Function at 0x42c860
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42cbcb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x58], rbx
mov rsi, qword [0x005c6f98]
test rsi, rsi
jne 0x42c912
mov byte [rsp + 0x78], r8b
nop
nop
lea rax, [0x0061c070]
call fcn.0040ae00
nop
mov rcx, qword [0x005c6f98]
test rcx, rcx
jne 0x42c8e0
mov eax, 0x15f8f8
lea rbx, [0x0061ea30]
call fcn.00416480
test rax, rax
je 0x42cbb9
nop
lea rdx, [0x005c6f98]
mov rcx, rax
xchg qword [rdx], rax
mov qword [rsp + 0x30], rcx
nop
nop
lea rax, [0x0061c070]
call fcn.0040b020
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x68]
movzx r8d, byte [rsp + 0x78]
mov rsi, qword [rsp + 0x30]
xor edx, edx
xor r9d, r9d
jmp 0x42c938
mov r10, qword [rcx + rdx*8]
inc rdx
add r10, r9
mov r11, r10
shl r10, 0xa
lea r9, [r11 + r10]
mov r10, r9
shr r9, 6
xor r9, r10
cmp rdi, rdx
jg 0x42c919
test byte [rsi], al
add r9, rbx
mov r10, r9
shl r9, 0xa
add r9, r10
mov r10, r9
shr r9, 6
xor r9, r10
lea r9, [r9 + r9*8]
mov r10, r9
shr r9, 0xb
xor r9, r10
mov rdx, rax
movabs rax, 0xba6a1fbc53191a92
mov r10, rdx
mul r9
shr rdx, 0x11
imul r11, rdx, 0x2bf1f
mov rax, r9
sub rax, r11
cmp rax, 0x2bf1f
jae 0x42cbaf
lea rsi, [rsi + rax*8]
mov r11, qword [rsi]
jmp 0x42c9a0
mov r11, qword [r11]
test r11, r11
je 0x42c9d6
cmp qword [r11 + 0x10], r10
jne 0x42c99d
cmp qword [r11 + 0x18], r9
jne 0x42c99d
cmp qword [r11 + 0x20], rbx
jne 0x42c99d
mov rdx, qword [r11 + 0x28]
nop dword [rax + rax]
cmp rdx, 0x20
ja 0x42cba5
cmp rdi, rdx
jne 0x42c99d
xor eax, eax
jmp 0x42cb80
test r8b, r8b
je 0x42ca16
mov qword [rsp + 0x18], r9
mov qword [rsp + 0x38], rsi
nop
nop
lea rax, [0x0061c070]
call fcn.0040ae00
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
mov r8, qword [rsp + 0x18]
mov r9, qword [rsp + 0x50]
jmp 0x42ca25
xor eax, eax
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rdx, qword [rdx]
test rdx, rdx
je 0x42ca56
cmp qword [rdx + 0x10], r9
jne 0x42ca22
cmp qword [rdx + 0x18], r8
jne 0x42ca22
cmp qword [rdx + 0x20], rdi
jne 0x42ca22
mov r10, qword [rdx + 0x28]
cmp r10, 0x20
ja 0x42cb6c
cmp rsi, r10
jne 0x42ca22
xor eax, eax
jmp 0x42cb2e
mov rax, r9
mov rbx, rsi
nop dword [rax]
call fcn.0042c700
nop
mov rdx, qword [rax + 0x28]
cmp rdx, 0x20
ja 0x42cb21
mov qword [rsp + 0x28], rax
mov rsi, qword [rsp + 0x68]
cmp rsi, rdx
cmovl rdx, rsi
lea rsi, [rax + 0x30]
mov rbx, qword [rsp + 0x60]
cmp rbx, rsi
je 0x42caaa
shl rdx, 3
mov rax, rsi
mov rcx, rdx
nop dword [rax]
call fcn.00462680
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x18]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0x50]
cmp rcx, 1
jne 0x42cad0
lea rcx, [0x005c6fc0]
jmp 0x42cae6
cmp rcx, 3
jne 0x42cadf
lea rcx, [0x005c7010]
jmp 0x42cae6
lea rcx, [0x005c6f90]
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rdx]
mov qword [rax], rbx
mov rbx, qword [rcx]
mov qword [rax + 8], rbx
nop
mov rbx, rax
xchg qword [rdx], rax
nop
xchg qword [rcx], rbx
nop
nop
lea rax, [0x0061c070]
call fcn.0040b020
mov rax, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
nop
ret
mov ebx, 0x20
call fcn.00461e00
inc rax
cmp rax, r10
jge 0x42cb4a
mov r11, qword [rdx + rax*8 + 0x30]
mov r12, qword [rbx + rax*8]
nop dword [rax]
cmp r12, r11
je 0x42cb2b
jmp 0x42ca22
mov qword [rsp + 0x20], rdx
nop
nop
lea rax, [0x0061c070]
call fcn.0040b020
mov rax, qword [rsp + 0x20]
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rdx, r10
mov ebx, 0x20
call fcn.00461e00
inc rax
nop dword [rax]
cmp rax, rdx
jge 0x42cb98
mov r12, qword [r11 + rax*8 + 0x30]
mov r13, qword [rcx + rax*8]
cmp r13, r12
je 0x42cb79
jmp 0x42c99d
mov rax, r11
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov ebx, 0x20
call fcn.00461e00
mov ecx, 0x2bf1f
call fcn.00461ce0
lea rax, [0x004fd58a]
mov ebx, 0x1f
call fcn.00435d80
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov byte [rsp + 0x30], r8b
call fcn.0045f600
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
movzx r8d, byte [rsp + 0x30]
jmp fcn.0042c860