Function at 0x4448a0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x444bb9
push rbp
mov rbp, rsp
sub rsp, 0x50
cmp byte [0x009d9101], 0
jne 0x444a50
cmp byte [0x009d9102], 0
jne 0x444a50
mov ecx, dword [0x009d9148]
test ecx, ecx
ja 0x444a4a
cmp byte [0x009d90f2], 0
je 0x4448e7
xor eax, eax
jmp 0x444908
cmp byte [0x009d90f3], 0
je 0x444906
mov ecx, dword [0x009d914c]
test ecx, ecx
jbe 0x444902
mov eax, 1
nop
jmp 0x444908
xor eax, eax
jmp 0x444908
xor eax, eax
mov ecx, dword [0x00985ae8]
mov edx, dword [0x00985aec]
mov ebx, dword [0x00985afc]
mov rsi, qword [0x00985af0]
sub rsi, qword [0x00985b00]
mov rdi, rsi
sub esi, ecx
sub esi, edx
sub esi, ebx
cmp eax, esi
jl 0x444a44
nop dword [rax]
test esi, esi
jl 0x444adc
mov qword [rsp + 0x20], 0
movups xmmword [rsp + 0x40], xmm15
lea rcx, [0x00444be0]
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x48], rcx
lea rax, [rsp + 0x40]
call fcn.0043acc0
cmp qword [rsp + 0x20], 0
jne 0x44499e
nop
nop
lea rax, [0x00985ad8]
call fcn.0040b8e0
lea rax, [0x0071c173]
mov ebx, 0x36
call fcn.00437700
cmp qword [0x009d92f8], 0
je 0x4449bc
call fcn.00455fe0
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jl 0x4449d1
mov rcx, qword [0x009844a0]
mov rdx, qword [0x009844a8]
xor eax, eax
jmp 0x444a99
mov qword [0x009d92f8], rax
call fcn.00446400
nop dword [rax]
test rax, rax
je 0x444a76
mov rcx, qword [0x00985ae0]
nop
test rcx, rcx
je 0x444a0d
mov rdx, qword [rcx + 0x128]
mov qword [0x00985ae0], rdx
dec dword [0x00985ae8]
test rcx, rcx
je 0x444a56
lea rdx, [rcx + 0x118]
nop
mov ebx, 1
lea rsi, [0x00985b1c]
lock xadd dword [rsi], ebx
mov byte [rcx + 0xe4], 1
nop
mov qword [rcx + 0xa8], rax
mov rax, rdx
call fcn.0040b9c0
add rsp, 0x50
pop rbp
ret
add rsp, 0x50
pop rbp
ret
add rsp, 0x50
pop rbp
ret
add rsp, 0x50
pop rbp
ret
nop
nop
lea rax, [0x00985ad8]
nop
call fcn.0040b8e0
lea rax, [0x007100ff]
mov ebx, 0x19
call fcn.00437620
nop
nop
lea rax, [0x00985ad8]
nop
call fcn.0040b8e0
lea rax, [0x007100e6]
mov ebx, 0x19
call fcn.00437620
inc rax
cmp rax, rdx
jge 0x444ab4
mov rbx, qword [rcx + rax*8]
test byte [rbx], al
cmp qword [rbx + 0x2290], 0
je 0x444a96
add rsp, 0x50
pop rbp
ret
nop
nop
lea rax, [0x00985ad8]
nop dword [rax]
call fcn.0040b8e0
lea rax, [0x0071674c]
mov ebx, 0x25
call fcn.00437700
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x1c], ecx
mov dword [rsp + 0x18], edx
mov dword [rsp + 0x14], ebx
call fcn.00438fc0
lea rax, [0x0071146c]
mov ebx, 0x1b
nop
call fcn.00439840
mov eax, dword [rsp + 0x18]
movsxd rax, eax
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x38]
movsxd rcx, ecx
mov qword [rsp + 0x38], rcx
mov edx, dword [rsp + 0x14]
movsxd rdx, edx
mov qword [rsp + 0x28], rdx
mov ebx, dword [rsp + 0x1c]
movsxd rbx, ebx
mov rax, rbx
call fcn.00439660
lea rax, [0x007095a7]
mov ebx, 0xe
call fcn.00439840
mov rax, qword [rsp + 0x30]
call fcn.00439660
lea rax, [0x007067bb]
mov ebx, 8
call fcn.00439840
mov rax, qword [rsp + 0x38]
call fcn.00439660
lea rax, [0x00705b2f]
mov ebx, 7
nop dword [rax + rax]
call fcn.00439840
mov rax, qword [rsp + 0x28]
call fcn.00439660
call fcn.00439200
call fcn.00439020
nop
nop
lea rax, [0x00985ad8]
call fcn.0040b8e0
lea rax, [0x007131c4]
mov ebx, 0x1e
call fcn.00437620
nop
call fcn.004654a0
nop
jmp fcn.004448a0