Function at 0x493ac0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x30]
cmp rax, qword [rcx + 0x10]
jbe 0x4941a9
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 0x38]
mov rcx, qword [rcx + 0x1c8]
test rcx, rcx
je 0x49409c
movzx ecx, byte [0x01635eaa]
test cl, cl
je 0x494073
mov rcx, qword [rax + 0x38]
mov qword [rsp + 0x58], rcx
movsxd rdx, dword [rax + 0x28]
movzx ebx, byte [rcx + 0x237]
mov byte [rsp + 0x10], bl
lea rbx, [rcx + 0x1c8]
mov qword [rsp + 0x60], rbx
mov qword [rsp], rbx
mov qword [rsp + 8], rdx
call fcn.00492d00
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jne 0x494047
movzx eax, byte [0x01635eaa]
test al, al
je 0x493fc4
mov rax, qword [rsp + 0xc0]
mov qword [rsp], rax
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rdx]
call rcx
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
test rax, rax
je 0x493f83
je 0x493f57
mov rdx, qword [rax + 8]
lea rbx, [0x0080c100]
cmp rdx, rbx
jne 0x493f57
mov rdx, qword [rcx]
cmp rdx, 0x3e5
jne 0x493f57
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 0x28]
mov rdx, qword [rsp + 0x58]
movzx ebx, byte [rdx + 0x237]
mov byte [rsp + 0x10], bl
mov rbx, qword [rsp + 0x60]
mov qword [rsp], rbx
mov qword [rsp + 8], rcx
call fcn.00492da0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
je 0x493eca
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rcx
mov rdx, qword [0x010ef4f0]
cmp rdx, rcx
je 0x493e94
mov rdx, qword [0x010ef4e0]
cmp rdx, rcx
je 0x493e5e
mov rdx, qword [0x010e3ba0]
cmp rdx, rcx
jne 0x49411e
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov rdx, qword [0x010e3ba8]
mov qword [rsp + 0x10], rdx
call fcn.00401f10
movzx eax, byte [rsp + 0x18]
test al, al
je 0x493e4f
movzx eax, byte [0x01635eaa]
test al, al
je 0x493df8
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x10]
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 8], rcx
mov qword [rsp], rax
call fcn.004730f0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
test rcx, rcx
je 0x493dec
je 0x493dd8
mov rdx, qword [rcx + 8]
lea rbx, [0x0080c100]
cmp rbx, rdx
jne 0x493de7
mov rdx, qword [rax]
cmp rdx, 0x490
jne 0x493dd5
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 0x28]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp], rcx
call fcn.00492e90
mov rax, qword [rsp + 0xc0]
mov ecx, dword [rax + 0x2c]
test ecx, ecx
je 0x493daf
movsxd rax, ecx
mov qword [rsp + 0x38], rax
lea rax, [0x008fa280]
mov qword [rsp], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 8], rax
call fcn.0040da30
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
test rax, rax
je 0x493da4
mov rdx, qword [rax + 8]
lea rbx, [0x0080c100]
cmp rdx, rbx
jne 0x493d99
mov rdx, qword [rcx]
cmp rdx, 0x3e3
jne 0x493d8e
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xe0], rax
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov rdx, rax
mov rax, rcx
mov rcx, rdx
jmp 0x493d62
mov rdx, rax
mov rax, rcx
mov rcx, rdx
jmp 0x493d62
mov rdx, rax
mov rax, rcx
mov rcx, rdx
jmp 0x493d62
mov eax, dword [rax + 0x30]
mov qword [rsp + 0xd0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
test rcx, rcx
je 0x49410e
mov rcx, qword [rcx + 8]
jmp 0x49410e
test rcx, rcx
jmp 0x493dd8
lea rbx, [0x0080c100]
jmp 0x493cd9
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov rcx, qword [rsp + 0xb8]
mov rcx, qword [rcx]
mov qword [rsp], rcx
lea rcx, [rsp + 0x68]
mov qword [rsp + 8], rcx
call fcn.00403050
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 0x40]
mov qword [rsp], rcx
mov qword [rsp + 8], 0
call fcn.00403be0
jmp 0x493cd9
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
jmp 0x49411e
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov rdx, qword [0x010ef4e8]
mov qword [rsp + 0x10], rdx
call fcn.00401f10
movzx eax, byte [rsp + 0x18]
test al, al
jne 0x493c6e
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
jmp 0x493c37
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov rdx, qword [0x010ef4f8]
mov qword [rsp + 0x10], rdx
call fcn.00401f10
movzx eax, byte [rsp + 0x18]
test al, al
jne 0x493c6e
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
jmp 0x493c27
mov rax, qword [rsp + 0xc0]
mov ecx, dword [rax + 0x2c]
test ecx, ecx
je 0x493f31
movsxd rax, ecx
mov qword [rsp + 0x40], rax
lea rax, [0x008fa280]
mov qword [rsp], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 8], rax
call fcn.0040da30
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rcx
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, dword [rax + 0x30]
mov qword [rsp + 0xd0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rcx
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 0x38]
movzx ecx, byte [rcx + 0x234]
test cl, cl
je 0x493bcb
mov eax, dword [rax + 0x30]
mov qword [rsp + 0xd0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rcx
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rcx]
mov qword [rsp], rdx
lea rdx, [rsp + 0x98]
mov qword [rsp + 8], rdx
call fcn.00403050
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 0x40]
mov qword [rsp], rcx
lea rcx, [rsp + 0x88]
mov qword [rsp + 8], rcx
call fcn.00403be0
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
jmp 0x493b98
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xe0], rax
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
lea rax, [0x01636780]
mov qword [rsp], rax
lea rax, [0x008c54b8]
mov qword [rsp + 8], rax
call fcn.0045be80
mov rax, qword [rsp + 0xc0]
jmp 0x493b21
lea rax, [0x00810ba0]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x36
mov eax, dword [0x01636820]
test eax, eax
jne 0x494100
lea rax, [0x008ba7a1]
mov qword [rdi], rax
mov qword [rsp + 0xd0], 0
lea rax, [0x008f8f20]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rdi
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
lea rax, [0x008ba7a1]
call fcn.004544a0
jmp 0x4940cd
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
mov rcx, qword [rcx + 0x18]
mov qword [rsp], rax
call rcx
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [rsp], 0
lea rdx, [0x008b2800]
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], 0x22
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rax
call fcn.004410b0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rcx
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 8], rax
call fcn.0040d660
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.00493ac0