Function at 0x6a3c50
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x6a45e7
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movzx eax, byte [0x01635e8e]
cmp al, 1
jbe 0x6a3c8d
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
jne 0x6a3c96
call fcn.00429570
ud2
mov byte [0x01635e8e], 1
call fcn.0046a650
call fcn.00683e20
call fcn.00678d00
call fcn.00506d50
call fcn.004dfae0
call fcn.004bebd0
call fcn.004acaf0
call fcn.004cc830
call fcn.004e42c0
call fcn.00684d80
call fcn.004f02c0
call fcn.0054a220
call fcn.004f1350
call fcn.00501620
call fcn.0045ed10
call fcn.00568a00
call fcn.004a0040
call fcn.00685cf0
call fcn.005bdcb0
call fcn.004ce820
call fcn.0048f3c0
call fcn.00460de0
call fcn.00688350
call fcn.004cf250
call fcn.0045cf30
call fcn.004a1970
call fcn.006439c0
call fcn.004514e0
call fcn.005b3800
call fcn.0057eb50
call fcn.004eb320
call fcn.004c51b0
call fcn.00478de0
lea rax, [0x007e0340]
mov qword [rsp], rax
call fcn.00410220
mov rax, qword [rsp + 8]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
lea rax, [0x007dae80]
mov qword [rsp], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 8], rax
call fcn.0040d710
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004b3720
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef3c0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a45d6
mov qword [0x010ef3c8], rax
mov rax, qword [0x008f6928]
lea rcx, [0x007c9420]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004b3720
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rax + 0x48]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [0x010ef3d0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a45c5
mov qword [0x010ef3d8], rax
mov rax, qword [0x008f6930]
lea rcx, [0x007c8e20]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004b3720
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rax + 0x48]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef3e0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a45b1
mov qword [0x010ef3e8], rcx
lea rax, [0x008aa0a1]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2e0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a459d
mov qword [0x010ef2e8], rcx
lea rax, [0x008bb21f]
mov qword [rsp], rax
mov qword [rsp + 8], 0x38
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2d0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4589
mov qword [0x010ef2d8], rcx
lea rax, [0x008b37fa]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef300], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4575
mov qword [0x010ef308], rcx
lea rax, [0x008bdbf5]
mov qword [rsp], rax
mov qword [rsp + 8], 0x59
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2f0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4561
mov qword [0x010ef2f8], rcx
lea rax, [0x008bcabc]
mov qword [rsp], rax
mov qword [rsp + 8], 0x44
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2c0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a454d
mov qword [0x010ef2c8], rcx
lea rax, [0x008aaf62]
mov qword [rsp], rax
mov qword [rsp + 8], 0x18
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef3b0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4539
mov qword [0x010ef3b8], rcx
lea rax, [0x008b9988]
mov qword [rsp], rax
mov qword [rsp + 8], 0x33
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef3a0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4525
mov qword [0x010ef3a8], rcx
lea rax, [0x008b9955]
mov qword [rsp], rax
mov qword [rsp + 8], 0x33
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef390], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4511
mov qword [0x010ef398], rcx
lea rax, [0x008b7100]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2c
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef320], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a44fd
mov qword [0x010ef328], rcx
lea rax, [0x008b4e26]
mov qword [rsp], rax
mov qword [rsp + 8], 0x27
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef310], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a44e9
mov qword [0x010ef318], rcx
lea rax, [0x008ae180]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef350], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a44d5
mov qword [0x010ef358], rcx
lea rax, [0x008b7583]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2d
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef340], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a44c1
mov qword [0x010ef348], rcx
lea rax, [0x008a74eb]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef330], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a44ad
mov qword [0x010ef338], rcx
lea rax, [0x008b435a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
call fcn.0063e790
mov eax, dword [0x01636820]
mov rcx, qword [rsp + 0x10]
test eax, eax
jne 0x6a4499
mov qword [0x010ed518], rcx
lea rax, [0x008a447d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef360], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4485
mov qword [0x010ef368], rcx
call fcn.0069de40
mov eax, dword [0x01636820]
mov rcx, qword [rsp]
test eax, eax
jne 0x6a4471
mov qword [0x010ed508], rcx
lea rax, [0x007fd8e0]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe9
mov qword [rsp + 0x10], 0
call fcn.00406aa0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
xor ecx, ecx
jmp 0x6a4269
mov rdx, qword [rsp + 0x30]
lea rcx, [rdx + 1]
mov rax, qword [rsp + 0x38]
cmp rcx, 0xe9
jge 0x6a42f7
mov qword [rsp + 0x30], rcx
shl rcx, 4
mov qword [rsp + 0x28], rcx
lea rbx, [0x00908d40]
mov rsi, qword [rcx + rbx]
mov rdi, qword [rcx + rbx + 8]
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
lea rsi, [0x007fd8e0]
mov qword [rsp], rsi
mov qword [rsp + 8], rax
call fcn.0040ab60
mov rdi, qword [rsp + 0x20]
lea rax, [0x00909be0]
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + rax]
mov rcx, qword [rcx + rax + 8]
mov qword [rdi + 8], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a42e3
mov qword [rdi], rdx
jmp 0x6a425b
mov rax, rdx
call fcn.004544a0
lea rax, [0x00909be0]
jmp 0x6a425b
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a4460
mov qword [0x010ed500], rax
lea rax, [0x008b0ee6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef380], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a444c
mov qword [0x010ef388], rcx
lea rax, [0x008ae19c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1c
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef370], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4438
mov qword [0x010ef378], rcx
lea rax, [0x008ad541]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1b
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2a0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4427
mov qword [0x010ef2a8], rcx
lea rax, [0x008aa0b8]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef2b0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a4416
mov qword [0x010ef2b8], rcx
call fcn.00688690
mov byte [0x01635e8e], 2
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
lea rdi, [0x010ef2b8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a4400
lea rdi, [0x010ef2a8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a43c5
lea rdi, [0x010ef378]
mov rax, rcx
call fcn.004544a0
jmp 0x6a438a
lea rdi, [0x010ef388]
mov rax, rcx
call fcn.004544a0
jmp 0x6a434b
lea rdi, [0x010ed500]
call fcn.004544a0
jmp 0x6a430c
lea rdi, [0x010ed508]
mov rax, rcx
call fcn.004544a0
jmp 0x6a422b
lea rdi, [0x010ef368]
mov rax, rcx
call fcn.004544a0
jmp 0x6a420d
lea rdi, [0x010ed518]
mov rax, rcx
call fcn.004544a0
jmp 0x6a41ce
lea rdi, [0x010ef338]
mov rax, rcx
call fcn.004544a0
jmp 0x6a419b
lea rdi, [0x010ef348]
mov rax, rcx
call fcn.004544a0
jmp 0x6a415c
lea rdi, [0x010ef358]
mov rax, rcx
call fcn.004544a0
jmp 0x6a411d
lea rdi, [0x010ef318]
mov rax, rcx
call fcn.004544a0
jmp 0x6a40de
lea rdi, [0x010ef328]
mov rax, rcx
call fcn.004544a0
jmp 0x6a409f
lea rdi, [0x010ef398]
mov rax, rcx
call fcn.004544a0
jmp 0x6a4060
lea rdi, [0x010ef3a8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a4021
lea rdi, [0x010ef3b8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3fe2
lea rdi, [0x010ef2c8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3fa3
lea rdi, [0x010ef2f8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3f64
lea rdi, [0x010ef308]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3f25
lea rdi, [0x010ef2d8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3ee6
lea rdi, [0x010ef2e8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3ea7
lea rdi, [0x010ef3e8]
mov rax, rcx
call fcn.004544a0
jmp 0x6a3e68
lea rdi, [0x010ef3d8]
call fcn.004544a0
jmp 0x6a3e12
lea rdi, [0x010ef3c8]
call fcn.004544a0
jmp 0x6a3dbc
call fcn.00451b80
jmp fcn.006a3c50