Function at 0x446b40
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x446e14
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
call fcn.00446f70
mov rax, qword [rsp]
mov ecx, dword [rsp + 8]
mov rdx, qword [rsp + 0x10]
movzx ebx, byte [0x01112510]
test bl, bl
je 0x446dca
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x34], ecx
mov qword [rsp + 0x50], rdx
mov rbx, qword [rdx]
mov rsi, rbx
test rbx, rbx
je 0x446bba
mov rdi, qword [rbx + 0x10]
add rdi, 0xffffffffffff0418
neg rdi
cmp rdi, 0x34
jge 0x446dc2
mov qword [rsp], rsi
call fcn.004470c0
mov rax, qword [rsp + 0x10]
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov qword [rdx], rcx
mov qword [rsp + 0x68], rax
call fcn.00453390
mov rax, qword [rsp]
shr rax, 6
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rcx + 8]
mov qword [rcx + 8], rax
sub rax, rdx
mov rdx, qword [rsp + 0x88]
test rdx, rdx
jl 0x446db2
mov rbx, qword [rsp + 0x98]
lea esi, [rbx + 1]
cmp sil, 3
jbe 0x446c1c
mov esi, 3
mov rdi, qword [rcx + 0x10]
mov r8d, esi
shl esi, 6
movzx r9d, byte [rsp + 0x80]
or r9d, esi
cmp rdi, 0xfbe8
jae 0x446e0d
mov qword [rsp + 0x40], rdi
mov byte [rcx + rdi + 0x418], r9b
inc qword [rcx + 0x10]
cmp r8b, 3
je 0x446d6e
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004472b0
xor eax, eax
jmp 0x446c9f
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rcx + rax*8]
mov rbx, qword [rsp + 0x68]
mov qword [rsp], rbx
mov qword [rsp + 8], rdx
call fcn.004472b0
mov rax, qword [rsp + 0x48]
inc rax
mov rcx, qword [rsp + 0x98]
cmp rax, rcx
jl 0x446c73
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x446d52
jg 0x446d00
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x10]
mov rcx, qword [rsp + 0x40]
sub rax, rcx
cmp rax, 0x34
jg 0x446deb
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x446cea
add rax, 0xfffffffffffffffe
mov byte [rcx], al
mov eax, dword [rsp + 0x34]
mov dword [rsp], eax
call fcn.00447030
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov rcx, qword [rsp + 0x68]
lea rdx, [rcx + 0x18]
test byte [rdx], al
mov rbx, qword [rsp + 0x58]
mov qword [rsp], rbx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], pe_nt_image_headers64
mov qword [rsp + 0x18], pe_nt_image_headers64
mov qword [rsp + 0x20], rax
call fcn.00446e20
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x68]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.004472b0
jmp 0x446cbf
mov rax, qword [rsp + 0x68]
mov qword [rsp], rax
mov qword [rsp + 8], 0
call fcn.004472b0
jmp 0x446cbf
mov qword [rsp + 0x38], rax
mov qword [rsp], rcx
mov qword [rsp + 8], 0
call fcn.004472b0
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x10]
lea rdx, [rcx - 1]
cmp rdx, 0xfbe8
jae 0x446e06
lea rsi, [rcx + rax + 0x417]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x68]
jmp 0x446c5c
mov rbx, qword [rsp + 0x98]
mov rsi, rbx
jmp 0x446c11
mov rax, rbx
jmp 0x446bd3
movzx ebx, byte [rax + 0x2f8]
test bl, bl
jne 0x446b89
mov dword [rsp], ecx
call fcn.00447030
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
lea rax, [0x008aec22]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.00451b80
jmp fcn.00446b40