Function at 0x683e20
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x684132
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
movzx eax, byte [0x01635e7c]
cmp al, 1
jbe 0x683e5d
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
jne 0x683e66
call fcn.00429570
ud2
mov byte [0x01635e7c], 1
call fcn.00678d00
call fcn.004dfae0
call fcn.004bebd0
call fcn.004acaf0
call fcn.0048f3c0
call fcn.00460de0
call fcn.0054a220
call fcn.0045ed10
call fcn.004514e0
call fcn.004c51b0
call fcn.0045cf30
lea rax, [0x008ac5c9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1a
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eee70], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x684121
mov qword [0x010eee78], rax
mov rax, qword [0x008f6858]
lea rcx, [0x007c9420]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004b3720
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rax + 0x48]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eee80], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x68410d
mov qword [0x010eee88], rcx
lea rax, [0x008b7ecb]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2e
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eee60], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6840f9
mov qword [0x010eee68], rcx
call fcn.00406a00
mov eax, dword [0x01636820]
mov rcx, qword [rsp]
test eax, eax
jne 0x6840e5
mov qword [0x010ed3e8], rcx
lea rax, [0x008acaa9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1a
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eee30], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6840d1
mov qword [0x010eee38], rcx
lea rax, [0x008aa211]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eee50], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6840bd
mov qword [0x010eee58], rcx
lea rax, [0x008b63ee]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2a
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eee20], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6840ac
mov qword [0x010eee28], rcx
lea rax, [0x008bb85c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x3a
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eee40], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x68409b
mov qword [0x010eee48], rcx
mov byte [0x01635e7c], 2
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdi, [0x010eee48]
mov rax, rcx
call fcn.004544a0
jmp 0x68408a
lea rdi, [0x010eee28]
mov rax, rcx
call fcn.004544a0
jmp 0x68404f
lea rdi, [0x010eee58]
mov rax, rcx
call fcn.004544a0
jmp 0x684014
lea rdi, [0x010eee38]
mov rax, rcx
call fcn.004544a0
jmp 0x683fd5
lea rdi, [0x010ed3e8]
mov rax, rcx
call fcn.004544a0
jmp 0x683f96
lea rdi, [0x010eee68]
mov rax, rcx
call fcn.004544a0
jmp 0x683f78
lea rdi, [0x010eee88]
mov rax, rcx
call fcn.004544a0
jmp 0x683f39
lea rdi, [0x010eee78]
call fcn.004544a0
jmp 0x683ee3
call fcn.00451b80
jmp fcn.00683e20