Function at 0x421440
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x421811
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
jmp 0x42147b
lea rcx, [rbx + 1]
cmp rcx, 0x80
jge 0x421714
test byte [rax], al
cmp rcx, 0x80
jae 0x42180a
mov rbx, rcx
shl rcx, 4
lea rsi, [rax + rcx + 8]
mov rcx, qword [rax + rcx + 8]
test rcx, rcx
je 0x421477
mov qword [rsp + 0x28], rcx
mov qword [rsp], rsi
mov qword [rsp + 8], rcx
call fcn.00422740
mov rax, qword [rsp + 0x28]
movzx ecx, byte [rax + 0x64]
cmp cl, 3
jne 0x4217ef
mov rcx, qword [rax + 0x20]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jb 0x4217d4
mov qword [rsp + 0x20], rax
mov rbx, qword [rax + 0x78]
test rbx, rbx
ja 0x4216cb
mov rcx, qword [rax + 0x20]
cmp rcx, rdx
ja 0x42158c
mov qword [rax + 0x70], 0
mov rcx, qword [rsp + 0x40]
test byte [rcx], al
mov rbx, qword [rax + 0x18]
sub rbx, qword [rcx + 0x1328]
shr rbx, 0xd
xor esi, esi
jmp 0x42152c
mov qword [r8 + r9*8], rax
inc rsi
cmp rsi, rdx
jae 0x42154d
mov rdi, qword [rcx + 0x1050]
mov r8, qword [rcx + 0x1048]
lea r9, [rsi + rbx]
cmp r9, rdi
jb 0x421525
jmp 0x4217b8
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rcx]
shl rdx, 0xd
add rbx, rdx
mov qword [rcx], rbx
mov rcx, qword [0x0163d100]
sub rcx, rdx
mov qword [0x0163d100], rcx
mov rcx, qword [rax + 0x10]
test rcx, rcx
jne 0x42179d
mov qword [rsp + 0x58], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov rax, qword [rsp + 0x40]
test byte [rax], al
lea rcx, [rax + 0x34d0]
mov qword [rsp], rcx
call fcn.00415d00
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
shl rcx, 0xd
mov rbx, qword [rsp + 0x20]
lea rsi, [rbx + 0x18]
add rcx, qword [rsi]
mov rsi, qword [rbx + 0x20]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], rcx
sub rsi, rdx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x60], 0
mov qword [rax + 0x68], 0
mov byte [rax + 0x64], 0
movups xmmword [rax + 0x70], xmm0
movups xmmword [rax + 0x88], xmm0
mov byte [rax + 0x65], 0
mov qword [rax + 0x30], 0
movups xmmword [rax + 0x48], xmm0
mov qword [rbx + 0x20], rdx
mov rcx, qword [rax + 0x18]
mov rsi, qword [rsp + 0x40]
sub rcx, qword [rsi + 0x1328]
shr rcx, 0xd
test rcx, 0xffffffffffffffff
jbe 0x42164c
mov rdi, qword [rsi + 0x1050]
mov r8, qword [rsi + 0x1048]
lea r9, [rcx - 1]
cmp r9, rdi
jae 0x4217cd
mov qword [r8 + rcx*8 - 8], rbx
mov rdi, qword [rsi + 0x1050]
mov r8, qword [rsi + 0x1048]
cmp rcx, rdi
jae 0x4217c6
mov qword [r8 + rcx*8], rax
mov rdi, qword [rsi + 0x1050]
mov r8, qword [rsi + 0x1048]
mov r9, qword [rax + 0x20]
lea rcx, [rcx + r9 - 1]
cmp rcx, rdi
jae 0x4217bf
mov qword [r8 + rcx*8], rax
movzx ecx, byte [rbx + 0x65]
mov byte [rax + 0x65], cl
mov byte [rbx + 0x64], 2
mov byte [rax + 0x64], 2
mov rcx, qword [rbx + 0x70]
mov qword [rsp + 0x18], rcx
mov qword [rsp], rsi
mov qword [rsp + 8], rax
mov word [rsp + 0x10], 0
call fcn.00421c20
mov rax, qword [rsp + 0x20]
mov byte [rax + 0x64], 3
mov rdx, qword [rsp + 0x48]
jmp 0x421503
shl rcx, 0xd
mov rdx, qword [rax + 0x18]
mov qword [rsp + 8], rcx
mov qword [rsp], rdx
call fcn.004146d0
mov rax, qword [0x0163d110]
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rcx + 0x78]
shl rdx, 0xd
sub rax, rdx
mov qword [0x0163d110], rax
mov qword [rcx + 0x78], 0
mov rax, rcx
mov rdx, qword [rsp + 0x48]
jmp 0x4214f6
mov qword [rsp], rax
mov qword [rsp + 8], rdx
call fcn.00421820
mov rax, qword [rsp + 0x10]
test rax, rax
jne 0x4214c5
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
call fcn.00421880
movzx eax, byte [rsp + 0x10]
test al, al
je 0x42178a
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
call fcn.00421820
mov rax, qword [rsp + 0x10]
test rax, rax
jne 0x4214c5
mov qword [rsp + 0x58], 0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov qword [rsp + 0x58], 0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lea rax, [0x0089ec54]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x008af604]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0042ab20
ud2
lea rax, [0x008b21a0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x22
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.00451b80
jmp fcn.00421440