Function at 0x48a340
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x48a9a2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x48a984
mov rdx, qword [rsp + 0x88]
lea rbx, [rdx - 1]
test rbx, rbx
jge 0x48a96d
mov rsi, rbx
neg rbx
dec rbx
movabs rax, 0xaaaaaaaaaaaaaaab
mov rdi, rdx
imul rbx
sub rdx, rsi
sar rbx, 0x3f
dec rdx
sar rdx, 3
sub rdx, rbx
lea rbx, [rdx + 1]
mov rsi, qword [rsp + 0x80]
sub rsi, rbx
lea rdx, [rdx + rdx*2]
lea rdx, [rdi + rdx*4 + 0xb]
cmp rdx, 0xc
jl 0x48a962
movabs rax, 0xaaaaaaaaaaaaaaab
mov rbx, rdx
imul rdx
add rdx, rbx
mov rdi, rbx
sar rbx, 0x3f
sar rdx, 3
sub rdx, rbx
lea rbx, [rsi + rdx]
lea rdx, [rdx + rdx*2]
shl rdx, 2
sub rdi, rdx
mov rdx, qword [rsp + 0xb0]
test rdx, rdx
jge 0x48a955
mov rsi, rdx
neg rdx
dec rdx
movabs rax, 0x44b82fa09b5a52cc
mov r8, rdx
imul rdx
sar r8, 0x3f
sar rdx, 0x1c
sub rdx, r8
lea r8, [rdx + 1]
mov r9, qword [rsp + 0xa8]
sub r9, r8
imul rdx, rdx, 0x3b9aca00
lea rdx, [rsi + rdx + 0x3b9aca00]
cmp rdx, 0x3b9aca00
jl 0x48a94a
movabs rax, 0x44b82fa09b5a52cc
mov rsi, rdx
imul rdx
mov r8, rsi
sar rsi, 0x3f
sar rdx, 0x1c
sub rdx, rsi
lea rsi, [r9 + rdx]
imul rdx, rdx, 0x3b9aca00
sub r8, rdx
test rsi, rsi
jge 0x48a93a
mov rdx, rsi
neg rsi
dec rsi
movabs rax, 0x8888888888888889
mov r9, rdx
imul rsi
sub rdx, r9
sar rsi, 0x3f
dec rdx
sar rdx, 5
sub rdx, rsi
lea rsi, [rdx + 1]
mov r10, qword [rsp + 0xa0]
sub r10, rsi
imul rdx, rdx, 0x3c
lea rdx, [r9 + rdx + 0x3c]
cmp rdx, 0x3c
jl 0x48a92f
movabs rax, 0x8888888888888889
mov rsi, rdx
imul rdx
add rdx, rsi
sar rdx, 5
mov r9, rsi
sar rsi, 0x3f
sub rdx, rsi
lea rsi, [r10 + rdx]
imul rdx, rdx, 0x3c
sub r9, rdx
test rsi, rsi
jge 0x48a91f
mov rdx, rsi
neg rsi
dec rsi
movabs rax, 0x8888888888888889
mov r10, rdx
imul rsi
sub rdx, r10
sar rsi, 0x3f
dec rdx
sar rdx, 5
sub rdx, rsi
lea rsi, [rdx + 1]
mov r11, qword [rsp + 0x98]
sub r11, rsi
imul rdx, rdx, 0x3c
lea rdx, [r10 + rdx + 0x3c]
cmp rdx, 0x3c
jl 0x48a914
movabs rax, 0x8888888888888889
mov rsi, rdx
imul rdx
add rdx, rsi
mov r10, rsi
sar rsi, 0x3f
sar rdx, 5
sub rdx, rsi
lea rsi, [r11 + rdx]
imul rdx, rdx, 0x3c
sub r10, rdx
test rsi, rsi
jge 0x48a904
mov rdx, rsi
neg rsi
dec rsi
movabs rax, 0xaaaaaaaaaaaaaaab
mov r11, rdx
imul rsi
sub rdx, r11
sar rsi, 0x3f
dec rdx
sar rdx, 4
sub rdx, rsi
lea rsi, [rdx + 1]
mov r12, qword [rsp + 0x90]
sub r12, rsi
lea rdx, [rdx + rdx*2]
lea rdx, [r11 + rdx*8 + 0x18]
cmp rdx, 0x18
jl 0x48a8f9
movabs rax, 0xaaaaaaaaaaaaaaab
mov rsi, rdx
imul rdx
add rdx, rsi
sar rdx, 4
mov r11, rsi
sar rsi, 0x3f
sub rdx, rsi
lea rsi, [r12 + rdx]
lea rdx, [rdx + rdx*2]
shl rdx, 3
sub r11, rdx
movabs rdx, 0x440d116ebf
lea rax, [rdx + rbx]
mov rdx, rax
shr rax, 1
movabs r12, 0xa3d70a3d70a3d70b
mov r13, rdx
mul r12
shr rdx, 7
mov r14, rdx
imul rdx, rdx, 0x190
sub r13, rdx
imul r14, r14, 0x23ab1
mov rdx, r13
shr r13, 1
mov rax, r12
mov r15, rdx
mul r13
shr rdx, 5
mov r13, rdx
imul rdx, rdx, 0x64
sub r15, rdx
imul r13, r13, 0x8eac
lea rdx, [r13 + r14]
mov r13, r15
shr r15, 2
mov r14, r15
shl r15, 2
sub r13, r15
imul r14, r14, 0x5b5
add rdx, r14
imul r13, r13, 0x16d
add rdx, r13
cmp rdi, 0xd
jae 0x48a97d
mov qword [rsp + 0x40], rbx
lea r13, [0x00b03220]
mov r13d, dword [r13 + rdi*4]
movsxd r13, r13d
lea r14, [rdx + r13]
mov r15, rbx
sar rbx, 0x3f
mov rax, rbx
shr rbx, 0x3e
add rbx, r15
sar rbx, 2
shl rbx, 2
sub r15, rbx
test r15, r15
jne 0x48a8ef
mov rbx, rax
mov rax, r12
mov r15, qword [rsp + 0x40]
mov r12, rdx
imul r15
add rdx, r15
mov rax, rdx
sar rdx, 6
sub rdx, rbx
imul rdx, rdx, 0x64
sub r15, rdx
test r15, r15
je 0x48a8ce
mov eax, 1
mov qword [rsp + 0x50], r8
test al, al
je 0x48a8c6
lea rax, [rdi + 1]
cmp rax, 3
jl 0x48a8c6
lea rax, [r12 + r13 + 1]
mov qword [rsp], rcx
lea rax, [rax + rsi - 1]
imul rax, rax, 0x15180
imul r11, r11, 0xe10
imul r10, r10, 0x3c
lea rdx, [r11 + r10]
add rdx, r9
add rax, rdx
movabs rdx, 0x80000001e5263700
add rax, rdx
mov qword [rsp + 0x48], rax
mov qword [rsp + 8], rax
call fcn.0048aaa0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
test rax, rax
je 0x48a8bc
mov rbx, qword [rsp + 0x48]
mov rsi, rbx
sub rbx, rax
cmp rbx, rcx
jl 0x48a894
cmp rbx, rdx
jge 0x48a86f
sub rsi, rax
mov rax, qword [0x010e3368]
mov rcx, qword [rsp + 0x50]
movsxd rcx, ecx
mov qword [rsp + 0x58], rcx
movabs rcx, 0xe7791f700
add rcx, rsi
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xb8]
lea rcx, [0x010e9620]
cmp rax, rcx
jne 0x48a7fb
xor eax, eax
mov rcx, qword [rsp + 0x58]
mov rdx, rcx
shr rcx, 0x3f
shl rcx, 0x3f
test rcx, 0xffffffffffffffff
je 0x48a83e
shl rdx, 1
shr rdx, 0x1f
movabs rcx, 0xdd7b17f80
add rcx, rdx
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x58]
and rcx, 0x3fffffff
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xd0], rax
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov rax, qword [rsp + 0xb8]
mov qword [rsp], rax
mov qword [rsp + 8], rdx
call fcn.0048aaa0
mov rax, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x48]
jmp 0x48a7b7
mov rax, qword [rsp + 0xb8]
mov qword [rsp], rax
dec rcx
mov qword [rsp + 8], rcx
call fcn.0048aaa0
mov rax, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x48]
jmp 0x48a7b7
mov rsi, qword [rsp + 0x48]
jmp 0x48a7ba
mov rax, r14
jmp 0x48a741
sar rax, 8
sub rax, rbx
imul rax, rax, 0x190
mov rdx, qword [rsp + 0x40]
sub rdx, rax
test rdx, rdx
sete al
jmp 0x48a721
mov r12, rdx
xor eax, eax
jmp 0x48a721
mov rsi, r12
mov r11, rdx
jmp 0x48a61d
mov rdx, rsi
mov r12, qword [rsp + 0x90]
jmp 0x48a5e3
mov rsi, r11
mov r10, rdx
jmp 0x48a598
mov rdx, rsi
mov r11, qword [rsp + 0x98]
jmp 0x48a562
mov rsi, r10
mov r9, rdx
jmp 0x48a517
mov rdx, rsi
mov r10, qword [rsp + 0xa0]
jmp 0x48a4e1
mov rsi, r9
mov r8, rdx
jmp 0x48a496
mov r9, qword [rsp + 0xa8]
jmp 0x48a45d
mov rbx, rsi
mov rdi, rdx
jmp 0x48a40a
mov rdx, rbx
mov rsi, qword [rsp + 0x80]
jmp 0x48a3d0
call fcn.004292d0
ud2
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [0x008f8850]
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.0048a340