Function at 0x59e100
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e63e
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
xor edx, edx
jmp 0x59e120
inc rdx
nop
cmp rbx, rdx
jle 0x59e169
movzx esi, byte [rax + rdx]
cmp sil, 0x20
jb 0x59e135
cmp sil, 0x7f
jne 0x59e11b
lea rax, [0x006c0560]
nop dword [rax]
call fcn.0040d7c0
mov qword [rax + 8], 0x29
lea rcx, [0x0071880b]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x48
pop rbp
ret
mov byte [rsp + 0x68], cl
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
test rbx, rbx
jne 0x59e1b4
nop dword [rax]
test cl, cl
je 0x59e1b4
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 9
lea rcx, [0x00706fe2]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x48
pop rbp
ret
lea rax, [0x006f32a0]
nop dword [rax + rax]
call fcn.0040d7c0
mov qword [rsp + 0x30], rax
mov rbx, qword [rsp + 0x60]
cmp rbx, 1
jne 0x59e1fc
mov rdx, qword [rsp + 0x58]
cmp byte [rdx], 0x2a
jne 0x59e201
mov qword [rax + 0x40], 1
lea rdx, [0x00786640]
mov qword [rax + 0x38], rdx
xor ebx, ebx
xor ecx, ecx
add rsp, 0x48
pop rbp
ret
mov rdx, qword [rsp + 0x58]
mov rax, rdx
call fcn.0059dde0
mov rdx, qword [rsp + 0x30]
mov qword [rdx + 8], rbx
cmp dword [0x009d9570], 0
je 0x59e22f
nop dword [rax + rax]
call fcn.004673c0
mov qword [r11], rax
mov r9, qword [rdx]
mov qword [r11 + 8], r9
mov qword [rdx], rax
test rsi, rsi
jne 0x59e60b
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x20], rdi
call fcn.00481320
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 8], rbx
cmp dword [0x009d9570], 0
je 0x59e26f
nop dword [rax]
call fcn.004673c0
mov qword [r11], rax
mov rsi, qword [rcx]
mov qword [r11 + 8], rsi
mov qword [rcx], rax
mov rbx, qword [rsp + 0x20]
test rbx, rbx
jne 0x59e282
xor edx, edx
nop
jmp 0x59e2e3
mov rdx, qword [rsp + 0x38]
lea rax, [rbx + rdx]
lea rax, [rax - 1]
mov ecx, 1
lea rbx, [0x00786918]
nop dword [rax + rax]
call fcn.00403960
test al, al
jne 0x59e2b7
mov rcx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
xor edx, edx
jmp 0x59e2e3
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x20]
lea rcx, [0x00786918]
mov edi, 1
call fcn.0047fd20
cmp rax, 1
sete dl
mov rcx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
test dl, dl
je 0x59e305
mov byte [rcx + 0x59], 1
lea rsi, [rbx - 1]
cmp rbx, rsi
jb 0x59e632
mov rdx, rcx
mov rbx, rsi
mov rax, qword [rsp + 0x38]
jmp 0x59e341
mov rax, qword [rsp + 0x38]
lea rcx, [0x00786918]
mov edi, 1
call fcn.00482de0
mov rdx, qword [rsp + 0x30]
mov qword [rdx + 0x68], rdi
cmp dword [0x009d9570], 0
je 0x59e33d
call fcn.004673c0
mov qword [r11], rcx
mov rsi, qword [rdx + 0x60]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x60], rcx
test rbx, rbx
je 0x59e34f
cmp byte [rax], 0x2f
sete sil
jmp 0x59e351
xor esi, esi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x38], rax
nop dword [rax + rax]
test sil, sil
jne 0x59e3e3
cmp qword [rdx + 8], 0
je 0x59e39a
mov qword [rdx + 0x18], rbx
cmp dword [0x009d9570], 0
je 0x59e389
call fcn.004673c0
mov qword [r11], rax
mov rsi, qword [rdx + 0x10]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x10], rax
mov rax, rdx
xor ebx, ebx
xor ecx, ecx
add rsp, 0x48
pop rbp
ret
movzx esi, byte [rsp + 0x68]
nop
test sil, sil
jne 0x59e5db
lea rcx, str._S_LMCP_sGGAUCVMDNTSCSHTC:_01_:i______x_r_n_____h280_:_vOK._d:_rwro000s__________n__s____Pn___n__n___n__t__LlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYi__25__tTo__iv__ip53A4V1V6V2V3V5A3E:__idD_sSwW__n0b0x0X0oid
mov edi, 1
call fcn.00482de0
lea rcx, [0x007865f0]
mov edi, 1
call fcn.00482760
test rax, rax
jge 0x59e5ab
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
cmp qword [rdx + 8], 0
je 0x59e3f1
mov ecx, 1
jmp 0x59e42f
movzx esi, byte [rsp + 0x68]
test sil, sil
je 0x59e3ff
xor ecx, ecx
jmp 0x59e42f
nop
cmp rbx, 3
jge 0x59e40a
xor ecx, ecx
jmp 0x59e42c
lea rbx, [0x00704688]
mov ecx, 3
call fcn.00403960
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
mov ecx, eax
mov rax, qword [rsp + 0x38]
xor ecx, 1
test cl, cl
je 0x59e448
cmp rbx, 2
jl 0x59e444
cmp word [rax], 0x2f2f
sete sil
jmp 0x59e44a
xor esi, esi
jmp 0x59e44a
xor esi, esi
test sil, sil
je 0x59e559
cmp rbx, 2
jb 0x59e625
lea rdx, [rbx - 2]
mov qword [rsp + 0x28], rdx
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and edx, 2
add rax, rdx
mov qword [rsp + 0x40], rax
lea rcx, str._S_LMCP_sGGAUCVMDNTSCSHTC:_01_:i______x_r_n_____h280_:_vOK._d:_rwro000s__________n__s____Pn___n__n___n__t__LlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYi__25__tTo__iv__ip53A4V1V6V2V3V5A3E:__idD_sSwW__n0b0x0X0oid
mov edi, 1
mov rbx, rsi
call fcn.00482760
test rax, rax
jl 0x59e4cc
mov rdx, qword [rsp + 0x28]
nop dword [rax]
cmp rax, rdx
ja 0x59e619
mov rcx, qword [rsp + 0x20]
sub rcx, rax
add rcx, 0xfffffffffffffffe
mov rsi, rcx
neg rcx
sar rcx, 0x3f
and rcx, rax
mov rdi, qword [rsp + 0x40]
add rcx, rdi
jmp 0x59e4da
mov rdi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x28]
xor esi, esi
xor ecx, ecx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x38], rcx
mov rbx, rax
mov rax, rdi
call fcn.0059e680
cmp dword [0x009d9570], 0
jne 0x59e500
mov rdx, qword [rsp + 0x30]
jmp 0x59e515
call fcn.004673c0
mov qword [r11], rax
mov rdx, qword [rsp + 0x30]
mov r8, qword [rdx + 0x20]
mov qword [r11 + 8], r8
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x30], rcx
cmp dword [0x009d9570], 0
je 0x59e536
call fcn.004673c0
mov qword [r11], rbx
mov r8, qword [rdx + 0x28]
mov qword [r11 + 8], r8
mov qword [rdx + 0x28], rbx
test rdi, rdi
jne 0x59e54b
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x38]
jmp 0x59e57b
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x48
pop rbp
ret
cmp qword [rdx + 8], 0
nop
je 0x59e57b
test rbx, rbx
je 0x59e570
cmp byte [rax], 0x2f
sete sil
jmp 0x59e572
xor esi, esi
test sil, sil
je 0x59e57b
mov byte [rdx + 0x58], 1
mov rcx, rbx
mov rbx, rax
mov rax, rdx
call fcn.0059efa0
test rax, rax
je 0x59e59c
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x48
pop rbp
ret
mov rax, qword [rsp + 0x30]
xor ebx, ebx
xor ecx, ecx
add rsp, 0x48
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x2e
lea rcx, [0x0071a2eb]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x48
pop rbp
ret
lea rax, [0x006c0560]
call fcn.0040d7c0
mov qword [rax + 8], 0x17
lea rcx, [0x0070efbe]
mov qword [rax], rcx
lea rbx, [0x00789ac0]
mov rcx, rax
xor eax, eax
add rsp, 0x48
pop rbp
ret
xor eax, eax
mov rbx, rsi
mov rcx, r8
add rsp, 0x48
pop rbp
ret
mov rcx, rax
nop dword [rax]
call fcn.004677a0
mov eax, 2
mov rcx, rbx
call fcn.00467820
mov rcx, rsi
mov rdx, rbx
call fcn.004677a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.0059e100