Function at 0x419a10
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x419cf7
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx]
mov rsi, rdx
xor edi, edi
jmp 0x419a5c
mov r8, qword [rbx]
mov rdi, rdx
mov rdx, rbx
mov rbx, r8
test rbx, rbx
je 0x419aac
mov rdx, qword [rbx + 0x18]
cmp rdx, rcx
jae 0x419a6f
mov rdx, rbx
jmp 0x419a50
jbe 0x419a80
lea rdx, [rbx + 8]
mov rdi, rdx
mov rdx, rbx
mov rbx, rdi
jmp 0x419a50
mov rdx, qword [rbx + 0x20]
mov rdi, rax
cmp rdx, rax
jae 0x419a9a
mov rax, rbx
mov rdx, rbx
mov rbx, rax
mov rax, rdi
jmp 0x419a75
jbe 0x419cdc
lea rdx, [rbx + 8]
mov rax, rbx
mov rbx, rdx
jmp 0x419a8f
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], rdi
lea rax, [0x0110e540]
mov qword [rsp], rax
call fcn.00415d00
mov rax, qword [rsp + 8]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x20], 0
mov qword [rax + 0x18], 0
mov dword [rax + 0x28], 0
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rcx + 0x20]
mov qword [rax + 0x18], rdx
mov rdx, qword gs:[0x28]
mov rdx, qword [rdx]
mov rdx, qword [rdx + 0x30]
mov ebx, dword [rdx + 0xf0]
mov esi, dword [rdx + 0xf4]
mov dword [rdx + 0xf0], esi
mov edi, ebx
shl ebx, 0x11
xor ebx, edi
mov edi, esi
xor esi, ebx
shr ebx, 7
xor ebx, esi
mov esi, edi
shr edi, 0x10
xor edi, ebx
mov dword [rdx + 0xf4], edi
lea edx, [rsi + rdi]
mov dword [rax + 0x28], edx
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0x20]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x18]
mov qword [rcx], rax
jmp 0x419b67
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x419bc6
mov edx, dword [rcx + 0x28]
mov ebx, dword [rax + 0x28]
cmp edx, ebx
jbe 0x419bc6
mov rdx, qword [rax + 0x20]
mov rdx, qword [rdx + 0x20]
mov rbx, qword [rax + 0x18]
cmp rdx, rbx
jne 0x419beb
mov rdx, qword [rcx + 8]
cmp rdx, rax
je 0x419bb1
mov rdx, qword [rcx]
cmp rdx, rax
jne 0x419bd0
mov qword [rsp + 8], rcx
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0041a0b0
jmp 0x419b62
mov qword [rsp + 8], rcx
mov rax, qword [rsp + 0x48]
mov qword [rsp], rax
call fcn.0041a180
jmp 0x419b62
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
lea rax, [0x008b1e54]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0042ab20
ud2
mov qword [rsp + 0x10], rbx
call fcn.0042b400
lea rax, [0x008a66db]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0089f112]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0042bdc0
mov rax, qword [rsp + 0x10]
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x28], rax
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x10], rcx
call fcn.0042b400
lea rax, [0x008abc3d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x19
call fcn.0042bdc0
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x008a5862]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042bdc0
mov rax, qword [rsp + 0x10]
mov qword [rsp], rax
call fcn.0042bac0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b26f0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x22
call fcn.0042ab20
ud2
lea rax, [0x008b036a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.00419a10