Function at 0x44c5d0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x44c905
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov eax, dword [rsp + 0x68]
test eax, eax
je 0x44c82c
mov rcx, qword [rsp + 0x60]
lea rdx, [0x00b08f00]
jmp 0x44c619
mov rdx, qword [rdx + 0x1c0]
test rdx, rdx
je 0x44c825
mov rbx, qword [rdx + 0xc8]
cmp rcx, rbx
jb 0x44c612
mov rbx, qword [rdx + 0xd0]
cmp rcx, rbx
jae 0x44c612
test rdx, rdx
je 0x44c6b5
mov qword [rsp + 0x48], rdx
mov rcx, qword [rdx + 0x1b0]
mov qword [rsp + 8], rcx
lea rcx, [0x007fe2a0]
mov qword [rsp], rcx
mov dword [rsp + 0x10], eax
call fcn.00409210
mov rax, qword [rsp + 0x18]
mov rax, qword [rax]
test rax, rax
jne 0x44c6a6
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0xc8]
mov edx, dword [rsp + 0x68]
movsxd rbx, edx
add rbx, rcx
mov rax, qword [rax + 0xd0]
cmp rbx, rax
ja 0x44c83f
mov qword [rsp + 0x70], rbx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp + 0x70], rax
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp + 0x20], rcx
call fcn.0044c1e0
lea rax, [0x007fda60]
mov qword [rsp], rax
mov rax, qword [0x010f0150]
mov qword [rsp + 8], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x10], eax
call fcn.00409210
mov rax, qword [rsp + 0x18]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
call fcn.0044c230
mov rax, qword [rsp + 0x38]
test rax, rax
jne 0x44c816
call fcn.0042b400
lea rax, [0x008a4703]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0042bdc0
mov eax, dword [rsp + 0x68]
movsxd rax, eax
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088e045]
mov qword [rsp], rax
mov qword [rsp + 8], 6
call fcn.0042bdc0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x008a2b4c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042bdc0
call fcn.0042b490
lea rax, [0x00b08f00]
jmp 0x44c808
mov qword [rsp + 0x40], rax
mov rcx, qword [rax + 0xc8]
mov qword [rsp + 0x30], rcx
mov rdx, qword [rax + 0xd0]
mov qword [rsp + 0x28], rdx
call fcn.0042b400
lea rax, [0x008904fd]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x00891ff4]
mov qword [rsp], rax
mov qword [rsp + 8], 8
call fcn.0042bdc0
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x1c0]
test rax, rax
jne 0x44c782
jmp 0x44c8ea
mov qword [rsp + 0x70], rax
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
xor edx, edx
jmp 0x44c63a
mov qword [rsp + 0x70], 0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
call fcn.0042b400
lea rax, [0x008a4703]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0042bdc0
mov eax, dword [rsp + 0x68]
movsxd rax, eax
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0089f0f6]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088b035]
mov qword [rsp], rax
mov qword [rsp + 8], 3
call fcn.0042bdc0
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b1ce9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0042ab20
ud2
lea rax, [0x008b7d89]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2e
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.0044c5d0