Function at 0x6a9160
Capabilities:
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x6a94d7
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movzx eax, byte [0x01635ea1]
cmp al, 1
jbe 0x6a919d
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
jne 0x6a91a6
call fcn.00429570
ud2
mov byte [0x01635ea1], 1
call fcn.006a6290
call fcn.0046a650
call fcn.006a64e0
call fcn.006a6e80
call fcn.006a7ad0
call fcn.00406a00
mov rax, qword [rsp]
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x25], 0
mov qword [rsp + 0x26], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x26], 0x3f5
mov word [rsp + 0x2c], 0x3f7
lea rcx, [0x007fda00]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
lea rdx, [rsp + 0x25]
mov qword [rsp + 0x10], rdx
call fcn.00407330
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x26]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rax + 2], xmm0
mov byte [rsp + 0x25], 1
mov qword [rsp + 0x26], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x26], 0x3f6
mov word [rsp + 0x2c], 0x3f7
lea rax, [0x007fda00]
mov qword [rsp], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 8], rax
lea rcx, [rsp + 0x25]
mov qword [rsp + 0x10], rcx
call fcn.00407330
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x26]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rax + 2], xmm0
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a94c1
mov rax, qword [rsp + 0x38]
mov qword [0x010ee280], rax
mov word [rsp], 1
call fcn.006a8500
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [0x010ef480], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a94b0
mov qword [0x010ef488], rax
mov word [rsp], 0
call fcn.006a8500
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [0x010ef470], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a949f
mov qword [0x010ef478], rax
call fcn.006a7540
mov rax, qword [rsp + 8]
mov rcx, qword [rsp]
mov qword [0x010ef460], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a948e
mov qword [0x010ef468], rax
mov rax, qword [0x010e3b98]
mov rcx, qword [0x010e3b90]
mov qword [0x010f0600], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a947d
mov qword [0x010f0608], rax
mov word [rsp], 0x300
call fcn.006a8500
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
mov qword [0x010f0610], rcx
mov ecx, dword [0x01636820]
test ecx, ecx
jne 0x6a946c
mov qword [0x010f0618], rax
mov word [rsp], 0
call fcn.006a8500
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x010f0620], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a9458
mov qword [0x010f0628], rcx
mov word [rsp], 1
call fcn.006a8500
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x010f0630], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a9447
mov qword [0x010f0638], rcx
lea rax, [0x008b1824]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0045a2a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x010ef450], rax
mov eax, dword [0x01636820]
test eax, eax
jne 0x6a9436
mov qword [0x010ef458], rcx
mov byte [0x01635ea1], 2
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rdi, [0x010ef458]
mov rax, rcx
call fcn.004544a0
jmp 0x6a9425
lea rdi, [0x010f0638]
mov rax, rcx
call fcn.004544a0
jmp 0x6a93ea
lea rdi, [0x010f0628]
mov rax, rcx
call fcn.004544a0
jmp 0x6a93bd
lea rdi, [0x010f0618]
call fcn.004544a0
jmp 0x6a938c
lea rdi, [0x010f0608]
call fcn.004544a0
jmp 0x6a935b
lea rdi, [0x010ef468]
call fcn.004544a0
jmp 0x6a9331
lea rdi, [0x010ef478]
call fcn.004544a0
jmp 0x6a9307
lea rdi, [0x010ef488]
call fcn.004544a0
jmp 0x6a92d6
lea rdi, [0x010ee280]
mov rax, qword [rsp + 0x38]
call fcn.004544a0
jmp 0x6a92a5
call fcn.00451b80
jmp fcn.006a9160