Function at 0x42cd80
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x20]
test rcx, rcx
jne 0x42d128
movzx ecx, byte [rax + 8]
test cl, cl
jne 0x42d10d
mov rcx, qword [rax + 0x10]
test rcx, rcx
jne 0x42d0f2
mov rcx, qword [rax + 0x18]
test rcx, rcx
jne 0x42d0d7
mov rcx, qword [rax + 0x48]
test rcx, rcx
jne 0x42d0bc
mov rcx, qword [rax + 0x58]
test rcx, rcx
jne 0x42d0a1
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
mov rdx, qword [rcx + 0x88]
test rdx, rdx
jne 0x42d086
mov rdx, qword [rcx + 0x30]
inc dword [rdx + 0xd0]
mov rdx, qword [rcx + 0x30]
mov qword [rsp + 0x40], rdx
mov rbx, qword [rdx + 0xa0]
mov qword [rsp + 0x60], rbx
test byte [rcx], al
mov rcx, qword [rbx + 0xe10]
mov rsi, qword [rbx + 0xe08]
lea r8, [rbx + 0xe00]
mov qword [rsp + 0x58], r8
cmp rsi, rcx
jne 0x42cf56
xor ecx, ecx
mov rsi, rcx
jmp 0x42ce4e
mov rsi, r12
mov r9, qword [rbx + 0xe00]
mov r10, qword [rbx + 0xe08]
mov r11, qword [rbx + 0xe10]
shr r11, 1
cmp r10, r11
jle 0x42cefc
lea r11, [r10 - 1]
cmp r11, r10
jae 0x42d07f
mov r12, qword [r9 + r10*8 - 8]
lea rdi, [r9 + r10*8 - 8]
mov r13d, dword [0x01636820]
test r13d, r13d
jne 0x42ceed
mov qword [r9 + r10*8 - 8], 0
mov r9, qword [rbx + 0xe10]
cmp r11, r9
ja 0x42d078
mov qword [rbx + 0xe08], r11
test rcx, rcx
je 0x42cee5
test byte [rsi], al
mov r9d, dword [0x01636820]
lea rdi, [rsi + 0x10]
test r9d, r9d
jne 0x42ced2
mov qword [rsi + 0x10], r12
jmp 0x42ce4b
mov rsi, rax
mov rax, r12
call fcn.004544a0
mov rax, rsi
jmp 0x42ce4b
mov rcx, r12
jmp 0x42ce4b
mov r9, rax
xor eax, eax
call fcn.004544a0
mov rax, r9
jmp 0x42ce9b
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rcx
lea rax, [0x010f0af0]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [rsp + 0x48]
test byte [rax], al
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x10]
mov rdx, qword [0x010f0af8]
test ecx, ecx
jne 0x42d05a
mov qword [rax + 0x10], rdx
mov rax, qword [rsp + 0x50]
mov qword [0x010f0af8], rax
lea rax, [0x010f0af0]
mov qword [rsp], rax
call fcn.0040e630
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rcx + 0xe10]
mov rbx, qword [rcx + 0xe08]
mov rsi, qword [rcx + 0xe00]
lea r8, [rbx + 1]
cmp r8, rdx
jg 0x42cfed
lea rdx, [rbx + 1]
mov qword [rcx + 0xe08], rdx
mov ecx, dword [0x01636820]
lea rdi, [rsi + rbx*8]
test ecx, ecx
jne 0x42cfe1
mov rax, qword [rsp + 0x78]
mov qword [rsi + rbx*8], rax
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x40]
mov edx, dword [rcx + 0xd0]
lea ebx, [rdx - 1]
mov dword [rcx + 0xd0], ebx
cmp edx, 1
jne 0x42cfd7
movzx ecx, byte [rax + 0xc0]
test cl, cl
je 0x42cfd7
mov qword [rax + 0x10], 0xfffffffffffffade
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, qword [rsp + 0x78]
call fcn.004544a0
jmp 0x42cf9b
lea rax, [0x007d2fe0]
mov qword [rsp], rax
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], r8
call fcn.0043d870
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x60]
mov qword [rbx + 0xe10], rdx
mov edx, dword [0x01636820]
test edx, edx
jne 0x42d04e
mov qword [rbx + 0xe00], rax
mov rsi, rax
mov rdx, rcx
mov rcx, rbx
mov rbx, rdx
jmp 0x42cf79
mov rdi, qword [rsp + 0x58]
call fcn.004544a0
jmp 0x42d03d
mov rax, rdx
call fcn.004544a0
lea rdi, [0x010f0af8]
mov rax, qword [rsp + 0x50]
call fcn.004544a0
jmp 0x42cf46
call fcn.00429340
ud2
call fcn.004292d0
ud2
lea rax, [0x008b6c67]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0042ab20
ud2
lea rax, [0x008aef14]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0042ab20
ud2
lea rax, [0x008b3962]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.0042ab20
ud2
lea rax, [0x008b10c6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0042ab20
ud2
lea rax, [0x008b10a6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0042ab20
ud2
lea rax, [0x008b469e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
call fcn.0042ab20
ud2
lea rax, [0x008b1086]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0042ab20
ud2