Function at 0x438d00
Capabilities:
Run powershell expression

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
cmp qword [rax + 0x18], 0
jne 0x439027
cmp byte [rax + 0x34], 0
nop dword [rax]
jne 0x439016
cmp qword [rax + 8], 0
jne 0x439005
cmp qword [rax + 0x10], 0
jne 0x438fef
cmp qword [rax + 0x40], 0
jne 0x438fde
cmp qword [rax + 0x50], 0
jne 0x438fcd
cmp qword [r14 + 0x88], 0
nop word [rax + rax]
jne 0x438fbc
mov qword [rsp + 0x70], rax
mov r8, qword [r14 + 0x30]
nop
inc dword [r8 + 0xd8]
mov r8, qword [r14 + 0x30]
mov qword [rsp + 0x40], r8
mov r9, qword [r8 + 0xa0]
mov qword [rsp + 0x58], r9
mov r10, r14
test byte [r10], al
mov r10, qword [r9 + 0x9c0]
nop dword [rax]
cmp qword [r9 + 0x9b8], r10
jne 0x438db2
xor ecx, ecx
xor edx, edx
jmp 0x438e84
mov rsi, qword [r9 + 0x9b8]
lea rdx, [rsi + 1]
mov rbx, qword [r9 + 0x9b0]
mov rdi, qword [r9 + 0x9c0]
cmp rdi, rdx
jae 0x438e2b
lea rax, [0x004d8b20]
mov rcx, rsi
mov rsi, rdx
nop dword [rax]
call fcn.00449800
mov rdi, qword [rsp + 0x58]
mov qword [rdi + 0x9c0], rcx
cmp dword [0x0061c170], 0
jne 0x438e03
mov qword [rdi + 0x9b0], rax
jmp 0x438e18
lea rcx, [rdi + 0x9b0]
mov rdx, rdi
mov rdi, rcx
call fcn.00461840
mov rdi, rdx
mov r8, qword [rsp + 0x40]
mov r9, rdi
mov rsi, rbx
mov rbx, rax
mov rax, qword [rsp + 0x70]
lea rcx, [rsi + 1]
mov qword [r9 + 0x9b8], rcx
lea rdi, [rbx + rsi*8]
cmp dword [0x0061c170], 0
jne 0x438e49
mov qword [rbx + rsi*8], rax
jmp 0x438e4e
call fcn.00461840
nop
mov eax, dword [r8 + 0xd8]
lea ecx, [rax - 1]
mov dword [r8 + 0xd8], ecx
cmp eax, 1
jne 0x438e77
cmp byte [r14 + 0xb1], 0
je 0x438e77
mov qword [r14 + 0x10], 0xfffffffffffffade
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, r11
mov rbx, qword [r9 + 0x9b8]
mov rsi, qword [r9 + 0x9b0]
mov r10, qword [r9 + 0x9c0]
shr r10, 1
nop dword [rax]
cmp rbx, r10
jle 0x438f27
lea r10, [rbx - 1]
cmp rbx, r10
jbe 0x438fb1
mov r11, qword [rsi + rbx*8 - 8]
lea rdi, [rsi + rbx*8]
lea rdi, [rdi - 8]
cmp dword [0x0061c170], 0
jne 0x438ed7
mov qword [rsi + rbx*8 - 8], 0
jmp 0x438ede
xor ebx, ebx
call fcn.00461980
mov rbx, qword [r9 + 0x9c0]
cmp rbx, r10
jb 0x438fa6
mov qword [r9 + 0x9b8], r10
test rdx, rdx
je 0x438f1f
test byte [rcx], al
cmp dword [0x0061c170], 0
jne 0x438f0e
mov qword [rcx + 8], r11
jmp 0x438e81
lea rdi, [rcx + 8]
mov rbx, r11
call fcn.00461980
jmp 0x438e81
mov rdx, r11
jmp 0x438e81
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rcx
nop
nop
lea rax, [0x005c8ad8]
call fcn.0040ae00
mov rdi, qword [rsp + 0x48]
test byte [rdi], al
mov rcx, qword [0x005c8ae0]
cmp dword [0x0061c170], 0
jne 0x438f68
mov qword [rdi + 8], rcx
mov rcx, qword [rsp + 0x50]
mov qword [0x005c8ae0], rcx
jmp 0x438f85
add rdi, 8
call fcn.00461940
lea rdi, [0x005c8ae0]
mov rcx, qword [rsp + 0x50]
nop dword [rax]
call fcn.00461940
nop
lea rax, [0x005c8ad8]
call fcn.0040b020
mov rax, qword [rsp + 0x70]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x58]
jmp 0x438db2
mov rcx, r10
mov rdx, rbx
call fcn.00461d60
mov rax, r10
mov rcx, rbx
call fcn.00461ce0
lea rax, [0x004ffb56]
mov ebx, 0x2b
call fcn.00435d80
lea rax, [0x004fcceb]
mov ebx, 0x1d
call fcn.00435d80
lea rax, [0x004fe6c7]
mov ebx, 0x24
call fcn.00435d80
lea rax, [0x004fd9c4]
mov ebx, 0x20
nop dword [rax + rax]
call fcn.00435d80
lea rax, [0x004fd9a4]
mov ebx, 0x20
call fcn.00435d80
lea rax, [0x004fecbb]
mov ebx, 0x26
call fcn.00435d80
lea rax, [0x004fd984]
mov ebx, 0x20
call fcn.00435d80
nop
int3