Function at 0x100008620
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x210
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x100024390]
xor rax, rsp
mov qword [rsp + 0x200], rax
mov r12, rcx
lea r15, [0x1000043c0]
mov qword [rsp + 0x40], r15
or r14, 0xffffffffffffffff
mov qword [rsp + 0x48], r14
xor r13d, r13d
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x54], r13d
mov qword [rsp + 0x58], r13
mov word [rsp + 0x60], r13w
mov ebx, r13d
mov qword [rcx + 0x588], r13
lea r8, [rcx + 0x3bc]
cmp r8, r13
je 0x100008842
mov eax, 0x7fffffff
mov rcx, rax
mov rdx, r8
mov r9d, r13d
cmp word [rdx], r13w
je 0x1000086c2
add rdx, 2
sub rcx, 1
jne 0x1000086b2
cmp rcx, r13
jne 0x1000086d2
mov r9d, 0x80070057
mov rax, r13
jmp 0x1000086d5
sub rax, rcx
cmp r9d, r13d
cmovl rax, r13
cmp rax, 0xc8
jb 0x1000086f6
lea rcx, [0x100004258]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x100008842
mov edx, 0xca
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x60]
sub r8, rax
lea rax, [rdx + 0x7fffff34]
cmp rax, r13
je 0x10000872c
movzx eax, word [r8 + rcx]
cmp ax, r13w
je 0x10000872c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x100008708
cmp rdx, r13
jne 0x100008735
sub rcx, 2
mov word [rcx], r13w
movdqu xmm0, xmmword [0x1000033e8]
movdqu xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x48]
xor edx, edx
lea rcx, [rsp + 0x30]
call qword [sym.imp.WMI.dll_WmiOpenBlock]
cmp eax, r13d
je 0x10000876b
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x100008842
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x10000883b
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x58]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
call qword [sym.imp.WMI.dll_WmiQuerySingleInstanceW]
cmp eax, r13d
je 0x1000087e9
cmp eax, 0x7a
jne 0x10000883b
mov rcx, qword [rsp + 0x58]
call fcn.100011990
mov ecx, dword [rsp + 0x20]
call fcn.1000118f0
mov rcx, rax
mov qword [rsp + 0x58], rax
cmp rax, r13
je 0x10000883b
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x50], eax
mov r9, rcx
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WMI.dll_WmiQuerySingleInstanceW]
cmp eax, r13d
jne 0x10000879b
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 0x20], eax
jne 0x10000883b
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx + 8]
mov dword [rsp + 0x54], eax
mov esi, dword [rcx + 0x38]
add rsi, rcx
mov eax, dword [rsi + 4]
add eax, 0xc
mov ebp, eax
mov ecx, eax
call fcn.1000118f0
mov rdi, rax
cmp rax, r13
jne 0x100008823
mov ebx, 0x8007000e
jmp 0x100008847
mov r8, rbp
mov rdx, rsi
mov rcx, rax
call fcn.1000148a0
mov qword [r12 + 0x588], rdi
jmp 0x100008847
mov ebx, 0x80004005
jmp 0x100008847
mov ebx, 0x80004005
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x10000887b
call qword [sym.imp.WMI.dll_WmiCloseBlock]
mov qword [rsp + 0x48], r14
mov word [rsp + 0x60], r13w
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x100008876
call fcn.100011990
mov qword [rsp + 0x58], r13
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x40], r15
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x100008890
call qword [sym.imp.WMI.dll_WmiCloseBlock]
mov qword [rsp + 0x48], r14
mov word [rsp + 0x60], r13w
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x1000088aa
call fcn.100011990
mov eax, ebx
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.100011c90
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret