Function at 0x40fce0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x40ffdb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov dword [rsp + 0x50], ecx
nop dword [rax]
test rbx, rbx
je 0x40ffc7
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rax
movzx ecx, byte [rbx + 8]
test cl, 4
je 0x40fd37
lea rax, [0x004f9f25]
mov ebx, 0x15
call fcn.00435e80
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rax + 0x48]
mov rcx, qword [rdx]
mov esi, dword [rbx + 0xc]
lea rax, [rsp + 0x50]
mov rbx, rsi
call rcx
mov qword [rsp + 0x18], rax
mov rbx, qword [rsp + 0x48]
movzx ecx, byte [rbx + 8]
xor ecx, 4
mov byte [rbx + 8], cl
cmp qword [rbx + 0x10], 0
jne 0x40fdad
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rdx + 0x40]
mov rax, qword [rbx]
mov ecx, 1
call fcn.0040c540
cmp dword [0x0061c170], 0
jne 0x40fd90
mov rbx, qword [rsp + 0x48]
mov qword [rbx + 0x10], rax
jmp 0x40fda8
mov rdi, qword [rsp + 0x48]
lea rdx, [rdi + 0x10]
mov rcx, rdi
mov rdi, rdx
nop
call fcn.00461840
mov rbx, rcx
mov rax, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x40]
jmp 0x40fdd3
mov rax, rdx
call fcn.0040f040
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x18]
mov rax, rcx
mov rdx, qword [rsp + 0x40]
movzx ecx, byte [rbx + 9]
mov esi, 1
shl rsi, cl
lea rcx, [rsi - 1]
and rcx, rax
cmp qword [rbx + 0x18], 0
je 0x40fe0e
mov qword [rsp + 0x20], rcx
mov rax, rdx
call fcn.00410020
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
movzx esi, word [rdx + 0x52]
imul rcx, rsi
add rcx, qword [rbx + 0x10]
xor edi, edi
xor r8d, r8d
nop
jmp 0x40fe99
mov r11, r9
mov rcx, rdi
mov r9, r8
cmp qword [rbx + 0x18], 0
jne 0x40ff1f
mov rsi, qword [rbx]
inc rsi
movzx edi, byte [rbx + 9]
cmp rsi, 8
jle 0x40fe6b
mov r8, rcx
mov ecx, edi
mov r10d, 1
shl r10, cl
shr r10, 1
lea r12, [r10 + r10*2]
lea r10, [r10 + r12*4]
nop
cmp r10, rsi
jb 0x40fdb4
jmp 0x40fe70
mov r8, rcx
mov ecx, edi
movzx esi, word [rbx + 0xa]
cmp cl, 0xf
jbe 0x40fe7e
mov ecx, 0xf
and ecx, 0xf
mov edi, 1
shl edi, cl
cmp si, di
jae 0x40fdb4
jmp 0x40ff22
mov rcx, r10
xor r9d, r9d
jmp 0x40fec6
mov r9, rcx
lea r10, [rcx + rsi]
lea r10, [r10 - 8]
mov r10, qword [r10]
test r10, r10
jne 0x40fe96
jmp 0x40fe22
lea r10, [rdi + 1]
mov rdi, rcx
mov r8, r9
mov rcx, r11
mov r9, r10
cmp r9, 8
jae 0x40fe9e
test byte [rcx], al
movzx r10d, byte [rcx + r9]
cmp r10b, 1
ja 0x40fef4
test rdi, rdi
mov r11, rcx
cmovne rcx, rdi
mov rdi, r9
cmovne r9, r8
test r10b, r10b
jne 0x40feb6
jmp 0x40fe2b
mov r10, rcx
lea r11, [rcx + r9*4]
lea r11, [r11 + 8]
mov r11d, dword [r11]
cmp dword [rsp + 0x50], r11d
je 0x40ff17
mov r11, r10
mov rcx, rdi
mov rdi, r9
mov r9, r8
jmp 0x40feb6
mov rcx, r10
mov rsi, r9
jmp 0x40ff7a
mov r8, rcx
test r8, r8
jne 0x40ff4a
mov rax, rbx
mov rbx, rdx
mov rcx, r11
call fcn.0040d740
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov r8, rax
xor r9d, r9d
mov rax, qword [rsp + 0x18]
shr rax, 0x38
cmp al, 5
jae 0x40ff55
add eax, 5
test byte [r8], al
mov rsi, r9
and r9d, 7
mov byte [r8 + r9], al
mov rcx, r8
lea rdi, [r8 + rsi*4]
lea rdi, [rdi + 8]
nop
mov r8d, dword [rsp + 0x50]
mov dword [rdi], r8d
inc qword [rbx]
movzx edx, byte [rdx + 0x51]
imul rsi, rdx
movzx edx, byte [rbx + 8]
lea rax, [rsi + rcx]
lea rax, [rax + 0x28]
test dl, 4
jne 0x40ffb3
mov qword [rsp + 0x28], rax
lea rax, [0x004f9f25]
mov ebx, 0x15
call fcn.00435e80
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x48]
movzx ecx, byte [rbx + 8]
and ecx, 0xfffffffb
mov byte [rbx + 8], cl
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lea rax, [0x004dfd80]
lea rbx, [0x00527be8]
call fcn.004355e0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call fcn.0045f600
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
nop dword [rax]
jmp fcn.0040fce0