Function at 0x43bf60
Capabilities:
Run powershell expression

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x38
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], ebx
bt ebx, 0xc
jb 0x43bf86
bt ecx, 0xc
nop
jb 0x43bf86
cmp ebx, ecx
jne 0x43bfcd
movups xmmword [rsp + 0x28], xmm15
lea rax, [0x0043c300]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x34], ecx
lea rax, [rsp + 0x28]
mov qword [rsp], rax
call fcn.00465360
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x50]
xor edx, edx
xor esi, esi
jmp 0x43bfe8
mov rdx, qword [rsp + 0x20]
inc rdx
mov rax, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x50]
mov rdi, rax
mov eax, ebx
lock cmpxchg dword [rdi + 0x90], ecx
sete r8b
nop dword [rax]
test r8b, r8b
jne 0x43c0cf
cmp ebx, 4
jne 0x43c01f
mov r8d, dword [rdi + 0x90]
cmp r8d, 1
je 0x43c2db
mov qword [rsp + 0x20], rdx
test rdx, rdx
jne 0x43c04b
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rsi, qword [rsp]
add rsi, 0x1388
mov qword [rsp + 0x18], rsi
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
cmp qword [rsp], rax
jge 0x43c085
mov rcx, qword [rsp + 0x48]
mov edx, dword [rsp + 0x50]
xor ebx, ebx
nop dword [rax]
jmp 0x43c2b8
nop
lea rax, [0x0073adb8]
mov qword [rsp], rax
call fcn.00465360
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rsi, qword [rsp]
add rsi, 0x9c4
jmp 0x43bfd3
cmp ebx, 2
jne 0x43c0ff
cmp byte [0x009d90ff], 0
jne 0x43c0e9
movzx edx, byte [rdi + 0xbc]
test dl, 7
jne 0x43c0f0
mov byte [rdi + 0xbb], 1
movzx edx, byte [rdi + 0xbc]
inc edx
mov byte [rdi + 0xbc], dl
cmp byte [rdi + 0xbb], 0
je 0x43c270
cmp ebx, 1
je 0x43c182
cmp ebx, 4
jne 0x43c1c5
movzx edx, byte [rdi + 0xb0]
cmp dl, 0x15
je 0x43c134
cmp dl, 0x16
je 0x43c134
cmp dl, 0x17
jne 0x43c1c5
nop
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x48]
sub rax, qword [rcx + 0xc0]
shl rax, 3
lea rdx, [0x00986118]
lock xadd qword [rdx], rax
mov qword [rcx + 0xc0], 0
mov ecx, dword [rsp + 0x54]
mov rdi, qword [rsp + 0x48]
jmp 0x43c1c5
nop
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x48]
sub rax, qword [rcx + 0xc0]
add qword [rcx + 0xc8], rax
mov qword [rcx + 0xc0], 0
mov ecx, dword [rsp + 0x54]
mov rdi, qword [rsp + 0x48]
cmp ecx, 1
je 0x43c242
cmp ecx, 2
je 0x43c216
cmp ecx, 4
jne 0x43c26a
movzx eax, byte [rdi + 0xb0]
nop
cmp al, 0x15
je 0x43c1ec
cmp al, 0x16
je 0x43c1ec
cmp al, 0x17
jne 0x43c26a
nop
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0xc0], rax
jmp 0x43c26a
mov byte [rdi + 0xbb], 0
mov rbx, qword [rdi + 0xc8]
lea rax, [0x00985c00]
call fcn.00409fc0
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0xc8], 0
jmp 0x43c26a
nop
call fcn.00469020
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0xc0], rax
add rsp, 0x38
pop rbp
ret
add rsp, 0x38
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov dword [rsp], 1
call fcn.00466f20
xorps xmm15, xmm15
mov r14, qword [0x009d9398]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp + 0x10]
inc rbx
mov rax, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x50]
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x48]
mov edx, dword [rsp + 0x50]
cmp rbx, 0xa
jge 0x43c2cc
mov esi, dword [rcx + 0x90]
cmp esi, edx
setne sil
jmp 0x43c2ce
xor esi, esi
test sil, sil
jne 0x43c276
mov rsi, rax
jmp 0x43bfd3
lea rax, [0x0071b07c]
mov ebx, 0x31
call fcn.00437620
nop
int3