Function at 0x5d8500
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d8be8
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rsp + 0x80], rax
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
call fcn.005d70c0
test rax, rax
jne 0x5d874f
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rdx + 0x18]
cmp byte [rsi + 0x52], 0
jne 0x5d8710
mov rax, qword [rsp + 0x60]
cmp qword [rax + 0x58], 0
jne 0x5d85a9
cmp byte [rsi + 0x55], 0
je 0x5d85a9
mov byte [rax + 0xf0], 1
mov rsi, qword [rdx + 0x18]
cmp qword [rsi + 0x60], 0
je 0x5d85a9
mov ebx, 0x28
call fcn.005cf280
lea rax, [0x006c0560]
nop dword [rax + rax]
call fcn.0040d7c0
mov qword [rax + 8], 0x3c
lea rcx, [0x0071d19f]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
cmp qword [rax + 0x58], 0
jle 0x5d868d
cmp byte [rax + 0xf0], 0
nop dword [rax + rax]
je 0x5d868d
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x40], xmm15
lea rsi, [rax + 0x149]
lea rbx, [rsp + 0x38]
nop
cmp rbx, rsi
je 0x5d85fb
mov rsi, qword [rax + 0x149]
mov edi, dword [rax + 0x151]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x40], edi
lea rsi, [rax + 0x155]
lea rdi, [rsp + 0x44]
cmp rdi, rsi
je 0x5d8622
mov rsi, qword [rax + 0x155]
mov edi, dword [rax + 0x15d]
mov qword [rsp + 0x44], rsi
mov dword [rsp + 0x4c], edi
mov rsi, qword [rdx + 0x18]
cmp qword [rsi + 0x60], 0x18
jne 0x5d8653
mov rax, qword [rsi + 0x58]
mov ecx, 0x18
call fcn.00403960
test al, al
je 0x5d864e
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x80]
jmp 0x5d868d
mov rax, qword [rsp + 0x60]
mov ebx, 0x28
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2f
lea rcx, [0x0071a77b]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
mov rsi, qword [rdx + 0x20]
test byte [rsi], al
mov rdi, qword [rdx + 0x18]
mov r8, qword [rdi + 0x80]
nop
test r8, r8
je 0x5d870a
mov r9, qword [rsi + 0x148]
test r9, r9
je 0x5d86d2
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x28], r9
mov rsi, qword [rsi + 0x140]
mov rbx, qword [rdi + 0x78]
mov qword [rsp + 0x58], rbx
xor ecx, ecx
jmp 0x5d8b48
nop
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x31
lea rcx, [0x0071b171]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x80]
lea rcx, [0x00789ac0]
mov rbx, rax
mov rax, qword [rsp + 0x60]
jmp 0x5d8760
xor ecx, ecx
xor ebx, ebx
jmp 0x5d8760
mov rax, qword [rsp + 0x60]
mov ebx, 0xa
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x33
lea rcx, [0x0071b974]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
test rcx, rcx
jne 0x5d8b1b
mov rsi, qword [rdx + 0x18]
mov rdi, qword [rsi + 0x80]
mov rsi, qword [rsi + 0x78]
mov qword [rax + 0x170], rdi
cmp dword [0x009d9570], 0
je 0x5d879b
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0x168]
mov qword [r11 + 8], rdi
mov qword [rax + 0x168], rsi
mov rsi, qword [rdx + 0x18]
mov rdi, qword [rsi + 0x90]
mov r8, qword [rsi + 0x98]
mov rsi, qword [rsi + 0x88]
mov qword [rax + 0x88], rdi
mov qword [rax + 0x90], r8
cmp dword [0x009d9570], 0
je 0x5d87e5
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0x80]
mov qword [r11 + 8], rdi
mov qword [rax + 0x80], rsi
cmp qword [rdx + 0xb0], 0
je 0x5d883a
mov rsi, qword [rdx + 0x20]
mov rbx, qword [rsi + 0x38]
nop
test rbx, rbx
je 0x5d8836
mov rsi, qword [rsi + 0x40]
mov rdi, qword [rdx + 0x18]
mov rcx, qword [rdi + 0x40]
cmp rcx, rsi
je 0x5d881a
xor ecx, ecx
jmp 0x5d8840
mov rax, qword [rdi + 0x38]
nop
call fcn.00403960
mov rdx, qword [rsp + 0x80]
mov ecx, eax
mov rax, qword [rsp + 0x60]
jmp 0x5d8840
xor ecx, ecx
jmp 0x5d8840
xor ecx, ecx
nop dword [rax]
test cl, cl
je 0x5d8b0f
mov rsi, qword [rdx + 0xb0]
movzx edi, word [rsi + 0x1a]
cmp word [rax + 0x48], di
jne 0x5d8ad5
movzx edi, word [rsi + 0x1e]
mov r8, qword [rdx + 0x28]
cmp word [r8], di
jne 0x5d8a99
movzx edi, byte [rsi + 0x40]
mov r8, qword [rdx + 0x18]
nop word [rax + rax]
cmp byte [r8 + 0x70], dil
jne 0x5d8a5f
mov rdi, qword [rsi + 0x30]
mov r8, qword [rsi + 0x38]
mov rsi, qword [rsi + 0x28]
mov qword [rdx + 0xa0], rdi
mov qword [rdx + 0xa8], r8
cmp dword [0x009d9570], 0
je 0x5d88c0
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rdx + 0x98]
mov qword [r11 + 8], rdi
mov qword [rdx + 0x98], rsi
mov rsi, qword [rdx + 0xb0]
movzx esi, byte [rsi + 0x40]
mov byte [rax + 0x60], sil
mov rsi, qword [rdx + 0xb0]
mov rdi, qword [rsi + 0x50]
mov r8, qword [rsi + 0x58]
mov rsi, qword [rsi + 0x48]
mov qword [rax + 0xa0], rdi
mov qword [rax + 0xa8], r8
cmp dword [0x009d9570], 0
nop
je 0x5d8915
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0x98]
mov qword [r11 + 8], rdi
mov qword [rax + 0x98], rsi
mov rsi, qword [rdx]
mov rdi, qword [rsi + 0xb8]
mov r8, qword [rsi + 0xc0]
mov rsi, qword [rsi + 0xb0]
mov qword [rax + 0xb8], rdi
mov qword [rax + 0xc0], r8
cmp dword [0x009d9570], 0
je 0x5d895e
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0xb0]
mov qword [r11 + 8], rdi
mov qword [rax + 0xb0], rsi
mov rsi, qword [rdx + 0xb0]
mov rdi, qword [rsi + 0xb0]
mov r8, qword [rsi + 0xb8]
mov rsi, qword [rsi + 0xa8]
mov qword [rax + 0xd0], rdi
mov qword [rax + 0xd8], r8
cmp dword [0x009d9570], 0
je 0x5d89ab
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0xc8]
mov qword [r11 + 8], rdi
mov qword [rax + 0xc8], rsi
mov rsi, qword [rdx + 0xb0]
mov rdi, qword [rsi + 0x80]
mov r8, qword [rsi + 0x88]
mov rsi, qword [rsi + 0x78]
mov qword [rax + 0x70], rdi
mov qword [rax + 0x78], r8
cmp dword [0x009d9570], 0
je 0x5d89f0
nop dword [rax]
call fcn.004673c0
mov qword [r11], rsi
mov rdi, qword [rax + 0x68]
mov qword [r11 + 8], rdi
mov qword [rax + 0x68], rsi
cmp qword [rax + 0x88], 0
jne 0x5d8a50
mov rdx, qword [rdx + 0xb0]
mov rsi, qword [rdx + 0x98]
test rsi, rsi
je 0x5d8a50
mov rdi, qword [rdx + 0xa0]
mov rdx, qword [rdx + 0x90]
mov qword [rax + 0x88], rsi
mov qword [rax + 0x90], rdi
cmp dword [0x009d9570], 0
je 0x5d8a49
call fcn.004673c0
mov qword [r11], rdx
mov rsi, qword [rax + 0x80]
mov qword [r11 + 8], rsi
mov qword [rax + 0x80], rdx
mov eax, 1
xor ebx, ebx
xor ecx, ecx
add rsp, 0x70
pop rbp
ret
mov ebx, 0x28
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x3c
lea rcx, [0x0071d1db]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
mov ebx, 0x28
nop
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x3b
lea rcx, [0x0071ce97]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
mov ebx, 0x28
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x36
lea rcx, [0x0071c215]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x70
pop rbp
ret
xor eax, eax
xor ebx, ebx
xor ecx, ecx
add rsp, 0x70
pop rbp
ret
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x50], rbx
mov ebx, 0x6e
call fcn.005cf280
xor eax, eax
mov rbx, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x50]
add rsp, 0x70
pop rbp
ret
add rsi, 0x10
inc rcx
cmp rcx, r9
jge 0x5d8bad
mov rdi, qword [rsi + 8]
cmp rdi, r8
jne 0x5d8b41
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x68], rsi
mov rax, qword [rsi]
mov rcx, rdi
call fcn.00403960
test al, al
jne 0x5d8b97
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x20]
mov r9, qword [rsp + 0x28]
jmp 0x5d8b41
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x80]
xor ecx, ecx
xor ebx, ebx
jmp 0x5d8760
nop
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2f
lea rcx, [0x0071a7aa]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x80]
lea rcx, [0x00789ac0]
mov rbx, rax
mov rax, qword [rsp + 0x60]
jmp 0x5d8760
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
jmp fcn.005d8500