Function at 0x425ee0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4261c6
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rsp + 0x80], rax
call fcn.00438fc0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x70]
mov qword [rsp + 0x38], rcx
mov rdx, qword [rax + 0x30]
mov qword [rsp + 0x30], rdx
call fcn.00438fc0
lea rax, [0x00715fa2]
mov ebx, 0x24
call fcn.00439840
mov rax, qword [rsp + 0x80]
mov rcx, rax
mov rax, rcx
nop dword [rax]
call fcn.00439800
lea rax, [0x00707c62]
mov ebx, 0xb
call fcn.00439840
mov rax, qword [rsp + 0x38]
nop dword [rax + rax]
call fcn.00439580
lea rax, [0x00707c6d]
mov ebx, 0xb
call fcn.00439840
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.00439580
lea rax, [0x00719faf]
mov ebx, 0x2e
call fcn.00439840
call fcn.00439020
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x50]
test byte [rcx], al
mov qword [rsp + 0x40], rcx
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov rcx, qword [rax + 0x48]
test byte [rcx], al
nop
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x60], 1
mov qword [rsp + 0x68], 0
xor ecx, ecx
jmp 0x425fef
inc qword [rsp + 0x68]
mov rcx, qword [rsp + 0x20]
inc rcx
mov rax, qword [rsp + 0x80]
cmp qword [rax + 0x38], rcx
jbe 0x4261b0
mov qword [rsp + 0x20], rcx
mov rdx, qword [rax + 0x70]
imul rdx, rcx
add rdx, qword [rax + 0x18]
mov qword [rsp + 0x28], rdx
call fcn.00438fc0
mov rax, qword [rsp + 0x28]
call fcn.004396c0
nop
call fcn.00439020
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x80]
cmp qword [rcx + 0x30], rax
jbe 0x42603f
mov edx, 1
jmp 0x426051
mov rdx, qword [rsp + 0x58]
movzx ebx, byte [rsp + 0x60]
movzx edx, byte [rdx]
test dl, bl
setne dl
mov byte [rsp + 0x1f], dl
test dl, dl
je 0x426076
call fcn.00438fc0
lea rax, [0x00705344]
mov ebx, 6
call fcn.00439840
call fcn.00439020
jmp 0x426091
call fcn.00438fc0
lea rax, [0x0070534a]
mov ebx, 6
call fcn.00439840
call fcn.00439020
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x48]
movzx eax, byte [rax]
nop
test al, cl
je 0x4260c2
call fcn.00438fc0
lea rax, [0x00706e0e]
mov ebx, 9
call fcn.00439840
call fcn.00439020
nop
jmp 0x4260dd
call fcn.00438fc0
lea rax, [0x00706e17]
mov ebx, 9
call fcn.00439840
call fcn.00439020
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x48]
movzx eax, byte [rax]
test al, cl
je 0x4260f8
movzx eax, byte [rsp + 0x1f]
xor eax, 1
jmp 0x4260fa
xor eax, eax
mov byte [rsp + 0x1e], al
nop
test al, al
je 0x426120
call fcn.00438fc0
lea rax, [0x00705b13]
mov ebx, 7
call fcn.00439840
call fcn.00439020
nop
call fcn.00438fc0
call fcn.00439200
call fcn.00439020
movzx eax, byte [rsp + 0x1e]
test al, al
je 0x426165
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rdx + 0x70]
cmp rsi, 0x400
mov edi, 0x400
cmova rsi, rdi
mov rax, qword [rsp + 0x28]
lea rbx, [rsi + rax]
xor ecx, ecx
nop
call fcn.00439a40
movzx ecx, byte [rsp + 0x48]
nop
cmp cl, 0x80
jne 0x42617c
inc qword [rsp + 0x40]
mov byte [rsp + 0x48], 1
jmp 0x426182
shl ecx, 1
mov byte [rsp + 0x48], cl
inc qword [rsp + 0x50]
movzx ecx, byte [rsp + 0x60]
nop
cmp cl, 0x80
jne 0x4261a5
inc qword [rsp + 0x58]
mov byte [rsp + 0x60], 1
nop dword [rax]
jmp 0x425fda
shl ecx, 1
mov byte [rsp + 0x60], cl
jmp 0x425fda
lea rax, [0x00711d6a]
mov ebx, 0x1c
nop dword [rax]
call fcn.00437620
nop
mov qword [rsp + 8], rax
call fcn.004654a0
mov rax, qword [rsp + 8]
jmp fcn.00425ee0