Function at 0x5d1940
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x5d1c9d
push rbp
mov rbp, rsp
sub rsp, 0x98
movq qword [rsp + 0x90], xmm15
mov byte [rsp + 0x2f], 0
movups xmmword [rsp + 0x50], xmm15
cmp word [rax + 0x48], 0x304
je 0x5d1c43
mov qword [rsp + 0xa8], rax
xor ebx, ebx
xor ecx, ecx
call fcn.005d0760
test rcx, rcx
jne 0x5d1c28
lea rdx, [0x006bc480]
nop dword [rax]
cmp rax, rdx
jne 0x5d19aa
mov rcx, rbx
jmp 0x5d19b2
mov rcx, rbx
mov ebx, 0
jne 0x5d1b92
mov rax, qword [rsp + 0xa8]
cmp byte [rax + 0x10], 0
je 0x5d1b70
mov rdx, qword [rax + 0x50]
mov rdx, qword [rdx + 0x130]
test rdx, rdx
je 0x5d1b4e
nop
cmp rdx, 1
jne 0x5d1a0f
cmp qword [rax + 0x58], 1
jle 0x5d1a19
mov ebx, 0x64
call fcn.005cf280
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
add rsp, 0x98
pop rbp
ret
cmp rdx, 2
jne 0x5d1b02
lea rdx, [rax + 0x2c]
mov rcx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rcx + 0x2c], esi
sete sil
test sil, sil
jne 0x5d1a52
mov qword [rsp + 0x30], rdx
mov rax, rdx
nop dword [rax]
call fcn.00472260
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x30]
movups xmmword [rsp + 0x60], xmm15
lea rsi, [0x005d1cc0]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdx
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x90], rdx
mov byte [rsp + 0x2f], 1
nop
xor edx, edx
xchg dword [rcx + 0x28], edx
mov rax, rcx
lea rbx, [0x0078beb0]
lea rcx, [0x009d90e0]
call fcn.005d4ca0
mov rdx, qword [rsp + 0xa8]
mov qword [rdx + 0x38], rax
cmp dword [0x009d9570], 0
je 0x5d1abc
call fcn.004673c0
mov qword [r11], rbx
mov rax, qword [rdx + 0x40]
mov qword [r11 + 8], rax
mov qword [rdx + 0x40], rbx
cmp qword [rdx + 0x38], 0
jne 0x5d1acb
inc qword [rdx + 0x58]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rdx + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x2f], 0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rdx]
call rax
mov rbx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
add rsp, 0x98
pop rbp
ret
mov ebx, 0x50
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x20
lea rcx, [0x007143bc]
mov qword [rax], rcx
lea rcx, [0x00789ac0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
add rsp, 0x98
pop rbp
ret
mov ebx, 0x64
call fcn.005cf280
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
add rsp, 0x98
pop rbp
ret
mov ebx, 0x64
call fcn.005cf280
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
add rsp, 0x98
pop rbp
ret
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xa8]
mov ebx, 0xa
call fcn.005cf280
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x80], xmm15
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x78], rcx
lea rcx, [0x006bc480]
mov qword [rsp + 0x80], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x88], rcx
lea rax, [0x0071e48d]
mov ebx, 0x49
lea rcx, [rsp + 0x70]
mov edi, 2
mov rsi, rdi
call fcn.004ccb40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
add rsp, 0x98
pop rbp
ret
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdi
mov rax, qword [rsp + 0x50]
mov rbx, rdi
add rsp, 0x98
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2d
lea rcx, [0x00719bf2]
mov qword [rax], rcx
lea rcx, [0x00789ac0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
add rsp, 0x98
pop rbp
ret
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
jmp fcn.005d1940