Function at 0x180179910
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov r14, rcx
mov dword [rbp - 0x21], 1
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r12d, r12d
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], r12
mov ecx, 0x20
call fcn.180187898
mov qword [r14], rax
mov qword [r14 + 0x10], 0x11
mov qword [r14 + 0x18], 0x1f
movups xmm0, xmmword [str.Microsoft_Windows]
movups xmmword [rax], xmm0
movzx ecx, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], r12b
mov dword [rbp - 0x21], 1
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov edx, 0x80000000
lea ecx, [rax + rdx]
test edx, ecx
jne 0x1801799a6
cmp eax, 0x80010106
jne 0x180179e2e
mov qword [rbp - 0x39], r12
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
lea r9, [0x1801f9860]
xor edx, edx
mov r8d, 1
lea rcx, [0x1801f9870]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x180179ddb
mov qword [rbp - 0x41], r12
mov ecx, 0x18
call fcn.180187898
mov rbx, rax
mov qword [rbp - 0x49], rax
test rax, rax
je 0x180179a17
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180179e4e
jmp 0x180179a1a
mov rbx, r12
mov qword [rbp - 0x49], rbx
test rbx, rbx
je 0x180179e64
mov rcx, qword [rbp - 0x39]
mov rax, qword [rcx]
lea rdx, [rbp - 0x41]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x18]
mov edi, eax
mov rsi, 0xffffffffffffffff
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180179a9c
mov rcx, qword [rbx]
test rcx, rcx
je 0x180179a7d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180179a8f
call fcn.180187890
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.180187890
test edi, edi
js 0x180179ddb
mov qword [rbp - 0x11], r12
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
lea r8, [rbp - 0x11]
lea rdx, [0x1801f9880]
call qword [rax]
test eax, eax
js 0x180179ddb
mov rcx, qword [rbp - 0x11]
test rcx, rcx
je 0x180179ddb
mov dword [rbp + 0x77], r12d
mov dword [rbp + 0x6f], r12d
mov qword [rbp + 7], r12
mov dword [rbp - 0x15], r12d
mov dword [rbp - 0x19], r12d
mov qword [rbp - 1], r12
mov dword [rbp - 0x1d], r12d
mov rax, qword [rcx]
lea rdx, [rbp - 0x1d]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp - 1]
mov qword [rsp + 0x38], rdx
lea rdx, [rbp - 0x19]
mov qword [rsp + 0x30], rdx
lea rdx, [rbp - 0x15]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp + 7]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x6f]
lea r8, [rbp + 0x77]
mov rdx, qword [rbp - 0x41]
call qword [rax + 0x18]
test eax, eax
js 0x180179ddb
mov rcx, qword [rbp - 0x11]
mov r10, qword [rcx]
mov dword [rsp + 0x40], r12d
mov rax, qword [rbp - 1]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov rax, qword [rbp + 7]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x6f]
mov r8d, dword [rbp + 0x77]
mov rdx, qword [rbp - 0x41]
call qword [r10 + 0x20]
test eax, eax
js 0x180179ddb
mov qword [rbp - 0x31], r12
mov ecx, 0x18
call fcn.180187898
mov rbx, rax
mov qword [rbp - 0x49], rax
test rax, rax
je 0x180179bad
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.SELECT_Caption_FROM_Win32_OperatingSystem
call fcn.180188c40
mov qword [rbx], rax
jmp 0x180179bb0
mov rbx, r12
mov qword [rbp - 0x49], rbx
test rbx, rbx
je 0x180179e64
mov ecx, 0x18
call fcn.180187898
mov rdi, rax
mov qword [rbp - 9], rax
test rax, rax
je 0x180179bef
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x1801f7d8c]
call fcn.180188c40
mov qword [rdi], rax
jmp 0x180179bf2
mov rdi, r12
mov qword [rbp - 9], rdi
test rdi, rdi
je 0x180179e43
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
lea rdx, [rbp - 0x31]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r12
mov r9d, 0x30
mov r8, qword [rbx]
mov rdx, qword [rdi]
call qword [rax + 0xa0]
mov r15d, eax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x180179c66
mov rcx, qword [rdi]
test rcx, rcx
je 0x180179c46
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x180179c58
call fcn.180187890
mov qword [rdi + 8], r12
mov edx, 0x18
mov rcx, rdi
call fcn.180187890
nop
mov eax, esi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x180179ca2
mov rcx, qword [rbx]
test rcx, rcx
je 0x180179c83
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180179c95
call fcn.180187890
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.180187890
test r15d, r15d
js 0x180179ddb
mov qword [rbp - 0x29], r12
mov dword [rbp + 0x7f], r12d
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x29]
mov r8d, 1
mov edx, esi
call qword [rax + 0x20]
test eax, eax
js 0x180179ddb
cmp dword [rbp + 0x7f], 0
je 0x180179ddb
lea rcx, [rbp + 0xf]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0xf]
xor r8d, r8d
lea rdx, [0x1801f7d90]
call qword [rax + 0x20]
test eax, eax
js 0x180179dd1
mov rdi, qword [rbp + 0x17]
mov ecx, 0x18
call fcn.180187898
mov rbx, rax
mov qword [rbp - 9], rax
test rax, rax
je 0x180179d59
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x180179d5c
test rdi, rdi
jne 0x180179e59
jmp 0x180179d5c
mov rbx, r12
mov qword [rbp - 9], rbx
test rbx, rbx
je 0x180179e64
mov rax, qword [rbx + 8]
test rax, rax
jne 0x180179d7e
mov rcx, qword [rbx]
call fcn.180188b20
mov qword [rbx + 8], rax
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x180179d81
mov rdx, rax
mov rcx, r14
call fcn.180012bb0
nop
lock xadd dword [rbx + 0x10], esi
cmp esi, 1
jne 0x180179dd1
mov rcx, qword [rbx]
test rcx, rcx
je 0x180179db2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180179dc4
call fcn.180187890
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.180187890
lea rcx, [rbp + 0xf]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x180179dee
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x41], r12
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x180179e01
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x39], r12
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x180179e14
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x31], r12
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x180179e27
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x29], r12
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, r14
add rsp, 0xc0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x8007000e
call fcn.180188b10
nop
mov ecx, 0x8007000e
call fcn.180188b10
nop
mov ecx, 0x8007000e
call fcn.180188b10
nop
mov ecx, 0x8007000e
call fcn.180188b10
int3