Function at 0x1400a6220
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push rbp
push rdi
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1401222f0]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r15, rdx
mov r8d, ecx
lea rdx, [0x1400daec8]
lea rcx, [rbp - 0x70]
call fcn.140079460
test r15, r15
je 0x1400a6575
mov qword [rsp + 0x360], rbx
xor ebx, ebx
lea rax, [rsp + 0x68]
lea r9, [0x1400f0b60]
lea rcx, [0x1400f0c30]
lea r8d, [rbx + 1]
xor edx, edx
mov qword [rsp + 0x320], r14
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x58], rbx
mov r14d, ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x1400a62b2
mov ebx, eax
jmp 0x1400a6534
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x58]
xor r9d, r9d
mov rax, qword [rcx]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
lea rdx, str.root_cimv2
xor r8d, r8d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jns 0x1400a62f2
mov ebx, eax
jmp 0x1400a6534
mov rcx, qword [rsp + 0x58]
mov dword [rsp + 0x38], ebx
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea edx, [r9 + 0xa]
xor r8d, r8d
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1400a632b
mov ebx, eax
jmp 0x1400a6534
movaps xmm0, xmmword [str.select__from_msft_providers_where_HostProcessIdentifier_]
movaps xmm1, xmmword [0x1400f0650]
lea rcx, [rbp + 0x88]
xor edx, edx
mov r8d, 0x186
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [0x1400f0660]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [0x1400f0670]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [0x1400f0680]
movaps xmmword [rbp + 0x40], xmm1
movaps xmm1, xmmword [0x1400f0690]
movaps xmmword [rbp + 0x50], xmm0
movaps xmm0, xmmword [0x1400f06a0]
movaps xmmword [rbp + 0x60], xmm1
movsd xmm1, qword [0x1400f06b0]
movsd qword [rbp + 0x80], xmm1
movaps xmmword [rbp + 0x70], xmm0
call fcn.1400a8b00
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0x10]
mov edx, 0xff
call fcn.1400abdb0
test eax, eax
je 0x1400a63bc
mov ebx, 0x8000ffff
jmp 0x1400a6534
mov ecx, 0x320
call fcn.1400a82f0
mov r14, rax
test rax, rax
jne 0x1400a63d8
mov ebx, 0x8007000e
jmp 0x1400a6534
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0x50]
lea rdx, [rbp + 0x10]
mov r8, rax
mov qword [rsp + 0x368], rsi
mov dword [rsp + 0x50], ebx
call fcn.1400a5ef0
test eax, eax
je 0x1400a647a
cmp qword [rsp + 0x58], rbx
je 0x1400a650d
mov ecx, 0x320
call fcn.1400a82f0
mov rsi, rax
test rax, rax
jne 0x1400a6427
mov edi, 0x8007000e
mov ebx, edi
jmp 0x1400a652c
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0x60]
lea rdx, str.select__from_msft_providers
mov r8, rax
mov dword [rsp + 0x60], ebx
call fcn.1400a5ef0
mov edi, eax
test eax, eax
jne 0x1400a646a
mov r8d, dword [rsp + 0x60]
lea rax, [rsp + 0x50]
lea rcx, [rbp - 0x70]
mov r9, r14
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.1400a6030
mov edi, eax
mov rcx, rsi
call fcn.1400a82b0
test edi, edi
jne 0x1400a6512
mov qword [rsp + 0x328], r12
mov r12d, dword [rsp + 0x50]
mov edi, ebx
test r12d, r12d
je 0x1400a6524
mov rdx, qword [rsp + 0x68]
mov eax, edi
xorps xmm0, xmm0
mov rsi, qword [r14 + rax*8]
lea r8, [rsp + 0x70]
mov qword [rbp - 0x80], rbx
movdqu xmmword [rsp + 0x70], xmm0
mov rcx, rsi
call fcn.1400a65a0
test eax, eax
jne 0x1400a64fb
cmp qword [rbp - 0x80], rbx
je 0x1400a64fb
cmp qword [rsp + 0x70], rbx
je 0x1400a64fb
cmp qword [rsp + 0x78], rbx
je 0x1400a64fb
lea ecx, [rax + 0x20]
call fcn.1400a82f0
mov rdx, rax
test rax, rax
je 0x1400a6516
movups xmm0, xmmword [rsp + 0x70]
movsd xmm1, qword [rbp - 0x80]
movups xmmword [rax], xmm0
movsd qword [rax + 0x10], xmm1
mov rax, qword [r15]
mov qword [rdx + 0x18], rax
mov qword [r15], rdx
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
inc edi
cmp edi, r12d
jb 0x1400a6492
jmp 0x1400a6524
mov edi, 0x80070057
mov ebx, edi
jmp 0x1400a652c
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov ebx, 0x8007000e
mov r12, qword [rsp + 0x328]
mov rsi, qword [rsp + 0x368]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400a6544
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400a6554
mov rdx, qword [rcx]
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetDim]
test r14, r14
je 0x1400a6561
mov rcx, r14
call fcn.1400a82b0
mov r14, qword [rsp + 0x320]
mov eax, ebx
mov rbx, qword [rsp + 0x360]
jmp 0x1400a657a
mov eax, 0x80070057
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1400ab140
add rsp, 0x330
pop r15
pop rdi
pop rbp
ret