Function at 0x4d0340
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4d0846
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movzx ecx, byte [rsp + 0x68]
test cl, cl
je 0x4d07ba
mov rcx, qword [rsp + 0x58]
test rcx, rcx
setl dl
test dl, dl
je 0x4d0387
neg rcx
mov rbx, qword [rsp + 0x50]
lea rsi, [rbx + 0x28]
test byte [rsi], al
movzx edi, byte [rbx + 8]
test dil, dil
je 0x4d079e
mov rdi, qword [rbx + 0x18]
add rdi, qword [rbx + 0x20]
add rdi, 3
cmp rdi, 0x44
jg 0x4d0758
mov eax, 0x44
mov edi, 0x44
movzx r8d, byte [rbx + 9]
test r8b, r8b
je 0x4d070b
mov r8, qword [rbx + 0x20]
test r8, r8
jne 0x4d03df
test rcx, rcx
je 0x4d06d6
mov r9, qword [rsp + 0x60]
cmp r9, 8
jg 0x4d0626
cmp r9, 2
jne 0x4d05e5
mov r10, rdi
jmp 0x4d0416
mov r12, rcx
and rcx, 1
lea r13, [rcx + 0x30]
mov byte [rdi + rsi - 1], r13b
shr r12, 1
mov rcx, r12
mov rdi, r11
cmp rcx, 2
jb 0x4d042a
lea r11, [rdi - 1]
cmp r11, r10
jb 0x4d03fd
jmp 0x4d080c
mov r11, qword [rsp + 0x78]
cmp rcx, r11
jae 0x4d0805
lea r12, [rdi - 1]
mov r13, qword [rsp + 0x70]
movzx ecx, byte [r13 + rcx]
cmp r12, r10
jae 0x4d0805
mov byte [rdi + rsi - 1], cl
jmp 0x4d0462
mov byte [r12 + rsi - 1], 0x30
mov r10, rcx
mov r12, rdi
test r12, r12
jle 0x4d05dd
mov rcx, r10
sub r10, r12
cmp r8, r10
jle 0x4d0485
lea rdi, [r12 - 1]
cmp rdi, rcx
jb 0x4d0456
jmp 0x4d07fe
movzx edi, byte [rbx + 0xc]
test dil, dil
je 0x4d05d3
cmp r9, 8
jne 0x4d0586
cmp r12, rcx
jae 0x4d07f7
movzx edi, byte [r12 + rsi]
cmp dil, 0x30
je 0x4d057c
lea rdi, [r12 - 1]
cmp rdi, rcx
jae 0x4d07f0
mov byte [r12 + rsi - 1], 0x30
test dl, dl
je 0x4d0539
lea rdx, [rdi - 1]
cmp rdx, rcx
jae 0x4d07db
mov byte [rdi + rsi - 1], 0x2d
movzx edi, byte [rbx + 0xe]
mov byte [rbx + 0xe], 0
cmp rdx, rcx
ja 0x4d07c6
mov byte [rsp + 0x36], dil
mov qword [rsp], rbx
sub rax, rdx
mov rdi, rax
neg rax
sar rax, 0x3f
and rax, rdx
add rax, rsi
mov qword [rsp + 8], rax
sub rcx, rdx
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rdi
call fcn.004cf780
movzx eax, byte [rsp + 0x36]
mov rcx, qword [rsp + 0x50]
mov byte [rcx + 0xe], al
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
movzx edx, byte [rbx + 0xb]
test dl, dl
je 0x4d0555
lea rdx, [rdi - 1]
cmp rdx, rcx
jae 0x4d07d4
mov byte [rdi + rsi - 1], 0x2b
jmp 0x4d04de
movzx edx, byte [rbx + 0xd]
test dl, dl
je 0x4d0574
lea rdx, [rdi - 1]
cmp rdx, rcx
jae 0x4d07cd
mov byte [rdi + rsi - 1], 0x20
jmp 0x4d04de
mov rdx, rdi
jmp 0x4d04de
test dl, dl
mov rdi, r12
jmp 0x4d04ca
cmp r9, 0x10
jne 0x4d05c9
cmp r11, 0x10
jbe 0x4d07e9
lea rdi, [r12 - 1]
movzx r8d, byte [r13 + 0x10]
cmp rdi, rcx
jae 0x4d07e9
mov byte [r12 + rsi - 1], r8b
lea rdi, [r12 - 2]
cmp rdi, rcx
jae 0x4d07e2
mov byte [r12 + rsi - 2], 0x30
test dl, dl
jmp 0x4d04ca
test dl, dl
mov rdi, r12
jmp 0x4d04ca
test dl, dl
mov rdi, r12
jmp 0x4d04ca
mov rcx, r10
jmp 0x4d0485
cmp r9, 8
jne 0x4d0828
mov r10, rdi
jmp 0x4d060e
mov r12, rcx
and rcx, 7
lea r13, [rcx + 0x30]
mov byte [rdi + rsi - 1], r13b
shr r12, 3
mov rcx, r12
mov rdi, r11
cmp rcx, 8
jb 0x4d042a
lea r11, [rdi - 1]
cmp r11, r10
jb 0x4d05f4
jmp 0x4d0813
cmp r9, 0xa
jne 0x4d067e
mov r10, rdi
jmp 0x4d0641
mov byte [rdi + rsi - 1], cl
mov rax, r12
mov rcx, rdx
mov rdi, r11
mov edx, r13d
cmp rcx, 0xa
jb 0x4d042a
lea r11, [rdi - 1]
mov r12, rax
movabs rax, 0xcccccccccccccccd
mov r13d, edx
mul rcx
shr rdx, 3
add rcx, 0x30
lea r14, [rdx + rdx*4]
shl r14, 1
sub rcx, r14
cmp r11, r10
jb 0x4d0631
jmp 0x4d0821
cmp r9, 0x10
jne 0x4d0828
mov r10, qword [rsp + 0x78]
mov r11, qword [rsp + 0x70]
mov r12, rdi
jmp 0x4d06a5
mov byte [rsi + rdi - 1], cl
shr r13, 4
mov rcx, r13
mov rdi, r14
cmp rcx, 0x10
jb 0x4d06ce
mov r13, rcx
and rcx, 0xf
cmp rcx, r10
jae 0x4d081a
lea r14, [rdi - 1]
movzx ecx, byte [r11 + rcx]
cmp r14, r12
jb 0x4d0697
jmp 0x4d081a
mov r10, r12
jmp 0x4d042a
movzx eax, byte [rbx + 0xe]
mov byte [rsp + 0x35], al
mov byte [rbx + 0xe], 0
mov rcx, qword [rbx + 0x18]
mov qword [rsp + 8], rcx
mov qword [rsp], rbx
call fcn.004cf600
movzx eax, byte [rsp + 0x35]
mov rcx, qword [rsp + 0x50]
mov byte [rcx + 0xe], al
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
movzx r8d, byte [rbx + 0xe]
test r8b, r8b
je 0x4d0750
movzx r8d, byte [rbx + 8]
test r8b, r8b
je 0x4d0748
mov r8, qword [rbx + 0x18]
test dl, dl
je 0x4d072f
dec r8
jmp 0x4d03df
movzx r9d, byte [rbx + 0xb]
test r9b, r9b
jne 0x4d0727
movzx r9d, byte [rbx + 0xd]
test r9b, r9b
jne 0x4d0727
jmp 0x4d03df
xor r8d, r8d
jmp 0x4d03df
xor r8d, r8d
jmp 0x4d03df
mov byte [rsp + 0x37], dl
mov qword [rsp + 0x38], rcx
lea rax, [0x007df620]
mov qword [rsp], rax
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdi
call fcn.0043d760
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x18]
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
movzx edx, byte [rsp + 0x37]
mov rbx, qword [rsp + 0x50]
jmp 0x4d03bf
movzx edi, byte [rbx + 9]
test dil, dil
jne 0x4d039f
mov eax, 0x44
mov edi, 0x44
jmp 0x4d03bf
mov rcx, qword [rsp + 0x58]
xor edx, edx
jmp 0x4d0380
call fcn.00429340
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [0x008f79a0]
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.004d0340