Function at 0x14002bf54
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
xor r12d, r12d
mov rdi, rcx
lea rcx, [rbp - 0x18]
mov dword [rbp + 0x88], r12d
mov esi, r12d
mov qword [rsp + 0x60], r12
mov qword [rbp + 0x98], r12
mov qword [rbp + 0x90], r12
mov qword [rsp + 0x50], r12
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [r12 + 0xf]
mov qword [rbp - 0x60], r12
xor r8d, r8d
mov qword [rbp - 0x58], rax
lea rdx, [0x14009d600]
mov qword [rbp - 0x38], rax
mov rcx, rdi
mov byte [rbp - 0x70], r12b
mov qword [rbp - 0x40], r12
mov byte [rbp - 0x50], r12b
call fcn.140004d8c
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov qword [rsp + 0x40], r12
lea r13d, [r12 + 1]
mov dword [rsp + 0x38], r12d
lea r14d, [r12 + 3]
test eax, eax
mov qword [rsp + 0x30], r12
mov r15d, r12d
mov dword [rsp + 0x28], r14d
cmove r15d, r13d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
je 0x14002c039
cmp eax, 0x80010119
jne 0x14002c3b6
lea rax, [rsp + 0x60]
mov r8d, r13d
lea r9, [0x1400a9528]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400a94c8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14002c3b6
lea rdx, str.ROOTCIMV2
lea rcx, [rsp + 0x58]
call fcn.1400220fc
mov rcx, qword [rax]
test rcx, rcx
je 0x14002c082
mov rdx, qword [rcx]
jmp 0x14002c085
mov rdx, r12
mov rcx, qword [rsp + 0x60]
lea r8, [rbp + 0x98]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r12
xor r8d, r8d
mov qword [rsp + 0x30], r12
mov rax, qword [rcx]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [rax + 0x18]
lea rcx, [rsp + 0x58]
mov ebx, eax
call fcn.140024498
test ebx, ebx
jne 0x14002c3b6
mov rcx, qword [rbp + 0x98]
lea edx, [rbx + 0xa]
mov dword [rsp + 0x38], r12d
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jne 0x14002c3b6
lea ecx, [rbx + 0x18]
call fcn.140037e24
mov rbx, rax
test rax, rax
je 0x14002c125
lea rcx, str.Select__from_Win32_BaseBoard
mov qword [rax + 8], r12
mov dword [rax + 0x10], r13d
call fcn.140039270
mov qword [rbx], rax
jmp 0x14002c128
mov rbx, r12
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14002c4a6
mov r14, qword [rbx]
mov ecx, 0x18
call fcn.140037e24
mov rbx, rax
test rax, rax
je 0x14002c164
lea rcx, [0x1400a1d74]
mov qword [rax + 8], r12
mov dword [rax + 0x10], r13d
call fcn.140039270
mov qword [rbx], rax
jmp 0x14002c167
mov rbx, r12
mov qword [rsp + 0x68], rbx
test rbx, rbx
je 0x14002c4b1
mov rcx, qword [rbp + 0x98]
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x28], rdx
mov r9d, gethostbyname
mov rdx, qword [rbx]
mov r8, r14
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
call qword [rax + 0xa0]
lea rcx, [rsp + 0x68]
mov ebx, eax
call fcn.140024498
lea rcx, [rsp + 0x58]
call fcn.140024498
test ebx, ebx
jne 0x14002c3b6
or r14, 0xffffffffffffffff
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14002c3ac
mov rax, qword [rcx]
lea rdx, [rbp + 0x88]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x50]
mov edx, r14d
mov r8d, r13d
call qword [rax + 0x20]
test eax, eax
jne 0x14002c3a5
cmp dword [rbp + 0x88], r12d
je 0x14002c1c4
mov rcx, qword [rsp + 0x50]
lea r9, [rbp - 0x18]
mov qword [rsp + 0x28], r12
lea rdx, str.Manufacturer
xor r8d, r8d
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
call qword [rax + 0x20]
test eax, eax
jne 0x14002c25d
cmp word [rbp - 0x18], 2
jb 0x14002c25d
mov rcx, qword [rbp - 0x10]
call fcn.140039150
mov rbx, rax
cmp byte [rax], r12b
jne 0x14002c246
mov rax, r12
jmp 0x14002c24e
mov rcx, rbx
call fcn.140045e50
mov r8, rax
lea rcx, [rbp - 0x70]
mov rdx, rbx
call fcn.140004d8c
mov rcx, qword [rsp + 0x50]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], r12
lea rdx, str.Product
xor r8d, r8d
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
call qword [rax + 0x20]
test eax, eax
jne 0x14002c2b8
cmp word [rbp - 0x30], 2
jb 0x14002c2b8
mov rcx, qword [rbp - 0x28]
call fcn.140039150
mov rbx, rax
cmp byte [rax], r12b
jne 0x14002c2a1
mov rax, r12
jmp 0x14002c2a9
mov rcx, rbx
call fcn.140045e50
mov r8, rax
lea rcx, [rbp - 0x50]
mov rdx, rbx
call fcn.140004d8c
lea rdx, [0x14009d600]
lea rcx, [rbp - 0x70]
call fcn.140004f04
test eax, eax
je 0x14002c1c4
lea r8, [0x14009e758]
lea rdx, [rbp - 0x70]
lea rcx, [rbp]
call fcn.14000145c
mov r9, r14
lea rdx, [rbp - 0x50]
xor r8d, r8d
mov rcx, rax
call fcn.140004a10
mov rdx, rax
mov qword [rbp - 0x78], reloc.WSOCK32.dll_ntohs
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x80], r12
mov byte [rsp + 0x70], r12b
call fcn.140004354
lea rax, [rsp + 0x70]
cmp rdi, rax
je 0x14002c361
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14002c336
mov rcx, qword [rdi]
inc rdx
mov r8, r13
call fcn.140004554
mov qword [rdi + 0x18], reloc.WSOCK32.dll_ntohs
cmp qword [rdi + 0x18], 0x10
mov qword [rdi + 0x10], r12
jb 0x14002c34e
mov rax, qword [rdi]
jmp 0x14002c351
mov rax, rdi
lea rdx, [rsp + 0x70]
mov byte [rax], r12b
mov rcx, rdi
call fcn.140004354
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14002c37b
mov rcx, qword [rsp + 0x70]
inc rdx
mov r8, r13
call fcn.140004554
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x78], reloc.WSOCK32.dll_ntohs
mov qword [rbp - 0x80], r12
mov byte [rsp + 0x70], r12b
cmp rdx, 0x10
jb 0x14002c3a5
mov rcx, qword [rbp]
inc rdx
mov r8, r13
call fcn.140004554
mov rcx, qword [rbp + 0x90]
cmp qword [rdi + 0x10], r12
cmovne esi, r13d
jmp 0x14002c3bd
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x14002c3d9
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14002c3f3
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14002c3fe
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14002c40e
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
test r15d, r15d
je 0x14002c419
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14002c432
mov rcx, qword [rbp - 0x50]
inc rdx
mov r8, r13
call fcn.140004554
mov rdx, qword [rbp - 0x58]
mov qword [rbp - 0x38], reloc.WSOCK32.dll_ntohs
mov qword [rbp - 0x40], r12
mov byte [rbp - 0x50], r12b
cmp rdx, 0x10
jb 0x14002c45b
mov rcx, qword [rbp - 0x70]
inc rdx
mov r8, r13
call fcn.140004554
lea rcx, [rbp + 0x20]
mov qword [rbp - 0x58], reloc.WSOCK32.dll_ntohs
mov qword [rbp - 0x60], r12
mov byte [rbp - 0x70], r12b
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x18]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rbx, qword [rsp + 0x180]
mov eax, esi
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140038fa0
int3
mov ecx, 0x8007000e
call fcn.140038fa0
int3