Function at 0x61e3e0
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x190]
cmp r12, qword [r14 + 0x10]
jbe 0x61f10f
push rbp
mov rbp, rsp
sub rsp, 0x208
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x228], rcx
mov byte [rsp + 0x230], dil
mov qword [rsp + 0x218], rax
lea rax, [0x006a69a0]
xor ebx, ebx
call fcn.004056e0
mov qword [rsp + 0x158], rax
nop dword [rax + rax]
call fcn.0040e240
mov qword [rsp + 0x150], rax
call fcn.0040e240
mov qword [rsp + 0x148], rax
mov ebx, 1
lea rax, [0x006a69a0]
call fcn.004056e0
mov qword [rsp + 0x140], rax
lea rax, [0x00700f60]
call fcn.0040d7c0
cmp dword [0x009d9570], 0
jne 0x61e492
mov rcx, qword [rsp + 0x218]
jmp 0x61e4a2
call fcn.004673a0
mov rcx, qword [rsp + 0x218]
mov qword [r11], rcx
mov qword [rax], rcx
mov rdx, qword [rsp + 0x160]
mov qword [rax + 8], rdx
cmp dword [0x009d9570], 0
jne 0x61e4cc
mov rbx, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x158]
jmp 0x61e4e8
call fcn.004673c0
mov rbx, qword [rsp + 0x228]
mov qword [r11], rbx
mov rsi, qword [rsp + 0x158]
mov qword [r11 + 8], rsi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x30], rsi
mov dword [rax + 0xb0], 1
mov dword [rax + 0x100], 0x4000
mov dword [rax + 0x114], 0xffff
mov dword [rax + 0x104], 0x64
mov qword [rax + 0x108], 0xffffffffffffffff
cmp dword [0x009d9570], 0
jne 0x61e536
mov rsi, qword [rsp + 0x150]
jmp 0x61e546
call fcn.004673a0
mov rsi, qword [rsp + 0x150]
mov qword [r11], rsi
mov qword [rax + 0xa0], rsi
movzx esi, byte [rsp + 0x230]
mov byte [rax + 0x2c], sil
mov byte [rax + 0x84], 1
cmp dword [0x009d9570], 0
jne 0x61e580
mov rsi, qword [rsp + 0x148]
mov rdi, qword [rsp + 0x140]
jmp 0x61e59c
call fcn.004673c0
mov rsi, qword [rsp + 0x148]
mov qword [r11], rsi
mov rdi, qword [rsp + 0x140]
mov qword [r11 + 8], rdi
mov qword [rax + 0xc0], rsi
mov qword [rax + 0x118], rdi
mov rsi, qword [rcx + 0x60]
test rsi, rsi
je 0x61e5bc
mov rsi, qword [rsi + 0xd0]
jmp 0x61e5be
xor esi, esi
mov qword [rsp + 0x118], rax
test rsi, rsi
je 0x61e677
mov qword [rsp + 0xc8], rsi
mov qword [rax + 0x48], rsi
lea rax, [0x006c4f60]
call fcn.0040d7c0
lea rcx, [0x0064ba60]
mov qword [rax], rcx
cmp dword [0x009d9570], 0
jne 0x61e604
mov rcx, qword [rsp + 0x118]
jmp 0x61e614
call fcn.004673a0
mov rcx, qword [rsp + 0x118]
mov qword [r11], rcx
mov qword [rax + 8], rcx
mov rbx, rax
mov rax, qword [rsp + 0xc8]
call fcn.004b8f00
cmp dword [0x009d9570], 0
jne 0x61e640
mov rcx, qword [rsp + 0x118]
jmp 0x61e658
call fcn.004673c0
mov qword [r11], rax
mov rcx, qword [rsp + 0x118]
mov rdx, qword [rcx + 0x50]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x50], rax
mov rax, rcx
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x228]
cmp byte [0x009d90eb], 0
nop
je 0x61e713
mov rcx, qword [rdx + 0x30]
mov rax, rbx
call rcx
movups xmmword [rsp + 0x190], xmm15
movups xmmword [rsp + 0x1a0], xmm15
lea rcx, [0x006fc800]
mov qword [rsp + 0x190], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 0x198], rcx
test rax, rax
je 0x61e6c9
mov rax, qword [rax + 8]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], rbx
cmp byte [0x009d90eb], 0
je 0x61e713
mov rax, qword [rsp + 0x218]
lea rbx, [0x00719de3]
mov ecx, 0x2e
lea rdi, [rsp + 0x190]
mov esi, 2
mov r8, rsi
call fcn.0062aba0
mov rcx, qword [rsp + 0x118]
lea rax, [0x006e00e0]
call fcn.0040d7c0
lea rcx, [0x0078af48]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx + 0x58]
cmp dword [0x009d9570], 0
je 0x61e754
nop
call fcn.004673e0
mov qword [r11], rdx
mov qword [r11 + 8], rax
mov rsi, qword [rcx + 0x60]
mov qword [r11 + 0x10], rsi
mov qword [rax + 8], rdx
mov qword [rcx + 0x60], rax
mov edx, dword [rcx + 0x68]
lea esi, [rdx + 0xffff]
nop
cmp esi, 0xffff
setg dil
test edx, edx
setg dl
cmp dl, dil
jne 0x61e77d
mov dword [rcx + 0x68], esi
movups xmmword [rsp + 0x170], xmm15
movups xmmword [rsp + 0x180], xmm15
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x170], rdx
mov rsi, qword [rsp + 0x228]
mov qword [rsp + 0x178], rsi
mov rdi, qword [rsp + 0x218]
mov r8, qword [rdi + 0x50]
mov qword [rsp + 0x180], r8
lea r8, [rcx + 0x138]
mov qword [rsp + 0x188], r8
lea rax, [0x006ddfe0]
lea rbx, [rsp + 0x170]
call fcn.0040ad20
mov qword [rsp + 0x138], rax
nop
mov ebx, 0x1000
mov rcx, rbx
lea rax, [0x006a5ea0]
nop
call fcn.0044bc20
mov qword [rsp + 0x130], rax
lea rax, [0x006df420]
call fcn.0040d7c0
mov qword [rax + 0x18], 0x1000
mov qword [rax + 0x20], 0x1000
cmp dword [0x009d9570], 0
jne 0x61e840
mov rcx, qword [rsp + 0x130]
jmp 0x61e850
call fcn.004673a0
mov rcx, qword [rsp + 0x130]
mov qword [r11], rcx
mov qword [rax + 0x10], rcx
lea rcx, [0x0078a0c0]
mov qword [rax + 0x30], rcx
cmp dword [0x009d9570], 0
jne 0x61e87a
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x118]
jmp 0x61e8a1
call fcn.004673e0
mov rcx, qword [rsp + 0x138]
mov qword [r11], rcx
mov qword [r11 + 8], rax
mov rdx, qword [rsp + 0x118]
mov rsi, qword [rdx + 0x128]
mov qword [r11 + 0x10], rsi
mov qword [rax + 0x38], rcx
mov qword [rdx + 0x128], rax
lea rax, [0x006b8e00]
mov rbx, qword [rsp + 0x160]
nop dword [rax + rax]
call fcn.0040b0e0
lea rcx, [0x00789a60]
cmp rax, rcx
jne 0x61e8db
mov rdx, qword [rsp + 0x228]
jmp 0x61e8e0
mov edx, 0
mov qword [rsp + 0x128], rax
jne 0x61e905
cmp qword [rdx + 8], 0x1000
jl 0x61e905
mov rcx, qword [rsp + 0x228]
mov rax, rdx
nop
jmp 0x61ea13
lea rax, [0x006eb680]
call fcn.0040d7c0
mov qword [rsp + 0xf8], rax
mov ebx, 0x1000
mov rcx, rbx
lea rax, [0x006a5ea0]
call fcn.0044bc20
movups xmmword [rsp + 0x1b0], xmm15
lea rdi, [rsp + 0x1b8]
lea rdi, [rdi - 0x30]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467a90
mov rbp, qword [rbp]
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], 0x1000
mov qword [rsp + 0x1c0], 0x1000
mov rcx, qword [rsp + 0x128]
mov qword [rsp + 0x1c8], rcx
mov rcx, qword [rsp + 0x228]
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1f8], 0xffffffffffffffff
mov qword [rsp + 0x200], 0xffffffffffffffff
cmp dword [0x009d9570], 0
je 0x61e9da
lea rax, [0x006eb680]
mov rbx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x1b0]
call fcn.004139c0
mov rcx, qword [rsp + 0x228]
mov rbx, qword [rsp + 0x1b0]
mov rdi, qword [rsp + 0xf8]
mov qword [rdi], rbx
lea rbx, [rdi + 8]
lea rsi, [rsp + 0x1b8]
mov rax, rdi
mov rdi, rbx
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467dfa
mov rbp, qword [rbp]
cmp dword [0x009d9570], 0
jne 0x61ea26
mov rdx, qword [rsp + 0x118]
jmp 0x61ea41
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rsp + 0x118]
mov rbx, qword [rdx + 0xc8]
mov qword [r11 + 8], rbx
mov qword [rsp + 0xf8], rax
mov qword [rdx + 0xc8], rax
mov rcx, qword [rdx + 0x128]
mov qword [rsp + 0x120], rcx
lea rax, [0x006fc020]
call fcn.0040d7c0
lea rcx, [0x00789c00]
mov qword [rax + 0x78], rcx
cmp dword [0x009d9570], 0
jne 0x61ea89
mov rcx, qword [rsp + 0x120]
jmp 0x61ea99
call fcn.004673a0
mov rcx, qword [rsp + 0x120]
mov qword [r11], rcx
mov qword [rax + 0x80], rcx
lea rcx, [0x00789a60]
mov qword [rax], rcx
cmp dword [0x009d9570], 0
jne 0x61eac0
mov rcx, qword [rsp + 0xf8]
jmp 0x61ead0
call fcn.004673a0
mov rcx, qword [rsp + 0xf8]
mov qword [r11], rcx
mov qword [rsp + 0x108], rax
mov qword [rax + 8], rcx
lea rcx, [0x0073a7c8]
mov qword [rax + 0x30], rcx
movzx ecx, byte [0x009d90ed]
mov byte [rax + 0xb4], cl
movzx ecx, byte [0x009d90ec]
mov byte [rax + 0xb5], cl
lea rcx, [0x0073a7a0]
mov qword [rax + 0xc8], rcx
mov qword [rax + 0xd0], rcx
lea rax, [0x006c5860]
nop dword [rax]
call fcn.0040d7c0
lea rcx, [0x0061f1c0]
mov qword [rax], rcx
cmp dword [0x009d9570], 0
jne 0x61eb42
mov rcx, qword [rsp + 0x108]
jmp 0x61eb5e
call fcn.004673e0
mov rcx, qword [rsp + 0x108]
mov qword [r11], rcx
mov qword [r11 + 8], rax
mov rdx, qword [rcx + 0x50]
mov qword [r11 + 0x10], rdx
mov qword [rax + 8], rcx
mov qword [rcx + 0x50], rax
nop
mov dword [rcx + 0x3c], 0xffffff
cmp dword [0x009d9570], 0
jne 0x61eb82
mov rdx, qword [rsp + 0x118]
nop
jmp 0x61eb9d
call fcn.004673c0
mov qword [r11], rcx
mov rdx, qword [rsp + 0x118]
mov rsi, qword [rdx + 0x130]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x130], rcx
mov rsi, qword [rsp + 0x218]
mov edi, dword [rsi + 0x30]
test edi, edi
jne 0x61ebb7
xor eax, eax
jmp 0x61ebd7
cmp edi, 0x4000
jae 0x61ebc6
mov eax, 0x4000
jmp 0x61ebd7
cmp edi, 0xffffff
jbe 0x61ebd5
mov eax, 0xffffff
jmp 0x61ebd7
mov eax, edi
test eax, eax
je 0x61ec12
test edi, edi
jne 0x61ebe3
xor edi, edi
jmp 0x61ebff
cmp edi, 0x4000
jae 0x61ebf2
mov edi, 0x4000
jmp 0x61ebff
cmp edi, 0xffffff
jbe 0x61ebff
mov edi, 0xffffff
cmp edi, 0xffffff
mov r8d, 0xffffff
cmova edi, r8d
mov dword [rcx + 0x3c], edi
mov rcx, qword [rsi + 0x58]
test rcx, rcx
je 0x61ec41
mov rdi, qword [rdx + 0x130]
test byte [rdi], al
cmp dword [0x009d9570], 0
je 0x61ec3d
call fcn.004673c0
mov qword [r11], rcx
mov r8, qword [rdi + 0x30]
mov qword [r11 + 8], r8
mov qword [rdi + 0x30], rcx
mov ecx, dword [rsi + 0x34]
test ecx, ecx
mov eax, 0x1000
cmova eax, ecx
mov dword [rsp + 0xc4], eax
xor ebx, ebx
call fcn.00607a40
mov rbx, qword [rsp + 0x118]
mov rcx, qword [rbx + 0x130]
test byte [rcx], al
cmp dword [0x009d9570], 0
je 0x61ec89
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rcx + 0xa8]
mov qword [r11 + 8], rdx
mov qword [rcx + 0xa8], rax
mov rcx, qword [rsp + 0x218]
mov edx, dword [rcx + 0x2c]
test edx, edx
jne 0x61eca6
mov edx, 0xa00000
jmp 0x61ecad
cmp edx, 0xffffffff
jne 0x61ecad
xor edx, edx
mov rcx, qword [rbx + 0x130]
mov dword [rcx + 0xb0], edx
lea rcx, [rbx + 0x148]
lea rax, [0x00789d40]
mov rbx, rcx
call fcn.00606640
cmp dword [0x009d9570], 0
jne 0x61ece3
mov rdx, qword [rsp + 0x118]
jmp 0x61ecfe
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rsp + 0x118]
mov rsi, qword [rdx + 0x170]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x170], rax
mov rsi, qword [rsp + 0x218]
mov edi, dword [rsi + 0x38]
test edi, edi
mov r8d, 0x1000
cmova r8d, edi
mov dword [rax + 0x44], r8d
cmp dword [rax + 0x34], r8d
jbe 0x61ed44
mov byte [rax + 0x48], 1
nop
mov dword [rax + 0x34], r8d
call fcn.00607e40
mov rdx, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x218]
mov dword [rdx + 0x110], 0x1000
cmp byte [rsi + 0x29], 0
je 0x61ed5e
mov dword [rdx + 0xb0], 3
lea rax, [0x006ba200]
mov rbx, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x228]
call fcn.0040b1e0
test rax, rax
jne 0x61ed8c
mov r8, qword [rsp + 0x118]
jmp 0x61ee30
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0xe0], rax
lea rax, [0x006f59a0]
call fcn.0040d7c0
mov qword [rsp + 0x168], rax
mov rcx, qword [rsp + 0xe0]
mov rcx, qword [rcx + 0x18]
mov rax, qword [rsp + 0x110]
call rcx
cmp dword [0x009d9570], 0
je 0x61edfe
call fcn.004673c0
mov rbx, qword [rsp + 0x168]
mov qword [r11], rbx
mov rdx, qword [rsp + 0x118]
mov rsi, qword [rdx + 0x20]
mov qword [r11 + 8], rsi
lea rax, [0x006f59a0]
mov rcx, rsp
call fcn.004139c0
mov rdi, qword [rsp + 0x168]
mov rsi, rsp
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467da6
mov rbp, qword [rbp]
mov rdx, qword [rsp + 0x168]
mov r8, qword [rsp + 0x118]
mov qword [r8 + 0x20], rdx
movups xmmword [rsp + 0xe8], xmm15
mov word [rsp + 0xe8], 2
mov word [rsp + 0xf0], 4
mov dword [rsp + 0xf4], 0x400000
mov rdx, qword [rsp + 0x218]
mov r9d, dword [rdx + 0x30]
test r9d, r9d
jne 0x61ee6e
xor r9d, r9d
jmp 0x61ee8f
cmp r9d, 0x4000
jae 0x61ee80
mov r9d, 0x4000
jmp 0x61ee8f
cmp r9d, 0xffffff
jbe 0x61ee8f
mov r9d, 0xffffff
test r9d, r9d
jne 0x61eea8
mov ecx, 2
lea rax, [rsp + 0xe8]
mov ebx, 2
jmp 0x61eef8
mov dword [rsp + 0xc0], r9d
lea rax, [rsp + 0xe8]
mov ebx, 3
mov ecx, 2
mov edi, 1
lea rsi, [0x006d91e0]
call fcn.0044bd00
mov word [rax + 0x10], 5
mov edx, dword [rsp + 0xc0]
mov dword [rax + 0x14], edx
mov rdx, qword [rsp + 0x218]
mov r8, qword [rsp + 0x118]
mov ebx, 3
mov edx, dword [rdx + 0x2c]
test edx, edx
jne 0x61ef06
mov edx, 0xa00000
jmp 0x61ef0d
cmp edx, 0xffffffff
jne 0x61ef0d
xor edx, edx
test edx, edx
je 0x61ef52
inc rbx
cmp rcx, rbx
jae 0x61ef40
mov dword [rsp + 0xbc], edx
mov edi, 1
lea rsi, [0x006d91e0]
call fcn.0044bd00
mov edx, dword [rsp + 0xbc]
mov r8, qword [rsp + 0x118]
lea r9, [rax + rbx*8]
lea r9, [r9 - 8]
mov word [r9], 6
mov dword [rax + rbx*8 - 4], edx
mov edx, dword [rsp + 0xc4]
nop dword [rax]
cmp edx, 0x1000
je 0x61efa5
inc rbx
cmp rcx, rbx
jae 0x61ef94
mov edi, 1
lea rsi, [0x006d91e0]
nop dword [rax]
call fcn.0044bd00
mov edx, dword [rsp + 0xc4]
mov r8, qword [rsp + 0x118]
lea rsi, [rax + rbx*8]
lea rsi, [rsi - 8]
mov word [rsi], 1
mov dword [rax + rbx*8 - 4], edx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0x100], rax
mov rdx, qword [r8 + 0x128]
mov rsi, qword [str.PRI__HTTP_2.0_r_n_r_nSM_r_n_r_n]
mov r9, qword [0x0096d088]
mov rdi, qword [0x0096d090]
mov rax, rdx
mov rbx, rsi
mov rcx, r9
call fcn.00484540
mov rdx, qword [rsp + 0x118]
mov rax, qword [rdx + 0x130]
mov rbx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd8]
call fcn.00616ec0
mov rdx, qword [rsp + 0x118]
mov rax, qword [rdx + 0x130]
xor ebx, ebx
mov ecx, 0x40000000
call fcn.00617ba0
nop
mov rdx, qword [rsp + 0x118]
mov dword [rdx + 0x78], 0x4000ffff
mov rax, qword [rdx + 0x128]
call fcn.004843a0
mov rdx, qword [rsp + 0x118]
cmp qword [rdx + 0x138], 0
jne 0x61f0b3
lea rax, [0x006c5560]
call fcn.0040d7c0
lea rcx, [0x0061f160]
mov qword [rax], rcx
cmp dword [0x009d9570], 0
jne 0x61f085
mov rcx, qword [rsp + 0x118]
jmp 0x61f095
call fcn.004673a0
mov rcx, qword [rsp + 0x118]
mov qword [r11], rcx
mov qword [rax + 8], rcx
call fcn.00442800
mov rax, qword [rsp + 0x118]
xor ebx, ebx
xor ecx, ecx
add rsp, 0x208
pop rbp
ret
nop
nop
lea rax, [0x006c0560]
nop dword [rax]
call fcn.0040d7c0
mov qword [rax + 8], 0x3a
lea rcx, [0x0071cc14]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
mov rax, qword [rsp + 0x118]
call fcn.0061ff60
mov rcx, qword [rsp + 0x118]
mov rbx, qword [rcx + 0x138]
mov rcx, qword [rcx + 0x140]
xor eax, eax
add rsp, 0x208
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
nop dword [rax]
jmp fcn.0061e3e0