Function at 0x438a00
Capabilities:
Run powershell expression

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rsi, qword [r14 + 0x30]
nop
inc dword [rsi + 0xd8]
mov rsi, qword [r14 + 0x30]
mov r8, qword [rsi + 0xa0]
mov r9, r14
test byte [r9], al
cmp qword [r8 + 0x9b8], 0
jne 0x438a65
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x58], r8
nop
lea rax, [0x005c8ad8]
call fcn.0040ae00
mov rcx, qword [rsp + 0x58]
lea rdx, [rcx + 0x9b0]
mov qword [rsp + 0x50], rdx
nop dword [rax]
jmp 0x438b28
mov rax, qword [r8 + 0x9b8]
mov r9, qword [r8 + 0x9b0]
lea rcx, [rax - 1]
nop word [rax + rax]
cmp rax, rcx
jbe 0x438b1a
mov r10, qword [r9 + rax*8 - 8]
lea rdi, [r9 + rax*8]
lea rdi, [rdi - 8]
cmp dword [0x0061c170], 0
jne 0x438aaa
mov qword [r9 + rax*8 - 8], 0
jmp 0x438ab2
xor r9d, r9d
call fcn.004619e0
mov rdx, qword [r8 + 0x9c0]
cmp rdx, rcx
jb 0x438b15
mov qword [r8 + 0x9b8], rcx
cmp qword [r10 + 0x18], 0
jne 0x438b04
nop
mov ecx, dword [rsi + 0xd8]
lea edx, [rcx - 1]
mov dword [rsi + 0xd8], edx
nop dword [rax]
cmp ecx, 1
jne 0x438af7
cmp byte [r14 + 0xb1], 0
je 0x438af7
mov qword [r14 + 0x10], 0xfffffffffffffade
mov rax, r10
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
lea rax, [0x004ff7ad]
mov ebx, 0x2a
call fcn.00435d80
call fcn.00461d60
mov rdx, rax
mov rax, rcx
mov rcx, rdx
call fcn.00461ce0
mov r8, qword [rcx + 0x9c0]
shr r8, 1
cmp qword [rcx + 0x9b8], r8
jge 0x438c2a
mov r8, qword [0x005c8ae0]
test r8, r8
je 0x438c2a
mov r9, qword [r8 + 8]
cmp dword [0x0061c170], 0
jne 0x438b6d
mov qword [0x005c8ae0], r9
mov qword [r8 + 8], 0
jmp 0x438b85
lea rdi, [0x005c8ae0]
call fcn.004619e0
lea rdi, [r8 + 8]
xor r9d, r9d
call fcn.004619e0
mov rsi, qword [rcx + 0x9b8]
lea r9, [rsi + 1]
mov rbx, qword [rcx + 0x9b0]
mov rdi, qword [rcx + 0x9c0]
nop
cmp rdi, r9
jae 0x438bfa
mov qword [rsp + 0x48], r8
lea rax, [0x004d8b20]
mov rcx, rsi
mov rsi, r9
call fcn.00449800
mov rdx, qword [rsp + 0x58]
mov qword [rdx + 0x9c0], rcx
cmp dword [0x0061c170], 0
jne 0x438bdf
mov qword [rdx + 0x9b0], rax
mov rdi, qword [rsp + 0x50]
jmp 0x438be9
mov rdi, qword [rsp + 0x50]
call fcn.00461840
mov rcx, rdx
mov rdx, rdi
mov r8, qword [rsp + 0x48]
mov rsi, rbx
mov rbx, rax
lea r9, [rsi + 1]
mov qword [rcx + 0x9b8], r9
lea rdi, [rbx + rsi*8]
cmp dword [0x0061c170], 0
jne 0x438c20
mov qword [rbx + rsi*8], r8
jmp 0x438b28
call fcn.004619c0
jmp 0x438b28
nop
nop
lea rax, [0x005c8ad8]
call fcn.0040b020
mov rcx, qword [rsp + 0x58]
cmp qword [rcx + 0x9b8], 0
jne 0x438cea
lea rax, [0x004f01c0]
call fcn.0040cf00
mov rcx, qword [rsp + 0x58]
mov rsi, qword [rcx + 0x9b8]
mov rbx, qword [rcx + 0x9b0]
mov rdi, qword [rcx + 0x9c0]
lea rdx, [rsi + 1]
cmp rdi, rdx
jae 0x438cc7
mov qword [rsp + 0x48], rax
lea rax, [0x004d8b20]
mov rcx, rsi
mov rsi, rdx
call fcn.00449800
mov rdx, qword [rsp + 0x58]
mov qword [rdx + 0x9c0], rcx
cmp dword [0x0061c170], 0
jne 0x438caf
mov qword [rdx + 0x9b0], rax
jmp 0x438cb9
mov rdi, qword [rsp + 0x50]
call fcn.00461840
mov rcx, rdx
mov rsi, rbx
mov rbx, rax
mov rax, qword [rsp + 0x48]
lea r8, [rsi + 1]
mov qword [rcx + 0x9b8], r8
lea rdi, [rbx + rsi*8]
cmp dword [0x0061c170], 0
jne 0x438ce5
mov qword [rbx + rsi*8], rax
jmp 0x438cea
call fcn.00461840
mov rsi, qword [rsp + 0x40]
mov r8, rcx
jmp 0x438a65