Function at 0x73b8d0
Capabilities:
Get geographical location
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x73c238
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movzx eax, byte [0x01635e8a]
test al, al
jne 0x73c223
lea rax, [0x0089bf62]
mov qword [rsp], rax
mov qword [rsp + 8], 0xc
call fcn.004719f0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jne 0x73c1d5
mov qword [rsp + 0x38], rax
mov dword [rsp], 0x18
lea rax, [0x008c5cd8]
mov qword [rsp + 8], rax
call fcn.004295c0
test eax, eax
jne 0x73c1c5
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.0073b190
lea rax, [0x00896479]
mov qword [rsp], rax
mov qword [rsp + 8], 9
call fcn.007310a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x016365b0], rax
test rcx, rcx
jne 0x73c177
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.0073b390
lea rax, [0x00897b6f]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.004719f0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x01636438], rax
test rcx, rcx
jne 0x73c129
mov qword [rsp], rax
lea rax, [0x0088e9ff]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 6
call fcn.00471ca0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x20]
mov qword [0x01636430], rax
test rcx, rcx
je 0x73ba64
lea rax, [0x008ade38]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
mov qword [rsp + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x18], xmm0
call fcn.004d2590
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x0089e733]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636598], rax
lea rax, [0x008a38fc]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636590], rax
lea rax, [0x008a0dba]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636508], rax
lea rax, [0x008a4549]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636510], rax
lea rax, [0x00897e99]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636450], rax
lea rax, [0x0089a0a3]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364b8], rax
lea rax, [0x00897ea3]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636588], rax
lea rax, [0x0089c41e]
mov qword [rsp], rax
mov qword [rsp + 8], 0xc
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636458], rax
lea rax, [0x0089e719]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364a8], rax
lea rax, [0x008a0d9e]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364e8], rax
lea rax, [0x008a661d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364f8], rax
lea rax, [0x008a0dd6]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636578], rax
lea rax, [0x008a660a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364d8], rax
lea rax, [0x008a65f7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636490], rax
lea rax, [0x008abb43]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636480], rax
lea rax, [0x008b0ec6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636478], rax
lea rax, [0x008a0dac]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636500], rax
lea rax, [0x0089c42a]
mov qword [rsp], rax
mov qword [rsp + 8], 0xc
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364f0], rax
lea rax, [0x0089e70c]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636470], rax
lea rax, [0x008a455a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636530], rax
lea rax, [0x008abb2a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636468], rax
lea rax, [0x008a38bc]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364d0], rax
lea rax, [0x008a38ac]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364a0], rax
lea rax, [0x008a389c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636488], rax
lea rax, [0x008a275d]
mov qword [rsp], rax
mov qword [rsp + 8], 0xf
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636520], rax
lea rax, [0x008a456b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636570], rax
lea rax, [0x0089e726]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636580], rax
lea rax, [0x008ae164]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x016365a8], rax
lea rax, [0x008ae148]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x016365a0], rax
lea rax, [0x008a90a6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x016364e0], rax
lea rax, [0x008a9090]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636498], rax
lea rax, [0x008a74c3]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636568], rax
lea rax, [0x008abb5c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x016364b0], rax
lea rax, [0x008abb75]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636560], rax
lea rax, [0x008b4dd8]
mov qword [rsp], rax
mov qword [rsp + 8], 0x27
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636518], rax
lea rax, [0x008b567f]
mov qword [rsp], rax
mov qword [rsp + 8], 0x28
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x016364c0], rax
lea rax, [0x0089e6ff]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636440], rax
lea rax, [0x0089a098]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636460], rax
lea rax, [0x008a38dc]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636550], rax
lea rax, [0x008a38cc]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636540], rax
lea rax, [0x008a38ec]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636558], rax
lea rax, [0x008a557a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x12
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636448], rax
lea rax, [0x008a0dc8]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636548], rax
lea rax, [0x008a74af]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x01636528], rax
lea rax, [0x008aa073]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0073b6b0
mov rax, qword [rsp + 0x10]
mov qword [0x01636538], rax
lea rax, [0x008a558c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x12
call fcn.0073b520
mov rax, qword [rsp + 0x10]
mov qword [0x016364c8], rax
mov byte [0x01635e8a], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x008aab2a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x18
mov qword [rsp + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x18], xmm0
call fcn.004d2590
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x008accd1]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1b
mov qword [rsp + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x18], xmm0
call fcn.004d2590
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x008ac561]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1a
mov qword [rsp + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x18], xmm0
call fcn.004d2590
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
movups xmmword [rsp + 0x50], xmm0
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
call fcn.00451b80
jmp fcn.0073b8d0