Function at 0x1400348dc
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov rbx, rcx
cmp dword [rcx + 8], 0
jne 0x140034b20
lea rdi, [rcx + 0x18]
mov qword [rax - 0x68], rdi
lea r9, [0x140078460]
xor edx, edx
lea r8d, [rdx + 0x17]
lea rcx, [0x1400783b0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14003495f
lea rdi, str.MediaNotification.cpp
mov dword [rbp - 0x10], reloc.MurocApi.dll_Ordinal_154
lea r8, str.CoCreateInstance___failed___returned_0x_x_n
mov qword [rbp - 0x18], rdi
mov edx, 0x35
lea rcx, [rbp - 0x18]
mov r9d, eax
call fcn.140006d78
xor eax, eax
jmp 0x140034b25
mov rcx, qword [rdi]
lea r14, [rbx + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x40], r14
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.ROOTWMI
call qword [rax + 0x18]
lea rdi, str.MediaNotification.cpp
mov edx, 0x35
lea rcx, [rbp - 0x18]
mov qword [rbp - 0x18], rdi
test eax, eax
je 0x1400349bd
mov dword [rbp - 0x10], reloc.OLEAUT32.dll_LoadRegTypeLib
lea r8, str.Could_not_connect_to_server___error_0x_x_n
jmp 0x140034950
mov dword [rbp - 0x10], 0xa4
lea r8, str.Connected_to_ROOTWMI.
call fcn.140006d78
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov eax, 3
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
lea edx, [rax + 7]
mov rcx, qword [r14]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x140034a11
mov dword [rbp - 0x10], 0xad
lea r8, str.CoSetProxyBlanket_FAILED___error_0x_x_n
jmp 0x140034943
mov ecx, 0x20
call sub.mfc140.dll_Ordinal_1485
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140034a2d
mov rcx, rax
call fcn.140047c78
nop
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x140034a5b
mov dword [rbp - 0x10], UnRegisterTypeLib
lea r8, str.Could_not_allocate_sink_for_events.
mov qword [rbp - 0x18], rdi
mov edx, 0x35
lea rcx, [rbp - 0x18]
call fcn.140006d78
jmp 0x140034958
mov rcx, rbx
call fcn.140034054
mov qword [rbp - 0x18], rdi
mov dword [rbp - 0x10], reloc.OLEAUT32.dll_VariantTimeToSystemTime
mov rcx, rbx
call fcn.140034478
mov r9d, eax
lea r8, str.Number_of_wired_adapters__d
mov edx, 0x35
lea rcx, [rbp - 0x18]
call fcn.140006d78
xor r15d, r15d
mov rcx, rbx
call fcn.140034478
test eax, eax
je 0x140034ae0
mov qword [rbp - 0x18], rdi
mov dword [rbp - 0x10], 0xbb
mov edx, r15d
mov rcx, rbx
call fcn.140034450
mov qword [rsp + 0x20], rax
mov r9d, r15d
lea r8, str.Adapter__d:__s
mov edx, 0x35
lea rcx, [rbp - 0x18]
call fcn.140006d78
inc r15d
mov rcx, rbx
call fcn.140034478
cmp r15d, eax
jb 0x140034a9d
lea r8, [0x140034658]
mov rdx, rbx
mov rcx, qword [rbx + 0x20]
call fcn.140048448
mov rcx, qword [rbx + 0x20]
mov r8, qword [r14]
mov rdx, rcx
call fcn.140048084
test eax, eax
jns 0x140034b19
mov dword [rbp - 0x10], 0xc1
lea r8, str.Failed_to_register_async_notifications_n
jmp 0x140034a44
mov dword [rbx + 8], 1
mov eax, 1
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret