Function at 0x4c5a10
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4c5e5c
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x78]
mov rcx, rax
and rax, 1
cmp rax, 1
je 0x4c5e3e
cmp rcx, 2
jne 0x4c5e0a
mov rax, qword [rsp + 0x70]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
cmp rbx, 1
jg 0x4c5d86
xor edx, edx
mov ebx, 1
jmp 0x4c5a80
add rsi, 2
mov ebx, edx
mov rdx, rsi
cmp rdx, rcx
jge 0x4c5b44
jae 0x4c5e37
mov rsi, rdx
shl rdx, 4
mov rdx, qword [rax + rdx + 8]
cmp rdx, 1
jne 0x4c5ac5
lea rdx, [rsi + 1]
cmp rdx, rcx
jae 0x4c5e30
shl rdx, 4
mov rdx, qword [rax + rdx + 8]
cmp rdx, 1
je 0x4c5ac1
xor edx, edx
jmp 0x4c5a77
mov edx, ebx
jmp 0x4c5a77
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x10], rax
call fcn.004c68c0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x48], rax
lea rcx, [0x00814c20]
mov qword [rsp], rcx
call fcn.00410220
mov rax, qword [rsp + 8]
lea rcx, [0x008fbf20]
mov qword [rax], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 8]
test ecx, ecx
jne 0x4c5b32
mov rcx, qword [rsp + 0x48]
mov qword [rax + 8], rcx
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, rax
mov rax, qword [rsp + 0x48]
call fcn.004544a0
mov rax, rcx
jmp 0x4c5b20
test bl, bl
je 0x4c5c3d
lea rax, [0x007ff7a0]
mov qword [rsp], rax
call fcn.00410220
mov rax, qword [rsp + 8]
xor ecx, ecx
jmp 0x4c5b6b
mov byte [rax + rcx], cl
inc rcx
cmp rcx, 0x100
jl 0x4c5b65
mov rcx, qword [rsp + 0x78]
lea rdx, [rcx - 2]
mov rbx, qword [rsp + 0x70]
jmp 0x4c5b90
movzx r8d, byte [rdx]
mov byte [rax + rdi], r8b
lea rdx, [rsi - 2]
test rdx, rdx
jl 0x4c5bde
cmp rdx, rcx
jae 0x4c5e29
mov rsi, rdx
shl rdx, 4
mov rdi, qword [rbx + rdx]
mov rdx, qword [rbx + rdx + 8]
test rdx, rdx
jbe 0x4c5e29
lea rdx, [rsi + 1]
movzx edi, byte [rdi]
cmp rdx, rcx
jae 0x4c5e22
shl rdx, 4
mov r8, qword [rbx + rdx + 8]
mov rdx, qword [rbx + rdx]
test r8, r8
ja 0x4c5b84
jmp 0x4c5e22
mov qword [rsp + 0x58], rax
lea rax, [0x00814c20]
mov qword [rsp], rax
call fcn.00410220
mov rax, qword [rsp + 8]
lea rcx, [0x008fbea0]
mov qword [rax], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 8]
test ecx, ecx
jne 0x4c5c2b
mov rcx, qword [rsp + 0x58]
mov qword [rax + 8], rcx
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, rax
mov rax, qword [rsp + 0x58]
call fcn.004544a0
mov rax, rcx
jmp 0x4c5c19
lea rax, [0x007ff800]
mov qword [rsp], rax
call fcn.00410220
mov rax, qword [rsp + 8]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x78]
lea rdx, [rcx - 2]
jmp 0x4c5c73
mov rbx, qword [rsp + 0x30]
lea rdx, [rbx - 2]
mov rax, rsi
mov rcx, qword [rsp + 0x78]
test rdx, rdx
jl 0x4c5d2c
cmp rdx, rcx
jae 0x4c5e1b
mov rbx, rdx
shl rdx, 4
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsi + rdx + 8]
mov rdx, qword [rsi + rdx]
test rdi, rdi
jbe 0x4c5e1b
lea rdi, [rbx + 1]
movzx edx, byte [rdx]
cmp rdi, rcx
jae 0x4c5e14
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rbx
shl rdi, 4
mov rax, qword [rdi + rsi + 8]
mov rcx, qword [rdi + rsi]
mov qword [rsp], 0
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
call fcn.00441420
mov rax, qword [rsp + 0x38]
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x50]
mov qword [rsi + rax*8 + 8], rbx
mov qword [rsi + rax*8 + 0x10], rcx
mov ecx, dword [0x01636820]
lea rdi, [rsi + rax*8]
test ecx, ecx
jne 0x4c5d1f
mov qword [rsi + rax*8], rdx
jmp 0x4c5c62
mov rax, rdx
call fcn.004544a0
jmp 0x4c5c62
lea rax, [0x00814c20]
mov qword [rsp], rax
call fcn.00410220
mov rax, qword [rsp + 8]
lea rcx, [0x008fbee0]
mov qword [rax], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 8]
test ecx, ecx
jne 0x4c5d74
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, rax
mov rax, qword [rsp + 0x50]
call fcn.004544a0
mov rax, rcx
jmp 0x4c5d62
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
call fcn.004c73e0
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [0x00814c20]
mov qword [rsp], rcx
call fcn.00410220
mov rax, qword [rsp + 8]
lea rcx, [0x008fbf60]
mov qword [rax], rcx
mov ecx, dword [0x01636820]
lea rdi, [rax + 8]
test ecx, ecx
jne 0x4c5df8
mov rcx, qword [rsp + 0x40]
mov qword [rax + 8], rcx
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, rax
mov rax, qword [rsp + 0x40]
call fcn.004544a0
mov rax, rcx
jmp 0x4c5de6
mov rax, qword [rsp + 0x70]
jmp 0x4c5a6e
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [0x008f87a0]
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.004c5a10