Function at 0x41d090
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x41d55c
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov rax, qword [rsp + 0x30]
test rax, 7
jne 0x41d541
movzx edx, byte [0x01635eee]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rbx + 0x50]
mov rcx, qword [rsp + 0x68]
mov rdi, rcx
shr rcx, 3
mov r8, rdi
and rdi, 7
mov r9, rcx
mov rcx, rdi
mov r10d, 1
shl r10d, cl
lea rdi, [r9 + rsi]
test dl, dl
je 0x41d252
test byte [rdi], al
movzx edx, byte [r9 + rsi]
test dl, r10b
je 0x41d406
mov rdx, qword [rbx + 0x68]
cmp rdx, 8
jne 0x41d224
mov rsi, qword [rsp + 0x48]
movzx edi, byte [rsi]
mov ecx, dword [rsp + 0x50]
shr dil, cl
cmp ecx, 8
sbb r8d, r8d
and edi, r8d
test dil, 1
setne dil
test dil, dil
jne 0x41d21a
cmp rdx, 8
jne 0x41d1f7
mov edx, 1
shl edx, cl
cmp ecx, 0x20
sbb edi, edi
and edx, edi
lock or byte [rsi], dl
mov rdx, qword [rbx + 0x68]
cmp rdx, 8
jne 0x41d1e1
movzx edx, byte [rsi]
shr dl, cl
cmp ecx, 8
sbb ebx, ebx
and edx, ebx
test dl, 1
setne dl
test dl, dl
je 0x41d3eb
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rcx]
test rdx, rdx
je 0x41d1dd
mov rbx, qword [rdx + 0x10]
cmp rbx, 0xfd
jne 0x41d1c7
xor edx, edx
test dl, dl
je 0x41d1b7
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.0041f390
jmp 0x41d1ad
jae 0x41d2bd
mov qword [rdx + rbx*8 + 0x18], rax
inc qword [rdx + 0x10]
mov edx, 1
jmp 0x41d1a9
xor edx, edx
jmp 0x41d1a9
movzx ebx, byte [rsi]
inc ecx
shr bl, cl
cmp ecx, 8
sbb esi, esi
and ebx, esi
test bl, 0x10
setne dl
jmp 0x41d185
lea edx, [rcx + 1]
mov edi, ecx
mov ecx, edx
mov r8d, 0x10
shl r8d, cl
cmp ecx, 0x20
sbb edx, edx
and r8d, edx
lock or byte [rsi], r8b
mov ecx, edi
jmp 0x41d169
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov rsi, qword [rsp + 0x48]
movzx r8d, byte [rsi]
mov r9d, dword [rsp + 0x50]
lea ecx, [r9 + 1]
shr r8b, cl
cmp ecx, 8
sbb r10d, r10d
and r8d, r10d
test r8b, 0x10
setne dil
mov ecx, r9d
jmp 0x41d145
mov ecx, dword [0x01636a4c]
test ecx, ecx
jle 0x41d265
mov rcx, qword [rbx + 0x30]
cmp r8, rcx
jae 0x41d2a7
test byte [rdi], al
movzx ecx, byte [r9 + rsi]
test cl, r10b
jne 0x41d29d
lock or byte [rdi], r10b
movzx ecx, byte [rbx + 0x62]
test cl, 1
je 0x41d18d
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x10]
add rcx, qword [rbx + 0x68]
mov qword [rax + 0x10], rcx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov rcx, qword [rbx + 0x48]
lea rdx, [r9 + rcx]
test byte [rdx], al
movzx ecx, byte [r9 + rcx]
test cl, r10b
je 0x41d2c4
jmp 0x41d265
call fcn.004292d0
ud2
call fcn.0042b400
lea rax, [0x008aeea0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0089aa32]
mov qword [rsp], rax
mov qword [rsp + 8], 0xc
call fcn.0042bdc0
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088ae59]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088aeba]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
call fcn.0042b490
lea rax, [0x0088bcab]
mov qword [rsp], rax
mov qword [rsp + 8], 4
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x18], rax
call fcn.0041d570
lea rax, [0x0088b5ba]
mov qword [rsp], rax
mov qword [rsp + 8], 3
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 0xffffffffffffffff
call fcn.0041d570
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov byte [rax + 0xf9], 2
lea rax, [0x008a64ed]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042ab20
ud2
lea rax, [0x008b5e97]
mov qword [rsp], rax
mov qword [rsp + 8], 0x29
call fcn.0042ab20
ud2
call fcn.0042b400
call fcn.0042b400
lea rax, [0x008bcb00]
mov qword [rsp], rax
mov qword [rsp + 8], 0x44
call fcn.0042bdc0
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
call fcn.0042b400
lea rax, [0x008aae72]
mov qword [rsp], rax
mov qword [rsp + 8], 0x18
call fcn.0042bdc0
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088ae59]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088aeba]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
call fcn.0042b490
lea rax, [0x0088bcab]
mov qword [rsp], rax
mov qword [rsp + 8], 4
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x18], rax
call fcn.0041d570
lea rax, [0x0088b5ba]
mov qword [rsp], rax
mov qword [rsp + 8], 3
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 0xffffffffffffffff
call fcn.0041d570
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov byte [rax + 0xf9], 2
lea rax, [0x008b01d7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0042ab20
ud2
lea rax, [0x008b2d95]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.0041d090