Function at 0x626fc0
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x140]
cmp r12, qword [r14 + 0x10]
jbe 0x627c5d
push rbp
mov rbp, rsp
sub rsp, 0x1b8
cmp byte [rcx + 0x20], 0
jne 0x627007
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1d0], rbx
mov rdx, qword [rcx + 8]
mov rsi, qword [rcx + 0x10]
mov qword [rsp + 0x80], rsi
xor eax, eax
jmp 0x627028
mov rbx, qword [0x0096bf90]
mov rcx, qword [0x0096bf98]
xor eax, eax
add rsp, 0x1b8
pop rbp
nop
ret
add rdx, 0x28
inc rax
cmp rax, rsi
jge 0x627159
mov rdi, qword [rdx]
mov qword [rsp + 0x168], rdi
movups xmm0, xmmword [rdx + 8]
movups xmmword [rsp + 0x170], xmm0
movups xmm0, xmmword [rdx + 0x18]
movups xmmword [rsp + 0x180], xmm0
mov rdi, qword [rsp + 0x168]
mov qword [rsp + 0x118], rdi
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsp + 0x120], xmm0
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x130], xmm0
cmp qword [rsp + 0x120], 0
je 0x627153
mov rdi, qword [rsp + 0x118]
cmp byte [rdi], 0x3a
nop
jne 0x627153
mov rdi, qword [rsp + 0x170]
cmp rdi, 1
jb 0x627c50
mov r8, qword [rsp + 0x168]
lea r9, [rdi - 1]
neg r9
sar r9, 0x3f
and r9d, 1
add r8, r9
cmp rdi, 7
jne 0x627021
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xd8], rdx
mov rax, r8
lea rbx, [0x00705272]
mov ecx, 6
call fcn.00403960
nop dword [rax]
test al, al
jne 0x62712e
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x1d8]
mov rdx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x80]
jmp 0x627021
mov rcx, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x180]
mov rbx, qword [rsp + 0x1d0]
mov rax, rcx
mov rcx, qword [rsp + 0x1d8]
jmp 0x627160
xor edx, edx
xor eax, eax
jmp 0x627160
xor edx, edx
xor eax, eax
nop dword [rax]
test rdx, rdx
je 0x6271cc
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x90], rax
mov rbx, rdx
call fcn.0048b2a0
test rbx, rbx
jne 0x627198
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x1d8]
mov rsi, qword [rdx + 8]
mov rdi, qword [rdx + 0x10]
xor ecx, ecx
jmp 0x627206
lea rax, [0x006c0560]
nop
call fcn.0040d7c0
mov qword [rax + 8], 0x4a
lea rcx, [0x0071e51f]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x1b8
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x3c
lea rcx, [0x0071cfbf]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x1b8
pop rbp
ret
add rsi, 0x28
inc rcx
cmp rcx, rdi
jge 0x6272ae
mov r8, qword [rsi]
mov qword [rsp + 0x140], r8
movups xmm0, xmmword [rsi + 8]
movups xmmword [rsp + 0x148], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rsp + 0x158], xmm0
mov r8, qword [rsp + 0x140]
mov qword [rsp + 0xf0], r8
movups xmm0, xmmword [rsp + 0x148]
movups xmmword [rsp + 0xf8], xmm0
movups xmm0, xmmword [rsp + 0x158]
movups xmmword [rsp + 0x108], xmm0
cmp qword [rsp + 0xf8], 0
je 0x62727b
mov r8, qword [rsp + 0xf0]
cmp byte [r8], 0x3a
je 0x6271ff
mov rsi, qword [rdx + 0x10]
nop
cmp rcx, rsi
ja 0x627c45
mov rdi, qword [rdx + 8]
mov r8, qword [rdx + 0x18]
lea r9, [rcx + rcx*4]
mov r10, rcx
sub rcx, r8
shl r9, 3
sar rcx, 0x3f
and rcx, r9
sub rsi, r10
add rdi, rcx
jmp 0x6272b2
xor esi, esi
xor edi, edi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x88], rdi
lea rax, [0x006a5b60]
mov rbx, rsi
mov rcx, rbx
call fcn.0044bc20
mov qword [rsp + 0xd8], rax
mov rbx, qword [rsp + 0x40]
xor ecx, ecx
lea rax, [0x006ef660]
call fcn.0040e2c0
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x60]
call fcn.00632320
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x80], rbx
lea rax, [0x006f6900]
call fcn.0040d7c0
mov qword [rax + 0x20], 8
lea rdx, [0x007065e3]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x28], 2
cmp dword [0x009d9570], 0
jne 0x627348
mov rdx, qword [rsp + 0xd0]
jmp 0x627358
call fcn.004673a0
mov rdx, qword [rsp + 0xd0]
mov qword [r11], rdx
mov qword [rsp + 0xa0], rax
mov qword [rax + 0x38], rdx
mov r10, qword [rsp + 0x60]
mov qword [rax + 0x10], r10
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x48]
lea rdi, [0x007882c0]
mov esi, 1
mov r8, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x80]
xor eax, eax
call fcn.0044fb40
mov rdx, qword [rsp + 0xa0]
mov qword [rdx + 8], rbx
cmp dword [0x009d9570], 0
je 0x6273c1
call fcn.004673c0
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov r8, qword [rsp + 0x88]
xor eax, eax
mov rcx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x40]
jmp 0x627402
mov r8, qword [rsp + 0xd8]
add r8, 0x28
mov rsi, qword [rsp + 0x80]
inc rsi
mov rdx, qword [rsp + 0xa0]
mov rbx, rax
mov rax, rsi
mov rsi, qword [rsp + 0x40]
cmp rax, rsi
jge 0x62773e
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xd8], r8
mov rcx, qword [r8]
mov qword [rsp + 0x190], rcx
movups xmm0, xmmword [r8 + 8]
movups xmmword [rsp + 0x198], xmm0
movups xmm0, xmmword [r8 + 0x18]
movups xmmword [rsp + 0x1a8], xmm0
mov rax, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x198]
call fcn.0061ade0
cmp rbx, 7
jne 0x62752e
cmp dword [rax], 0x69617254
jne 0x62752e
cmp word [rax + 4], 0x656c
jne 0x62752e
cmp byte [rax + 6], 0x72
jne 0x62752e
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rdx + 0x78]
nop
test rsi, rsi
jne 0x6274df
call fcn.0040e240
cmp dword [0x009d9570], 0
jne 0x6274c0
mov rdx, qword [rsp + 0xa0]
jmp 0x6274d8
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rdx + 0x78]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x78], rax
mov rsi, rax
movups xmmword [rsp + 0xe0], xmm15
lea rdx, [0x00627ca0]
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0xe8], rsi
mov rax, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
lea rcx, [rsp + 0xe0]
call fcn.0061c040
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x98]
jmp 0x6273dd
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0xa8], rax
mov rcx, rax
mov rdi, rbx
lea rax, [0x006ef660]
mov rbx, qword [rsp + 0xd0]
call fcn.00412560
mov rdx, qword [rax]
test rdx, rdx
je 0x627567
mov r8, qword [rsp + 0x58]
jmp 0x62763a
mov r8, qword [rsp + 0x58]
test r8, r8
je 0x62763a
lea rdx, [r8 - 1]
mov qword [rsp + 0x50], rdx
neg rdx
sar rdx, 0x3f
and edx, 0x10
mov r8, qword [rsp + 0x1a8]
mov r9, qword [rsp + 0x98]
add rdx, r9
mov qword [rsp + 0xc0], rdx
mov r10, qword [rsp + 0x1a0]
mov qword [r9 + 8], r8
cmp dword [0x009d9570], 0
je 0x6275c7
call fcn.004673c0
mov qword [r11], r10
mov r8, qword [r9]
mov qword [r11 + 8], r8
mov qword [r9], r10
lea rax, [0x006ef660]
mov rbx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
call fcn.00412d00
mov qword [rax + 8], 1
mov qword [rax + 0x10], 1
cmp dword [0x009d9570], 0
jne 0x62760e
mov rsi, qword [rsp + 0x98]
jmp 0x627625
call fcn.004673c0
mov rsi, qword [rsp + 0x98]
mov qword [r11], rsi
mov r8, qword [rax]
mov qword [r11 + 8], r8
mov qword [rax], rsi
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xc0]
jmp 0x6273dd
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov r9, qword [rsp + 0x1a0]
mov r10, qword [rsp + 0x1a8]
cmp rcx, rbx
jae 0x627690
mov qword [rsp + 0x78], r10
mov qword [rsp + 0xc8], r9
mov rax, rdx
mov edi, 1
lea rsi, [0x006a5b60]
call fcn.0044bd00
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0xc8]
mov r10, qword [rsp + 0x78]
mov rdx, rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], rcx
lea rsi, [rbx - 1]
shl rsi, 4
mov qword [rdx + rsi + 8], r10
cmp dword [0x009d9570], 0
je 0x6276c0
call fcn.004673c0
mov qword [r11], r9
mov r10, qword [rdx + rsi]
mov qword [r11 + 8], r10
mov qword [rsp + 0xc0], rdx
mov qword [rdx + rsi], r9
lea rax, [0x006ef660]
mov rbx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
call fcn.00412d00
mov rdx, qword [rsp + 0x78]
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x70]
mov qword [rax + 0x10], rdx
cmp dword [0x009d9570], 0
jne 0x627712
mov rsi, qword [rsp + 0xc0]
jmp 0x627729
call fcn.004673c0
mov rsi, qword [rsp + 0xc0]
mov qword [r11], rsi
mov r8, qword [rax]
mov qword [r11 + 8], r8
mov qword [rax], rsi
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x98]
jmp 0x6273dd
mov rax, qword [rsp + 0x60]
lea rsi, [rax - 0x64]
cmp rsi, 0x63
ja 0x6278a1
mov rsi, qword [rsp + 0x1d8]
mov rsi, qword [rsi]
movzx esi, byte [rsi + 2]
test sil, 1
jne 0x62786e
mov rsi, qword [rsp + 0x1d0]
movzx edi, byte [rsi + 0x15d]
inc edi
mov byte [rsi + 0x15d], dil
cmp dil, 5
ja 0x62783b
mov rdi, qword [0x00983a98]
test rdi, rdi
jne 0x6277ad
mov rdi, qword [rsi + 0x20]
nop dword [rax]
test rdi, rdi
je 0x6277ab
mov rdi, qword [rdi + 0x28]
jmp 0x6277ad
xor edi, edi
test rdi, rdi
je 0x6277d4
mov rcx, qword [rdi]
mov rbx, qword [rsp + 0xd0]
mov rdx, rdi
call rcx
test rax, rax
jne 0x62782a
mov rax, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x1d0]
cmp rax, 0x64
jne 0x627814
mov rcx, qword [rsi + 0x20]
nop
test rcx, rcx
je 0x6277fb
mov rdx, qword [rcx + 0x20]
test rdx, rdx
je 0x6277fb
mov rax, qword [rdx]
call rax
mov rsi, qword [rsp + 0x1d0]
mov rax, qword [rsi + 0xf0]
lea rbx, [rsp + 0x40]
call fcn.00406f40
mov rsi, qword [rsp + 0x1d0]
mov byte [rsi + 0x15b], 0
xor eax, eax
xor ebx, ebx
xor ecx, ecx
add rsp, 0x1b8
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x1b8
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2b
lea rcx, [0x00718ec2]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x1b8
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2f
lea rcx, [0x0071a4e9]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x1b8
pop rbp
ret
mov qword [rdx + 0x50], 0xffffffffffffffff
mov rbx, qword [rdx + 0x38]
lea rax, [0x006ef660]
lea rcx, [0x007093bd]
mov edi, 0xe
call fcn.00412560
mov rdx, qword [rax + 8]
cmp rdx, 1
je 0x62793b
jle 0x6278ee
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x1d8]
mov rsi, qword [rsp + 0x1d0]
jmp 0x627982
mov rdx, qword [rsp + 0x1d8]
mov rsi, qword [rdx]
movzx esi, byte [rsi + 2]
nop dword [rax]
test sil, 1
je 0x627929
mov rsi, qword [rsp + 0x1d0]
cmp byte [rsi + 0xb9], 0
jne 0x627931
mov rax, qword [rsp + 0xa0]
mov qword [rax + 0x50], 0
jmp 0x627982
mov rsi, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0xa0]
jmp 0x627982
mov rdx, qword [rax]
mov rax, qword [rdx]
mov rbx, qword [rdx + 8]
mov ecx, 0xa
mov edi, 0x3f
call fcn.0048a660
test rbx, rbx
je 0x627963
mov rdx, qword [rsp + 0xa0]
jmp 0x62796f
mov rdx, qword [rsp + 0xa0]
mov qword [rdx + 0x50], rax
mov rax, rdx
mov rdx, qword [rsp + 0x1d8]
mov rsi, qword [rsp + 0x1d0]
cmp byte [rsi + 0xb9], 0
je 0x6279c7
mov rdx, qword [0x0096bfb0]
mov rsi, qword [0x0096bfb8]
mov qword [rax + 0x40], rdx
cmp dword [0x009d9570], 0
je 0x6279b6
call fcn.004673c0
mov qword [r11], rsi
mov rdx, qword [rax + 0x48]
mov qword [r11 + 8], rdx
mov qword [rax + 0x48], rsi
xor ebx, ebx
xor ecx, ecx
add rsp, 0x1b8
pop rbp
ret
mov rdx, qword [rdx]
movzx edx, byte [rdx + 2]
test dl, 1
je 0x627a43
cmp qword [rax + 0x50], 0
jle 0x627a07
lea rdx, [0x0078ad40]
mov qword [rax + 0x40], rdx
cmp dword [0x009d9570], 0
je 0x6279fa
mov rdx, qword [rax + 0x48]
call fcn.004673a0
mov qword [r11], rdx
lea rdx, [0x009d90e0]
mov qword [rax + 0x48], rdx
jmp 0x627a36
mov rdx, qword [0x0096bfb0]
mov rsi, qword [0x0096bfb8]
mov qword [rax + 0x40], rdx
cmp dword [0x009d9570], 0
je 0x627a32
call fcn.004673c0
mov qword [r11], rsi
mov rdx, qword [rax + 0x48]
mov qword [r11 + 8], rdx
mov qword [rax + 0x48], rsi
xor ebx, ebx
xor ecx, ecx
add rsp, 0x1b8
pop rbp
ret
lea rax, [0x006e52e0]
call fcn.0040d7c0
mov rcx, qword [rsp + 0x1d0]
lea rdx, [rcx + 0x30]
mov rbx, qword [rsp + 0xa0]
mov rsi, qword [rbx + 0x50]
mov qword [rax + 0x30], rsi
mov rsi, rax
mov rax, rdx
lea rbx, [0x0078bac0]
mov rcx, rsi
nop dword [rax + rax]
call fcn.0061b0e0
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax + 0x50]
mov rdx, qword [rsp + 0x1d0]
mov qword [rdx + 0x120], rcx
lea rcx, [0x0078ad68]
mov qword [rax + 0x40], rcx
cmp dword [0x009d9570], 0
je 0x627ac4
call fcn.004673c0
mov qword [r11], rdx
mov rsi, qword [rax + 0x48]
mov qword [r11 + 8], rsi
mov qword [rax + 0x48], rdx
cmp byte [rdx + 0xb8], 0
je 0x627afb
mov rdx, qword [rax + 0x38]
lea rbx, [0x0070a40a]
mov ecx, 0x10
mov rax, rdx
call fcn.0052cbe0
cmp rbx, 4
jne 0x627af3
xor ecx, ecx
jmp 0x627b0b
mov rax, qword [rsp + 0xa0]
xor ebx, ebx
xor ecx, ecx
add rsp, 0x1b8
pop rbp
ret
inc rcx
cmp rcx, 4
jge 0x627b47
movzx edx, byte [rcx + rax]
lea esi, [rdx - 0x41]
cmp sil, 0x19
ja 0x627b21
add edx, 0x20
lea rsi, [0x00704811]
movzx esi, byte [rsi + rcx]
lea edi, [rsi - 0x41]
cmp dil, 0x19
ja 0x627b38
add esi, 0x20
cmp dl, sil
je 0x627b08
mov rax, qword [rsp + 0xa0]
jmp 0x627afb
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rcx + 0x38]
mov qword [rsp + 0xb8], rdx
nop
lea rax, [0x0070a40a]
mov ebx, 0x10
call fcn.0052e2c0
mov rcx, rax
mov rdi, rbx
lea rax, [0x006de3a0]
mov rbx, qword [rsp + 0xb8]
call fcn.00413120
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rcx + 0x38]
mov qword [rsp + 0xb0], rdx
nop
lea rax, [0x007093bd]
mov ebx, 0xe
call fcn.0052e2c0
mov rcx, rax
mov rdi, rbx
lea rax, [0x006de3a0]
mov rbx, qword [rsp + 0xb0]
call fcn.00413120
mov rcx, qword [rsp + 0xa0]
mov qword [rcx + 0x50], 0xffffffffffffffff
lea rax, [0x006dfa20]
nop
call fcn.0040d7c0
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rcx + 0x40]
mov rsi, qword [rcx + 0x48]
mov qword [rax], rdx
cmp dword [0x009d9570], 0
nop
je 0x627c0a
call fcn.004673a0
mov qword [r11], rsi
mov qword [rax + 8], rsi
lea rdx, [0x0078ad90]
mov qword [rcx + 0x40], rdx
cmp dword [0x009d9570], 0
je 0x627c32
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rcx + 0x48]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x48], rax
mov byte [rcx + 0x71], 1
mov rax, rcx
nop dword [rax]
jmp 0x627afb
mov rax, rcx
mov rcx, rsi
call fcn.00467820
mov eax, 1
xor ecx, ecx
call fcn.00467820
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.00626fc0