Function at 0x14004cd80
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
jmp 0x14004cd80
mov r11, rsp
push r12
push r14
push r15
sub rsp, 0x680
mov qword [r11 - 0x5b8], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rax, qword [0x1401199f8]
xor rax, rsp
mov qword [rsp + 0x678], rax
mov r12, rcx
mov qword [r11 - 0x608], rcx
xor r14d, r14d
mov dword [rsp + 0x50], r14d
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov dword [rsp + 0x50], 1
mov qword [r11 - 0x610], r14
lea rdx, [r11 - 0x610]
lea rcx, [0x1400d38f0]
call sub.dxgi.dll_CreateDXGIFactory1
test eax, eax
jns 0x14004ce0f
mov r9b, 1
lea r8, str.CreateDXGIFactory1
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14004ce34
mov r9b, 1
lea r8, str.CoInitializeEx
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
nop
mov qword [rsp + 0x80], r14
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [0x1400d3908]
xor edx, edx
lea r8d, [rdx + 5]
lea rcx, [0x1400e4d20]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14004ce7a
mov r9b, 1
lea r8, str.CoCreateInstance
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov qword [rsp + 0x68], r14
mov rdi, qword [rsp + 0x80]
mov ecx, 0x18
call fcn.140002158
mov rbx, rax
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x14004cec7
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14004d80a
jmp 0x14004ceca
mov rbx, r14
mov qword [rsp + 0xe8], rbx
test rbx, rbx
je 0x14004d815
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14004cef0
mov qword [rsp + 0x68], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rdi]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, rdi
call qword [rax + 0x18]
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14004cf61
mov rcx, qword [rbx]
test rcx, rcx
je 0x14004cf42
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14004cf54
call fcn.140002d6a
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.140001785
test edi, edi
jns 0x14004cf78
mov r9b, 1
lea r8, str.pLoc__ConnectServer
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14004cfbe
mov r9b, 1
lea r8, str.Could_not_set_proxy_blanket.
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov qword [rsp + 0x60], r14
mov rsi, qword [rsp + 0x68]
mov ecx, 0x18
call fcn.140002158
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14004cffb
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_VideoController
call fcn.14000146a
mov qword [rdi], rax
jmp 0x14004cffe
mov rdi, r14
mov qword [rsp + 0xf0], rdi
test rdi, rdi
je 0x14004d820
mov ecx, 0x18
call fcn.140002158
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14004d042
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x1400d39dc]
call fcn.14000146a
mov qword [rbx], rax
jmp 0x14004d045
mov rbx, r14
mov qword [rsp + 0xf8], rbx
test rbx, rbx
je 0x14004d82b
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14004d06b
mov qword [rsp + 0x60], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsi]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov r9d, 0x30
mov r8, qword [rdi]
mov rdx, qword [rbx]
mov rcx, rsi
call qword [rax + 0xa0]
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14004d0d4
mov rcx, qword [rbx]
test rcx, rcx
je 0x14004d0b4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14004d0c6
call fcn.140002d6a
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.140001785
nop
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14004d113
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004d0f4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14004d106
call fcn.140002d6a
mov qword [rdi + 8], r14
mov edx, 0x18
mov rcx, rdi
call fcn.140001785
test esi, esi
jns 0x14004d12a
mov r9b, 1
lea r8, str.pSvc__ExecQuery
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14004d769
mov byte [rsp + 0x54], 0
mov ebx, 0x104
mov r15d, dword [rsp + 0x50]
nop word [rax + rax]
cmp byte [rsp + 0x54], 0
jne 0x14004d769
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x98], r14d
mov rax, qword [rcx]
lea rdx, [rsp + 0x98]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x70]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
test eax, eax
jns 0x14004d1a0
mov r9b, 1
lea r8, str.pEnumerator__Next
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
cmp qword [rsp + 0x70], 0
jne 0x14004d1b2
mov byte [rsp + 0x54], 1
jmp 0x14004d740
mov edx, dword [0x14011ded0]
mov rax, qword gs:[0x58]
mov ecx, ebx
mov rbx, qword [rax + rdx*8]
add rbx, rcx
mov eax, dword [rbx]
cmp dword [0x14011d598], eax
jg 0x14004d836
mov eax, dword [rbx]
cmp dword [0x14011d59c], eax
jg 0x14004d887
mov qword [rsp + 0x3f0], r14
mov qword [rsp + 0x3f8], 0xf
mov byte [rsp + 0x3e0], 0
or r15d, 2
mov dword [rsp + 0x50], r15d
lea r8, [rsp + 0x3e0]
lea rdx, str.Status
mov rcx, qword [rsp + 0x70]
call fcn.140003468
lea rdx, [0x1401192b0]
cmp qword [0x1401192c8], 0x10
cmovae rdx, qword [0x1401192b0]
lea rcx, [rsp + 0x3e0]
mov rbx, qword [rsp + 0x3e0]
mov rdi, qword [rsp + 0x3f8]
cmp rdi, 0x10
cmovae rcx, rbx
mov rsi, qword [rsp + 0x3f0]
cmp rsi, qword [0x1401192c0]
jne 0x14004d27c
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14004d5b9
lea rcx, str.GPUSniffer
call fcn.140003170
cmp dword [rax], 0
je 0x14004d58f
lea rcx, [rsp + 0xb0]
call fcn.140002a09
nop
lea rcx, [rsp + 0xb0]
call fcn.140001b8b
mov rbx, rax
test rax, rax
je 0x14004d53c
lea rax, [0x1400cc6e0]
mov qword [rsp + 0x2f0], rax
lea rcx, [rsp + 0x378]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 4
mov dword [rsp + 0x50], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x2f0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x2f0], rdi
mov rax, qword [rsp + 0x2f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x2ec], edx
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0x360], r14
mov dword [rsp + 0x368], 4
lea rdx, str.WMIData::GetStrProperty_pclsObj__L_Status___returns__
lea rcx, [rsp + 0x2f0]
call fcn.14000200e
lea rdx, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 0x10
cmovae rdx, qword [rsp + 0x3e0]
mov r8, qword [rsp + 0x3f0]
mov rcx, rax
call fcn.14000131b
mov dl, 0x22
mov rcx, rax
call fcn.14000290a
nop
mov qword [rsp + 0x410], r14
mov qword [rsp + 0x418], 0xf
mov byte [rsp + 0x400], 0
or r15d, 0x10
mov dword [rsp + 0x50], r15d
mov ecx, dword [rsp + 0x368]
test cl, 2
jne 0x14004d418
mov rax, qword [rsp + 0x338]
mov r8, qword [rax]
test r8, r8
je 0x14004d418
mov rax, qword [rsp + 0x318]
mov rdx, qword [rax]
cmp r8, qword [rsp + 0x360]
cmovb r8, qword [rsp + 0x360]
sub r8, rdx
lea rcx, [rsp + 0x400]
call fcn.140002b8a
jmp 0x14004d456
test cl, 4
jne 0x14004d456
mov rax, qword [rsp + 0x330]
mov rcx, qword [rax]
test rcx, rcx
je 0x14004d456
mov rax, qword [rsp + 0x310]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x348]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
lea rcx, [rsp + 0x400]
call fcn.140002b8a
and r15d, 0xffffffef
or r15d, 8
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x400]
cmp qword [rsp + 0x418], 0x10
cmovae rax, qword [rsp + 0x400]
mov qword [rsp + 0x20], rax
lea r9, [0x1400ceb78]
mov r8d, 0xd6
lea rdx, str.e:w64rel20200312.r.121photoshopmain_sharedpsutil_sourceswingpuimplwin.cpp
mov rcx, rbx
call fcn.1400018d4
mov rdx, qword [rsp + 0x418]
cmp rdx, 0x10
jb 0x14004d4e5
inc rdx
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d4df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d4df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001785
nop
mov rax, qword [rsp + 0x2f0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x2f0], rdi
mov rax, qword [rsp + 0x2f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x2ec], edx
lea rcx, [rsp + 0x2f8]
call fcn.140002761
lea rcx, [rsp + 0x300]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x378]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rbx, qword [rsp + 0xb8]
test rbx, rbx
je 0x14004d57d
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004d578
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004d578
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15d, dword [rsp + 0x50]
jmp 0x14004d58f
jmp 0x14004d5a1
mov rdi, qword [rsp + 0x3f8]
mov rsi, qword [rsp + 0x3f0]
mov rbx, qword [rsp + 0x3e0]
lea rdx, [0x1401192d8]
cmp qword [0x1401192f0], 0x10
cmovae rdx, qword [0x1401192d8]
lea rcx, [rsp + 0x3e0]
cmp rdi, 0x10
cmovae rcx, rbx
cmp rsi, qword [0x1401192e8]
jne 0x14004d5f9
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14004d6f8
mov rcx, qword [r12 + 8]
sub rcx, qword [r12]
movabs rax, 0x4bda12f684bda13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebx, r14d
mov edi, r14d
mov qword [rsp + 0x78], r14
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14004d67c
mov rax, qword [rcx]
lea r8, [rsp + 0x78]
call qword [rax + 0x38]
test eax, eax
js 0x14004d67c
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x540]
call qword [rax + 0x40]
test eax, eax
jns 0x14004d66e
mov r9b, 1
lea r8, str.theIDXGIAdapter__GetDesc
xor edx, edx
xor ecx, ecx
call fcn.140001fc3
mov ebx, dword [rsp + 0x640]
mov edi, dword [rsp + 0x644]
mov r9d, edi
mov r8d, ebx
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x460]
call fcn.140003184
mov r8, rax
mov rax, qword [r12 + 8]
cmp qword [r12 + 0x10], rax
je 0x14004d6b9
mov rdx, r8
mov rcx, rax
call fcn.1400041dd
add qword [r12 + 8], 0xd8
jmp 0x14004d6c5
mov rdx, rax
mov rcx, r12
call fcn.1400025b8
nop
lea rcx, [rsp + 0x460]
call fcn.140002063
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14004d6e8
mov qword [rsp + 0x78], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, qword [rsp + 0x3e0]
mov rdi, qword [rsp + 0x3f8]
and r15d, 0xfffffffd
mov dword [rsp + 0x50], r15d
cmp rdi, 0x10
jb 0x14004d73b
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004d733
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d733
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140001785
mov ebx, 0x104
mov rcx, qword [rsp + 0x70]
test rcx, rcx
jne 0x14004d754
mov rcx, qword [rsp + 0x60]
jmp 0x14004d150
mov qword [rsp + 0x70], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
jmp 0x14004d150
test rcx, rcx
je 0x14004d77a
mov qword [rsp + 0x60], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14004d790
mov qword [rsp + 0x68], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14004d7ac
mov qword [rsp + 0x80], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14004d7cf
mov qword [rsp + 0x88], r14
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14004d7d9
mov rax, r12
mov rcx, qword [rsp + 0x678]
xor rcx, rsp
call fcn.140001c17
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov ecx, 0x8007000e
call fcn.1400033be
nop
mov ecx, 0x8007000e
call fcn.1400033be
nop
mov ecx, 0x8007000e
call fcn.1400033be
nop
mov ecx, 0x8007000e
call fcn.1400033be
nop
lea rcx, [0x14011d598]
call fcn.1400033a5
cmp dword [0x14011d598], 0xffffffff
jne 0x14004d1d8
mov r8d, 2
lea rdx, [0x1400d3a10]
lea rcx, [0x1401192b0]
call fcn.140002b8a
lea rcx, [0x1400c5dc0]
call fcn.1400024be
nop
lea rcx, [0x14011d598]
call fcn.140002b49
nop
jmp 0x14004d1d8
lea rcx, [0x14011d59c]
call fcn.1400033a5
cmp dword [0x14011d59c], 0xffffffff
jne 0x14004d1e6
mov r8d, 5
lea rdx, str.Error
lea rcx, [0x1401192d8]
call fcn.140002b8a
lea rcx, [0x1400c5d40]
call fcn.1400024be
nop
lea rcx, [0x14011d59c]
call fcn.140002b49
nop
jmp 0x14004d1e6