Function at 0x4707a0
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x470cf9
push rbp
mov rbp, rsp
sub rsp, 0xc0
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdi
test rax, rax
jne 0x4707ea
xor eax, eax
add rsp, 0xc0
pop rbp
ret
test rcx, rcx
je 0x470ce5
nop
cmp byte [0x00984560], 0
je 0x470827
mov qword [0x00984568], rcx
cmp dword [0x009d9570], 0
je 0x470820
call fcn.004673c0
mov qword [r11], rdi
mov rdx, qword [0x00984570]
mov qword [r11 + 8], rdx
mov qword [0x00984570], rdi
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rdi
mov rdx, qword [rsp + 0xa0]
nop
test rdx, rdx
je 0x47086a
movzx esi, byte [rdx + 0x17]
mov r8d, esi
and esi, 0x1f
mov r9, rsi
bts rsi, 7
nop
mov r10, qword [rsp + 0xa8]
test r8b, 0x20
cmove r9, rsi
jmp 0x470872
xor r9d, r9d
xor r10d, r10d
xor edx, edx
nop
test r9, r9
je 0x470caf
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x38], r9
mov rax, rdx
call fcn.004010e0
cmp rax, 0x16
jne 0x470c65
mov rcx, qword [rsp + 0x38]
mov rdx, rcx
and ecx, 0x1f
mov qword [rsp + 0x58], rcx
nop
cmp rcx, 0x14
ja 0x4708eb
lea rsi, [rcx - 0x12]
cmp rsi, 1
jbe 0x470910
nop
cmp rcx, 0x14
je 0x4708f7
jmp 0x470c78
cmp rcx, 0x16
jbe 0x470910
cmp rcx, 0x17
jne 0x470906
mov rcx, qword [rsp + 0x68]
cmp qword [rcx], 0
setne sil
jmp 0x470931
cmp rcx, 0x1a
jne 0x470c78
bt edx, 7
jae 0x470922
mov rcx, qword [rsp + 0x68]
mov r10, qword [rcx]
nop
jmp 0x47092a
mov rcx, qword [rsp + 0x68]
mov r10, rcx
test r10, r10
setne sil
test sil, sil
je 0x470c65
mov rax, qword [rsp + 0x60]
nop
call fcn.0046dfa0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rbx
mov rcx, qword [rax + 0x38]
mov rax, rbx
call rcx
cmp rax, 0x14
je 0x470988
mov rbx, qword [0x009840c0]
mov rcx, qword [0x009840c8]
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rdx + 0x30]
mov rax, qword [rsp + 0x70]
call rsi
nop dword [rax]
test al, al
je 0x470c4e
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
jmp 0x4709a0
mov rcx, rbx
nop dword [rax]
test rax, rax
je 0x4709ab
mov rdx, qword [rax + 8]
jmp 0x4709ae
mov rdx, rax
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0xb8], rcx
mov rdx, qword [rsp + 0xb0]
test rdx, rdx
je 0x4709de
lea rbx, [0x0078d608]
jmp 0x4709e2
xor ebx, ebx
xor edx, edx
mov rsi, qword [rbx + 0x18]
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x70]
call rsi
test al, al
jne 0x470af8
lea rax, [0x006b53c0]
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
call fcn.0040b1e0
test rax, rax
jne 0x470a22
mov rbx, qword [rsp + 0x30]
test rbx, rbx
jmp 0x470a50
mov rdx, qword [rax + 0x18]
mov rax, rbx
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0xe8]
call rdx
nop dword [rax + rax]
test al, al
jne 0x470aea
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x470adf
lea rax, [0x006b54e0]
mov rcx, qword [rsp + 0x78]
call fcn.0040b1e0
test rax, rax
je 0x470a9c
lea rax, [0x006b54e0]
mov rbx, qword [rsp + 0x30]
call fcn.0040b140
mov rcx, qword [rax + 0x18]
mov rax, qword [rsp + 0x78]
call rcx
test rax, rax
jne 0x47099a
xor eax, eax
add rsp, 0xc0
pop rbp
ret
lea rax, [0x006b5480]
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
call fcn.0040b1e0
test rax, rax
je 0x470adf
lea rax, [0x006b5480]
mov rbx, qword [rsp + 0x30]
call fcn.0040b140
mov rcx, qword [rax + 0x18]
mov rax, qword [rsp + 0x78]
call rcx
mov qword [rsp + 0x50], rbx
xor ecx, ecx
jmp 0x470c00
xor eax, eax
add rsp, 0xc0
pop rbp
ret
mov eax, 1
add rsp, 0xc0
pop rbp
ret
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x38]
call fcn.0046f660
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x470b1a
mov rdx, qword [rdx + 8]
nop word [rax + rax]
test rdx, rdx
je 0x470bbe
nop
cmp byte [0x00984560], 0
je 0x470b6b
mov qword [0x00984568], rdx
cmp dword [0x009d9570], 0
jne 0x470b4a
mov r9, qword [rsp + 0x78]
jmp 0x470b62
call fcn.004673c0
mov r9, qword [rsp + 0x78]
mov qword [r11], r9
mov r10, qword [0x00984570]
mov qword [r11 + 8], r10
mov qword [0x00984570], r9
jmp 0x470b70
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], r9
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x470bb4
movzx r9d, byte [rdx + 0x17]
mov r10d, r9d
and r9d, 0x1f
mov r11, r9
bts r9, 7
nop
mov r12, qword [rsp + 0x98]
test r10b, 0x20
cmove r11, r9
jmp 0x470bc6
xor r11d, r11d
xor edx, edx
xor r12d, r12d
jmp 0x470bc6
xor r11d, r11d
xor edx, edx
xor r12d, r12d
mov rdi, rdx
mov rsi, r12
mov r8, r11
call fcn.0046fa80
mov eax, 1
add rsp, 0xc0
pop rbp
ret
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rcx, qword [rsp + 0x48]
inc rcx
mov rbx, qword [rsp + 0x50]
nop dword [rax + rax]
cmp rbx, rcx
jle 0x470c43
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x80], rax
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0xe8]
mov rax, rdx
call fcn.004707a0
test al, al
je 0x470be2
mov eax, 1
add rsp, 0xc0
pop rbp
ret
xor eax, eax
add rsp, 0xc0
pop rbp
ret
lea rax, [0x006a5b60]
lea rbx, [0x00788840]
nop dword [rax]
call fcn.00436ea0
lea rax, [0x006a5b60]
lea rbx, [0x00788830]
call fcn.00436ea0
lea rax, [0x006cc920]
nop
call fcn.0040d7c0
mov qword [rax + 8], 0x17
lea rcx, [0x0070e860]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x10], rcx
mov rbx, rax
lea rax, [0x006b32c0]
call fcn.00436ea0
lea rax, [0x006cc920]
call fcn.0040d7c0
mov qword [rax + 8], 0x16
lea rcx, [0x0070ddf2]
mov qword [rax], rcx
mov qword [rax + 0x10], 0
mov rbx, rax
lea rax, [0x006b32c0]
nop
call fcn.00436ea0
lea rax, [0x006a5b60]
lea rbx, [0x00788820]
call fcn.00436ea0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.004707a0