Function at 0x5dad00
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0xb0]
cmp r12, qword [r14 + 0x10]
jbe 0x5dba2d
push rbp
mov rbp, rsp
sub rsp, 0x128
mov qword [rsp + 0x138], rax
mov rdx, qword [rax + 0x80]
mov rsi, qword [rax + 0x88]
mov rdx, qword [rdx + 0x30]
mov r8, qword [rax]
mov qword [rsp + 0xc8], r8
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov rax, rsi
call rdx
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rcx
mov rdx, qword [rsp + 0x138]
mov rsi, qword [rdx + 0x80]
mov r8, qword [rdx + 0x88]
mov rsi, qword [rsi + 0x20]
mov rax, r8
call rsi
lea rax, [0x006a8d80]
call fcn.0040d7c0
mov byte [rax], 0xfe
mov word [rax + 1], 0
mov rdx, qword [rsp + 0x70]
mov byte [rax + 3], dl
mov rsi, qword [rsp + 0x138]
mov r8, qword [rsi + 0x80]
mov r9, qword [rsi + 0x88]
mov r8, qword [r8 + 0x38]
mov rbx, rax
mov ecx, 4
mov rdi, rcx
mov rax, r9
call r8
mov rdx, qword [rsp + 0x138]
mov rsi, qword [rdx + 0x80]
mov rax, qword [rdx + 0x88]
mov rsi, qword [rsi + 0x38]
mov rbx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
call rsi
mov rdx, qword [rsp + 0x138]
mov rsi, qword [rdx + 0x18]
mov qword [rsp + 0x100], rsi
mov rbx, qword [rdx + 0x80]
mov r8, qword [rdx + 0x88]
mov qword [rsp + 0xf8], r8
lea rax, [0x006bbd00]
call fcn.0040b0e0
mov rbx, qword [rsp + 0x100]
mov rcx, rax
mov rdi, qword [rsp + 0xf8]
lea rax, [0x0078b4c0]
call fcn.005f3900
test rax, rax
jne 0x5daf8a
mov r8, qword [rsp + 0x138]
mov r9, qword [r8 + 0x18]
cmp word [r9 + 0x100], 0
jne 0x5daeb7
cmp qword [r9 + 0xe8], 0
jne 0x5daeb7
mov rax, qword [rsp + 0xc8]
mov ebx, 0x2f
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x39
lea rcx, [0x0071cb2e]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x128
pop rbp
ret
mov r10, qword [r9 + 0xe8]
nop
test r10, r10
je 0x5daf0c
mov r11, qword [r9 + 0xf0]
mov r9, qword [r9 + 0xf8]
mov r12, qword [r8 + 0x20]
mov qword [r12 + 0x180], r11
mov qword [r12 + 0x188], r9
cmp dword [0x009d9570], 0
je 0x5daf04
call fcn.004673c0
mov qword [r11], r10
mov r9, qword [r12 + 0x178]
mov qword [r11 + 8], r9
mov qword [r12 + 0x178], r10
mov r9, qword [r8 + 0x18]
cmp word [r9 + 0xa8], 0
jne 0x5daf45
movzx ecx, word [r9 + 0x100]
test cx, cx
je 0x5daf93
mov rdx, qword [r8 + 0x20]
mov rsi, qword [rdx + 0x98]
mov rdx, qword [rdx + 0xa0]
xor eax, eax
nop dword [rax]
jmp 0x5db5ef
mov rax, qword [rsp + 0xc8]
mov ebx, 0x32
call fcn.005cf280
lea rax, [0x006c0560]
nop
call fcn.0040d7c0
mov qword [rax + 8], 0x2b
lea rcx, [0x007192ca]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x128
pop rbp
ret
add rsp, 0x128
pop rbp
ret
mov r9, qword [r8 + 0x20]
movups xmmword [r9 + 8], xmm15
cmp dword [0x009d9570], 0
je 0x5dafb0
mov r10, qword [r9]
call fcn.004673a0
mov qword [r11], r10
mov qword [r9], 0
mov r9, qword [r8 + 0x20]
cmp qword [r9 + 0x1d0], 0
je 0x5dafe5
mov r10, qword [r8 + 0x30]
movzx r10d, word [r10 + 0x1e]
mov r11, qword [0x0096d580]
mov r12, qword [0x0096d588]
xor eax, eax
nop
jmp 0x5db2a9
mov rdx, qword [r8 + 0x20]
cmp byte [rdx + 0x1a8], 0
je 0x5db0f3
mov byte [rdx + 0x1a8], 0
mov rdx, qword [rsp + 0xc8]
mov r9, qword [rdx + 0x20]
mov rcx, qword [r9 + 0x10]
mov rbx, qword [r9 + 8]
inc rbx
nop
mov rax, qword [r9]
cmp rcx, rbx
jae 0x5db070
mov qword [rsp + 0xf0], r9
mov edi, 1
lea rsi, [0x006e0e60]
call fcn.0044bd00
mov rdx, qword [rsp + 0xf0]
mov qword [rdx + 0x10], rcx
cmp dword [0x009d9570], 0
je 0x5db05a
call fcn.004673c0
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov r8, qword [rsp + 0x138]
mov r9, rdx
mov rdx, qword [rsp + 0xc8]
mov qword [r9 + 8], rbx
lea rsi, [rbx + rbx*2]
shl rsi, 4
lea rbx, [rsi + rax]
lea rbx, [rbx - 0x30]
cmp dword [0x009d9570], 0
je 0x5db0d0
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0xe8], rax
lea rax, [0x006e0e60]
lea rcx, [0x0078bc10]
call fcn.004139c0
mov rax, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0x88]
mov r8, qword [rsp + 0x138]
mov qword [rsi + rax - 0x30], 6
mov qword [rsi + rax - 0x28], 0
lea rcx, [rsi + rax]
lea rcx, [rcx - 0x20]
movups xmmword [rcx], xmm15
movups xmmword [rcx + 0x10], xmm15
mov rcx, qword [r8]
mov qword [rsp + 0xe0], rcx
mov rdx, qword [r8 + 0x20]
mov qword [rsp + 0xd8], rdx
mov rbx, qword [r8 + 0x80]
mov rsi, qword [r8 + 0x88]
mov qword [rsp + 0xf8], rsi
lea rax, [0x006bbd00]
call fcn.0040b0e0
lea rbx, [0x0078b498]
mov rcx, qword [rsp + 0xd8]
mov rdi, rax
mov rsi, qword [rsp + 0xf8]
mov rax, qword [rsp + 0xe0]
call fcn.005d02e0
test rbx, rbx
jne 0x5db297
mov rax, qword [rsp + 0xc8]
xor ebx, ebx
xor ecx, ecx
call fcn.005d0760
test rcx, rcx
jne 0x5db288
lea rcx, [0x006bbc80]
nop dword [rax]
cmp rax, rcx
jne 0x5db18a
mov rdx, rbx
jmp 0x5db192
mov rdx, rbx
mov ebx, 0
jne 0x5db1e3
cmp dword [0x009d9570], 0
jne 0x5db1a7
mov rax, qword [rsp + 0x138]
jmp 0x5db1bf
call fcn.004673c0
mov qword [r11], rbx
mov rax, qword [rsp + 0x138]
mov rcx, qword [rax + 0x18]
mov qword [r11 + 8], rcx
mov qword [rax + 0x18], rbx
call fcn.005da960
test rax, rax
je 0x5db1d6
add rsp, 0x128
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x128
pop rbp
ret
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0x100], rdx
mov rax, qword [rsp + 0xc8]
mov ebx, 0xa
call fcn.005cf280
movups xmmword [rsp + 0x108], xmm15
movups xmmword [rsp + 0x118], xmm15
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x108], rcx
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x110], rcx
lea rcx, [0x006bbc80]
mov qword [rsp + 0x118], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x120], rcx
lea rax, [0x0071e48d]
mov ebx, 0x49
lea rcx, [rsp + 0x108]
mov edi, 2
mov rsi, rdi
call fcn.004ccb40
add rsp, 0x128
pop rbp
ret
mov rax, rcx
mov rbx, rdi
add rsp, 0x128
pop rbp
ret
mov rax, rbx
mov rbx, rcx
add rsp, 0x128
pop rbp
ret
inc rax
cmp rax, r12
jge 0x5db2bb
mov r13, qword [r11 + rax*8]
cmp word [r13], r10w
jne 0x5db2a6
jmp 0x5db2c0
xor r13d, r13d
nop
test r13, r13
je 0x5db5c7
mov r10, qword [r13 + 0x18]
mov r11, qword [r8 + 0x78]
cmp qword [r11 + 0x18], r10
jne 0x5db568
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx + 0x10]
test rcx, rcx
jne 0x5db2f7
lea rcx, fcn.004ba360
mov rax, qword [rcx]
mov rdx, rcx
call rax
mov rsi, qword [rsp + 0x138]
mov rdi, qword [rsi + 0x30]
movabs r8, 0xe7791f700
add r8, qword [rdi + 0x20]
mov rdi, qword [0x0096af00]
nop
mov rdx, rdi
xor edi, edi
mov rsi, r8
mov r8, rdx
call fcn.004b9ca0
mov rcx, qword [rsp + 0x138]
mov rbx, qword [rcx + 0x20]
mov rdx, rax
movabs rax, 0x431bde82d7b634db
mov rsi, rdx
imul rdx
sar rdx, 0x12
sar rsi, 0x3f
sub rdx, rsi
mov rax, qword [rcx + 0x30]
add edx, dword [rax + 0xd8]
cmp qword [rbx + 0x1d0], 0
jbe 0x5db5e2
mov rbx, qword [rbx + 0x1c8]
mov dword [rbx + 0x18], edx
mov rdx, qword [rcx + 0x78]
mov rax, qword [rdx + 0x18]
call fcn.00545980
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xa0], rbx
lea rax, [0x006a8d80]
nop
call fcn.0040d7c0
mov byte [rax], 0xfe
mov word [rax + 1], 0
mov rcx, qword [rsp + 0x70]
mov byte [rax + 3], cl
mov rdx, qword [rsp + 0x60]
mov rbx, qword [rdx + 0x38]
mov edi, 4
mov rsi, rax
mov rax, qword [rsp + 0xa0]
mov r8, rbx
mov rbx, rsi
mov rcx, rdi
call r8
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rcx + 0x38]
mov rax, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
nop
call rdx
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rcx + 0x18]
mov qword [rsp + 0x100], rdx
lea rax, [0x006bbd00]
mov rbx, qword [rsp + 0x60]
call fcn.0040b0e0
mov rbx, qword [rsp + 0x100]
mov rcx, rax
mov rdi, qword [rsp + 0xa0]
lea rax, [0x0078b4c0]
call fcn.005f3900
test rax, rax
jne 0x5db55f
mov rcx, qword [rsp + 0x138]
mov rax, qword [rcx + 0x20]
nop dword [rax + rax]
call fcn.005e4840
test rdi, rdi
jne 0x5db550
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rdx + 0x38]
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0xa0]
call rsi
mov rdx, qword [rsp + 0x138]
mov rax, qword [rdx + 0x78]
mov rbx, qword [rdx + 0x50]
mov rcx, qword [rdx + 0x58]
mov rdi, qword [rdx + 0x60]
mov rsi, qword [rsp + 0x60]
mov r8, qword [rsp + 0xa0]
call fcn.005f5b40
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0xd0], rax
lea rax, [0x006acaa0]
call fcn.0040d7c0
mov rdx, qword [rsp + 0x88]
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x10], rdx
cmp dword [0x009d9570], 0
jne 0x5db503
mov rdx, qword [rsp + 0xd0]
jmp 0x5db513
call fcn.004673a0
mov rdx, qword [rsp + 0xd0]
mov qword [r11], rdx
mov qword [rax], rdx
mov rdx, qword [rsp + 0x138]
mov rsi, qword [rdx + 0x20]
mov rbx, rax
mov ecx, 1
mov rdi, rcx
mov rax, rsi
call fcn.005e48e0
test rax, rax
jne 0x5db547
mov r8, qword [rsp + 0x138]
jmp 0x5dafe5
add rsp, 0x128
pop rbp
ret
mov rax, rdi
mov rbx, rsi
add rsp, 0x128
pop rbp
ret
add rsp, 0x128
pop rbp
ret
movups xmmword [r9 + 0x1d0], xmm15
cmp dword [0x009d9570], 0
je 0x5db588
mov rdx, qword [r9 + 0x1c8]
call fcn.004673a0
mov qword [r11], rdx
mov qword [r9 + 0x1c8], 0
mov rdx, qword [r8 + 0x20]
movups xmmword [rdx + 0x1e8], xmm15
cmp dword [0x009d9570], 0
je 0x5db5b7
mov r9, qword [rdx + 0x1e0]
call fcn.004673a0
mov qword [r11], r9
mov qword [rdx + 0x1e0], 0
jmp 0x5dafe5
mov rax, qword [rsp + 0xc8]
mov ebx, 0x50
call fcn.005cf280
add rsp, 0x128
pop rbp
ret
xor eax, eax
mov rcx, rax
call fcn.00467760
inc rax
cmp rax, rdx
jge 0x5db9ea
movzx edi, word [rsi + rax*2]
nop dword [rax]
cmp di, cx
jne 0x5db5ec
mov word [rsp + 0x46], cx
mov rdx, qword [r8 + 0x28]
mov rax, qword [rdx]
mov qword [rsp + 0x50], rax
mov rbx, qword [rdx + 8]
mov qword [rsp + 0x98], rbx
lea rdx, [0x0078c340]
cmp rax, rdx
jne 0x5db66f
mov rcx, qword [0x0096ba98]
call fcn.00404a60
test al, al
je 0x5db655
movzx ecx, word [rsp + 0x46]
mov r8, qword [rsp + 0x138]
mov eax, 0x1d
jmp 0x5db74c
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x46]
mov rbx, qword [rsp + 0x98]
mov r8, qword [rsp + 0x138]
lea rdx, [0x0078c380]
cmp rax, rdx
jne 0x5db6bf
mov rcx, qword [0x0096ba80]
call fcn.00404a60
test al, al
je 0x5db6a5
movzx ecx, word [rsp + 0x46]
mov r8, qword [rsp + 0x138]
mov eax, 0x17
nop dword [rax]
jmp 0x5db74c
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x46]
mov rbx, qword [rsp + 0x98]
mov r8, qword [rsp + 0x138]
lea rdx, [0x0078c3c0]
cmp rax, rdx
jne 0x5db709
mov rcx, qword [0x0096ba88]
call fcn.00404a60
test al, al
je 0x5db6ef
movzx ecx, word [rsp + 0x46]
mov r8, qword [rsp + 0x138]
mov eax, 0x18
jmp 0x5db74c
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x46]
mov rbx, qword [rsp + 0x98]
mov r8, qword [rsp + 0x138]
lea rdx, [0x0078c400]
cmp rax, rdx
jne 0x5db74a
mov rcx, qword [0x0096ba90]
nop dword [rax]
call fcn.00404a60
test al, al
je 0x5db73d
movzx ecx, word [rsp + 0x46]
mov r8, qword [rsp + 0x138]
mov eax, 0x19
jmp 0x5db74c
movzx ecx, word [rsp + 0x46]
mov r8, qword [rsp + 0x138]
xor eax, eax
cmp ax, cx
je 0x5db9a2
nop
cmp cx, 0x18
ja 0x5db771
nop dword [rax]
cmp cx, 0x17
je 0x5db78a
cmp cx, 0x18
je 0x5db78a
jmp 0x5db95f
cmp cx, 0x19
je 0x5db78a
nop word [rax + rax]
cmp cx, 0x1d
jne 0x5db95f
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rdx + 0x50]
mov rdi, qword [rsi]
test rdi, rdi
je 0x5db7a4
mov rsi, qword [rsi + 8]
jmp 0x5db7b2
mov rdi, qword [0x009841e0]
mov rsi, qword [0x009841e8]
mov rax, rdi
mov rbx, rsi
call fcn.005f5f80
nop dword [rax]
test rbx, rbx
jne 0x5db92a
cmp dword [0x009d9570], 0
jne 0x5db7e0
mov rcx, qword [rsp + 0x138]
jmp 0x5db7f8
call fcn.004673c0
mov qword [r11], rax
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rcx + 0x28]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x28], rax
nop dword [rax]
call fcn.0056e380
mov qword [rsp + 0xb0], rax
lea rax, [0x006aca40]
call fcn.0040d7c0
mov rcx, qword [rsp + 0xb0]
mov rdi, qword [rcx + 0x18]
mov rbx, qword [rcx + 0x10]
cmp rdi, 0x85
ja 0x5db83c
mov rcx, rdi
mov edx, 0x85
jmp 0x5db87b
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0xd0], rbx
mov rbx, rdi
mov ecx, 0x85
lea rsi, [0x006a5ea0]
nop dword [rax + rax]
call fcn.0044bd00
mov rdx, rcx
mov rdi, rbx
mov rcx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xd0]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x48], rdi
call fcn.00468160
lea rax, [0x006acb60]
call fcn.0040d7c0
movzx edx, word [rsp + 0x46]
mov word [rax], dx
mov rdx, qword [rsp + 0x48]
mov qword [rax + 0x10], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rax + 0x18], rdx
cmp dword [0x009d9570], 0
nop
jne 0x5db8cc
mov r8, qword [rsp + 0x90]
jmp 0x5db8dc
call fcn.004673a0
mov r8, qword [rsp + 0x90]
mov qword [r11], r8
mov qword [rax + 8], r8
mov r8, qword [rsp + 0x138]
mov r9, qword [r8 + 0x20]
mov qword [r9 + 0x198], 1
mov qword [r9 + 0x1a0], 1
cmp dword [0x009d9570], 0
je 0x5db91e
call fcn.004673c0
mov qword [r11], rax
mov r10, qword [r9 + 0x190]
mov qword [r11 + 8], r10
mov qword [r9 + 0x190], rax
jmp 0x5daf93
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0xb8], rcx
mov rax, qword [rsp + 0xc8]
mov ebx, 0x50
call fcn.005cf280
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x128
pop rbp
ret
mov rax, qword [rsp + 0xc8]
mov ebx, 0x50
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x30
lea rcx, [0x0071abee]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x128
pop rbp
ret
mov rax, qword [rsp + 0xc8]
mov ebx, 0x2f
call fcn.005cf280
lea rax, [0x006c0560]
nop dword [rax + rax]
call fcn.0040d7c0
mov qword [rax + 8], 0x3b
lea rcx, [0x0071cf0d]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x128
pop rbp
ret
mov rax, qword [rsp + 0xc8]
mov ebx, 0x2f
call fcn.005cf280
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x26
lea rcx, [0x00717081]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00789ac0]
add rsp, 0x128
pop rbp
ret
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
nop dword [rax]
jmp fcn.005dad00