Function at 0x1400dd120
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
movaps xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x30], rcx
mov eax, dword [0x141dd60c8]
imul eax, dword [0x141dd60cc]
or eax, 0x519ec61
imul rax, rax, 0x17db5405
shr rax, 0x3a
cmp eax, 0xee66d425
je 0x1400dd18f
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
xor eax, eax
test al, al
je 0x1400dd1ab
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
jmp 0x1400dd169
mov qword [rbp - 0x38], rcx
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, dword [0x141dd60d0]
and eax, dword [0x141dd60d4]
or eax, 0xfd7f55fe
imul rax, rax, 0x98e27d3
shr rax, 0x3b
cmp eax, 0x59e4045a
ja 0x1400dd27d
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rbx, rsp
mov qword [r13], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r13
lea rcx, [0x141db6d74]
lea r9, [0x141db6d58]
xor edi, edi
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
add rsp, 0x30
test dil, dil
je 0x1400dd2e9
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rcx], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rcx
lea rcx, [0x141db6d74]
lea r9, [0x141db6d58]
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
add rsp, 0x30
jmp 0x1400dd205
mov r15d, eax
mov qword [rbp - 0x18], rsi
test eax, eax
js 0x1400dd801
mov r8, qword [r13]
mov eax, dword [0x141dd60d8]
xor edx, edx
div dword [0x141dd60dc]
mov rsi, qword [rbp - 0x30]
nop
mov eax, dword [0x141dd60e0]
sub eax, dword [0x141dd60e4]
imul eax, eax, 0xcbfc09ac
xor eax, 0x6e8b9220
cmp eax, 0x9f0af202
ja 0x1400dd310
mov eax, 0xa892268f
mov r13, qword [rbp - 0x50]
nop word [rax + rax]
mov ecx, dword [0x141dd60e8]
imul ecx, dword [0x141dd60ec]
add ecx, 0x8331c45
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x4a079e13
ja 0x1400dd340
test r8, r8
je 0x1400dd740
mov qword [rbp - 0x28], r8
mov eax, dword [0x141dd6100]
sub eax, dword [0x141dd6104]
imul rcx, rax, 0x1de99317
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x412df6da
cmp eax, 0xa21ba87c
mov r12, qword [rbp - 0x40]
jbe 0x1400dd3b3
sub rsp, 0x20
mov rcx, r13
mov rdx, r12
call fcn.1400dba40
add rsp, 0x20
mov rbx, qword [rbp - 0x48]
nop word [rax + rax]
mov eax, dword [0x141dd60f0]
imul eax, dword [0x141dd60f4]
imul eax, eax, 0x6da6ad5d
add eax, 0xcdc4ab00
cmp eax, 0x7965e1e3
jb 0x1400dd740
nop
mov rsi, qword [rbp - 0x28]
mov qword [rsi], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400dd86f
mov rax, qword [rcx]
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
mov al, 1
mov rsi, qword [rbp - 0x30]
nop dword [rax + rax]
test al, al
je 0x1400dd840
jmp 0x1400dd873
mov rsi, qword [rbp - 0x30]