Function at 0x42cc00
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42ceee
push rbp
mov rbp, rsp
sub rsp, 0x68
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x80], rbx
test rbx, 0x3fffff
jne 0x42ce8f
test rcx, 0x3fffff
jne 0x42ce8f
movabs rdx, 0x800000000000
lea rsi, [rdx + rbx]
shr rsi, 0x16
lea r8, [rdx + rcx]
shr r8, 0x16
mov r9, qword [rax + 0x18]
nop
mov r10, qword [rax + 0x20]
mov r11, qword [0x009d91b0]
shr r11, 3
mov r12, r11
neg r11
lea r8, [r8 + r12]
lea r8, [r8 - 1]
and r8, r11
nop
nop
and rsi, r11
cmp r9, r8
cmova r8, r9
test r10, r10
je 0x42cc96
cmp r10, rsi
jae 0x42cc96
mov rcx, r10
jmp 0x42cc9c
mov rcx, r10
mov r10, rsi
cmp qword [rax + 8], 0
jbe 0x42ce85
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r10
mov rdx, qword [rax]
lea rsi, [rdx + r9*8]
lea rbx, [rdx + rcx*8]
mov rax, rsi
call fcn.0042f8e0
mov rcx, qword [rsp + 0x78]
cmp qword [rcx + 8], 0
jbe 0x42ce78
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
mov rdx, qword [rcx]
mov rsi, qword [rsp + 0x20]
lea rax, [rdx + rsi*8]
mov rdi, qword [rsp + 0x28]
lea rbx, [rdx + rdi*8]
call fcn.0042f8e0
mov rcx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
call fcn.0042f960
movabs rcx, 0x800000000000
lea rdx, [rcx + rax]
add rcx, rbx
cmp rcx, rdx
jbe 0x42cd3a
nop
mov rsi, rbx
sub rbx, rax
jmp 0x42cd40
mov rsi, rbx
xor ebx, ebx
nop
test rbx, rbx
je 0x42ce62
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rcx
nop dword [rax]
cmp rcx, rdx
jbe 0x42cd6b
nop
sub rsi, rax
jmp 0x42cd6d
xor esi, esi
mov rax, qword [rsp + 0x60]
mov rbx, rsi
call fcn.00430880
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
cmp rcx, rdx
jbe 0x42cd9f
nop
mov rsi, qword [rsp + 0x38]
mov rax, qword [rsp + 0x48]
mov rdi, rsi
sub rsi, rax
cmp rcx, rdx
jmp 0x42cdae
mov rax, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x38]
mov esi, 0
jbe 0x42cdb6
nop
sub rdi, rax
jmp 0x42cdb8
xor edi, edi
mov rcx, rax
nop
lea rdx, [0x009da178]
lock xadd qword [rdx], rdi
mov rbx, rsi
mov rax, rcx
call fcn.00416ea0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x42cdec
mov rcx, qword [rsp + 0x50]
test rcx, rcx
mov rdx, qword [rsp + 0x20]
jmp 0x42cdfe
mov rdx, qword [rsp + 0x20]
cmp rcx, rdx
jbe 0x42ce09
mov rcx, qword [rsp + 0x50]
test rcx, rcx
mov rbx, qword [rsp + 0x78]
xchg qword [rbx + 0x18], rdx
jmp 0x42ce16
mov rcx, qword [rsp + 0x50]
test rcx, rcx
mov rbx, qword [rsp + 0x78]
jne 0x42ce2c
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
cmp rcx, rdx
mov rdx, qword [rsp + 0x28]
jmp 0x42ce43
mov rdx, qword [rsp + 0x28]
cmp rcx, rdx
jae 0x42ce49
mov rcx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
cmp rcx, rsi
xchg qword [rbx + 0x20], rdx
jmp 0x42ce56
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
cmp rcx, rdx
mov rax, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x38]
jmp 0x42ce65
cmp rcx, rdx
jbe 0x42ce6d
nop
sub rsi, rax
jmp 0x42ce6f
xor esi, esi
mov rax, rsi
add rsp, 0x68
pop rbp
ret
xor eax, eax
mov rcx, rax
nop dword [rax]
call fcn.00467760
xor eax, eax
mov rcx, rax
call fcn.00467760
call fcn.00438fc0
lea rax, [0x0070a65a]
mov ebx, 0x10
call fcn.00439840
mov rax, qword [rsp + 0x80]
call fcn.004396c0
lea rax, [0x00707466]
mov ebx, 0xa
nop
call fcn.00439840
mov rax, qword [rsp + 0x88]
call fcn.004396c0
call fcn.00439200
call fcn.00439020
lea rax, [0x00719fdd]
mov ebx, 0x2e
call fcn.00437620
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
nop dword [rax + rax]
jmp fcn.0042cc00