Function at 0x4368a0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x436ddd
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0x90]
test rdx, rdx
je 0x4368d7
mov edx, dword [rdx + 0x90]
cmp edx, 2
je 0x436dcb
mov qword [rsp + 0x78], rax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
xor r8d, r8d
jmp 0x43690b
mov rdi, qword [rsp + 0x40]
inc rdi
mov rax, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x38]
mov ebx, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x50]
movzx ecx, byte [rsp + 0x16]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x50], rdx
mov byte [rsp + 0x16], cl
mov qword [rsp + 0x40], rdi
mov r9d, dword [rax + 0x90]
cmp r9d, 4
ja 0x436ae0
nop dword [rax + rax]
cmp r9d, 1
je 0x436b52
cmp r9d, 2
jne 0x436ad0
cmp byte [rax + 0xb2], 0
je 0x436995
cmp byte [rax + 0xb1], 0
je 0x436990
cmp qword [rax + 0x10], 0xfffffffffffffade
jne 0x43698b
cmp qword [rax + 0x30], rdx
jne 0x436986
mov r9d, dword [rdx + 0x300]
cmp r9d, ebx
sete r9b
jmp 0x4369a0
xor r9d, r9d
jmp 0x4369a0
xor r9d, r9d
jmp 0x4369a0
xor r9d, r9d
jmp 0x4369a0
xor r9d, r9d
nop dword [rax + rax]
test r9b, r9b
jne 0x436b90
mov ebx, 2
mov ecx, 0x1002
call fcn.0043a140
nop dword [rax + rax]
test al, al
je 0x436aa9
mov rax, qword [rsp + 0x78]
mov word [rax + 0xb1], 0x101
mov qword [rax + 0x10], 0xfffffffffffffade
mov rdx, qword [rax + 0x30]
mov qword [rsp + 0x60], rdx
mov esi, dword [rdx + 0x300]
mov dword [rsp + 0x24], esi
mov rdi, qword [rsp + 0x50]
cmp rdi, rdx
je 0x436a02
mov edi, 1
jmp 0x436a0c
mov edi, dword [rsp + 0x20]
cmp esi, edi
setne dil
mov byte [rsp + 0x17], dil
mov ebx, 0x1002
mov ecx, 2
nop dword [rax + rax]
call fcn.00439d80
cmp dword [0x0061c3d8], 0
jne 0x436a7f
movzx eax, byte [rsp + 0x17]
test al, al
je 0x436a7f
nop
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x38]
cmp rcx, rax
jg 0x436a84
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
call fcn.00433400
mov rsi, qword [rsp + 0x28]
add rsi, 0x1388
mov rcx, rsi
jmp 0x436a84
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x24]
mov rsi, rcx
movzx ecx, byte [rsp + 0x16]
jmp 0x436b90
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
jmp 0x436b90
cmp r9d, 3
jb 0x436afa
jmp 0x436b52
cmp r9d, 6
je 0x436c9f
cmp r9d, 8
je 0x436b90
cmp r9d, 9
je 0x436b0b
bt r9d, 0xc
nop
jb 0x436b90
jmp 0x436cb2
mov ebx, 9
mov ecx, 4
call fcn.0043a6e0
test al, al
jne 0x436b42
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
jmp 0x436b90
mov rax, qword [rsp + 0x78]
mov r9d, 4
mov ecx, 1
mov byte [rsp + 0x16], cl
mov ebx, r9d
bts r9d, 0xc
mov ecx, r9d
call fcn.0043a140
test al, al
jne 0x436c72
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x50], rdx
mov byte [rsp + 0x16], cl
test rdi, rdi
jne 0x436bcb
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x2710
mov qword [rsp + 0x30], r8
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x30]
cmp qword [rsp], rax
jge 0x436c25
mov dword [rsp], 0xa
nop dword [rax + rax]
call fcn.004613e0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp + 0x30]
nop
jmp 0x4368eb
lea rax, [0x00502218]
mov qword [rsp], rax
call fcn.0045f4c0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x1388
jmp 0x4368eb
mov rax, qword [rsp + 0x78]
mov word [rax + 0xb1], 0
mov rdx, qword [rax]
add rdx, 0x13a0
mov qword [rax + 0x10], rdx
xor ebx, ebx
movzx ecx, byte [rsp + 0x16]
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
xor eax, eax
mov ebx, 1
xor ecx, ecx
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
nop
mov qword [rsp + 0x58], r14
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x1c], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x48], rdx
call fcn.00437640
lea rax, [0x004f838c]
mov ebx, 0x10
nop
call fcn.00437f40
mov rax, qword [rsp + 0x78]
call fcn.00437ec0
lea rax, [0x004f5bc5]
mov ebx, 7
nop dword [rax + rax]
call fcn.00437f40
mov rax, qword [rsp + 0x48]
call fcn.00437d40
lea rax, [0x004f8e13]
mov ebx, 0x13
nop dword [rax + rax]
call fcn.00437f40
mov eax, dword [rsp + 0x1c]
mov eax, eax
call fcn.00437c40
call fcn.004378a0
call fcn.004376c0
mov rax, qword [rsp + 0x58]
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x18], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x48], rdx
call fcn.00437640
lea rax, [0x004f835c]
mov ebx, 0x10
call fcn.00437f40
mov rax, qword [rsp + 0x58]
call fcn.00437ec0
lea rax, [0x004f5bc5]
mov ebx, 7
call fcn.00437f40
mov rax, qword [rsp + 0x48]
call fcn.00437d40
lea rax, [0x004f8e00]
mov ebx, 0x13
nop dword [rax]
call fcn.00437f40
mov eax, dword [rsp + 0x18]
mov eax, eax
call fcn.00437c40
call fcn.004378a0
call fcn.004376c0
lea rax, [0x004f82ac]
mov ebx, 0x10
call fcn.00435d80
lea rax, [0x004ff1ab]
mov ebx, 0x27
call fcn.00435d80
nop
mov qword [rsp + 8], rax
call fcn.00463d60
mov rax, qword [rsp + 8]
jmp fcn.004368a0