Function at 0x4f02c0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4f0652
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
movzx eax, byte [0x01635e60]
cmp al, 1
jbe 0x4f02fd
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
jne 0x4f0306
call fcn.00429570
ud2
mov byte [0x01635e60], 1
call fcn.0046a650
call fcn.0045ed10
lea rax, [0x008b0bc6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eec20], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x4f0641
mov qword [0x010eec28], rax
lea rax, [0x008b0be6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eec30], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x4f0630
mov qword [0x010eec38], rax
lea rax, [0x008a52ce]
mov qword [rsp], rax
mov qword [rsp + 8], 0x12
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec00], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f061c
mov qword [0x010eec08], rcx
lea rax, [0x008a8013]
mov qword [rsp], rax
mov qword [rsp + 8], 0x15
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec50], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f0608
mov qword [0x010eec58], rcx
lea rax, [0x008b8155]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2f
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec70], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f05f4
mov qword [0x010eec78], rcx
lea rax, [0x008b87d1]
mov qword [rsp], rax
mov qword [rsp + 8], 0x30
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec80], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f05e0
mov qword [0x010eec88], rcx
lea rax, [0x008ae9c1]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec60], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f05cc
mov qword [0x010eec68], rcx
lea rax, [0x008bacb7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x37
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec40], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f05b8
mov qword [0x010eec48], rcx
lea rax, [0x008bb9f7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x3b
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eebf0], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f05a7
mov qword [0x010eebf8], rcx
lea rax, [0x008997a8]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010eec10], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x4f0596
mov qword [0x010eec18], rcx
mov byte [0x01635e60], 2
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdi, [0x010eec18]
mov rax, rcx
call fcn.004544a0
jmp 0x4f0585
lea rdi, [0x010eebf8]
mov rax, rcx
call fcn.004544a0
jmp 0x4f054a
lea rdi, [0x010eec48]
mov rax, rcx
call fcn.004544a0
jmp 0x4f050f
lea rdi, [0x010eec68]
mov rax, rcx
call fcn.004544a0
jmp 0x4f04d0
lea rdi, [0x010eec88]
mov rax, rcx
call fcn.004544a0
jmp 0x4f0491
lea rdi, [0x010eec78]
mov rax, rcx
call fcn.004544a0
jmp 0x4f0452
lea rdi, [0x010eec58]
mov rax, rcx
call fcn.004544a0
jmp 0x4f0413
lea rdi, [0x010eec08]
mov rax, rcx
call fcn.004544a0
jmp 0x4f03d4
lea rdi, [0x010eec38]
call fcn.004544a0
jmp 0x4f0395
lea rdi, [0x010eec28]
call fcn.004544a0
jmp 0x4f0356
call fcn.00451b80
jmp fcn.004f02c0