Function at 0x14000ee80
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov rax, rsp
push rsi
push rdi
push r14
sub rsp, 0x60
mov qword [rax - 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov r14, rdx
mov rsi, rcx
xor ebp, ebp
mov qword [rcx], rbp
mov qword [rdx], rbp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
jns 0x14000eee2
call fcn.1400023d0
mov rcx, rax
mov dword [rsp + 0x20], ebx
lea r9, str.Failed_to_initialize_COM_library__hr:0x_08X_
lea r8, str.NLMUtils::InitWMIRead
lea edx, [rbp + 5]
call fcn.14001c1e0
mov eax, ebx
jmp 0x14000f0a0
mov qword [rsp + 0x20], rsi
lea r9, [0x1400696c8]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1400696b8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test eax, eax
jns 0x14000ef1d
call fcn.1400023d0
lea r9, str.Failed_to_create_IWbemLocator_object.__hr:0x_08X_
mov edx, 5
jmp 0x14000f08b
cmp qword [rsi], rbp
je 0x14000efe5
mov ecx, SafeArrayPutElement
call fcn.14001e180
mov rbx, rax
mov qword [rsp + 0x80], rax
test rax, rax
je 0x14000ef66
mov qword [rax + 8], rbp
mov dword [rax + 0x10], 1
lea rcx, str.ROOThpinstrumentedbios
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f0c0
jmp 0x14000ef69
mov rbx, rbp
mov qword [rsp + 0x80], rbx
test rbx, rbx
je 0x14000f0b5
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + SafeArrayPutElement]
mov edi, eax
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000efe5
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000efc6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rbp
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000efd8
call fcn.14001e178
mov qword [rbx + 8], rbp
mov edx, SafeArrayPutElement
mov rcx, rbx
call fcn.14001e178
test edi, edi
jns 0x14000eff7
call fcn.1400023d0
lea r9, str.Could_not_connect_to_ROOThpinstrumentedbios.__hr:0x_08X_
jmp 0x14000f03a
mov rcx, qword [r14]
test rcx, rcx
je 0x14000f07a
mov dword [rsp + 0x38], ebp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov edi, eax
test eax, eax
jns 0x14000f07a
call fcn.1400023d0
lea r9, str.Could_not_set_proxy_blanket_.__hr:0x_08X_
mov dword [rsp + 0x20], edi
lea r8, str.NLMUtils::InitWMIRead
mov edx, 5
mov rcx, rax
call fcn.14001c1e0
mov rcx, qword [r14]
test rcx, rcx
je 0x14000f063
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [r14], rbp
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000f074
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsi], rbp
call qword [sym.imp.ole32.dll_CoUninitialize]
call fcn.1400023d0
mov edx, 1
lea r9, str.Return_Value__0x_x
mov dword [rsp + 0x20], edi
lea r8, str.NLMUtils::InitWMIRead
mov rcx, rax
call fcn.14001c1e0
mov eax, edi
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
mov ecx, 0x8007000e
call fcn.14001ee50
nop
mov ecx, 0x8007000e
call fcn.14001ee50
int3