Function at 0x40c610
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x40caa0
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x40]
mov rdx, qword [rax + 0x38]
test rcx, rcx
je 0x40ca85
mov rcx, qword [rsp + 0x80]
movzx ebx, byte [rcx + 0x14]
test bl, 1
jne 0x40c7ba
movzx ebx, byte [rsp + 0x88]
test bl, bl
je 0x40c685
mov qword [rsp + 0x90], 0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov ecx, dword [rdx]
mov dword [rsp + 8], ecx
mov qword [rsp], rax
call fcn.0044c570
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x80]
mov qword [rsp], rcx
call fcn.0044c070
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x58], rcx
mov rdx, qword [rsp + 0x78]
mov qword [rsp], rdx
call fcn.0044c070
mov rax, qword [rsp + 8]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rsp + 0x60]
mov qword [rsp], rdx
call fcn.0044cd00
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x48], rcx
lea rdx, [0x00847020]
mov qword [rsp], rdx
call fcn.00410220
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x10]
test ecx, ecx
jne 0x40c7a8
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x28], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x20]
test ecx, ecx
jne 0x40c796
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0x20]
mov qword [rax + 0x38], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x30]
test ecx, ecx
jne 0x40c784
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x30], rcx
mov rcx, rax
jmp 0x40ca6e
mov rcx, rax
mov rax, qword [rsp + 0x48]
call fcn.004544a0
jmp 0x40ca6e
mov rcx, rax
mov rax, qword [rsp + 0x50]
call fcn.004544a0
mov rax, rcx
jmp 0x40c75c
mov rcx, rax
mov rax, qword [rsp + 0x58]
call fcn.004544a0
mov rax, rcx
jmp 0x40c73c
mov rdx, qword [0x010e3358]
mov qword [rsp], rdx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rcx
call fcn.0040cab0
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x40c944
mov rcx, qword [rax + 0x18]
test rcx, rcx
jne 0x40c932
movzx ecx, byte [rsp + 0x88]
test cl, cl
je 0x40c811
mov qword [rsp + 0x90], 0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp], rax
call fcn.0044c070
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x58], rcx
mov rdx, qword [rsp + 0x78]
mov qword [rsp], rdx
call fcn.0044c070
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x50], rcx
mov rdx, qword [rsp + 0x38]
mov qword [rsp], rdx
call fcn.0040ccd0
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x48], rcx
lea rdx, [0x00847020]
mov qword [rsp], rdx
call fcn.00410220
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x10]
test ecx, ecx
jne 0x40c920
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x28], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x20]
test ecx, ecx
jne 0x40c90e
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0x20]
mov qword [rax + 0x38], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 0x30]
test ecx, ecx
jne 0x40c8fc
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x30], rcx
mov rcx, rax
jmp 0x40ca57
mov rcx, rax
mov rax, qword [rsp + 0x48]
call fcn.004544a0
jmp 0x40ca57
mov rcx, rax
mov rax, qword [rsp + 0x50]
call fcn.004544a0
mov rax, rcx
jmp 0x40c8d4
mov rcx, rax
mov rax, qword [rsp + 0x58]
call fcn.004544a0
mov rax, rcx
jmp 0x40c8b4
mov qword [rsp + 0x90], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
lea rax, [0x01636658]
mov qword [rsp], rax
call fcn.0040e440
mov rax, qword [0x010e3358]
mov qword [rsp], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 8], rax
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x10], rcx
call fcn.0040cab0
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x40c9a4
mov qword [rsp + 0x38], rax
lea rax, [0x01636658]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x38]
jmp 0x40c7e2
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x40]
dec rcx
shl rcx, 3
add rcx, 0x20
mov qword [rsp], rcx
mov qword [rsp + 8], 0
lea rcx, [0x0163d160]
mov qword [rsp + 0x10], rcx
call fcn.00410680
mov rdi, qword [rsp + 0x18]
test byte [rdi], al
mov eax, dword [0x01636820]
lea rcx, [rdi + 8]
test eax, eax
jne 0x40ca35
mov rax, qword [rsp + 0x78]
mov qword [rdi], rax
mov rcx, qword [rsp + 0x80]
mov qword [rdi + 8], rcx
mov qword [rsp + 0x40], rdi
mov qword [rsp], rdi
call fcn.0040ccd0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0040cb10
lea rax, [0x01636658]
mov qword [rsp], rax
call fcn.0040e630
mov rax, qword [rsp + 0x40]
jmp 0x40c7e2
mov rax, qword [rsp + 0x78]
call fcn.004544a0
mov rdx, rdi
mov rdi, rcx
mov rax, qword [rsp + 0x80]
call fcn.004544a0
mov rdi, rdx
jmp 0x40c9ff
lea rax, [0x008058c0]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
call fcn.0042a320
ud2
lea rax, [0x008058c0]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
call fcn.0042a320
ud2
lea rax, [0x008b0389]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.0040c610