Function at 0x14000a1e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x100
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r14, r9
mov r12, r8
mov r13, rdx
mov qword [rbp - 0x21], rdx
mov qword [rbp - 0x19], r8
mov r15, qword [rbp + 0x7f]
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xor eax, eax
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
lea r8d, [rax + 7]
lea rdx, str.SELECT
lea rcx, [rbp - 0x11]
call fcn.14000b570
nop
mov r9, r12
cmp qword [r12 + 0x18], 7
jbe 0x14000a254
mov r9, qword [r12]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp word [r9 + rdi*2], 0
jne 0x14000a260
mov rsi, qword [rbp - 1]
mov rcx, qword [rbp + 7]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14000a2b3
lea rax, [rdi + rsi]
mov qword [rbp - 1], rax
lea rbx, [rbp - 0x11]
cmp rcx, 7
cmova rbx, qword [rbp - 0x11]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rdi]
xor ecx, ecx
mov word [rbx + rax*2], cx
lea rbx, [rbp - 0x11]
jmp 0x14000a2ca
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.14000f360
mov rbx, rax
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x14000a310
lea rsi, [rcx + 6]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x14000a2f2
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, str._FROM
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x14000a332
mov qword [rsp + 0x20], 6
lea r9, str._FROM
xor r8d, r8d
lea edx, [r8 + 6]
mov rcx, rbx
call fcn.14000f360
mov rbx, rax
mov rdx, r13
cmp qword [r13 + 0x18], 7
jbe 0x14000a340
mov rdx, qword [r13]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000a350
mov rcx, rbx
call fcn.14003f150
xor esi, esi
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], rsi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rax
mov dword [rbp + 0xf], esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14000a515
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea edx, [rsi - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x14000a50e
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r9, [0x1401ac148]
xor edx, edx
lea r8d, [rsi + 1]
lea rcx, [0x1401ac098]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14000a50e
mov rax, qword [rbp - 0x51]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
lea ecx, [rsi + 0x18]
call fcn.14014ac08
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14000a448
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rsi
mov dword [rbx + 0x10], 1
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000a44b
test r15, r15
jne 0x14000aa9b
jmp 0x14000a44b
mov rbx, rsi
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14000aac7
lea rax, [rbp - 0x59]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x51]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000a4c5
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a4a6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000a4b8
call fcn.14014b350
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.14014ac44
test edi, edi
js 0x14000a504
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14000a55e
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + select]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 7]
cmp rdx, 7
jbe 0x14000a748
mov rcx, qword [rbp - 0x11]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a554
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aa89
call fcn.14014ac44
jmp 0x14000a748
mov rax, qword [rbp - 0x59]
mov rcx, qword [rax]
mov r15, qword [rcx + 0xa0]
lea rdi, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova rdi, qword [rbp - 0x11]
mov ecx, 0x18
call fcn.14014ac08
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14000a5c4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rsi
mov dword [rbx + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000a5c7
test rdi, rdi
jne 0x14000aaa6
jmp 0x14000a5c7
mov rbx, rsi
mov qword [rbp - 0x79], rbx
test rbx, rbx
je 0x14000aac7
mov rsi, qword [rbx]
mov ecx, 0x18
call fcn.14014ac08
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14000a622
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], 1
lea rcx, [0x14015de08]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000aad2
xor ecx, ecx
jmp 0x14000a626
xor ecx, ecx
mov edi, ecx
mov qword [rbp - 0x71], rdi
test rdi, rdi
je 0x14000aa90
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, 0x30
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x59]
call r15
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14000a69e
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000a67b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor r15d, r15d
mov qword [rdi], r15
jmp 0x14000a67e
xor r15d, r15d
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000a690
call fcn.14014b350
mov qword [rdi + 8], r15
mov edx, 0x18
mov rcx, rdi
call fcn.14014ac44
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000a6e3
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a6c2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor edi, edi
mov qword [rbx], rdi
jmp 0x14000a6c4
xor edi, edi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000a6d6
call fcn.14014b350
mov qword [rbx + 8], rdi
mov edx, 0x18
mov rcx, rbx
call fcn.14014ac44
test esi, esi
jns 0x14000a790
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + select]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 7]
cmp rdx, 7
jbe 0x14000a746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aa89
call fcn.14014ac44
xor esi, esi
mov qword [rbp - 1], rsi
mov qword [rbp + 7], 7
mov word [rbp - 0x11], si
mov rcx, r13
call fcn.14003e3c0
nop
mov rcx, r12
call fcn.14003e3c0
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14014b190
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000aa0b
xor esi, esi
nop
mov rax, qword [rcx]
lea rdx, [rbp + 0xf]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x41]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rbp + 0xf], 0
je 0x14000aa0b
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
mov rdx, r12
cmp qword [r12 + 0x18], 7
jbe 0x14000a7dc
mov rdx, qword [r12]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x39]
xor r8d, r8d
call qword [rax + 0x20]
lea rdx, [0x1401df438]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
je 0x14000a9d4
lea rdx, [0x1401df450]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
je 0x14000a9d4
lea rdx, [0x1401df468]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
jne 0x14000a850
cmp word [rbp - 0x31], ax
setne byte [rsp + 0x50]
lea rdx, [rsp + 0x50]
jmp 0x14000a9e2
lea rdx, [0x1401df480]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
jne 0x14000a879
cmp dword [rbp - 0x31], eax
setne byte [rsp + 0x51]
lea rdx, [rsp + 0x51]
jmp 0x14000a9e2
lea rdx, [0x1401df498]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
jne 0x14000a8a3
cmp word [rbp - 0x31], ax
setne byte [rsp + 0x52]
lea rdx, [rsp + 0x52]
jmp 0x14000a9e2
lea rdx, [0x1401df4b0]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
jne 0x14000a8ce
cmp qword [rbp - 0x31], 0
setne byte [rsp + 0x53]
lea rdx, [rsp + 0x53]
jmp 0x14000a9e2
lea rdx, [0x1401df4c8]
lea rcx, [0x1401df468]
call sub.VCRUNTIME140.dll___std_type_info_compare
test eax, eax
jne 0x14000a8f9
cmp qword [rbp - 0x31], 0
setne byte [rsp + 0x54]
lea rdx, [rsp + 0x54]
jmp 0x14000a9e2
mov rdi, qword [rbp - 0x31]
mov ecx, 0x18
call fcn.14014ac08
mov rbx, rax
mov qword [rbp - 0x69], rax
test rax, rax
je 0x14000a946
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rsi
mov dword [rbx + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000a949
test rdi, rdi
jne 0x14000aab1
jmp 0x14000a949
mov rbx, rsi
mov qword [rbp - 0x61], rbx
test rbx, rbx
je 0x14000aac7
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a97a
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
test rax, rax
je 0x14000aabc
jmp 0x14000a97d
mov rax, rsi
test rax, rax
setne byte [rsp + 0x55]
lea rdx, [rsp + 0x55]
mov rcx, r14
call fcn.140069ad0
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000a9ea
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a9b3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000a9c5
call fcn.14014b350
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.14014ac44
jmp 0x14000a9ea
cmp dword [rbp - 0x31], 0
setne byte [rsp + 0x56]
lea rdx, [rsp + 0x56]
mov rcx, r14
call fcn.140069ad0
lea rcx, [rbp - 0x39]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rbp - 0x49]
test rcx, rcx
jne 0x14000a7a0
cmp qword [r14 + 0x18], 0
jne 0x14000aa21
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r14
call fcn.14006d3d0
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rbp - 0x49]
mov rax, qword [rcx]
call qword [rax + select]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 7]
cmp rdx, 7
jbe 0x14000a746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a741
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
nop
mov ecx, 0x8007000e
call fcn.140149bb0
int3