Function at 0x523bd0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x68]
cmp rax, qword [rcx + 0x10]
jbe 0x524385
sub rsp, 0xe8
mov qword [rsp + 0xe0], rbp
lea rbp, [rsp + 0xe0]
mov rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xf8]
cmp rax, rcx
jge 0x5242db
jae 0x52437e
mov rdx, qword [rsp + 0xf0]
movzx ebx, byte [rdx + rax]
inc rax
mov esi, ebx
shr bl, 6
movzx ebx, bl
mov qword [rsp + 0x68], rbx
mov edi, esi
and esi, 0x20
cmp sil, 0x20
sete sil
mov byte [rsp + 0x47], sil
and edi, 0x1f
cmp rdi, 0x1f
je 0x524161
xor r8d, r8d
mov r9, r8
mov qword [rsp + 0x60], rdi
cmp rax, rcx
jge 0x5240af
jae 0x524377
movzx r10d, byte [rdx + rax]
inc rax
test r10b, 0x80
je 0x5240a3
and r10d, 0x7f
test r10, r10
je 0x523ff1
xor r11d, r11d
xor r12d, r12d
jmp 0x523ca7
inc r11
mov rax, r13
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], r12
cmp r11, r10
jge 0x523efe
cmp rax, rcx
jge 0x523e50
jae 0x524370
lea r13, [rax + 1]
mov qword [rsp + 0x58], r13
movzx eax, byte [rdx + rax]
cmp r12, 0x800000
jge 0x523da2
shl r12, 8
or r12, rax
test r12, r12
jne 0x523ca1
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x88], 0
lea rax, [0x008b31af]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 0x23
lea rax, [0x008f9bc0]
mov qword [rsp], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x120], rdx
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp + 0x98], 0
lea rax, [0x008a378c]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 0x10
lea rax, [0x008f9bc0]
mov qword [rsp], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x120], rdx
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp + 0xa8], 0
lea rax, [0x008aa33c]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 0x17
lea rax, [0x008f9be0]
mov qword [rsp], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x120], rdx
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
cmp r12, 0x80
jl 0x523f4f
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], r12
mov byte [rsp + 0x128], sil
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], r9
mov qword [rsp + 0x140], r8
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp + 0x78], 0
lea rax, [0x008a5544]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x12
lea rax, [0x008f9bc0]
mov qword [rsp], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x120], rdx
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xb8], 0
lea rax, [0x008b198f]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 0x21
lea rax, [0x008f9be0]
mov qword [rsp], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], 0
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
and r10d, 0x7f
mov r12, r10
jmp 0x523f07
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xc8], 0
lea rax, [0x008aa33c]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 0x17
lea rax, [0x008f9be0]
mov qword [rsp], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], 0
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
mov rbx, qword [rsp + 0x100]
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rax
call fcn.00522df0
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
test rcx, rcx
jne 0x524286
cmp rdx, 0x1f
jl 0x5241cf
movzx esi, byte [rsp + 0x47]
mov rdi, rdx
mov r8, rax
mov r9, rcx
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
mov rax, rbx
mov rbx, qword [rsp + 0x68]
jmp 0x523c66
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xd8], 0
lea rax, [0x008a26b8]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 0xf
lea rax, [0x008f9be0]
mov qword [rsp], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 8], rax
call fcn.0040d870
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x110], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], 0
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov rsi, qword [rsp + 0x68]
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], 0
movzx edx, byte [rsp + 0x47]
mov byte [rsp + 0x128], dl
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
lea rax, [0x00810ba0]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x29
mov eax, dword [0x01636820]
test eax, eax
jne 0x524362
lea rax, [0x008b5bb5]
mov qword [rdi], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
mov byte [rsp + 0x128], 0
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x130], rax
lea rax, [0x008f8f20]
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rdi
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
lea rax, [0x008b5bb5]
call fcn.004544a0
jmp 0x52430c
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.00451b80
jmp fcn.00523bd0