Function at 0x41bcc0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41c0de
push rbp
mov rbp, rsp
sub rsp, 0x68
cmp dword [0x009d99b0], 0
jle 0x41bcea
mov qword [rsp + 0x78], rax
call fcn.0042f820
mov rax, qword [rsp + 0x78]
cmp dword [0x009d9120], 2
jne 0x41c0cc
mov qword [0x00985558], rax
mov rcx, qword [0x00985480]
mov qword [rsp + 0x50], rcx
test rcx, rcx
jne 0x41bf8f
mov edx, dword [0x00985548]
nop dword [rax]
cmp dword [0x0098554c], edx
ja 0x41bf8f
cmp dword [0x009d9970], 0
jle 0x41bd3a
call fcn.0041d160
movups xmmword [0x009855a8], xmm15
cmp dword [0x009d9570], 0
je 0x41bd5a
mov rcx, qword [0x009855a0]
call fcn.004673a0
mov qword [r11], rcx
mov qword [0x009855a0], 0
mov rcx, qword [0x009844a0]
mov qword [rsp + 0x60], rcx
mov rdx, qword [0x009844a8]
mov qword [rsp + 0x48], rdx
xor eax, eax
nop
jmp 0x41bda0
add rax, 0x1240
call fcn.00426840
mov rax, qword [rsp + 0x40]
inc rax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
nop
cmp rax, rdx
jge 0x41bdff
mov qword [rsp + 0x40], rax
mov rbx, qword [rcx + rax*8]
mov qword [rsp + 0x58], rbx
cmp dword [0x009d9970], 0
jle 0x41bdc7
mov rax, rbx
nop
call fcn.00430c00
jmp 0x41bdd5
test byte [rbx], al
lea rax, [rbx + 0x1268]
call fcn.00430b80
mov rax, qword [rsp + 0x58]
test byte [rax], al
mov rcx, qword [rax + 0x1240]
test rcx, rcx
je 0x41bd82
cmp qword [rcx + 0x10], 0
jne 0x41be4b
mov rcx, qword [rax + 0x1248]
cmp qword [rcx + 0x10], 0
je 0x41bd82
jmp 0x41be4b
mov rcx, qword [0x009844a0]
mov rdx, qword [0x009844a8]
xor eax, eax
jmp 0x41be14
inc rax
cmp rax, rdx
jge 0x41be30
mov rsi, qword [rcx + rax*8]
mov rsi, qword [rsi + 0x40]
test rsi, rsi
je 0x41be11
mov qword [rsi + 8], 0
jmp 0x41be11
mov rbx, qword [0x00985540]
lea rax, [0x009da040]
nop
call fcn.00421420
add rsp, 0x68
pop rbp
ret
call fcn.00438fc0
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax]
mov qword [rsp + 0x38], rcx
movzx edx, byte [rax + 0x1260]
mov byte [rsp + 0x17], dl
call fcn.00438fc0
lea rax, [0x00707c2b]
mov ebx, 0xb
call fcn.00439840
mov rax, qword [rsp + 0x38]
call fcn.00439660
lea rax, [0x00708dca]
mov ebx, 0xd
call fcn.00439840
movzx eax, byte [rsp + 0x17]
nop
call fcn.00439240
call fcn.00439020
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x1240]
test rcx, rcx
je 0x41bf6c
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x48], rax
call fcn.00438fc0
lea rax, [0x00706dd8]
mov ebx, 9
call fcn.00439840
mov rax, qword [rsp + 0x48]
call fcn.00439660
call fcn.00439020
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x1248]
test rax, rax
je 0x41bf4c
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x48], rax
call fcn.00438fc0
lea rax, [0x00706de1]
mov ebx, 9
call fcn.00439840
mov rax, qword [rsp + 0x48]
call fcn.00439660
call fcn.00439020
call fcn.00438fc0
call fcn.00439200
call fcn.00439020
lea rax, [0x0071a576]
mov ebx, 0x2f
call fcn.00437620
call fcn.00438fc0
lea rax, [0x0070852a]
mov ebx, 0xc
nop dword [rax]
call fcn.00439840
call fcn.00439020
jmp 0x41bf2c
call fcn.00438fc0
lea rax, [0x0070851e]
mov ebx, 0xc
nop dword [rax]
call fcn.00439840
call fcn.00439020
jmp 0x41beed
mov eax, dword [0x00985548]
mov qword [rsp + 0x30], rax
mov ecx, dword [0x0098554c]
mov qword [rsp + 0x28], rcx
mov rdx, qword [0x00985568]
mov qword [rsp + 0x48], rdx
mov rbx, qword [0x00985570]
mov qword [rsp + 0x40], rbx
mov rsi, qword [0x00985578]
mov qword [rsp + 0x20], rsi
mov rdi, qword [0x00985580]
mov qword [rsp + 0x18], rdi
call fcn.00438fc0
lea rax, [0x00709553]
mov ebx, 0xe
call fcn.00439840
mov rax, qword [rsp + 0x50]
call fcn.004396c0
lea rax, [0x00705320]
mov ebx, 6
call fcn.00439840
mov rax, qword [rsp + 0x30]
call fcn.00439580
lea rax, [0x00705326]
mov ebx, 6
nop dword [rax]
call fcn.00439840
mov rax, qword [rsp + 0x28]
call fcn.00439580
lea rax, [0x00708506]
mov ebx, 0xc
nop dword [rax + rax]
call fcn.00439840
mov rax, qword [rsp + 0x48]
call fcn.00439660
lea rax, [0x00707c20]
mov ebx, 0xb
nop dword [rax + rax]
call fcn.00439840
mov rax, qword [rsp + 0x40]
call fcn.00439660
lea rax, [0x00708512]
mov ebx, 0xc
nop dword [rax + rax]
call fcn.00439840
mov rax, qword [rsp + 0x20]
call fcn.00439660
lea rax, [0x00708dbd]
mov ebx, 0xd
nop dword [rax + rax]
call fcn.00439840
mov rax, qword [rsp + 0x18]
call fcn.00439660
call fcn.00439200
call fcn.00439020
lea rax, [0x006a5b60]
lea rbx, [0x00788ba0]
call fcn.00436ea0
lea rax, [0x0071c888]
mov ebx, 0x38
call fcn.00437620
nop
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
jmp fcn.0041bcc0