Function at 0x48f3c0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x48f957
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movzx eax, byte [0x01635efd]
cmp al, 1
jbe 0x48f3fd
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
jne 0x48f406
call fcn.00429570
ud2
mov byte [0x01635efd], 1
call fcn.00478de0
call fcn.0045cf30
call fcn.0047f850
call fcn.004514e0
lea rax, [0x008a75c7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010efc30], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x48f946
mov qword [0x010efc38], rax
lea rax, [0x008a61f5]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010efc50], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x48f935
mov qword [0x010efc58], rax
lea rax, [0x008a3a0c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010efc60], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x48f924
mov qword [0x010efc68], rax
call fcn.00406a00
mov rax, qword [rsp]
mov qword [rsp + 0x48], rax
lea rcx, [0x007fede0]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
lea rdx, [0x0088afee]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 2
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 1
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088b00c]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 2
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0x3e8
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088b746]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 3
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0x3e8
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088b749]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 3
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0x3e8
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088afe6]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 2
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0xf4240
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088ae8e]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 1
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0x3b9aca00
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
lea rdx, [0x0088ae8a]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 1
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
movabs rcx, 0xdf8475800
mov qword [rax], rcx
lea rax, [0x007fede0]
mov qword [rsp], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 8], rax
lea rcx, [0x0088ae85]
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], 1
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
movabs rcx, 0x34630b8a000
mov qword [rax], rcx
mov eax, dword [0x01636820]
test eax, eax
jne 0x48f90e
mov rax, qword [rsp + 0x48]
mov qword [0x010eeb78], rax
lea rax, [0x008ad75d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1b
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010efc70], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x48f8fa
mov qword [0x010efc78], rcx
lea rax, [0x007ff1a0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x85
mov qword [rsp + 0x10], 0
call fcn.00406aa0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x40], rax
xor ecx, ecx
jmp 0x48f75c
inc rcx
mov rax, qword [rsp + 0x40]
cmp rcx, 0x85
jge 0x48f806
mov qword [rsp + 0x38], rcx
shl rcx, 4
lea rbx, [0x00907a60]
mov rsi, qword [rbx + rcx]
mov rcx, qword [rbx + rcx + 8]
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rcx
lea rcx, [0x007ff1a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.0040ab60
mov rdi, qword [rsp + 0x20]
mov rax, qword [rsp + 0x38]
mov rcx, rax
shl rax, 5
lea rdx, [0x0090c800]
mov rbx, qword [rdx + rax]
mov rsi, qword [rdx + rax + 8]
mov r8, qword [rdx + rax + 0x10]
mov rax, qword [rdx + rax + 0x18]
mov qword [rdi + 8], rsi
mov qword [rdi + 0x18], rax
mov eax, dword [0x01636820]
lea rsi, [rdi + 0x10]
test eax, eax
jne 0x48f7ee
mov qword [rdi], rbx
mov qword [rdi + 0x10], r8
jmp 0x48f754
mov rax, rbx
call fcn.004544a0
mov rdi, rsi
mov rax, r8
call fcn.004544a0
jmp 0x48f754
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x48f8e9
mov qword [0x010eeb68], rax
lea rax, [0x008b0462]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010efc40], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x48f8d5
mov qword [0x010efc48], rcx
call fcn.004061e0
mov rax, qword [rsp]
mov rcx, qword [rsp + 8]
mov qword [rsp], 0
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rcx
lea rax, [0x008a8614]
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], 0x16
call fcn.004410b0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [0x010efc88], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x48f8c7
mov qword [0x010efc80], rax
mov byte [0x01635efd], 2
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
lea rdi, [0x010efc80]
call fcn.004544a0
jmp 0x48f8b6
lea rdi, [0x010efc48]
mov rax, rcx
call fcn.004544a0
jmp 0x48f85a
lea rdi, [0x010eeb68]
call fcn.004544a0
jmp 0x48f81b
lea rdi, [0x010efc78]
mov rax, rcx
call fcn.004544a0
jmp 0x48f724
lea rdi, [0x010eeb78]
mov rax, qword [rsp + 0x48]
call fcn.004544a0
jmp 0x48f6e5
lea rdi, [0x010efc68]
call fcn.004544a0
jmp 0x48f4de
lea rdi, [0x010efc58]
call fcn.004544a0
jmp 0x48f49f
lea rdi, [0x010efc38]
call fcn.004544a0
jmp 0x48f460
call fcn.00451b80
jmp fcn.0048f3c0