Function at 0x5d71c0
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x200]
cmp r12, qword [r14 + 0x10]
jbe 0x5d80b0
push rbp
mov rbp, rsp
sub rsp, 0x278
mov qword [rsp + 0x288], rax
mov rdx, qword [rax]
mov qword [rsp + 0x158], rdx
lea rcx, [rax + 0x30]
mov qword [rsp + 0x170], rcx
lea rbx, [0x0078a5c0]
mov rax, rdx
call fcn.005d0760
test rcx, rcx
jne 0x5d8077
lea rdx, [0x006bc100]
nop dword [rax + rax]
cmp rax, rdx
jne 0x5d722a
mov rcx, rbx
jmp 0x5d7232
mov rcx, rbx
mov ebx, 0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x160], rax
jne 0x5d7fea
cmp qword [rbx + 0x20], 0
je 0x5d7fea
mov rax, qword [rsp + 0x158]
lea rbx, [0x0078a5c0]
mov rcx, qword [rsp + 0x170]
call fcn.005d0760
nop word [rax + rax]
test rcx, rcx
jne 0x5d7fdb
lea rdx, [0x006bc180]
cmp rax, rdx
jne 0x5d729a
mov rcx, rbx
jmp 0x5d72a2
mov rcx, rbx
mov ebx, 0
jne 0x5d735f
mov rdx, qword [rsp + 0x288]
mov rsi, qword [rdx + 0x18]
cmp byte [rsi + 0x53], 0
je 0x5d731c
mov rsi, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x28]
mov r8, qword [rbx + 0x18]
mov rax, qword [rsp + 0x158]
mov qword [rax + 0x70], rsi
mov qword [rax + 0x78], rdi
cmp dword [0x009d9570], 0
je 0x5d72f0
nop
call fcn.004673c0
mov qword [r11], r8
mov rsi, qword [rax + 0x68]
mov qword [r11 + 8], rsi
mov qword [rax + 0x68], r8
lea rbx, [0x0078a5c0]
mov rcx, qword [rsp + 0x170]
call fcn.005d0760
test rcx, rcx
je 0x5d7362
mov rax, rcx
mov rbx, rdi
add rsp, 0x278
pop rbp
ret
mov rax, qword [rsp + 0x158]
mov ebx, 0xa
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x32
lea rcx, [0x0071b550]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x278
pop rbp
ret
mov rbx, rcx
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0x158]
cmp qword [rdx + 0x58], 0
nop
je 0x5d741b
cmp qword [rdx + 0xa0], 0
jbe 0x5d80a5
mov rsi, qword [rdx + 0x98]
mov rsi, qword [rsi]
test byte [rsi], al
mov rdi, qword [rsp + 0x150]
cmp qword [rdi + 0x20], 0
jbe 0x5d809a
mov rcx, qword [rsi + 8]
mov rdi, qword [rdi + 0x18]
nop dword [rax + rax]
cmp qword [rdi + 8], rcx
jne 0x5d73dd
mov rax, qword [rsi]
mov rbx, qword [rdi]
call fcn.00403960
test al, al
jne 0x5d7449
mov rdx, qword [rsp + 0x158]
mov rax, rdx
mov ebx, 0x2a
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x33
lea rcx, [0x0071b941]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x278
pop rbp
ret
mov rsi, qword [rsp + 0x150]
mov rbx, qword [rsi + 0x18]
mov rcx, qword [rsi + 0x20]
mov rdi, qword [rsi + 0x28]
mov rax, rdx
call fcn.005d94e0
nop word [rax + rax]
test rax, rax
jne 0x5d7fd2
mov rcx, qword [rsp + 0x288]
mov rbx, qword [rcx + 0x28]
mov rdx, qword [rbx + 0x20]
mov rbx, qword [rdx]
mov rsi, qword [rsp + 0x158]
movzx eax, word [rsi + 0x48]
call rbx
mov rcx, qword [rsp + 0xb0]
lea rsi, [0x006bc200]
cmp rcx, rsi
jne 0x5d7488
mov rdx, qword [rsp + 0x108]
jmp 0x5d748d
mov edx, 0
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0xb8], rax
nop dword [rax]
jne 0x5d7575
mov r9, qword [rsp + 0x158]
cmp qword [r9 + 0xa0], 0
jbe 0x5d8090
mov r10, qword [rax + 0x30]
mov r11, qword [r9 + 0x50]
mov r12, qword [rsp + 0x288]
mov rcx, qword [r12 + 0x20]
mov rdi, qword [r12 + 0x18]
mov r13, qword [r9 + 0x98]
mov rsi, qword [r13]
mov r8, rdx
mov rax, rbx
mov rbx, r11
call r10
test rax, rax
jne 0x5d753a
mov rax, qword [rsp + 0x158]
lea rbx, [0x0078a5c0]
mov rcx, qword [rsp + 0x170]
call fcn.005d0760
test rcx, rcx
jne 0x5d752b
mov rcx, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x110]
jmp 0x5d757d
mov rax, rcx
mov rbx, rdi
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x158]
mov ebx, 0xa
call fcn.005cf280
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x130]
add rsp, 0x278
pop rbp
ret
mov rdx, qword [rsp + 0x108]
lea rsi, [0x006bc280]
cmp rcx, rsi
jne 0x5d758e
mov rdi, rdx
jmp 0x5d7596
mov rdi, rdx
mov edx, 0
mov qword [rsp + 0x148], rdx
nop
je 0x5d75ad
mov r8, rcx
xor r9d, r9d
jmp 0x5d765e
mov qword [rsp + 0xe0], rcx
mov rsi, qword [rsp + 0x288]
mov rax, qword [rsi + 8]
mov rbx, qword [rsi + 0x10]
mov r8, qword [rsp + 0x158]
movzx ecx, word [r8 + 0x48]
mov rdi, rdx
call fcn.005d9e60
mov rbx, rax
mov rax, qword [rsp + 0x158]
call fcn.005da2c0
test rbx, rbx
jne 0x5d7f97
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x158]
lea rbx, [0x0078a5c0]
mov rcx, qword [rsp + 0x170]
call fcn.005d0760
nop word [rax + rax]
test rcx, rcx
jne 0x5d7f88
mov rdx, qword [rsp + 0x148]
lea rsi, [0x006bc280]
mov r8, qword [rsp + 0xe0]
mov rcx, rax
mov rdi, rbx
mov r9, qword [rsp + 0x138]
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x110]
lea r10, [0x006bc300]
cmp rcx, r10
jne 0x5d766f
mov r11, rdi
jmp 0x5d7677
mov r11, rdi
mov edi, 0
jne 0x5d7ee3
mov qword [rsp + 0x138], r9
cmp r8, rsi
jne 0x5d7729
lea rax, [0x006ccf60]
call fcn.0040d7c0
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rcx + 8]
mov rbx, qword [rcx + 0x10]
mov rsi, qword [rcx]
mov qword [rax + 0x20], rdx
mov qword [rax + 0x28], rbx
cmp dword [0x009d9570], 0
je 0x5d76c8
nop
call fcn.004673a0
mov qword [r11], rsi
mov qword [rax + 0x18], rsi
mov rdx, qword [rsp + 0x288]
mov r8, qword [rdx]
lea rbx, [0x0078b538]
mov rcx, rax
lea rdi, [0x0078a5c0]
mov rsi, qword [rsp + 0x170]
mov rax, r8
call fcn.005d02e0
nop dword [rax + rax]
test rbx, rbx
jne 0x5d7ed4
mov rax, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x110]
mov r9, qword [rsp + 0x138]
mov rsi, qword [rsp + 0x158]
cmp qword [rsi + 0xa0], 0
jbe 0x5d8086
mov rdx, qword [rax + 0x18]
mov r8, qword [rsi + 0x50]
mov r9, qword [rsp + 0x288]
mov rcx, qword [r9 + 0x20]
mov r10, qword [rsi + 0x98]
mov rdi, qword [r10]
mov rax, rbx
mov rbx, r8
call rdx
test rsi, rsi
jne 0x5d7e99
mov qword [rsp + 0x100], rax
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xa0], rbx
test rdi, rdi
je 0x5d77d5
mov rdx, qword [rsp + 0x288]
mov rax, qword [rdx]
lea rbx, [0x0078b600]
mov rcx, rdi
lea rdi, [0x0078a5c0]
mov rsi, qword [rsp + 0x170]
call fcn.005d02e0
test rbx, rbx
jne 0x5d7e8a
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x288]
mov rdx, qword [rsi + 0x18]
cmp byte [rdx + 0x70], 0
je 0x5d78f1
mov rax, qword [rsp + 0x158]
mov byte [rax + 0x60], 1
mov rcx, qword [rsi + 0x30]
lea rdx, [rsi + 0x38]
mov qword [rsp + 0x210], rcx
lea rdi, [rsp + 0x218]
mov rsi, rdx
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467dec
mov rbp, qword [rbp]
mov rdx, qword [rsp + 0x210]
mov qword [rsp], rdx
lea rdi, [rsp + 8]
lea rsi, [rsp + 0x218]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467dec
mov rbp, qword [rbp]
nop
call fcn.005f85a0
mov rdx, qword [rsp + 0x158]
movzx r8d, word [rdx + 0x48]
mov r9, qword [rsp + 0x288]
mov r10, qword [r9 + 0x28]
mov rdi, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov r11, rax
mov eax, r8d
mov r12, rbx
mov rbx, r10
mov r13, rcx
mov rcx, qword [rsp + 0x100]
mov r8, r11
mov r9, r12
mov r10, r13
call fcn.005f6fa0
mov rdx, qword [rsp + 0x288]
mov qword [rdx + 0xa0], rbx
mov qword [rdx + 0xa8], rcx
cmp dword [0x009d9570], 0
je 0x5d78e5
call fcn.004673c0
mov qword [r11], rax
mov r12, qword [rdx + 0x98]
mov qword [r11 + 8], r12
mov qword [rdx + 0x98], rax
jmp 0x5d797f
mov r11, qword [rsp + 0x158]
movzx r12d, word [r11 + 0x48]
mov r13, qword [rsi + 0x28]
mov r15, qword [rsi + 0x20]
mov r8, qword [r15 + 0x20]
mov r9, qword [r15 + 0x28]
mov r10, qword [r15 + 0x30]
mov r15, qword [rdx + 0x20]
mov rdi, qword [rdx + 0x28]
mov rdx, qword [rdx + 0x30]
mov qword [rsp], r15
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
mov rdi, rbx
mov rbx, r13
mov rdx, rax
mov eax, r12d
mov r13, rcx
mov rcx, rdx
mov rsi, r13
call fcn.005f6980
mov rdx, qword [rsp + 0x288]
mov qword [rdx + 0xa0], rbx
mov qword [rdx + 0xa8], rcx
cmp dword [0x009d9570], 0
je 0x5d7978
call fcn.004673c0
mov qword [r11], rax
mov r12, qword [rdx + 0x98]
mov qword [r11 + 8], r12
mov qword [rdx + 0x98], rax
mov r12, qword [rsp + 0x158]
mov rax, qword [r12 + 0x50]
mov r13, qword [rdx + 0x20]
mov rdi, qword [r13 + 0x20]
mov rsi, qword [r13 + 0x28]
mov r8, qword [r13 + 0x30]
mov r9, qword [rdx + 0x98]
mov r10, qword [rdx + 0xa0]
mov r11, qword [rdx + 0xa8]
lea rbx, [0x00709006]
mov ecx, 0xd
nop dword [rax]
call fcn.005c9d80
test rax, rax
jne 0x5d7dd0
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x5d7d98
cmp qword [rcx + 8], 0
je 0x5d7d98
lea rax, [0x006e10a0]
call fcn.0040d7c0
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x138]
mov rbx, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x20]
lea rax, [0x006bf720]
mov rcx, rdx
call fcn.0040b300
nop dword [rax]
test rax, rax
je 0x5d7d33
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0xc0], rax
mov rdx, qword [rsp + 0x158]
movzx r8d, word [rdx + 0x48]
cmp r8w, 0x303
jb 0x5d7af8
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rdx + 0x38]
mov rdi, qword [rdx + 0x40]
mov rsi, qword [rdx + 0x48]
mov eax, r8d
mov rbx, qword [rsp + 0x138]
call fcn.005c7840
test rbx, rbx
jne 0x5d7abd
mov word [rsp + 0x7e], ax
call fcn.005c6fe0
test rcx, rcx
jne 0x5d7aa2
mov rcx, qword [rsp + 0x140]
mov byte [rcx + 0x18], 1
movzx edx, word [rsp + 0x7e]
mov word [rcx + 0x1a], dx
nop
jmp 0x5d7b10
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0xc8], rbx
mov rax, qword [rsp + 0x158]
mov ebx, 0x2f
call fcn.005cf280
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x120]
add rsp, 0x278
pop rbp
ret
mov rcx, qword [rax + 0x18]
mov rax, rbx
nop
call rcx
call fcn.005c71e0
test rcx, rcx
jne 0x5d7cf8
mov byte [rsp + 0x7d], al
mov qword [rsp + 0x98], rbx
mov rsi, qword [rsp + 0x288]
mov rcx, qword [rsi + 0x30]
lea rdx, [rsi + 0x38]
mov qword [rsp + 0x1a8], rcx
lea rdi, [rsp + 0x1b0]
mov rsi, rdx
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467dec
mov rbp, qword [rbp]
mov rdx, qword [rsp + 0x1a8]
mov qword [rsp], rdx
lea rdi, [rsp + 8]
lea rsi, [rsp + 0x1b0]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467dec
mov rbp, qword [rbp]
nop
call fcn.005f8880
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], rcx
mov rax, qword [rsp + 0x98]
call fcn.0040af00
movzx ecx, byte [rsp + 0x7d]
cmp cl, 0xe2
je 0x5d7bbd
lea rcx, [0x0078a580]
jmp 0x5d7be3
lea rax, [0x006ce720]
call fcn.0040d7c0
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x98]
mov qword [rax + 8], rcx
lea rcx, [0x0078a5a0]
mov rdx, qword [rsp + 0x158]
mov r11, qword [rdx + 0x50]
mov r12, qword [r11]
test r12, r12
je 0x5d7bfd
mov r11, qword [r11 + 8]
jmp 0x5d7c0b
mov r12, qword [0x009841e0]
mov r11, qword [0x009841e8]
mov rdx, qword [rsp + 0xc0]
mov rdx, qword [rdx + 0x20]
mov rbx, r12
mov rdi, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
mov r9, rcx
mov r10, rax
mov rax, qword [rsp + 0x118]
mov rcx, r11
call rdx
mov rdx, qword [rsp + 0x140]
mov qword [rdx + 0x28], rbx
mov qword [rdx + 0x30], rcx
cmp dword [0x009d9570], 0
je 0x5d7c70
nop
call fcn.004673c0
mov qword [r11], rax
mov r8, qword [rdx + 0x20]
mov qword [r11 + 8], r8
mov qword [rdx + 0x20], rax
test rdi, rdi
jne 0x5d7cbd
mov r8, qword [rsp + 0x288]
mov rax, qword [r8]
lea rbx, [0x0078b3f8]
mov rcx, rdx
lea rdi, [0x0078a5c0]
mov rsi, qword [rsp + 0x170]
nop dword [rax]
call fcn.005d02e0
test rbx, rbx
je 0x5d7d98
mov rax, rbx
mov rbx, rcx
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0x130], rsi
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x130]
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0xd8], rcx
mov rax, qword [rsp + 0x158]
mov ebx, 0x2f
call fcn.005cf280
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x130]
add rsp, 0x278
pop rbp
ret
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
movups xmmword [rsp + 0x178], xmm15
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x20]
mov qword [rsp + 0x178], rdx
mov qword [rsp + 0x180], rcx
lea rax, [0x0071e949]
mov ebx, 0x4f
lea rcx, [rsp + 0x178]
mov edi, 1
mov rsi, rdi
call fcn.004ccb40
add rsp, 0x278
pop rbp
ret
nop
mov rcx, qword [rsp + 0x288]
movups xmmword [rcx + 0x78], xmm15
cmp dword [0x009d9570], 0
je 0x5d7dbb
mov rdx, qword [rcx + 0x70]
call fcn.004673a0
mov qword [r11], rdx
mov qword [rcx + 0x70], 0
xor eax, eax
xor ebx, ebx
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx + 0x18]
mov rax, qword [rsp + 0x128]
call rcx
mov ecx, 0x21
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00714cce]
nop dword [rax]
call fcn.0044faa0
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xe8], rax
lea rax, [0x006c0560]
nop dword [rax]
call fcn.0040d7c0
mov rcx, qword [rsp + 0x80]
mov qword [rax + 8], rcx
cmp dword [0x009d9570], 0
jne 0x5d7e64
mov rcx, qword [rsp + 0xe8]
jmp 0x5d7e74
call fcn.004673a0
mov rcx, qword [rsp + 0xe8]
mov qword [r11], rcx
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x278
pop rbp
ret
mov rax, rbx
mov rbx, rcx
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x130], r8
mov qword [rsp + 0xd8], rsi
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x130]
add rsp, 0x278
pop rbp
ret
mov rax, rbx
mov rbx, rcx
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0x160], r11
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xf8], rdi
mov rax, qword [rsp + 0x158]
mov ebx, 0xa
call fcn.005cf280
movups xmmword [rsp + 0x188], xmm15
movups xmmword [rsp + 0x198], xmm15
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x188], rcx
mov rcx, qword [rsp + 0x160]
mov qword [rsp + 0x190], rcx
lea rcx, [0x006bc300]
mov qword [rsp + 0x198], rcx
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x1a0], rcx
lea rax, [0x0071e48d]
mov ebx, 0x49
lea rcx, [rsp + 0x188]
mov edi, 2
mov rsi, rdi
call fcn.004ccb40
add rsp, 0x278
pop rbp
ret
mov rax, rcx
mov rbx, rdi
add rsp, 0x278
pop rbp
ret
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0x130], rcx
mov rax, qword [rsp + 0x158]
mov ebx, 0x50
call fcn.005cf280
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x130]
add rsp, 0x278
pop rbp
ret
add rsp, 0x278
pop rbp
ret
mov rax, rcx
mov rbx, rdi
add rsp, 0x278
pop rbp
ret
mov rax, qword [rsp + 0x158]
mov ebx, 0xa
call fcn.005cf280
movups xmmword [rsp + 0x188], xmm15
movups xmmword [rsp + 0x198], xmm15
mov rcx, qword [rsp + 0x160]
mov qword [rsp + 0x188], rcx
mov rcx, qword [rsp + 0x168]
mov qword [rsp + 0x190], rcx
lea rcx, [0x006bc100]
mov qword [rsp + 0x198], rcx
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x1a0], rcx
lea rax, [0x0071e48d]
mov ebx, 0x49
lea rcx, [rsp + 0x188]
mov edi, 2
mov rsi, rdi
call fcn.004ccb40
add rsp, 0x278
pop rbp
ret
mov rax, rcx
mov rbx, rdi
add rsp, 0x278
pop rbp
ret
xor eax, eax
mov rcx, rax
call fcn.00467760
xor eax, eax
mov rcx, rax
call fcn.00467760
xor eax, eax
mov rcx, rax
nop
call fcn.00467760
xor eax, eax
mov rcx, rax
call fcn.00467760
nop
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
nop
jmp fcn.005d71c0