [rsp + 8], r10
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rbx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x28], rax
call fcn.00423fb0
movzx eax, byte [rsp + 0x30]
test al, al
jne 0x423ded
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
jmp 0x423d4d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
movzx eax, byte [rsp + 0x88]
test al, al
je 0x423f0d
mov rax, qword [rsp + 0x60]
mov qword [rsp], rax
mov qword [rsp + 8], rbx
call fcn.00423aa0
mov rax, qword [rsp + 0x10]
lea rcx, [rax + 0x30]
test byte [rcx], al
mov rdx, qword [rax + 0x28]
cmp rdx, 0x20
ja 0x423f75
mov qword [rsp + 0x48], rax
mov rbx, qword [rsp + 0x78]
cmp rdx, rbx
jle 0x423f05
mov qword [rsp], rcx
mov rax, qword [rsp + 0x70]
mov qword [rsp + 8], rax
shl rbx, 3
mov qword [rsp + 0x10], rbx
call fcn.00454d00
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x68]
mov qword [rcx + 0x20], rax
mov rax, qword [0x010ee600]
test byte [rax], al
mov rdx, qword [rsp + 0x38]
mov rax, qword [rax + rdx*8]
mov qword [rcx], rax
mov rax, qword [0x010ee600]
test byte [rax], al
mov qword [rax + rdx*8], rcx
mov rax, qword [rsp + 0x60]
cmp rax, 1
jne 0x423ed7
mov rax, qword [0x010ee640]
mov qword [rcx + 8], rax
mov qword [0x010ee640], rcx
mov qword [rsp + 0x90], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
cmp rax, 3
jne 0x423ef1
mov rax, qword [0x010ee668]
mov qword [rcx + 8], rax
mov qword [0x010ee668], rcx
jmp 0x423ec5
mov rax, qword [0x010ee5f8]
mov qword [rcx + 8], rax
mov qword [0x010ee5f8], rcx
jmp 0x423ec5
mov rbx, rdx
jmp 0x423e53
mov qword [rsp + 0x90], 0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp], 0x15f8f8
lea rax, [0x0163d150]
mov qword [rsp + 8], rax
call fcn.004144c0
mov eax, dword [0x01636820]
mov rcx, qword [rsp + 0x10]
test eax, eax
jne 0x423f64
mov qword [0x010ee600], rcx
mov rcx, qword [0x010ee600]
test rcx, rcx
jne 0x423ca8
jmp 0x423f8a
lea rdi, [0x010ee600]
mov rax, rcx
call fcn.004544a0
jmp 0x423f52
call fcn.00429340
ud2
call fcn.00429340
ud2
call fcn.004292d0
ud2
lea rax, [0x008b0598]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.00423c70