Function at 0x14000a450
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1400e00c0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor r12b, r12b
call qword [sym.imp.ole32.dll_CoUninitialize]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
je 0x14000a49e
xor al, al
jmp 0x14000a980
xor r13d, r13d
mov qword [rbp - 0x31], r13
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea r9, [0x1400bbca0]
xor edx, edx
lea r8d, [r13 + 0x17]
lea rcx, [0x1400abe40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14000a4e1
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000a4dc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000a976
mov qword [rbp - 0x39], r13
mov rbx, qword [rbp - 0x31]
mov rax, qword [rbx]
mov rsi, qword [rax + 0x18]
mov ecx, 0x18
call fcn.1400703c8
mov rdi, rax
mov qword [rbp - 0x29], rax
test rax, rax
je 0x14000a52c
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000a9b3
jmp 0x14000a52f
mov rdi, r13
mov qword [rbp - 0x21], rdi
test rdi, rdi
je 0x14000a9be
lea rax, [rbp - 0x39]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
mov rcx, rbx
call rsi
mov ebx, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14000a5a8
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000a589
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000a59b
call fcn.140070654
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.140070654
test ebx, ebx
jns 0x14000a5d1
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x14000a5bc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000a5cc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000a976
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14000a628
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x14000a613
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000a623
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000a976
mov qword [rbp - 0x49], r13
mov rbx, qword [rbp - 0x39]
mov rax, qword [rbx]
mov r15, qword [rax + 0xa0]
mov ecx, 0x18
call fcn.1400703c8
mov rdi, rax
mov qword [rbp - 0x29], rax
test rax, rax
je 0x14000a66c
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_Process
call fcn.14006fcb0
mov qword [rdi], rax
jmp 0x14000a66f
mov rdi, r13
mov qword [rbp - 1], rdi
test rdi, rdi
je 0x14000a9c9
mov r14, qword [rdi]
mov ecx, 0x18
call fcn.1400703c8
mov rsi, rax
mov qword [rbp - 0x29], rax
test rax, rax
je 0x14000a6b1
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x1400bc774]
call fcn.14006fcb0
mov qword [rsi], rax
jmp 0x14000a6b4
mov rsi, r13
mov qword [rbp + 7], rsi
test rsi, rsi
je 0x14000a9d4
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0x30
mov r8, r14
mov rdx, qword [rsi]
mov rcx, rbx
call r15
mov ebx, eax
mov ecx, 0xffffffff
lock xadd dword [rsi + 0x10], ecx
cmp ecx, 1
jne 0x14000a723
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000a703
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], r13
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000a715
call fcn.140070654
mov qword [rsi + 8], r13
mov edx, 0x18
mov rcx, rsi
call fcn.140070654
nop
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000a762
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000a743
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000a755
call fcn.140070654
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.140070654
test ebx, ebx
jns 0x14000a79b
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000a776
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x14000a786
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000a796
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000a976
mov qword [rbp - 0x41], r13
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000a934
nop dword [rax]
mov dword [rbp - 0x21], r13d
mov rax, qword [rcx]
lea rdx, [rbp - 0x21]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x41]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rbp - 0x21], 0
je 0x14000a930
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x19]
xor r8d, r8d
lea rdx, [0x1400bc778]
call qword [rax + 0x20]
mov qword [rbp + 0xf], r13
mov qword [rbp + 0x1f], r13
mov qword [rbp + 0x27], 7
mov rdx, qword [rbp - 0x11]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000a820
lea rcx, [rbp + 0xf]
call fcn.1400027d0
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 8
cmovae rcx, qword [rbp + 0xf]
mov qword [rsp + 0x20], 7
lea r9, str.wuauclt
xor r8d, r8d
mov rdx, qword [rbp + 0x1f]
call fcn.1400176b0
lea rcx, [rbp - 0x19]
cmp rax, 0xffffffffffffffff
jne 0x14000a8d2
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x14000a883
mov qword [rbp - 0x41], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14000a8c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a8be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a9ad
call fcn.140070654
mov rcx, qword [rbp - 0x49]
test rcx, rcx
jne 0x14000a7b0
jmp 0x14000a934
mov r12b, 1
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x14000a8f0
mov qword [rbp - 0x41], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14000a930
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a92b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a9ad
call fcn.140070654
mov rcx, qword [rbp - 0x49]
mov rax, qword [rbp - 0x41]
test rax, rax
je 0x14000a94a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000a956
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x14000a966
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000a976
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
movzx eax, r12b
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140070140
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007d0fc
nop
mov ecx, 0x8007000e
call fcn.14006fca0
nop
mov ecx, 0x8007000e
call fcn.14006fca0
nop
mov ecx, 0x8007000e
call fcn.14006fca0
nop
mov ecx, 0x8007000e
call fcn.14006fca0
int3