Function at 0x431b40
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x800]
cmp r12, qword [r14 + 0x10]
jbe 0x431eb1
push rbp
mov rbp, rsp
sub rsp, 0x878
lea rdi, [rsp + 0x78]
mov ecx, 0x100
mov rdx, rax
xor eax, eax
rep stosq qword [rdi], rax
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov qword [rsp + 0x58], 0
mov rbx, qword [r14 + 0x30]
cmp qword [0x0091e580], 0xffffffffffffffff
nop dword [rax]
je 0x431d12
test rdx, rdx
jge 0x431bb5
mov rcx, rdx
mov edx, 0xffffffff
jmp 0x431c03
jne 0x431bc0
mov rcx, rdx
xor edx, edx
jmp 0x431c03
cmp rdx, 0xf4240
jge 0x431bd3
mov rcx, rdx
mov edx, 1
jmp 0x431c03
movabs rcx, 0x38d7ea4c68000
nop dword [rax]
cmp rdx, rcx
jge 0x431bfb
movabs rax, 0x431bde82d7b634db
mov rcx, rdx
imul rdx
sar rdx, 0x12
jmp 0x431c03
mov rcx, rdx
mov edx, 0x3b9aca00
movsxd rsi, dword [0x009d9160]
test rsi, rsi
je 0x431eab
mov eax, 0x40
mov edi, edx
nop word [rax + rax]
cmp rsi, 0xffffffffffffffff
jne 0x431c2d
neg rax
xor edx, edx
jmp 0x431c32
cqo
idiv rsi
mov dword [rsp + 0x48], eax
cmp eax, 8
jae 0x431c48
mov dword [rsp + 0x48], 8
test rcx, rcx
jmp 0x431c4b
test rcx, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x70], rbx
je 0x431c5e
mov byte [rbx + 0xe5], 1
mov rax, qword [0x0091e580]
mov rcx, qword [sym.imp.kernel32.dll_GetQueuedCompletionStatusEx]
lea rdx, [rsp + 0x78]
mov ebx, dword [rsp + 0x48]
lea rsi, [rsp + 0x48]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov eax, edi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 0
call fcn.004349e0
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x38], 0
nop
je 0x431cda
mov rdx, qword [rsp + 0x70]
mov byte [rdx + 0xe5], 0
mov rdx, qword [rsp + 0x60]
xor eax, eax
jmp 0x431d6f
mov rax, qword [rsp + 0x70]
mov byte [rax + 0xe5], 0
call fcn.00468c00
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
cmp eax, 0x102
jne 0x431d1d
xor eax, eax
add rsp, 0x878
pop rbp
ret
xor eax, eax
add rsp, 0x878
pop rbp
ret
mov dword [rsp + 0x54], eax
call fcn.00438fc0
lea rax, [0x0071bbdf]
mov ebx, 0x34
call fcn.00439840
mov eax, dword [rsp + 0x54]
movsxd rax, eax
nop
call fcn.00439660
lea rax, [0x0070463d]
mov ebx, 3
call fcn.00439840
call fcn.00439020
lea rax, [0x0070ecf5]
mov ebx, 0x17
call fcn.00437620
lea eax, [rbx + 1]
cmp dword [rsp + 0x48], eax
jbe 0x431e93
nop dword [rax]
cmp rax, 0x40
jae 0x431ea1
mov dword [rsp + 0x4c], eax
mov ebx, eax
shl rax, 5
mov rsi, qword [rsp + rax + 0x80]
nop dword [rax]
test rsi, rsi
je 0x431e66
mov rdi, qword [rsi + 0x20]
mov r8, qword [rsp + rax + 0x78]
cmp r8, rdi
je 0x431dbf
test rdx, rdx
jmp 0x431e69
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x44], 0
mov rax, qword [0x00983c08]
mov rcx, qword [rsi + 0x20]
mov rcx, qword [rcx + 8]
lea rbx, [rsp + 0x44]
lea rdi, [rsp + 0x50]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], rdi
call fcn.00434960
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x30], 0
je 0x431e29
xor eax, eax
jmp 0x431e43
call fcn.00468c00
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov edi, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x68]
mov ecx, eax
lea rax, [rsp + 0x58]
call fcn.00431ee0
mov rdx, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x4c]
jmp 0x431d6c
test rdx, rdx
nop
mov esi, 0
lea rdi, [0x009d9138]
xchg dword [rdi], esi
jne 0x431d6c
nop
call fcn.00431a40
mov rdx, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x4c]
jmp 0x431d6c
mov rax, qword [rsp + 0x58]
add rsp, 0x878
pop rbp
ret
mov ecx, 0x40
call fcn.00467760
call fcn.00435ba0
nop
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
jmp fcn.00431b40