Function at 0x409a20
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x409ce7
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov rdx, qword [rax + 0x38]
cmp qword [rax + 0x40], 0
je 0x409cd5
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rax
movzx esi, byte [rbx + 0x14]
test sil, 1
jne 0x409a74
nop dword [rax + rax]
test cl, cl
je 0x409c35
xor eax, eax
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov byte [rsp + 0x58], cl
mov rdx, qword [0x005be4c0]
mov rcx, rbx
mov rbx, rax
mov rax, rdx
call fcn.00409d20
test rax, rax
jne 0x409b78
nop
nop
lea rax, [0x0061c008]
nop
call fcn.0040ae00
mov rax, qword [0x005be4c0]
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
call fcn.00409d20
nop dword [rax + rax]
test rax, rax
je 0x409ae5
mov qword [rsp + 0x20], rax
nop
nop
lea rax, [0x0061c008]
call fcn.0040b020
mov rax, qword [rsp + 0x20]
nop dword [rax]
jmp 0x409b78
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx + 0x40]
dec rax
shl rax, 3
add rax, 0x20
xor ebx, ebx
lea rcx, [0x0061ea40]
call fcn.0040d260
test byte [rax], al
cmp dword [0x0061c170], 0
jne 0x409b25
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x50]
mov qword [rax + 8], rdx
jmp 0x409b45
mov rdi, rax
mov rcx, qword [rsp + 0x48]
call fcn.00461940
lea rdx, [rax + 8]
mov rdi, rdx
mov rbx, qword [rsp + 0x50]
nop
call fcn.00461980
mov qword [rsp + 0x30], rax
mov dword [rax + 0x10], 0
call fcn.00409f20
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.00409d80
nop
nop
lea rax, [0x0061c008]
call fcn.0040b020
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x18], 0
jne 0x409b94
movzx ecx, byte [rsp + 0x58]
test cl, cl
je 0x409b9e
xor eax, eax
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
nop
call fcn.00409f20
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x18], rbx
lea rax, [0x004eaca0]
call fcn.0040cf00
cmp dword [0x0061c170], 0
jne 0x409c15
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x18]
mov qword [rax + 0x20], rcx
cmp dword [0x0061c170], 0
jne 0x409c05
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x18], rcx
mov rbx, rax
lea rax, [0x004e0840]
nop dword [rax + rax]
call fcn.004355e0
lea rdi, [rax + 0x18]
mov rcx, qword [rsp + 0x28]
call fcn.00461940
jmp 0x409bf1
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x50]
nop
call fcn.00461940
lea rdi, [rax + 0x10]
mov rcx, qword [rsp + 0x48]
call fcn.00461940
jmp 0x409bd6
mov ebx, dword [rdx]
call fcn.00459be0
nop dword [rax]
call fcn.0045a340
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x18], rbx
lea rax, [0x004eaca0]
call fcn.0040cf00
cmp dword [0x0061c170], 0
jne 0x409cb5
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x18]
mov qword [rax + 0x20], rcx
cmp dword [0x0061c170], 0
jne 0x409ca5
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x18], rcx
mov rbx, rax
lea rax, [0x004e0840]
nop dword [rax + rax]
call fcn.004355e0
lea rdi, [rax + 0x18]
mov rcx, qword [rsp + 0x28]
call fcn.00461940
jmp 0x409c91
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x50]
nop
call fcn.00461940
lea rdi, [rax + 0x10]
mov rcx, qword [rsp + 0x48]
call fcn.00461940
jmp 0x409c76
lea rax, [0x004fd492]
mov ebx, 0x1f
call fcn.00435d80
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.0045f600
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.00409a20