Function at 0x14007e100
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0x88
xor r15d, r15d
mov qword [rbp + 0x7f], r15
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
lea r9, [0x1400da1d0]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400da1e0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14007e266
mov qword [rbp + 0x77], r15
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, Ordinal_26
call fcn.140084be8
mov rbx, rax
mov qword [rbp + 0x6f], rax
test rax, rax
je 0x14007e194
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007e4b9
jmp 0x14007e197
mov rbx, r15
mov qword [rbp + 0x6f], rbx
test rbx, rbx
je 0x14007e4c4
lea rax, [rbp + 0x77]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x7f]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14007e211
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007e1f2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14007e204
call fcn.140084f34
mov qword [rbx + 8], r15
mov edx, Ordinal_26
mov rcx, rbx
call fcn.140084f34
test edi, edi
js 0x14007e257
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp + 0x77]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14007e27b
mov rcx, qword [rbp + 0x77]
test rcx, rcx
je 0x14007e257
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x14007e266
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov eax, 0xffffffff
add rsp, 0x88
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rbp - 9], r15
mov rax, qword [rbp + 0x77]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, Ordinal_26
call fcn.140084be8
mov rbx, rax
mov qword [rbp + 0x6f], rax
test rax, rax
je 0x14007e2bf
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.SELECT_CurrentRefreshRate_FROM_Win32_VideoController
call fcn.140085dd0
mov qword [rbx], rax
jmp 0x14007e2c2
mov rbx, r15
mov qword [rbp + 0x6f], rbx
test rbx, rbx
je 0x14007e4c4
mov rsi, qword [rbx]
mov ecx, Ordinal_26
call fcn.140084be8
mov rdi, rax
mov qword [rbp + 7], rax
test rax, rax
je 0x14007e304
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x1400f3104]
call fcn.140085dd0
mov qword [rdi], rax
jmp 0x14007e307
mov rdi, r15
mov qword [rbp + 7], rdi
test rdi, rdi
je 0x14007e4ae
lea rax, [rbp - 9]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, Ordinal_50
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp + 0x77]
call r14
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14007e377
mov rcx, qword [rdi]
test rcx, rcx
je 0x14007e357
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14007e369
call fcn.140084f34
mov qword [rdi + 8], r15
mov edx, Ordinal_26
mov rcx, rdi
call fcn.140084f34
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007e3b6
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007e397
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14007e3a9
call fcn.140084f34
mov qword [rbx + 8], r15
mov edx, Ordinal_26
mov rcx, rbx
call fcn.140084f34
mov rcx, qword [rbp - 9]
test esi, esi
jns 0x14007e3d2
test rcx, rcx
je 0x14007e248
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x14007e248
mov qword [rbp - 1], r15
mov dword [rbp + 0x67], r15d
mov ebx, 0xffffffff
test rcx, rcx
je 0x14007e477
mov edi, 0xffef
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 1]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp + 0x67], 0
je 0x14007e468
mov rcx, qword [rbp - 1]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xf]
xor r8d, r8d
lea rdx, str.CurrentRefreshRate
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
test eax, eax
js 0x14007e449
movzx eax, word [rbp + 0xf]
sub ax, 3
test di, ax
cmove ebx, dword [rbp + 0x17]
lea rcx, [rbp + 0xf]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 1]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 9]
test rcx, rcx
jne 0x14007e3f0
jmp 0x14007e477
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x14007e477
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x77]
test rcx, rcx
je 0x14007e486
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x14007e495
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
cmp ebx, 0xffffffff
cmove ebx, r15d
mov eax, ebx
add rsp, 0x88
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140085ca0
nop
mov ecx, 0x8007000e
call fcn.140085ca0
nop
mov ecx, 0x8007000e
call fcn.140085ca0
int3