Function at 0x5d2dc0
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x1f0]
cmp r12, qword [r14 + 0x10]
jbe 0x5d3799
push rbp
mov rbp, rsp
sub rsp, 0x268
mov qword [rsp + 0x280], rbx
mov qword [rsp + 0x288], rcx
movups xmmword [rsp + 0x1c8], xmm15
mov edx, dword [rax + 0x28]
nop dword [rax]
test edx, edx
jne 0x5d375e
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x288], rcx
mov qword [rsp + 0x280], rbx
mov rax, rbx
mov rbx, rcx
call fcn.00503b40
mov qword [rsp + 0x198], rcx
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x188], rbx
mov qword [rsp + 0x138], rcx
lea rax, [rsp + 0x120]
call fcn.00435d80
nop dword [rax + rax]
test eax, eax
jne 0x5d3740
mov rcx, qword [rsp + 0x278]
cmp qword [rcx + 0x20], 0
je 0x5d2f07
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rcx + 0x20]
mov rax, qword [rsp + 0x188]
call rdx
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rcx + 0x20]
test byte [rdx], al
cmp dword [0x009d9570], 0
je 0x5d2ebb
call fcn.004673c0
mov qword [r11], rax
mov rbx, qword [rdx + 0x1b8]
mov qword [r11 + 8], rbx
mov qword [rdx + 0x1b8], rax
mov rdx, qword [rcx + 0x20]
test byte [rdx], al
cmp dword [0x009d9570], 0
jne 0x5d2ee0
mov rbx, qword [rsp + 0x198]
jmp 0x5d2efb
call fcn.004673c0
mov rbx, qword [rsp + 0x198]
mov qword [r11], rbx
mov rsi, qword [rdx + 0x1c0]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x1c0], rbx
jmp 0x5d3066
mov rcx, qword [rsp + 0x280]
mov rcx, qword [rcx + 0x20]
mov rax, qword [rsp + 0x288]
call rcx
nop dword [rax]
test rax, rax
je 0x5d305e
lea rax, [0x006a69a0]
xor ebx, ebx
call fcn.004056e0
mov qword [rsp + 0x190], rax
mov ebx, 1
lea rax, [0x006a7020]
call fcn.004056e0
mov qword [rsp + 0x180], rax
movups xmmword [rsp + 0x1f8], xmm15
movups xmmword [rsp + 0x208], xmm15
lea rcx, [0x005d39a0]
mov qword [rsp + 0x1f8], rcx
mov rcx, qword [rsp + 0x190]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
lea rdx, [rsp + 0x1c8]
mov qword [rsp + 0x210], rdx
lea rdx, [rsp + 0x1f8]
mov qword [rsp + 0xf0], rdx
lea rax, [rsp + 0xd8]
call fcn.00435d80
nop
test eax, eax
jne 0x5d3720
lea rax, [0x006e4400]
call fcn.0040d7c0
lea rcx, [0x005d38a0]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1b8]
mov qword [rax + 8], rcx
cmp dword [0x009d9570], 0
jne 0x5d3015
mov rdx, qword [rsp + 0x188]
mov rbx, qword [rsp + 0x278]
mov rsi, qword [rsp + 0x180]
mov rdi, qword [rsp + 0x190]
jmp 0x5d3049
call fcn.00467400
mov rdx, qword [rsp + 0x188]
mov qword [r11], rdx
mov rbx, qword [rsp + 0x278]
mov qword [r11 + 8], rbx
mov rsi, qword [rsp + 0x180]
mov qword [r11 + 0x10], rsi
mov rdi, qword [rsp + 0x190]
mov qword [r11 + 0x18], rdi
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov qword [rax + 0x28], rdi
call fcn.00442800
mov rcx, qword [rsp + 0x278]
lea rdx, [rcx + 0x2c]
xor eax, eax
mov ebx, 1
lock cmpxchg dword [rcx + 0x2c], ebx
sete sil
test sil, sil
jne 0x5d3097
mov qword [rsp + 0x178], rdx
mov rax, rdx
call fcn.00472260
mov rdx, qword [rsp + 0x178]
movups xmmword [rsp + 0x1e8], xmm15
lea rcx, [0x005d3840]
mov qword [rsp + 0x1e8], rcx
mov qword [rsp + 0x1f0], rdx
lea rcx, [rsp + 0x1e8]
mov qword [rsp + 0xa8], rcx
lea rax, [rsp + 0x90]
call fcn.00435d80
test eax, eax
jne 0x5d3700
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rcx + 0x38]
test rdx, rdx
jne 0x5d36c8
mov edx, dword [rcx + 0x28]
test edx, edx
jne 0x5d36a1
lea rdx, [rcx + 0x178]
xor eax, eax
mov ebx, 1
lock cmpxchg dword [rcx + 0x178], ebx
sete sil
test sil, sil
jne 0x5d3133
mov qword [rsp + 0x170], rdx
mov rax, rdx
call fcn.00472260
mov rdx, qword [rsp + 0x170]
movups xmmword [rsp + 0x1d8], xmm15
lea rcx, [0x005d37e0]
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1e0], rdx
lea rcx, [rsp + 0x1d8]
mov qword [rsp + 0x60], rcx
lea rax, [rsp + 0x48]
call fcn.00435d80
test eax, eax
jne 0x5d3683
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rcx + 0x18]
mov rsi, qword [rdx]
mov rax, qword [rsp + 0x1b8]
mov rbx, qword [rsp + 0x188]
call rsi
mov rcx, qword [rsp + 0x278]
mov qword [rcx + 0x38], rax
cmp dword [0x009d9570], 0
je 0x5d31b8
call fcn.004673c0
mov qword [r11], rbx
mov rdx, qword [rcx + 0x40]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x40], rbx
cmp qword [rcx + 0x38], 0
jne 0x5d31c9
inc qword [rcx + 0x58]
jmp 0x5d31d9
mov rax, rcx
call fcn.005cf760
mov rcx, qword [rsp + 0x278]
cmp qword [rcx + 0x38], 0
nop
jne 0x5d323a
mov edx, dword [rcx + 0x28]
test edx, edx
jne 0x5d323a
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x37
lea rcx, [0x0071c546]
mov qword [rax], rcx
lea rcx, [0x00789ac0]
mov rdx, qword [rsp + 0x278]
mov qword [rdx + 0x38], rcx
cmp dword [0x009d9570], 0
je 0x5d3233
call fcn.004673c0
mov qword [r11], rax
mov r8, qword [rdx + 0x40]
mov qword [r11 + 8], r8
mov qword [rdx + 0x40], rax
mov rcx, rdx
cmp qword [rcx + 0x38], 0
nop
je 0x5d324d
mov edx, dword [rcx + 0x28]
test edx, edx
jne 0x5d3785
mov rdx, qword [rcx + 0x20]
test rdx, rdx
je 0x5d364d
cmp qword [rcx + 0x38], 0
nop
jne 0x5d34a6
mov r8, qword [rdx + 0x10]
mov rbx, qword [rdx + 8]
inc rbx
nop
mov rax, qword [rdx]
cmp r8, rbx
jae 0x5d32c5
mov qword [rsp + 0x1b0], rdx
mov rcx, r8
mov edi, 1
lea rsi, [0x006e0e60]
call fcn.0044bd00
mov rdx, qword [rsp + 0x1b0]
mov qword [rdx + 0x10], rcx
cmp dword [0x009d9570], 0
je 0x5d32ba
call fcn.004673c0
mov qword [r11], rax
mov r8, qword [rdx]
mov qword [r11 + 8], r8
mov qword [rdx], rax
mov rcx, qword [rsp + 0x278]
mov qword [rdx + 8], rbx
lea rdx, [rbx + rbx*2]
shl rdx, 4
lea rbx, [rax + rdx]
lea rbx, [rbx - 0x30]
cmp dword [0x009d9570], 0
je 0x5d331a
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x1a8], rax
lea rax, [0x006e0e60]
lea rcx, [0x0078bbe0]
nop dword [rax]
call fcn.004139c0
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rsp + 0x40]
mov qword [rdx + rax - 0x30], 7
mov qword [rdx + rax - 0x28], 0
lea rdx, [rax + rdx]
lea rdx, [rdx - 0x20]
movups xmmword [rdx], xmm15
movups xmmword [rdx + 0x10], xmm15
movzx edx, word [rcx + 0x62]
mov r8, qword [rcx + 0x1f8]
mov r9, qword [rcx + 0x200]
mov r10, qword [rcx + 0x208]
movups xmmword [rsp + 0x238], xmm15
movups xmmword [rsp + 0x248], xmm15
movups xmmword [rsp + 0x258], xmm15
mov qword [rsp + 0x238], 1
mov qword [rsp + 0x240], 3
mov word [rsp + 0x260], dx
mov qword [rsp + 0x248], r8
mov qword [rsp + 0x250], r9
mov qword [rsp + 0x258], r10
mov rdx, qword [rcx + 0x20]
mov r8, qword [rdx + 0x10]
mov rbx, qword [rdx + 8]
inc rbx
mov rax, qword [rdx]
nop dword [rax + rax]
cmp r8, rbx
jae 0x5d3414
mov qword [rsp + 0x1b0], rdx
mov rcx, r8
mov edi, 1
lea rsi, [0x006e0e60]
nop dword [rax]
call fcn.0044bd00
mov rdx, qword [rsp + 0x1b0]
mov qword [rdx + 0x10], rcx
cmp dword [0x009d9570], 0
je 0x5d3409
call fcn.004673c0
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rcx, qword [rsp + 0x278]
mov qword [rdx + 8], rbx
lea rdx, [rbx + rbx*2]
shl rdx, 4
lea rbx, [rax + rdx]
lea rbx, [rbx - 0x30]
cmp dword [0x009d9570], 0
je 0x5d3477
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1a0], rbx
lea rax, [0x006e0e60]
lea rcx, [rsp + 0x238]
call fcn.004139c0
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x1a0]
lea rdx, [rax + rdx]
lea rdx, [rdx - 0x20]
movups xmm0, xmmword [rsp + 0x238]
movups xmmword [rbx], xmm0
movups xmm0, xmmword [rsp + 0x248]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rsp + 0x258]
movups xmmword [rdx + 0x10], xmm0
jmp 0x5d361d
lea rax, [0x006b7f20]
call fcn.0040d7c0
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x278]
lea rdx, [rcx + 0x210]
mov qword [rsp + 0x168], rdx
mov rbx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rcx + 0x210], esi
sete sil
test sil, sil
jne 0x5d3504
mov rax, rdx
call fcn.00472260
mov rcx, qword [rsp + 0x278]
mov rbx, qword [rsp + 0x1c0]
mov rax, qword [rcx + 0x218]
mov rdx, qword [rcx + 0x220]
mov rdi, rbx
mov rbx, rdx
lea rcx, [0x006bbd80]
nop
call fcn.004707a0
test al, al
je 0x5d3533
mov rdx, qword [rsp + 0x1c0]
jmp 0x5d353e
mov rdx, qword [rsp + 0x1c0]
mov byte [rdx], 0x50
nop
mov ebx, 0xffffffff
mov r8, qword [rsp + 0x278]
lock xadd dword [r8 + 0x210], ebx
dec ebx
test ebx, ebx
je 0x5d3578
mov rax, qword [rsp + 0x168]
call fcn.00472540
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x278]
movzx edx, byte [rdx]
movups xmmword [rsp + 0x218], xmm15
movups xmmword [rsp + 0x228], xmm15
mov r9, qword [r8 + 0x38]
test r9, r9
je 0x5d359a
mov r9, qword [r9 + 8]
mov r10, qword [r8 + 0x40]
mov qword [rsp + 0x218], r9
mov qword [rsp + 0x220], r10
lea r9, [0x006af4c0]
mov qword [rsp + 0x228], r9
lea r9, [0x0092f8a0]
lea rdx, [r9 + rdx*8]
mov qword [rsp + 0x230], rdx
lea rax, [0x0070549a]
mov ebx, 6
lea rcx, [rsp + 0x218]
mov edi, 2
mov rsi, rdi
call fcn.004ccb40
mov rdx, qword [rsp + 0x278]
mov qword [rdx + 0x38], rax
cmp dword [0x009d9570], 0
je 0x5d3616
call fcn.004673c0
mov qword [r11], rbx
mov rcx, qword [rdx + 0x40]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x40], rbx
mov rcx, rdx
mov rdx, qword [rcx + 0x20]
mov rax, qword [rdx + 0x1b0]
call fcn.00406180
mov rcx, qword [rsp + 0x278]
mov rdx, qword [rcx + 0x20]
mov rax, qword [rdx + 0x1a8]
call fcn.00406180
mov rcx, qword [rsp + 0x278]
mov rax, qword [rcx + 0x38]
mov rcx, qword [rcx + 0x40]
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1d0], rcx
call fcn.00436380
mov rbx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c8]
add rsp, 0x268
pop rbp
ret
call fcn.00436380
mov rax, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x268
pop rbp
ret
movups xmmword [rsp + 0x1c8], xmm15
call fcn.00436380
mov rbx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c8]
add rsp, 0x268
pop rbp
ret
mov rax, qword [rcx + 0x40]
mov qword [rsp + 0x1c8], rdx
mov qword [rsp + 0x1d0], rax
nop dword [rax]
call fcn.00436380
mov rbx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c8]
add rsp, 0x268
pop rbp
ret
call fcn.00436380
mov rax, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x268
pop rbp
ret
call fcn.00436380
mov rax, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x268
pop rbp
ret
call fcn.00436380
mov rax, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x268
pop rbp
ret
movups xmmword [rsp + 0x1c8], xmm15
call fcn.00436380
mov rbx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c8]
add rsp, 0x268
pop rbp
ret
lea rax, [0x006a5b60]
lea rbx, [0x007891f0]
call fcn.00436ea0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
nop dword [rax]
jmp fcn.005d2dc0