Function at 0x40ce60
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x40d671
push rbp
mov rbp, rsp
sub rsp, 0x58
cmp dword [0x009d9120], 2
je 0x40d65f
nop
test rax, rax
je 0x40d5da
mov byte [rsp + 0x78], cl
mov qword [rsp + 0x70], rbx
cmp byte [0x009d99ac], 0
je 0x40cf1f
cmp dword [0x009d99b8], 0
je 0x40ceff
test rbx, rbx
je 0x40cee5
test rax, 7
jne 0x40cec0
mov edx, 8
jmp 0x40ceea
test rax, 3
jne 0x40cecf
mov edx, 4
jmp 0x40ceea
test rax, 1
mov edx, 1
mov esi, 2
cmove rdx, rsi
jmp 0x40ceea
mov edx, 0x10
mov rbx, rdx
lea rcx, [0x009de840]
call fcn.0040da80
add rsp, 0x58
pop rbp
ret
cmp byte [0x009d96e0], 0
je 0x40cf1f
mov rdx, qword [0x009d96e8]
cmp qword [r14 + 0x98], rdx
jne 0x40cf1f
inc qword [0x009d96f0]
mov qword [rsp + 0x68], rax
call fcn.0040d6a0
mov rcx, qword [r14 + 0x30]
nop
inc dword [rcx + 0xd8]
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0xc0], 0
nop
jne 0x40d64e
mov rdx, r14
cmp qword [rcx + 0x50], rdx
je 0x40d63d
mov dword [rcx + 0xc0], 1
mov rdx, qword [rcx + 0xa0]
test rdx, rdx
je 0x40cf6f
mov rdx, qword [rdx + 0x40]
jmp 0x40cf76
mov rdx, qword [0x009d9288]
test rdx, rdx
je 0x40d62c
mov rdi, qword [rsp + 0x70]
test rdi, rdi
je 0x40cf94
cmp qword [rdi + 8], 0
sete sil
jmp 0x40cf99
mov esi, 1
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x30], rdx
mov byte [rsp + 0x26], sil
mov rbx, qword [rsp + 0x68]
cmp rbx, 0x8000
ja 0x40d34c
nop
test sil, sil
je 0x40d160
cmp rbx, 0x10
jae 0x40d160
mov r8, qword [rdx + 0x18]
nop word [rax + rax]
test rbx, 7
jne 0x40cff3
add r8, 7
and r8, 0xfffffffffffffff8
jmp 0x40d014
test rbx, 3
jne 0x40d006
add r8, 3
and r8, 0xfffffffffffffffc
jmp 0x40d014
bt ebx, 0
jb 0x40d014
inc r8
nop
and r8, 0xfffffffffffffffe
lea r9, [rbx + r8]
cmp r9, 0x10
ja 0x40d06a
mov r10, qword [rdx + 0x10]
test r10, r10
je 0x40d06a
lea rax, [r10 + r8]
mov qword [rdx + 0x18], r9
inc qword [rdx + 0x20]
mov dword [rcx + 0xc0], 0
mov edx, dword [rcx + 0xd8]
lea ebx, [rdx - 1]
nop
mov dword [rcx + 0xd8], ebx
cmp edx, 1
jne 0x40d064
cmp byte [r14 + 0xb1], 0
je 0x40d064
mov qword [r14 + 0x10], 0xfffffffffffffade
add rsp, 0x58
pop rbp
ret
mov r8, qword [rdx + 0x50]
mov r9, qword [r8 + 0x40]
bsf r10, r9
mov r11d, 0x40
cmove r10, r11
cmp r10, 0x40
jge 0x40d0ef
mov r11, qword [r8 + 0x30]
lea r12, [r11 + r10]
mov r13, qword [r8 + 0x38]
cmp r13, r12
jbe 0x40d0ef
lea r11, [r11 + r10]
lea r11, [r11 + 1]
nop
test r11, 0x3f
jne 0x40d0b6
cmp r13, r11
je 0x40d0b6
mov r13, rcx
xor r9d, r9d
jmp 0x40d0f5
inc r10
mov r13, rcx
mov rcx, r10
shr r9, cl
cmp rcx, 0x40
sbb r10, r10
and r9, r10
mov qword [r8 + 0x40], r9
mov qword [r8 + 0x30], r11
movzx r9d, word [r8 + 0x68]
inc r9d
mov word [r8 + 0x68], r9w
mov r9, qword [r8 + 0x70]
imul r9, r12
add r9, qword [r8 + 0x18]
jmp 0x40d0f5
mov r13, rcx
xor r9d, r9d
test r9, r9
je 0x40d0fe
xor ecx, ecx
jmp 0x40d12f
mov rax, rdx
mov ebx, 5
call fcn.0040cc60
mov rdx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x26]
mov rdi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x40]
mov r9, rax
mov r8, rbx
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x68]
movups xmmword [r9], xmm15
cmp qword [rdx + 0x18], rbx
ja 0x40d142
cmp qword [rdx + 0x10], 0
nop
jne 0x40d14f
mov r10, r9
mov qword [rdx + 0x10], r9
mov qword [rdx + 0x18], rbx
jmp 0x40d152
mov r10, r9
mov r9d, 0x10
jmp 0x40d344
cmp rbx, 0x3f8
ja 0x40d18c
lea r8, [rbx + 7]
shr r8, 3
cmp r8, 0x81
jae 0x40d61f
lea r9, [0x00922a20]
movzx r8d, byte [r8 + r9]
jmp 0x40d1c0
lea r8, [rbx - 0x381]
shr r8, 7
nop word [rax + rax]
cmp r8, 0xf9
jae 0x40d612
lea r9, str._______________________....______0001123333333333444444444455666677777888888888889999999999::::::___________________________________________________________________________AAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
movzx r8d, byte [r8 + r9]
nop dword [rax]
cmp r8, 0x44
jae 0x40d605
mov r9d, r8d
shl r8d, 1
movzx r10d, sil
or r8d, r10d
movzx r10d, r8b
lea r11, [0x00922b60]
movzx r9d, word [r11 + r9*2]
nop
cmp r10, 0x88
jae 0x40d5f8
mov r10, qword [rdx + r10*8 + 0x28]
mov r11, qword [r10 + 0x40]
bsf r12, r11
mov r13d, 0x40
cmove r12, r13
cmp r12, 0x40
jge 0x40d28b
mov r13, qword [r10 + 0x30]
lea r15, [r13 + r12]
mov rax, qword [r10 + 0x38]
nop
cmp rax, r15
jbe 0x40d286
lea r13, [r13 + r12]
lea r13, [r13 + 1]
test r13, 0x3f
jne 0x40d246
cmp rax, r13
je 0x40d246
mov rax, qword [rsp + 0x50]
xor r11d, r11d
jmp 0x40d28e
inc r12
mov rcx, r12
shr r11, cl
cmp rcx, 0x40
sbb r12, r12
and r11, r12
mov qword [r10 + 0x40], r11
mov qword [r10 + 0x30], r13
movzx r11d, word [r10 + 0x68]
inc r11d
mov word [r10 + 0x68], r11w
mov r11, qword [r10 + 0x70]
imul r11, r15
add r11, qword [r10 + 0x18]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
jmp 0x40d28e
mov rax, qword [rsp + 0x50]
xor r11d, r11d
mov qword [rsp + 0x38], r9
test r11, r11
je 0x40d29d
xor r8d, r8d
jmp 0x40d2d4
mov rax, rdx
mov ebx, r8d
call fcn.0040cc60
mov rdx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x26]
mov rdi, qword [rsp + 0x70]
mov r9, qword [rsp + 0x38]
mov r11, rax
mov r10, rbx
mov r8d, ecx
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x68]
movzx r12d, byte [rsp + 0x78]
test r12b, r12b
je 0x40d338
cmp byte [r10 + 0x6c], 0
je 0x40d338
mov qword [rsp + 0x48], r11
mov byte [rsp + 0x25], r8b
mov qword [rsp + 0x28], r10
mov rax, r11
mov rbx, r9
nop dword [rax + rax]
call fcn.00467e60
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x26]
mov rdi, qword [rsp + 0x70]
movzx r8d, byte [rsp + 0x25]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x28]
mov r11, qword [rsp + 0x48]
mov r13, rcx
mov ecx, r8d
mov r8, r10
mov r10, r11
xor r11d, r11d
jmp 0x40d3f4
mov rax, rdx
mov ecx, esi
call fcn.00415ea0
mov qword [rax + 0x30], 1
mov word [rax + 0x68], 1
mov rdx, qword [rax + 0x18]
mov rbx, qword [rax + 0x70]
movzx esi, byte [rsp + 0x78]
test sil, sil
je 0x40d3be
cmp byte [rax + 0x6c], 0
je 0x40d3b5
movzx esi, byte [rsp + 0x26]
test sil, sil
jne 0x40d3b1
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x48], rdx
mov rax, rdx
call fcn.00467e60
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x38]
movzx esi, byte [rsp + 0x26]
mov ecx, esi
jmp 0x40d3c5
movzx ecx, byte [rsp + 0x26]
xor esi, esi
jmp 0x40d3c5
movzx ecx, byte [rsp + 0x26]
xor esi, esi
mov rdi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x40]
mov r8, rax
mov r11d, esi
mov r9, rbx
mov ecx, 1
mov r10, rdx
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x26]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x38], r9
mov byte [rsp + 0x25], cl
mov byte [rsp + 0x27], r11b
mov qword [rsp + 0x28], r8
test sil, sil
jne 0x40d460
mov rax, r10
mov rcx, rbx
mov rbx, r9
call fcn.00415000
mov rdx, qword [rsp + 0x70]
mov rsi, qword [rdx]
mov r8, qword [rsp + 0x68]
cmp r8, rsi
jbe 0x40d44d
mov rax, qword [rdx + 8]
mov rcx, r8
sub r8, rsi
lea rbx, [r8 + rax]
test rax, rax
mov eax, 0
cmovne rax, rbx
jmp 0x40d454
mov rax, qword [rdx + 8]
mov rcx, r8
mov rbx, qword [rsp + 0x30]
add qword [rbx + 8], rax
nop dword [rax]
call fcn.00466f40
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax + 0x30]
mov qword [rax + 0xa0], rcx
cmp dword [0x009d9120], 0
je 0x40d493
mov rbx, qword [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rsp + 0x38]
mov rbx, rdx
call fcn.004204c0
mov rdx, qword [0x0091e568]
test rdx, rdx
jle 0x40d4dd
nop
cmp rdx, 1
je 0x40d4c2
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rdx]
mov rcx, qword [rsp + 0x38]
cmp rcx, rsi
jae 0x40d4c7
sub rsi, rcx
mov qword [rdx], rsi
nop
jmp 0x40d4e2
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
call fcn.0040d8a0
mov rcx, qword [rsp + 0x38]
jmp 0x40d4e2
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov dword [rdx + 0xc0], 0
mov esi, dword [rdx + 0xd8]
lea edi, [rsi - 1]
nop
mov dword [rdx + 0xd8], edi
cmp esi, 1
jne 0x40d518
cmp byte [r14 + 0xb1], 0
je 0x40d518
mov qword [r14 + 0x10], 0xfffffffffffffade
movzx edx, byte [rsp + 0x27]
nop dword [rax]
test dl, dl
je 0x40d543
movzx edx, byte [rsp + 0x26]
test dl, dl
je 0x40d5e7
mov rax, rcx
mov rbx, qword [rsp + 0x48]
call fcn.0040d720
mov rcx, qword [rsp + 0x38]
cmp byte [0x009d99ac], 0
je 0x40d590
cmp dword [0x009d99b0], 0
je 0x40d56c
mov rax, qword [rsp + 0x48]
mov rbx, rcx
mov rcx, qword [rsp + 0x70]
call fcn.0042f400
mov rcx, qword [rsp + 0x38]
cmp byte [0x009d96e0], 0
je 0x40d590
mov rdx, qword [0x009d96e8]
nop dword [rax]
cmp qword [r14 + 0x98], rdx
jne 0x40d590
add qword [0x009d96f8], rcx
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x40d5a9
mov rsi, qword [rsp + 0x68]
sub rcx, rsi
sub qword [rdx + 0x190], rcx
movzx edx, byte [rsp + 0x25]
test dl, dl
je 0x40d5cf
xor eax, eax
xor ebx, ebx
xor ecx, ecx
call fcn.00419e40
nop dword [rax]
test al, al
je 0x40d5cf
xor eax, eax
xor ebx, ebx
xor ecx, ecx
call fcn.00419f40
mov rax, qword [rsp + 0x48]
add rsp, 0x58
pop rbp
ret
lea rax, [0x009d90e0]
add rsp, 0x58
pop rbp
ret
lea rax, [0x0071afb8]
mov ebx, 0x31
call fcn.00437620
mov rax, r10
mov ecx, 0x88
call fcn.00467760
mov eax, r8d
mov ecx, 0x44
call fcn.00467760
mov rax, r8
mov ecx, 0xf9
call fcn.00467780
mov rax, r8
mov ecx, 0x81
call fcn.00467780
lea rax, [0x0071bb0f]
mov ebx, 0x34
call fcn.00437620
lea rax, [0x0070cc9b]
mov ebx, 0x14
call fcn.00437620
lea rax, [0x00709ce6]
mov ebx, 0xf
call fcn.00437620
lea rax, [0x0071b488]
mov ebx, 0x32
call fcn.00437620
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
nop
call fcn.004654a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.0040ce60