Function at 0x4a9a70
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x30]
cmp rax, qword [rcx + 0x10]
jbe 0x4a9f9c
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
mov rdx, qword [rsp + 0xd8]
lea rbx, [rdx - 2]
cmp rbx, 0x22
ja 0x4a9f7e
mov qword [rsp + 0x5f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movzx ebx, byte [rsp + 0xe0]
test bl, bl
je 0x4a9f16
mov rsi, qword [rsp + 0xd0]
neg rsi
cmp rdx, 0xa
jne 0x4a9deb
mov eax, 0x41
jmp 0x4a9b15
mov byte [rsp + rdi + 0x5d], cl
mov rax, r9
cmp rsi, 0x64
jb 0x4a9ba4
mov rcx, rsi
shr rsi, 1
mov rdx, rax
movabs rax, 0xa3d70a3d70a3d70b
mov rdi, rdx
mul rsi
shr rdx, 5
mov rsi, rdx
imul rdx, rdx, 0x64
sub rcx, rdx
shl rcx, 1
lea rdx, [rcx + 1]
cmp rdx, 0xc8
jae 0x4a9f77
lea rdx, [rdi - 1]
lea r8, [0x008bf2ae]
movzx r9d, byte [r8 + rcx + 1]
cmp rdx, 0x41
jae 0x4a9f77
lea rdx, [rsp + 0x5f]
mov byte [rdi + rdx - 1], r9b
cmp rcx, 0xc8
jae 0x4a9f70
lea r9, [rdi - 2]
movzx ecx, byte [r8 + rcx]
cmp r9, 0x41
jb 0x4a9b0e
jmp 0x4a9f70
mov rcx, rsi
shl rsi, 1
lea rdx, [rsi + 1]
cmp rdx, 0xc8
jae 0x4a9f69
lea rdx, [rax - 1]
lea rdi, [0x008bf2ae]
movzx r8d, byte [rdi + rsi + 1]
cmp rdx, 0x41
jae 0x4a9f69
lea r9, [rsp + 0x5f]
mov byte [rax + r9 - 1], r8b
cmp rcx, 0xa
jb 0x4a9de1
cmp rsi, 0xc8
jae 0x4a9f62
lea rcx, [rax - 2]
movzx edx, byte [rdi + rsi]
cmp rcx, 0x41
jae 0x4a9f62
mov byte [rax + r9 - 2], dl
test bl, bl
je 0x4a9dd9
lea rax, [rcx - 1]
cmp rax, 0x41
jae 0x4a9f31
mov byte [rsp + rcx + 0x5e], 0x2d
movzx ecx, byte [rsp + 0xe1]
test cl, cl
je 0x4a9d59
cmp rax, 0x41
ja 0x4a9f2a
mov rcx, qword [rsp + 0xc0]
mov rdx, rcx
sub rcx, rax
add rcx, 0x41
mov qword [rsp + 0x50], rcx
lea rbx, [rax - 0x41]
neg rbx
mov rsi, rbx
neg rbx
sar rbx, 0x3f
and rax, rbx
mov rbx, qword [rsp + 0xc8]
cmp rcx, rbx
ja 0x4a9cfa
mov rdi, qword [rsp + 0xb8]
cmp rcx, rbx
ja 0x4a9f2a
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0x48], rbx
lea rcx, [rdx + rdi]
mov qword [rsp], rcx
lea rax, [rsp + rax + 0x5f]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rsi
call fcn.00454d00
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xf8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rax
lea rax, [0x007df620]
mov qword [rsp], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rcx
call fcn.0043d870
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0x48]
xorps xmm0, xmm0
jmp 0x4a9c83
cmp rax, 0x41
ja 0x4a9f23
mov qword [rsp], 0
lea rcx, [rax - 0x41]
neg rcx
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and rax, rcx
lea rax, [rsp + rax + 0x5f]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rdx
call fcn.004412b0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xe8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], rax
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov rax, rcx
jmp 0x4a9c29
test bl, bl
mov rcx, rdx
jmp 0x4a9c10
cmp rdx, 0x25
jae 0x4a9f5b
lea rdi, [0x00b07aa0]
mov rcx, qword [rdi + rdx*8]
test rcx, rcx
jbe 0x4a9e8f
lea rax, [rdx - 1]
mov edi, 0x41
jmp 0x4a9e29
mov byte [rsp + rdi + 0x5e], sil
shr r8, cl
cmp rcx, 0x40
sbb rsi, rsi
and rsi, r8
mov rdi, r9
cmp rsi, rdx
jb 0x4a9e59
mov r8, rsi
and rsi, rax
cmp rsi, 0x24
jae 0x4a9f54
lea r9, [rdi - 1]
lea r10, [0x008b3332]
movzx esi, byte [r10 + rsi]
cmp r9, 0x41
jb 0x4a9e14
jmp 0x4a9f54
cmp rsi, 0x24
jae 0x4a9f4d
lea rax, [rdi - 1]
lea rcx, [0x008b3332]
movzx ecx, byte [rcx + rsi]
cmp rax, 0x41
jae 0x4a9f4d
lea rdx, [rsp + 0x5f]
mov byte [rdi + rdx - 1], cl
test bl, bl
mov rcx, rax
jmp 0x4a9c10
mov eax, 0x41
jmp 0x4a9ea4
mov byte [rsp + rcx + 0x5e], sil
mov rsi, rdx
mov rax, r8
mov rdx, rdi
cmp rsi, rdx
jb 0x4a9ee8
test rdx, rdx
je 0x4a9f46
mov rcx, rax
mov rax, rsi
mov rdi, rdx
xor edx, edx
div rdi
mov rdx, rax
imul rax, rdi
sub rsi, rax
cmp rsi, 0x24
jae 0x4a9f3f
lea r8, [rcx - 1]
lea r9, [0x008b3332]
movzx esi, byte [r9 + rsi]
cmp r8, 0x41
jb 0x4a9e96
jmp 0x4a9f3f
cmp rsi, 0x24
jae 0x4a9f38
lea rcx, [rax - 1]
lea rdx, [0x008b3332]
movzx edx, byte [rdx + rsi]
cmp rcx, 0x41
jae 0x4a9f38
lea rsi, [rsp + 0x5f]
mov byte [rax + rsi - 1], dl
test bl, bl
mov rax, rcx
jmp 0x4a9e87
mov rsi, qword [rsp + 0xd0]
jmp 0x4a9afd
call fcn.00429340
ud2
call fcn.00429340
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004293b0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x007df460]
mov qword [rsp], rax
lea rax, [0x008f8780]
mov qword [rsp + 8], rax
call fcn.0042a320
ud2
call fcn.00451b80
jmp fcn.004a9a70