Function at 0x41d280
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x180]
cmp r12, qword [r14 + 0x18]
jbe 0x41d986
sub rsp, 0x200
mov qword [rsp + 0x1f8], rbp
lea rbp, [rsp + 0x1f8]
mov qword [rsp + 0x208], rax
mov edx, dword [rax + 0x90]
bt edx, 0xc
nop dword [rax + rax]
jae 0x41d8eb
mov edx, dword [rax + 0x90]
btr edx, 0xc
cmp edx, 2
ja 0x41d2e0
cmp edx, 1
je 0x41d2e9
jmp 0x41d856
cmp edx, 4
ja 0x41d473
mov rdx, r14
cmp rdx, rax
je 0x41d845
mov r12, qword [rax + 0x70]
test r12, r12
jne 0x41d302
mov r12, qword [rax + 0x38]
mov rdx, qword [rdx + 0x30]
mov rdx, qword [rdx + 0xa0]
test byte [rdx], al
mov r13, qword [rax + 8]
sub r13, r12
add qword [rdx + 0x22b8], r13
inc qword [rdx + 0x22c0]
cmp qword [rax + 0x70], 0
jne 0x41d345
cmp byte [rax + 0xb4], 0
je 0x41d338
xor edx, edx
jmp 0x41d347
mov dl, byte [rax + 0xb9]
test dl, dl
sete dl
jmp 0x41d347
xor edx, edx
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x210], rbx
test dl, dl
jne 0x41d362
mov byte [rax + 0xb3], 1
nop
jmp 0x41d37c
call fcn.0044c400
mov rax, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x210]
mov r13, qword [rsp + 0x68]
lea rdi, [rsp + 0x80]
lea rdi, [rdi - 0x30]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00461f54
mov rbp, qword [rbp]
mov rdx, qword [rax + 8]
mov r12, qword [rax]
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], rdx
cmp qword [rax + 0x50], 0
je 0x41d3ec
lea rdx, [rax + 0x50]
lea rcx, [0x005aa3c0]
mov rdi, rbx
lea rsi, [rsp + 0x80]
mov ebx, 8
mov rax, rdx
call fcn.0041e2c0
mov rax, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x210]
movups xmmword [rsp + 0x1e0], xmm15
mov qword [rsp + 0x1f0], 0
lea rdx, [0x0041d9c0]
mov qword [rsp + 0x1e0], rdx
lea rdx, [rsp + 0x80]
mov qword [rsp + 0x1e8], rdx
mov qword [rsp + 0x1f0], rbx
mov qword [rsp], 0
xor ecx, ecx
mov rdi, rax
xor esi, esi
xor r8d, r8d
mov r9d, 0x7fffffff
lea r10, [rsp + 0x1e0]
xor r11d, r11d
mov rax, 0xffffffffffffffff
mov rbx, rax
call fcn.00455640
mov rdx, qword [rsp + 0x208]
mov r12, qword [rdx + 0x28]
mov qword [rsp + 0x1d0], r12
jmp 0x41d539
cmp edx, 6
jne 0x41d48a
xor eax, eax
mov rbp, qword [rsp + 0x1f8]
add rsp, 0x200
ret
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x58], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x78], rdx
call fcn.00437640
lea rax, [0x004f70fe]
mov ebx, 0xc
call fcn.00437f40
mov rax, qword [rsp + 0x208]
nop
call fcn.00437ec0
lea rax, [0x004f5bc5]
mov ebx, 7
call fcn.00437f40
mov rax, qword [rsp + 0x78]
nop dword [rax + rax]
call fcn.00437d40
lea rax, [0x004f8e13]
mov ebx, 0x13
call fcn.00437f40
mov eax, dword [rsp + 0x58]
mov eax, eax
nop dword [rax]
call fcn.00437c40
call fcn.004378a0
call fcn.004376c0
lea rax, [0x004f86b6]
mov ebx, 0x11
nop dword [rax + rax]
call fcn.00435d80
mov r8, qword [rsp + 0x1d0]
mov r8, qword [r8 + 0x28]
mov qword [rsp + 0x1d0], r8
mov rax, qword [rsp + 0x1d0]
test rax, rax
je 0x41d605
cmp qword [rax + 0x18], 0
je 0x41d57e
add rax, 0x18
mov ebx, 8
lea rcx, [0x005aa3c0]
mov rdi, qword [rsp + 0x210]
lea rsi, [rsp + 0x80]
call fcn.0041e2c0
mov rdx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x1d0]
cmp qword [rax + 0x28], 0
je 0x41d5ba
add rax, 0x28
mov ebx, 8
lea rcx, [0x005aa3c0]
mov rdi, qword [rsp + 0x210]
lea rsi, [rsp + 0x80]
call fcn.0041e2c0
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x1d0]
cmp byte [r8 + 1], 0
je 0x41d525
lea rax, [rsp + 0x1d0]
mov ebx, 8
lea rcx, [0x005aa3c0]
mov rdi, qword [rsp + 0x210]
lea rsi, [rsp + 0x80]
call fcn.0041e2c0
mov rdx, qword [rsp + 0x208]
nop
jmp 0x41d525
mov rbx, qword [rdx + 0x20]
test rbx, rbx
je 0x41d61d
lea rax, [rsp + 0x80]
xor ecx, ecx
call fcn.004228e0
nop
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1c0]
xor ebx, ebx
call fcn.00422d00
mov qword [rsp + 0x1c8], rax
lea rax, [rsp + 0x80]
call fcn.00422a20
test rax, rax
je 0x41d6a8
mov rdx, qword [rsp + 0x180]
sub rax, rdx
mov rdx, qword [rsp + 0x1c8]
jmp 0x41d700
xor edx, edx
test rdx, rdx
je 0x41d63d
mov r8, qword [rdx + 8]
test r8, r8
je 0x41d63d
nop
xor r9d, r9d
mov qword [rdx + 8], r9
nop
mov r9, r8
lea rax, [0x005b09e0]
jmp 0x41d736
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x1b0], rcx
mov qword [rax + 0x10], 0
call fcn.00425360
mov rax, qword [rsp + 0x1b0]
test rax, rax
jne 0x41d68f
cmp qword [rsp + 0x198], 0
nop
jne 0x41d6ed
cmp qword [rsp + 0x1a8], 0
jne 0x41d6ed
cmp qword [rsp + 0x1a0], 0
jne 0x41d6ed
mov rax, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x1f8]
add rsp, 0x200
ret
lea rax, [0x004fb8bc]
mov ebx, 0x19
call fcn.00435d80
nop
test rdx, rdx
je 0x41d667
mov r8d, dword [rdx]
cmp r8d, eax
jbe 0x41d717
mov rdx, qword [rdx + 0x10]
jmp 0x41d700
mov r9d, dword [rdx + 4]
add r8d, r9d
nop
cmp eax, r8d
jb 0x41d669
mov rdx, qword [rdx + 0x18]
jmp 0x41d700
mov rax, qword [rax + 0x220]
test rax, rax
je 0x41d754
nop dword [rax + rax]
cmp qword [rax + 0x130], r8
ja 0x41d72f
cmp qword [rax + 0x100], r8
jbe 0x41d72f
jmp 0x41d756
xor eax, eax
mov r8d, dword [r9 + 0xc]
add r8, qword [rax + 0x128]
mov r10d, dword [r9 + 8]
test r10d, r10d
jl 0x41d76e
xor eax, eax
jmp 0x41d7a3
mov byte [rsp + 0x53], bl
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x1d8], r9
neg r10d
movsxd rax, r10d
mov rbx, r8
call fcn.00415040
mov r8, qword [rax + 0x18]
mov rdx, qword [rsp + 0x60]
movzx ebx, byte [rsp + 0x53]
mov r9, qword [rsp + 0x1d8]
mov qword [rsp + 0x70], rax
mov edx, dword [rdx]
add rdx, qword [rsp + 0x180]
test bl, bl
je 0x41d7ea
mov r9d, dword [r9 + 8]
test r9d, r9d
jge 0x41d7c7
neg r9d
movsxd r9, r9d
jmp 0x41d7ca
movsxd r9, r9d
mov rax, rdx
mov rbx, r9
mov rcx, r8
mov rdi, qword [rsp + 0x210]
lea rsi, [rsp + 0x80]
call fcn.0041e7c0
jmp 0x41d81c
mov r9d, dword [r9 + 8]
test r9d, r9d
jge 0x41d7fb
neg r9d
movsxd r9, r9d
jmp 0x41d7fe
movsxd r9, r9d
mov rax, rdx
mov rbx, r9
mov rcx, r8
mov rdi, qword [rsp + 0x210]
lea rsi, [rsp + 0x80]
call fcn.0041e2c0
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x41d63d
nop
lea rax, [0x005de1a0]
mov ecx, 2
call fcn.00427420
nop dword [rax]
jmp 0x41d63d
lea rax, [0x004fb106]
mov ebx, 0x18
call fcn.00435d80
cmp edx, 2
jne 0x41d48a
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x54], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x78], rdx
call fcn.00437640
lea rax, [0x004f70fe]
mov ebx, 0xc
call fcn.00437f40
mov rax, qword [rsp + 0x208]
call fcn.00437ec0
lea rax, [0x004f5bc5]
mov ebx, 7
call fcn.00437f40
mov rax, qword [rsp + 0x78]
call fcn.00437d40
lea rax, [0x004f8e13]
mov ebx, 0x13
nop
call fcn.00437f40
mov eax, dword [rsp + 0x54]
mov eax, eax
call fcn.00437c40
call fcn.004378a0
call fcn.004376c0
lea rax, [0x004fd9e4]
mov ebx, 0x20
call fcn.00435d80
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x5c], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x78], rdx
call fcn.00437640
lea rax, [0x004fa615]
mov ebx, 0x16
call fcn.00437f40
mov rax, qword [rsp + 0x208]
nop
call fcn.00437ec0
lea rax, [0x004f5bc5]
mov ebx, 7
call fcn.00437f40
mov rax, qword [rsp + 0x78]
nop dword [rax + rax]
call fcn.00437d40
lea rax, [0x004f8e13]
mov ebx, 0x13
call fcn.00437f40
mov eax, dword [rsp + 0x5c]
mov eax, eax
nop dword [rax]
call fcn.00437da0
call fcn.004378a0
call fcn.004376c0
lea rax, [0x004fa641]
mov ebx, 0x16
nop dword [rax + rax]
call fcn.00435d80
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463d60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.0041d280