Function at 0x412e20
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x413189
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov rcx, qword [rsp + 0x90]
test rcx, 0x1f
jne 0x41316e
mov rdx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
cmp rdx, rax
je 0x413067
test rdx, rdx
je 0x4130ea
mov rbx, rdx
xor edx, edx
div rbx
mov qword [rsp + 0x30], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
mov rdx, rbx
shr rbx, 3
mov rsi, qword [rsp + 0x78]
mov rdi, rsi
shr rsi, 3
mov r8, rbx
sub rbx, rsi
test rbx, rbx
jbe 0x413060
mov word [rsp + 0x30], 1
cmp rbx, 1
jbe 0x413056
mov byte [rsp + 0x32], 0x81
dec rbx
mov esi, 3
jmp 0x412ef7
mov r9, rbx
or rbx, 0x80
mov byte [rsp + rsi + 0x30], bl
shr r9, 7
inc rsi
mov rbx, r9
cmp rbx, 0x80
jb 0x412f0b
cmp rsi, 0x28
jb 0x412edf
jmp 0x4130e3
cmp rsi, 0x28
jae 0x4130dc
mov byte [rsp + rsi + 0x30], bl
lea rbx, [rsi + 1]
cmp rbx, 0x28
jae 0x4130d5
mov byte [rsp + rbx + 0x30], pe_nt_image_headers64
inc rbx
jmp 0x412f4a
mov rsi, r8
or r8, 0x80
mov byte [rsp + rbx + 0x30], r8b
shr rsi, 7
inc rbx
mov r8, rsi
cmp r8, 0x80
jb 0x412f5e
cmp rbx, 0x28
jb 0x412f31
jmp 0x4130ce
cmp rbx, 0x28
jae 0x4130c7
mov byte [rsp + rbx + 0x30], r8b
inc rbx
dec rax
mov rsi, rax
jmp 0x412f8f
mov r8, rax
or rax, 0x80
mov byte [rsp + rbx + 0x30], al
shr r8, 7
inc rbx
mov rax, r8
cmp rax, 0x80
jb 0x412fa2
cmp rbx, 0x28
jb 0x412f78
jmp 0x4130c0
cmp rbx, 0x28
jae 0x4130b9
mov byte [rsp + rbx + 0x30], al
lea rax, [rbx + 1]
cmp rax, 0x28
jae 0x4130b2
mov qword [rsp + 0x28], rsi
mov byte [rsp + rbx + 0x31], 0
lea rax, [rsp + 0x30]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 2
call fcn.004132d0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x28]
imul rax, rcx
mov rcx, qword [rsp + 0x78]
add rax, rcx
shr rax, 3
add rax, 3
shr rax, 2
mov rcx, qword [rsp + 0x90]
shr rcx, 5
mov rdx, qword [rsp + 0x68]
mov rbx, rdx
sub rdx, rax
sub rbx, rcx
mov rax, rbx
inc rax
mov qword [rsp], rax
sub rdx, rbx
mov qword [rsp + 8], rdx
call fcn.00454a70
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov ebx, 2
jmp 0x412f1d
xor ebx, ebx
jmp 0x412f1d
mov rax, qword [rsp + 0x98]
mov qword [rsp], rax
mov qword [rsp + 8], 0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 2
call fcn.004132d0
mov rax, qword [rsp + 0x20]
mov rcx, rax
shl rax, 3
mov rdx, qword [rsp + 0x78]
cmp rax, rdx
jne 0x4130f1
mov rax, rcx
jmp 0x413013
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004293b0
ud2
mov qword [rsp + 0x28], rcx
call fcn.0042b400
lea rax, [0x008b6c3c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0042bdc0
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
call fcn.0042bac0
lea rax, [0x0089f0cc]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0042bdc0
mov rax, qword [rsp + 0x78]
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b6a38]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0042ab20
ud2
lea rax, [0x008b4c79]
mov qword [rsp], rax
mov qword [rsp + 8], 0x27
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.00412e20