Function at 0x743ad0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x7440e9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movzx eax, byte [0x01635e86]
cmp al, 1
jbe 0x743b0d
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
jne 0x743b16
call fcn.00429570
ud2
mov byte [0x01635e86], 1
call fcn.004cc830
call fcn.004f02c0
call fcn.0046a650
call fcn.0054a220
call fcn.005b3800
call fcn.004dfae0
call fcn.0045ed10
call fcn.00568a00
call fcn.004eb320
call fcn.006439c0
call fcn.004acaf0
call fcn.0045cf30
call fcn.0048f3c0
call fcn.004e1470
call fcn.0051bda0
call fcn.004fd9c0
call fcn.004bebd0
call fcn.00506d50
call fcn.00406a00
mov rax, qword [rsp]
mov qword [rsp + 0x28], rax
lea rcx, [0x007feb40]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
lea rdx, [0x0088d0f7]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 5
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 1
mov qword [rax + 8], 0
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x0089045c]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 7
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0
mov qword [rax + 8], 1
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x0088cf67]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 5
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 2
mov qword [rax + 8], 0
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x0088b93b]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 4
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0
mov qword [rax + 8], 3
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x00890042]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 7
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 0
mov qword [rax + 8], 3
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x00896ae9]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 0xa
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 4
mov qword [rax + 8], 0
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x00894898]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 9
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 4
mov qword [rax + 8], 0
lea rax, [0x007feb40]
mov qword [rsp], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 8], rax
lea rcx, [0x008901bc]
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], 7
call fcn.0040ab60
mov rax, qword [rsp + 0x20]
mov qword [rax], 8
mov qword [rax + 8], 0
mov eax, dword [0x01636820]
test eax, eax
jne 0x7440d3
mov rax, qword [rsp + 0x28]
mov qword [0x010ed430], rax
lea rax, [0x0089209c]
mov qword [rsp], rax
mov qword [rsp + 8], 8
call fcn.0063e790
mov eax, dword [0x01636820]
mov rcx, qword [rsp + 0x10]
test eax, eax
jne 0x7440bf
mov qword [0x010ed438], rcx
lea rax, [0x008b1b1b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eeff0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x7440ae
mov qword [0x010eeff8], rax
lea rax, [0x008afbe0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef010], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x74409d
mov qword [0x010ef018], rax
lea rax, [0x008abbd9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef000], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x74408c
mov qword [0x010ef008], rax
lea rax, [0x008b95c5]
mov qword [rsp], rax
mov qword [rsp + 8], 0x32
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef040], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x74407b
mov qword [0x010ef048], rax
lea rax, [0x008a7513]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0045a2a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x010eefe0], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x74406a
mov qword [0x010eefe8], rax
mov rax, qword [0x008f6870]
lea rcx, [0x007c9da0]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004b3720
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rax + 0x48]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x010ef050], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x744056
mov qword [0x010ef058], rcx
call fcn.00406a00
mov eax, dword [0x01636820]
mov rcx, qword [rsp]
test eax, eax
jne 0x744042
mov qword [0x010ed440], rcx
lea rax, [0x008bbc85]
mov qword [rsp], rax
mov qword [rsp + 8], 0x3c
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef030], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x744031
mov qword [0x010ef038], rcx
lea rax, [0x008bb7ae]
mov qword [rsp], rax
mov qword [rsp + 8], 0x3a
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef020], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x744020
mov qword [0x010ef028], rcx
call fcn.0073fc10
mov byte [0x01635e86], 2
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lea rdi, [0x010ef028]
mov rax, rcx
call fcn.004544a0
jmp 0x74400a
lea rdi, [0x010ef038]
mov rax, rcx
call fcn.004544a0
jmp 0x743fcf
lea rdi, [0x010ed440]
mov rax, rcx
call fcn.004544a0
jmp 0x743f94
lea rdi, [0x010ef058]
mov rax, rcx
call fcn.004544a0
jmp 0x743f76
lea rdi, [0x010eefe8]
call fcn.004544a0
jmp 0x743f20
lea rdi, [0x010ef048]
call fcn.004544a0
jmp 0x743ee1
lea rdi, [0x010ef008]
call fcn.004544a0
jmp 0x743ea2
lea rdi, [0x010ef018]
call fcn.004544a0
jmp 0x743e63
lea rdi, [0x010eeff8]
call fcn.004544a0
jmp 0x743e24
lea rdi, [0x010ed438]
mov rax, rcx
call fcn.004544a0
jmp 0x743de5
lea rdi, [0x010ed430]
mov rax, qword [rsp + 0x28]
call fcn.004544a0
jmp 0x743db2
call fcn.00451b80
jmp fcn.00743ad0