Function at 0x5b3800
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5b439d
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movzx eax, byte [0x01635e79]
cmp al, 1
jbe 0x5b383d
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
jne 0x5b3846
call fcn.00429570
ud2
mov byte [0x01635e79], 1
call fcn.004acaf0
call fcn.004f7b70
call fcn.004f50f0
call fcn.004fbc70
call fcn.004fc390
call fcn.004fc700
call fcn.004fd9c0
call fcn.00501620
call fcn.0057eb50
call fcn.004f0660
call fcn.00581b20
call fcn.004f0940
call fcn.0051bda0
call fcn.0053ec90
call fcn.004dfae0
call fcn.0045ed10
call fcn.0051a5d0
call fcn.00568a00
call fcn.004cc830
call fcn.0045cf30
call fcn.0048f3c0
call fcn.0046a650
call fcn.00544f50
call fcn.00521850
call fcn.0052e8e0
call fcn.0053a6d0
call fcn.004f1350
call fcn.005061d0
call fcn.004cf250
lea rax, [0x007fd400]
mov qword [rsp], rax
mov qword [rsp + 8], 0x18
mov qword [rsp + 0x10], 0
call fcn.00406aa0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x27], 0
lea rcx, [0x007fd400]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xc
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b438c
lea rax, [0x0089b752]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0xa
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x12
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b437b
lea rax, [0x008a5718]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x14
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xe
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b436a
lea rax, [0x0089fb5a]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x15
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x11
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4359
lea rax, [0x008a4318]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x16
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xf
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4348
lea rax, [0x008a2802]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x1e
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x15
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4337
lea rax, [0x008a80a6]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x28
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x11
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4326
lea rax, [0x008a43c2]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2a
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xf
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4315
lea rax, [0x008a2235]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2b
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x17
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4304
lea rax, [0x008aa3af]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2c
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x13
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b42f3
lea rax, [0x008a66b5]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2d
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x13
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b42e2
lea rax, [0x008a634b]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2e
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x13
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b42d1
lea rax, [0x008a67e5]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x2f
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x11
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b42c0
lea rax, [0x008a4406]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x30
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x1d
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b42af
lea rax, [0x008af13b]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x31
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xd
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b429e
lea rax, [0x0089d553]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x32
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x16
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b428d
lea rax, [0x008a8e12]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x33
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x18
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b427c
lea rax, [0x008aab72]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x46
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x1e
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b426b
lea rax, [0x008afb86]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x47
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x1b
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b425a
lea rax, [0x008ad340]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x50
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xe
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4249
lea rax, [0x008a054e]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x56
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x16
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4238
lea rax, [0x008a8f04]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x5a
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0xd
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4227
lea rax, [0x0089ef53]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x64
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x10
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b4216
lea rax, [0x008a380c]
mov qword [rdi], rax
mov byte [rsp + 0x27], 0x78
lea rax, [0x007fd400]
mov qword [rsp], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 8], rax
lea rcx, [rsp + 0x27]
mov qword [rsp + 0x10], rcx
call fcn.00407330
mov rdi, qword [rsp + 0x18]
mov qword [rdi + 8], 0x17
mov eax, dword [0x01636820]
test eax, eax
jne 0x5b41f4
lea rax, [0x008a9fe9]
mov qword [rdi], rax
mov rax, qword [rsp + 0x28]
mov qword [0x010ed3d8], rax
lea rax, [0x008af08d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eedb0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x5b41e3
mov qword [0x010eedb8], rax
lea rax, [0x008abdb4]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eede0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x5b41d2
mov qword [0x010eede8], rax
lea rax, [0x008b8a41]
mov qword [rsp], rax
mov qword [rsp + 8], 0x30
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eedc0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x5b41c1
mov qword [0x010eedc8], rax
lea rax, [0x008b481a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eeda0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x5b41b3
mov qword [0x010eeda8], rax
lea rax, [0x008b4840]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eedd0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x5b41a5
mov qword [0x010eedd8], rax
mov byte [0x01635e79], 2
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lea rdi, [0x010eedd8]
call fcn.004544a0
jmp 0x5b4194
lea rdi, [0x010eeda8]
call fcn.004544a0
jmp 0x5b4159
lea rdi, [0x010eedc8]
call fcn.004544a0
jmp 0x5b411e
lea rdi, [0x010eede8]
call fcn.004544a0
jmp 0x5b40df
lea rdi, [0x010eedb8]
call fcn.004544a0
jmp 0x5b40a0
lea rax, [0x008a9fe9]
call fcn.004544a0
lea rdi, [0x010ed3d8]
mov rax, qword [rsp + 0x28]
call fcn.004544a0
jmp 0x5b4061
lea rax, [0x008a380c]
call fcn.004544a0
jmp 0x5b4007
lea rax, [0x0089ef53]
call fcn.004544a0
jmp 0x5b3fb9
lea rax, [0x008a8f04]
call fcn.004544a0
jmp 0x5b3f6b
lea rax, [0x008a054e]
call fcn.004544a0
jmp 0x5b3f1d
lea rax, [0x008ad340]
call fcn.004544a0
jmp 0x5b3ecf
lea rax, [0x008afb86]
call fcn.004544a0
jmp 0x5b3e81
lea rax, [0x008aab72]
call fcn.004544a0
jmp 0x5b3e33
lea rax, [0x008a8e12]
call fcn.004544a0
jmp 0x5b3de5
lea rax, [0x0089d553]
call fcn.004544a0
jmp 0x5b3d97
lea rax, [0x008af13b]
call fcn.004544a0
jmp 0x5b3d49
lea rax, [0x008a4406]
call fcn.004544a0
jmp 0x5b3cfb
lea rax, [0x008a67e5]
call fcn.004544a0
jmp 0x5b3cad
lea rax, [0x008a634b]
call fcn.004544a0
jmp 0x5b3c5f
lea rax, [0x008a66b5]
call fcn.004544a0
jmp 0x5b3c11
lea rax, [0x008aa3af]
call fcn.004544a0
jmp 0x5b3bc3
lea rax, [0x008a2235]
call fcn.004544a0
jmp 0x5b3b75
lea rax, [0x008a43c2]
call fcn.004544a0
jmp 0x5b3b27
lea rax, [0x008a80a6]
call fcn.004544a0
jmp 0x5b3ad9
lea rax, [0x008a2802]
call fcn.004544a0
jmp 0x5b3a8b
lea rax, [0x008a4318]
call fcn.004544a0
jmp 0x5b3a3d
lea rax, [0x0089fb5a]
call fcn.004544a0
jmp 0x5b39ef
lea rax, [0x008a5718]
call fcn.004544a0
jmp 0x5b39a1
lea rax, [0x0089b752]
call fcn.004544a0
jmp 0x5b3953
call fcn.00451b80
jmp fcn.005b3800