Function at 0x40ed30
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 8]
cmp rax, qword [rcx + 0x10]
jbe 0x40f1ee
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movzx eax, word [0x00b054c4]
cmp ax, 0x10
jne 0x40f1d3
call fcn.004296f0
xor eax, eax
jmp 0x40eda1
lea rcx, [rax + rax*2]
lea rdx, [0x00b054c0]
movzx ebx, word [rdx + rax*2]
lea r8, [0x0163d0c0]
mov dword [r8 + rcx*8 + 0x10d8], ebx
inc rax
cmp rax, 0x43
jl 0x40ed80
mov rax, qword [0x01636678]
test rax, rax
je 0x40f1b8
cmp rax, 0x1000
jb 0x40f12b
lea rcx, [rax - 1]
test rax, rcx
jne 0x40f0c4
mov byte [rsp + 0x27], 0
xor eax, eax
xor ecx, ecx
jmp 0x40ede9
mov rdx, qword [rsp + 0x38]
inc rdx
mov rcx, rax
mov rax, rdx
cmp rax, 0x7f
jg 0x40efd1
mov qword [rsp + 0x38], rax
shl rax, 0x28
movabs rdx, 0xc000000000
or rax, rdx
mov qword [rsp], rax
movabs rax, 0x842002000
mov qword [rsp + 8], rax
lea rbx, [rsp + 0x27]
mov qword [rsp + 0x10], rbx
call fcn.004149c0
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x40eddb
test rax, rax
jne 0x40efc2
lea rdi, [rsp + 0x58]
lea rsi, [0x008fa480]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00454a44
mov rbp, qword [rbp]
xor ecx, ecx
movabs rdx, 0x842002000
jmp 0x40ee79
mov rbx, qword [rsp + 0x50]
lea rcx, [rbx + 1]
mov rdx, qword [rsp + 0x28]
cmp rcx, 4
jge 0x40efba
mov qword [rsp + 0x50], rcx
mov rax, qword [rsp + rcx*8 + 0x58]
mov rdx, qword [0x00b08fb0]
add rdx, 0x13ffff
mov rbx, rdx
and rdx, 0xfffffffffff00000
test rbx, 0xfffffffffff00000
ja 0x40eec0
lea rbx, [rdx + rax + 0x42002000]
test rbx, rbx
jbe 0x40eec0
mov edx, 0x100000
mov qword [rsp], rdx
add rax, 0x42002000
mov qword [rsp + 0x28], rax
mov qword [rsp + 8], rax
lea rcx, [rsp + 0x27]
mov qword [rsp + 0x10], rcx
call fcn.004149c0
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x40ee6b
mov rcx, qword [rsp + 0x28]
test rax, rax
je 0x40f0a9
lea rdx, [rax + 0x1fff]
and rdx, 0xffffffffffffe000
lea rbx, [rdx + 0x42000000]
mov qword [0x0110c2f8], rbx
mov qword [0x0110c308], rbx
mov rsi, rdx
sub rdx, rax
sub rcx, rdx
add rcx, rax
mov qword [0x0110c320], rcx
mov qword [0x0110c310], rbx
mov qword [0x0110c318], rbx
movzx ecx, byte [rsp + 0x27]
mov byte [0x0110c328], cl
mov rcx, qword [0x0110c308]
test rcx, 0x1fff
jne 0x40efd9
lea rax, [0x0110afe0]
mov qword [rsp], rax
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], 0x2000000
call fcn.004205c0
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
call fcn.00413960
mov rax, qword [rsp + 0x78]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp]
mov qword [rax + 0x130], rcx
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov rcx, rdx
jmp 0x40eef6
movabs rcx, 0x842002000
jmp 0x40eeff
mov rax, rcx
jmp 0x40ee35
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rcx
call fcn.0042b400
lea rax, [0x0089d838]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b660
mov qword [rsp], 0x2000000
call fcn.0042bc50
call fcn.0042b660
mov qword [rsp], 0x40000000
call fcn.0042bc50
call fcn.0042b660
mov qword [rsp], 0x2000
call fcn.0042bc50
lea rax, [0x0088fe2e]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b2ef3]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0042ab20
ud2
lea rax, [0x008b9a87]
mov qword [rsp], rax
mov qword [rsp + 8], 0x33
call fcn.0042ab20
ud2
call fcn.0042b400
lea rax, [0x008a56be]
mov qword [rsp], rax
mov qword [rsp + 8], 0x12
call fcn.0042bdc0
mov rax, qword [0x01636678]
mov qword [rsp], rax
call fcn.0042bac0
lea rax, [0x008a9310]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0042bdc0
call fcn.0042b490
lea rax, [0x008a7167]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0042ab20
ud2
call fcn.0042b400
lea rax, [0x008a56be]
mov qword [rsp], rax
mov qword [rsp + 8], 0x12
call fcn.0042bdc0
mov rax, qword [0x01636678]
mov qword [rsp], rax
call fcn.0042bac0
lea rax, [0x008b3aee]
mov qword [rsp], rax
mov qword [rsp + 8], 0x25
call fcn.0042bdc0
mov qword [rsp], 0x1000
call fcn.0042bbe0
lea rax, [0x0088aeba]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
call fcn.0042b490
lea rax, [0x008a7167]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0042ab20
ud2
lea rax, [0x008af92e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0042ab20
ud2
lea rax, [0x008a426e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.0040ed30