Function at 0x140001290
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x58
mov rbp, r9
mov r12, r8
mov r14, rdx
mov rbx, rcx
call fcn.140001c30
xor ecx, ecx
call qword [sym.imp.OLE32.dll_CoInitialize]
mov edi, eax
mov esi, 1
test eax, eax
jns 0x1400012fa
lea r9, str.ConnectServer
movzx edx, si
lea r8, str._s_Failed_to_CoInitialize._Err_code__0x_x
mov dword [rsp + 0x20], eax
lea rcx, str.P_Sensor
call fcn.140004370
mov eax, edi
add rsp, 0x58
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea rax, [rbx + 8]
mov r8d, esi
lea r9, [0x14001d360]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x14001d340]
call qword [sym.imp.OLE32.dll_CoCreateInstance]
mov edi, eax
test eax, eax
jns 0x14000134a
mov r9d, eax
movzx edx, si
lea r8, str.WMI:_Failed_to_create_instance__Error__x_
lea rcx, str.P_Sensor
call fcn.140004370
mov eax, edi
add rsp, 0x58
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0x90], r13
mov rcx, r14
mov qword [rsp + 0x50], r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, r12
mov r15, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, rbp
mov r13, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r12, rax
xor eax, eax
lea ebp, [rax - 1]
test r14, r14
je 0x140001413
mov qword [rsp + 0x38], rax
lea ecx, [rax + 3]
mov qword [rsp + 0x30], rax
mov r9d, ebp
mov dword [rsp + 0x28], eax
mov r8, r14
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea edi, [rax - 1]
test edi, edi
jle 0x140001413
mov rax, qword [rbx]
mov edx, esi
mov ecx, dword [rax - 0xc]
sub edx, dword [rax - 8]
sub ecx, edi
or edx, ecx
jge 0x1400013d2
mov edx, edi
mov rcx, rbx
call fcn.140001ad0
mov rax, qword [rbx]
xor ecx, ecx
xor edx, edx
mov qword [rsp + 0x38], rcx
mov r9d, ebp
mov qword [rsp + 0x30], rcx
mov r8, r14
mov dword [rsp + 0x28], edi
lea ecx, [rdx + 3]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rax, qword [rbx]
cmp edi, dword [rax - 0xc]
jg 0x140001550
mov dword [rax - 0x10], edi
mov rax, qword [rbx]
movsxd rcx, edi
mov byte [rcx + rax], 0
jmp 0x140001462
mov rax, qword [rbx]
cmp dword [rax - 0x10], 0
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
je 0x140001462
cmp dword [rdx + 0x10], 0
jge 0x140001440
cmp dword [rax - 0xc], 0
jl 0x140001550
xor ebp, ebp
mov dword [rax - 0x10], ebp
mov rax, qword [rbx]
mov byte [rax], bpl
jmp 0x140001464
lock xadd dword [rdx + 0x10], ebp
sub ebp, esi
jg 0x140001452
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbx], rax
xor ebp, ebp
cmp qword [rsp + 0xa8], 0
je 0x140001482
cmp qword [rsp + 0xa0], 0
je 0x140001482
mov r9, r12
mov r8, r13
jmp 0x140001488
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbx + 8]
lea r14, [rbx + 0x10]
mov qword [rsp + 0x40], r14
mov rdx, r15
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
mov rax, qword [rcx]
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
call qword [rax + 0x18]
mov edi, eax
test eax, eax
js 0x1400014e9
mov rcx, qword [r14]
xor r9d, r9d
mov dword [rsp + 0x38], ebp
xor r8d, r8d
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 3
lea edx, [r9 + 0xa]
mov dword [rsp + 0x20], 3
call qword [sym.imp.OLE32.dll_CoSetProxyBlanket]
mov edi, eax
test eax, eax
jns 0x14000150a
mov r9d, edi
movzx edx, si
lea r8, str.WMI:_Connect_Server_failed__Error__x_
lea rcx, str.P_Sensor
call fcn.140004370
mov rcx, rbx
call fcn.140001c30
test r15, r15
je 0x140001518
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test r13, r13
je 0x140001526
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test r12, r12
je 0x140001534
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r13, qword [rsp + 0x90]
mov eax, edi
mov r15, qword [rsp + 0x50]
add rsp, 0x58
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0x80070057
call fcn.140001250
int3