Function at 0x63c720
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x30]
cmp rax, qword [rcx + 0x10]
jbe 0x63d14f
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
movups xmmword [rsp + 0xe8], xmm0
mov qword [rsp + 0xf8], 0
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0xc0]
mov rbx, qword [rdx + 8]
bt ecx, 0
jb 0x63d131
bt ebx, 0
jb 0x63d131
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
lea rax, [0x007dec60]
mov qword [rsp], rax
movups xmmword [rsp + 8], xmm0
call fcn.0043d760
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rax
lea rax, [0x007df5a0]
mov qword [rsp], rax
xorps xmm0, xmm0
movups xmmword [rsp + 8], xmm0
call fcn.0043d760
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rcx
mov byte [rsp + 0x47], 1
lea rax, [rsp + 0x47]
mov qword [rsp + 0x10], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x18], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov dword [rsp], 0x18
lea rax, [0x008c5870]
mov qword [rsp + 8], rax
call fcn.004295c0
test eax, eax
jne 0x63d0dc
mov qword [rsp + 0x60], 0xffffffffffffffff
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
jge 0x63d056
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x70]
cmp rdx, rbx
jl 0x63caf5
mov rdx, qword [rsp + 0x60]
test rdx, rdx
jle 0x63cae8
mov rsi, qword [rsp + 0xb8]
mov rdi, qword [rsi]
mov r8, qword [rsi + 8]
cmp rax, r8
jae 0x63d123
mov r8, qword [rsp + 0x98]
mov r9, qword [rsp + 0x90]
mov edi, dword [rdi + rax*4]
cmp rdx, r8
jae 0x63d123
mov edx, dword [r9 + rdx*4]
cmp edi, edx
jg 0x63c97f
xor eax, eax
mov byte [rsp + 0x47], al
movzx eax, byte [rsp + 0x47]
test al, al
jne 0x63c890
mov rax, qword [0x010e48a0]
mov rcx, qword [0x010e4898]
mov rdx, qword [0x010e4890]
mov qword [rsp + 0xd0], rdx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xe0], rax
mov rax, qword [0x010e4880]
mov rcx, qword [0x010e4878]
mov rdx, qword [0x010e4870]
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov rdx, qword [rsi + 8]
mov rdi, qword [rsi]
cmp rax, rdx
jae 0x63d11c
mov r8d, dword [rdi + rax*4]
lea r9, [rax + 1]
cmp r9, rdx
jae 0x63d11c
mov rdx, qword [rsp + 0x90]
mov r9, qword [rsp + 0x98]
mov r10, qword [rsp + 0xa0]
lea r11, [r9 + 2]
mov eax, dword [rdi + rax*4 + 4]
cmp r11, r10
jg 0x63ca7c
lea rdi, [r9 + 2]
mov qword [rsp + 0x98], rdi
mov dword [rdx + r9*4], r8d
mov dword [rdx + r9*4 + 4], eax
add qword [rsp + 0x58], 2
add qword [rsp + 0x60], 2
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x78]
lea r8, [rax + 1]
cmp r8, rdx
jg 0x63ca28
lea rdx, [rax + 1]
mov qword [rsp + 0x80], rdx
mov edx, dword [rsp + 0xc8]
mov dword [rdi + rax*4], edx
mov eax, 1
jmp 0x63c902
lea rcx, [0x007df5a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], r8
call fcn.0043d870
mov rdi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x78], rdi
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
jmp 0x63ca08
mov dword [rsp + 0x4c], r8d
mov dword [rsp + 0x48], eax
lea rax, [0x007dec60]
mov qword [rsp], rax
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], r9
mov qword [rsp + 0x18], r10
mov qword [rsp + 0x20], r11
call fcn.0043d870
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], rdx
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
mov r8d, dword [rsp + 0x4c]
jmp 0x63c9c9
mov rsi, qword [rsp + 0xb8]
jmp 0x63c97f
cmp rax, rcx
jl 0x63ccd3
mov rax, qword [rsp + 0x60]
test rax, rax
jle 0x63ccc6
mov rsi, qword [rsp + 0xc0]
mov rdi, qword [rsi]
mov r8, qword [rsi + 8]
cmp rdx, r8
jae 0x63d115
mov r8, qword [rsp + 0x98]
mov r9, qword [rsp + 0x90]
mov edi, dword [rdi + rdx*4]
cmp rax, r8
jae 0x63d115
mov eax, dword [r9 + rax*4]
cmp edi, eax
jg 0x63cb5b
xor eax, eax
mov byte [rsp + 0x47], al
mov rsi, qword [rsp + 0xb8]
jmp 0x63c906
mov rax, qword [rsi]
mov rdi, qword [rsi + 8]
cmp rdx, rdi
jae 0x63d10e
mov r8d, dword [rax + rdx*4]
lea r9, [rdx + 1]
cmp r9, rdi
jae 0x63d10e
mov rdi, qword [rsp + 0xa0]
mov r9, qword [rsp + 0x98]
mov r10, qword [rsp + 0x90]
lea r11, [r9 + 2]
mov eax, dword [rax + rdx*4 + 4]
cmp r11, rdi
jg 0x63cc5a
lea rdx, [r9 + 2]
mov qword [rsp + 0x98], rdx
mov dword [r10 + r9*4], r8d
mov dword [r10 + r9*4 + 4], eax
add qword [rsp + 0x50], 2
add qword [rsp + 0x60], 2
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
lea r8, [rdi + 1]
cmp r8, rax
jg 0x63cc06
lea r8, [rdi + 1]
mov qword [rsp + 0x80], r8
mov r8d, dword [rsp + 0xcc]
mov dword [rdx + rdi*4], r8d
mov eax, 1
jmp 0x63cb4a
lea rcx, [0x007df5a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], r8
call fcn.0043d870
mov rdx, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x78], rdx
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
jmp 0x63cbe4
mov dword [rsp + 0x4c], r8d
mov dword [rsp + 0x48], eax
lea rax, [0x007dec60]
mov qword [rsp], rax
mov qword [rsp + 8], r10
mov qword [rsp + 0x10], r9
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r11
call fcn.0043d870
mov r10, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], r10
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
mov r8d, dword [rsp + 0x4c]
jmp 0x63cba5
mov rsi, qword [rsp + 0xc0]
jmp 0x63cb5b
mov rsi, qword [rsp + 0xc0]
mov rdi, qword [rsi + 8]
mov r8, qword [rsi]
cmp rdx, rdi
jae 0x63d12a
mov r9d, dword [r8 + rdx*4]
mov r10, qword [rsp + 0xb8]
mov r11, qword [r10 + 8]
mov r12, qword [r10]
cmp rax, r11
jae 0x63d12a
mov r13d, dword [r12 + rax*4]
cmp r9d, r13d
jge 0x63ceb6
mov rax, qword [rsp + 0x60]
test rax, rax
jle 0x63cd4e
mov r11, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
cmp rax, r12
jae 0x63d107
mov eax, dword [r11 + rax*4]
cmp r9d, eax
jg 0x63cd4e
xor eax, eax
mov byte [rsp + 0x47], al
mov rsi, r10
jmp 0x63c906
lea rax, [rdx + 1]
cmp rax, rdi
jae 0x63d100
mov rax, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x98]
mov r11, qword [rsp + 0x90]
lea r12, [rdi + 2]
mov edx, dword [r8 + rdx*4 + 4]
cmp r12, rax
jg 0x63ce42
lea rax, [rdi + 2]
mov qword [rsp + 0x98], rax
mov dword [r11 + rdi*4], r9d
mov dword [r11 + rdi*4 + 4], edx
add qword [rsp + 0x50], 2
add qword [rsp + 0x60], 2
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x78]
lea r8, [rdx + 1]
cmp r8, rax
jg 0x63cde6
lea r8, [rdx + 1]
mov qword [rsp + 0x80], r8
mov r8d, dword [rsp + 0xcc]
mov dword [rdi + rdx*4], r8d
mov eax, 1
jmp 0x63cd42
lea rcx, [0x007df5a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], r8
call fcn.0043d870
mov rdi, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x78], rdi
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xb8]
jmp 0x63cdc4
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], edx
lea rcx, [0x007dec60]
mov qword [rsp], rcx
mov qword [rsp + 8], r11
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], r12
call fcn.0043d870
mov r11, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], r11
mov rcx, qword [rsp + 0x68]
mov edx, dword [rsp + 0x48]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
mov r9d, dword [rsp + 0x4c]
mov r10, qword [rsp + 0xb8]
jmp 0x63cd85
mov rdx, qword [rsp + 0x60]
test rdx, rdx
jle 0x63cef0
mov rdi, qword [rsp + 0x98]
mov r8, qword [rsp + 0x90]
cmp rdx, rdi
jae 0x63d0f9
mov edx, dword [r8 + rdx*4]
cmp r13d, edx
jg 0x63cef0
xor eax, eax
mov byte [rsp + 0x47], al
mov rsi, r10
jmp 0x63c906
lea rdx, [rax + 1]
cmp rdx, r11
jae 0x63d0f2
mov rdx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x98]
mov r8, qword [rsp + 0x90]
lea r9, [rdi + 2]
mov eax, dword [r12 + rax*4 + 4]
cmp r9, rdx
jg 0x63cfe2
lea rdx, [rdi + 2]
mov qword [rsp + 0x98], rdx
mov dword [r8 + rdi*4], r13d
mov dword [r8 + rdi*4 + 4], eax
add qword [rsp + 0x58], 2
add qword [rsp + 0x60], 2
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
lea r8, [rdi + 1]
cmp r8, rdx
jg 0x63cf86
lea rdx, [rdi + 1]
mov qword [rsp + 0x80], rdx
mov edx, dword [rsp + 0xc8]
mov dword [rax + rdi*4], edx
mov eax, 1
jmp 0x63cee4
lea rcx, [0x007df5a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], r8
call fcn.0043d870
mov rax, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xb8]
jmp 0x63cf66
mov dword [rsp + 0x4c], r13d
mov dword [rsp + 0x48], eax
lea rax, [0x007dec60]
mov qword [rsp], rax
mov qword [rsp + 8], r8
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], r9
call fcn.0043d870
mov r8, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], r8
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xb8]
mov r13d, dword [rsp + 0x4c]
jmp 0x63cf27
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x70]
cmp rdx, rbx
jl 0x63c8a3
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0xd0], rdx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
nop
call fcn.00429ed0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [0x008f8400]
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.0063c720