Function at 0x427160
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42744b
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rsp + 0x80], rax
call sym.runtime.printlock
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x68]
mov qword [rsp + 0x38], rcx
movzx edx, word [rax + 0x30]
mov qword [rsp + 0x30], rdx
call sym.runtime.printlock
lea rax, [0x0051a071]
mov ebx, 0x24
call sym.runtime.printstring
mov rax, qword [rsp + 0x80]
mov rcx, rax
mov rax, rcx
nop dword [rax]
call sym.runtime.printuintptr
lea rax, [0x0051161c]
mov ebx, 0xb
call sym.runtime.printstring
mov rax, qword [rsp + 0x38]
nop dword [rax + rax]
call sym.runtime.printuint
lea rax, [0x00511627]
mov ebx, 0xb
call sym.runtime.printstring
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call sym.runtime.printuint
lea rax, [0x0051bfb5]
mov ebx, 0x2e
call sym.runtime.printstring
call sym.runtime.printunlock
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x48]
test byte [rcx], al
mov qword [rsp + 0x40], rcx
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov rcx, qword [rax + 0x40]
test byte [rcx], al
nop
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x60], 1
mov qword [rsp + 0x68], 0
xor ecx, ecx
jmp 0x42726f
inc qword [rsp + 0x68]
mov rcx, qword [rsp + 0x20]
inc rcx
mov rax, qword [rsp + 0x80]
movzx edx, word [rax + 0x32]
cmp rcx, rdx
jae 0x427439
mov qword [rsp + 0x20], rcx
mov rdx, qword [rax + 0x68]
imul rdx, rcx
add rdx, qword [rax + 0x18]
mov qword [rsp + 0x28], rdx
call sym.runtime.printlock
mov rax, qword [rsp + 0x28]
nop dword [rax]
call sym.runtime.printhex
call sym.runtime.printunlock
mov rax, qword [rsp + 0x80]
movzx ecx, word [rax + 0x30]
mov rdx, qword [rsp + 0x20]
nop dword [rax + rax]
cmp rdx, rcx
jae 0x4272cc
mov ecx, 1
jmp 0x4272de
mov rcx, qword [rsp + 0x58]
movzx ebx, byte [rsp + 0x60]
movzx ecx, byte [rcx]
test cl, bl
setne cl
mov byte [rsp + 0x1f], cl
test cl, cl
je 0x427307
call sym.runtime.printlock
lea rax, [0x005107ff]
mov ebx, 6
call sym.runtime.printstring
nop dword [rax]
call sym.runtime.printunlock
jmp 0x427325
call sym.runtime.printlock
lea rax, [0x00510805]
mov ebx, 6
call sym.runtime.printstring
nop dword [rax]
call sym.runtime.printunlock
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x48]
movzx eax, byte [rax]
test al, cl
je 0x427353
call sym.runtime.printlock
lea rax, [0x00510ef5]
mov ebx, 9
call sym.runtime.printstring
call sym.runtime.printunlock
jmp 0x42736e
call sym.runtime.printlock
lea rax, [0x00510efe]
mov ebx, 9
call sym.runtime.printstring
call sym.runtime.printunlock
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x48]
movzx eax, byte [rax]
test al, cl
je 0x427389
movzx eax, byte [rsp + 0x1f]
xor eax, 1
jmp 0x42738b
xor eax, eax
mov byte [rsp + 0x1e], al
test al, al
je 0x4273ae
call sym.runtime.printlock
lea rax, [0x005109f6]
mov ebx, 7
call sym.runtime.printstring
call sym.runtime.printunlock
call sym.runtime.printlock
call sym.runtime.printnl
call sym.runtime.printunlock
movzx eax, byte [rsp + 0x1e]
test al, al
je 0x4273f2
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rdx + 0x68]
cmp rsi, 0x400
mov edi, 0x400
cmova rsi, rdi
mov rax, qword [rsp + 0x28]
lea rbx, [rsi + rax]
xor ecx, ecx
call sym.runtime.hexdumpWords
movzx ecx, byte [rsp + 0x48]
nop
cmp cl, 0x80
jne 0x427409
inc qword [rsp + 0x40]
mov byte [rsp + 0x48], 1
jmp 0x42740f
shl ecx, 1
mov byte [rsp + 0x48], cl
inc qword [rsp + 0x50]
movzx ecx, byte [rsp + 0x60]
nop
cmp cl, 0x80
jne 0x42742e
inc qword [rsp + 0x58]
mov byte [rsp + 0x60], 1
jmp 0x42725a
shl ecx, 1
mov byte [rsp + 0x60], cl
jmp 0x42725a
lea rax, [0x005179c4]
mov ebx, 0x1c
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._mspan_.reportZombies