Function at 0x100008358
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x210
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x100024390]
xor rax, rsp
mov qword [rsp + 0x200], rax
mov r12, rcx
lea r15, [0x1000043b0]
mov qword [rsp + 0x40], r15
or r14, 0xffffffffffffffff
mov qword [rsp + 0x48], r14
xor r13d, r13d
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x54], r13d
mov qword [rsp + 0x58], r13
mov word [rsp + 0x60], r13w
mov ebx, r13d
mov qword [rcx + 0x580], r13
lea r8, [rcx + 0x3bc]
cmp r8, r13
je 0x10000857c
mov eax, 0x7fffffff
mov rcx, rax
mov rdx, r8
mov r9d, r13d
cmp word [rdx], r13w
je 0x1000083fa
add rdx, 2
sub rcx, 1
jne 0x1000083ea
cmp rcx, r13
jne 0x10000840a
mov r9d, 0x80070057
mov rax, r13
jmp 0x10000840d
sub rax, rcx
cmp r9d, r13d
cmovl rax, r13
cmp rax, 0xc8
jb 0x10000842e
lea rcx, [0x100004258]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x10000857c
mov edx, 0xca
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x60]
sub r8, rax
lea rax, [rdx + 0x7fffff34]
cmp rax, r13
je 0x100008464
movzx eax, word [r8 + rcx]
cmp ax, r13w
je 0x100008464
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x100008440
cmp rdx, r13
jne 0x10000846d
sub rcx, 2
mov word [rcx], r13w
movdqu xmm0, xmmword [0x100003408]
movdqu xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x48]
xor edx, edx
lea rcx, [rsp + 0x30]
call qword [sym.imp.WMI.dll_WmiOpenBlock]
cmp eax, r13d
je 0x1000084a3
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10000857c
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x100008575
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x58]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
call qword [sym.imp.WMI.dll_WmiQuerySingleInstanceW]
cmp eax, r13d
je 0x100008521
cmp eax, 0x7a
jne 0x100008575
mov rcx, qword [rsp + 0x58]
call fcn.100011990
mov ecx, dword [rsp + 0x20]
call fcn.1000118f0
mov rcx, rax
mov qword [rsp + 0x58], rax
cmp rax, r13
je 0x100008575
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x50], eax
mov r9, rcx
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WMI.dll_WmiQuerySingleInstanceW]
cmp eax, r13d
jne 0x1000084d3
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 0x20], eax
jne 0x100008575
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx + 8]
mov dword [rsp + 0x54], eax
mov esi, dword [rcx + 0x38]
add rsi, rcx
movzx eax, word [rsi + 0x64]
lea eax, [rax + rax + 0x68]
mov ebp, eax
mov ecx, eax
call fcn.1000118f0
mov rdi, rax
cmp rax, r13
jne 0x10000855d
mov ebx, 0x8007000e
jmp 0x100008581
mov r8, rbp
mov rdx, rsi
mov rcx, rax
call fcn.1000148a0
mov qword [r12 + 0x580], rdi
jmp 0x100008581
mov ebx, 0x80004005
jmp 0x100008581
mov ebx, 0x80004005
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x1000085b5
call qword [sym.imp.WMI.dll_WmiCloseBlock]
mov qword [rsp + 0x48], r14
mov word [rsp + 0x60], r13w
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x1000085b0
call fcn.100011990
mov qword [rsp + 0x58], r13
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x40], r15
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x1000085ca
call qword [sym.imp.WMI.dll_WmiCloseBlock]
mov qword [rsp + 0x48], r14
mov word [rsp + 0x60], r13w
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x1000085e4
call fcn.100011990
mov eax, ebx
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.100011c90
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret