Function at 0x62a1f0
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x62a854
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
movzx edx, word [rcx]
test dx, 0x40
je 0x62a80e
mov rbx, qword [rsp + 0x88]
test rbx, rbx
jle 0x62a804
mov rsi, qword [rsp + 0x80]
movzx r8d, byte [rsi]
cmp r8b, 0x3f
jne 0x62a7f9
dec rbx
mov r8, rbx
neg rbx
sar rbx, 0x3f
and rbx, 1
add rbx, rsi
xor edx, 0x20
mov rsi, qword [rsp + 0x98]
test rsi, rsi
je 0x62a337
mov rax, rsi
sub rsi, r8
cmp rsi, rax
ja 0x62a84d
mov qword [rsp + 0x28], rsi
lea rax, [0x00824a20]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x22
mov eax, dword [0x01636820]
test eax, eax
jne 0x62a329
lea rcx, [0x008b2514]
mov qword [rdi], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rdi + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdx, [rdi + 0x10]
test ecx, ecx
jne 0x62a30e
mov rax, qword [rsp + 0x90]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
lea rax, [0x008f9840]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, rdi
mov rdi, rdx
mov rcx, rax
mov rax, qword [rsp + 0x90]
call fcn.004544a0
mov rdi, rcx
jmp 0x62a2e2
lea rax, [0x008b2514]
call fcn.004544a0
jmp 0x62a2bf
mov rsi, qword [rcx + 0x10]
mov r9, qword [rcx + 8]
test rsi, rsi
jne 0x62a404
mov rax, qword [rsp + 0x78]
mov rcx, rax
sub rax, r8
cmp rax, rcx
ja 0x62a846
mov qword [rsp + 0x28], rax
lea rax, [0x00824a20]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x27
mov eax, dword [0x01636820]
test eax, eax
jne 0x62a3f6
lea rcx, [0x008b4d63]
mov qword [rdi], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rdi + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdx, [rdi + 0x10]
test ecx, ecx
jne 0x62a3de
mov rax, qword [rsp + 0x70]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
lea rax, [0x008f9840]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, rdi
mov rdi, rdx
mov rcx, rax
mov rax, qword [rsp + 0x70]
call fcn.004544a0
mov rdi, rcx
jmp 0x62a3b2
lea rax, [0x008b4d63]
call fcn.004544a0
jmp 0x62a392
lea r10, [rsi - 1]
cmp r10, rsi
jae 0x62a83f
mov rax, qword [r9 + rsi*8 - 8]
movzx r9d, byte [rax]
cmp r9b, 0x80
jb 0x62a4e0
mov rax, qword [rsp + 0x78]
mov rcx, rax
sub rax, r8
cmp rax, rcx
ja 0x62a838
mov qword [rsp + 0x28], rax
lea rax, [0x00824a20]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x27
mov eax, dword [0x01636820]
test eax, eax
jne 0x62a4d2
lea rcx, [0x008b4d63]
mov qword [rdi], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rdi + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdx, [rdi + 0x10]
test ecx, ecx
jne 0x62a4ba
mov rax, qword [rsp + 0x70]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
lea rax, [0x008f9840]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, rdi
mov rdi, rdx
mov rcx, rax
mov rax, qword [rsp + 0x70]
call fcn.004544a0
mov rdi, rcx
jmp 0x62a48e
lea rax, [0x008b4d63]
call fcn.004544a0
jmp 0x62a46e
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x80], rbx
mov word [rsp + 0x1e], dx
mov rdi, qword [rcx + 0x20]
lea r9, [rcx + 0x20]
test rdi, rdi
je 0x62a7b6
mov qword [rsp + 0x38], rdi
mov r11d, dword [0x01636820]
mov r12, qword [rdi + 0x20]
test r11d, r11d
jne 0x62a762
mov qword [rcx + 0x20], r12
xorps xmm0, xmm0
lea rdi, [rdi - 0x10]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004546ad
mov rbp, qword [rbp]
mov rdi, qword [rsp + 0x38]
movzx r9d, byte [rsp + 0x58]
mov byte [rdi], r9b
mov r11, qword [rsp + 0x60]
mov qword [rdi + 0x48], r11
mov r12, qword [rsp + 0x68]
mov qword [rdi + 0x50], r12
mov word [rdi + 2], dx
lea rdx, [rdi + 0x20]
test byte [rdx], al
mov qword [rdi + 0x10], 1
mov qword [rdi + 0x18], 1
mov r13d, dword [0x01636820]
lea r14, [rdi + 8]
test r13d, r13d
jne 0x62a746
mov qword [rdi + 8], rdx
mov rdx, qword [rdi + 8]
mov r13, qword [rdi + 0x10]
test r13, r13
jbe 0x62a831
mov r13d, dword [0x01636820]
test r13d, r13d
jne 0x62a733
mov qword [rdx], rax
mov rdx, qword [rcx + 8]
mov rcx, qword [rcx + 0x10]
cmp r10, rcx
jae 0x62a82a
lea rcx, [rdx + rsi*8 - 8]
mov r10d, dword [0x01636820]
test r10d, r10d
jne 0x62a720
mov qword [rdx + rsi*8 - 8], rdi
cmp r9b, 0x11
jne 0x62a618
cmp r11, 2
jl 0x62a711
mov qword [rsp], rdi
mov qword [rsp + 8], 0x3e8
call fcn.0062a860
movzx eax, byte [rsp + 0x10]
test al, al
je 0x62a64d
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xa8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x88]
mov rdx, rax
sub rax, rcx
cmp rax, rdx
ja 0x62a823
mov qword [rsp + 0x28], rax
lea rax, [0x00824a20]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov qword [rdi + 8], 0x14
mov eax, dword [0x01636820]
test eax, eax
jne 0x62a703
lea rcx, [0x008a7383]
mov qword [rdi], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rdi + 0x18], rcx
mov ecx, dword [0x01636820]
lea rdx, [rdi + 0x10]
test ecx, ecx
jne 0x62a6eb
mov rax, qword [rsp + 0x70]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
lea rax, [0x008f9840]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, rdi
mov rdi, rdx
mov rcx, rax
mov rax, qword [rsp + 0x70]
call fcn.004544a0
mov rdi, rcx
jmp 0x62a6bf
lea rax, [0x008a7383]
call fcn.004544a0
jmp 0x62a69f
cmp r12, 2
jge 0x62a5fd
jmp 0x62a618
mov rax, rdi
mov rdi, rcx
call fcn.004544a0
mov rdi, rax
jmp 0x62a5ed
mov r13, rdi
mov rdi, rdx
call fcn.004544a0
mov rdi, r13
jmp 0x62a5c2
mov r13, rdi
mov rdi, r14
mov r15, rax
mov rax, rdx
call fcn.004544a0
mov rax, r15
mov rdi, r13
jmp 0x62a59e
mov rax, rdi
mov rdi, r9
mov rcx, rax
mov rax, r12
call fcn.004544a0
lea rdx, [0x0086ebe0]
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
call fcn.004112d0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x50]
movzx edx, word [rsp + 0x1e]
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x88]
mov r10, qword [rsp + 0x20]
jmp 0x62a54c
lea rax, [0x0086ebe0]
mov qword [rsp], rax
call fcn.00410220
mov rdi, qword [rsp + 8]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x50]
movzx edx, word [rsp + 0x1e]
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x88]
mov r10, qword [rsp + 0x20]
jmp 0x62a551
mov r8, rbx
mov rbx, rsi
jmp 0x62a269
mov rsi, qword [rsp + 0x80]
jmp 0x62a7f9
mov r8, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
jmp 0x62a337
call fcn.00429340
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.00429340
ud2
call fcn.004292d0
ud2
call fcn.00429340
ud2
call fcn.00429340
ud2
call fcn.00451b80
jmp fcn.0062a1f0