Function at 0x433800
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x433b3d
push rbp
mov rbp, rsp
sub rsp, 0x38
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryExW]
lea rcx, str.bcryptprimitives.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
nop dword [rax]
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
nop dword [rax]
test rax, rax
je 0x433b2b
lea rbx, [0x00511b28]
mov ecx, 0xc
mov rdi, rcx
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x433899
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x005fd8f8]
mov qword [r11 + 8], rcx
mov qword [0x005fd8f8], rax
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryExW]
lea rcx, str.ntdll.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x433b1a
mov qword [rsp + 0x28], rax
lea rbx, [0x0051336c]
mov ecx, 0x11
mov rdi, rcx
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x433924
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rdx, qword [0x005fd900]
mov qword [r11 + 8], rdx
mov qword [0x005fd900], rax
mov rax, qword [rsp + 0x28]
lea rbx, [0x00515a4e]
mov ecx, 0x17
mov rdi, rcx
nop
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x433961
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x005fd908]
mov qword [r11 + 8], rcx
mov qword [0x005fd908], rax
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryExW]
lea rcx, str.winmm.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x433b09
mov qword [rsp + 0x30], rax
lea rbx, [0x00512ee0]
mov ecx, 0x10
mov rdi, rcx
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x4339ec
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rdx, qword [0x005fd910]
mov qword [r11 + 8], rdx
mov qword [0x005fd910], rax
mov rax, qword [rsp + 0x30]
lea rbx, [0x00512454]
mov ecx, 0xe
mov rdi, rcx
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x433a28
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x005fd918]
mov qword [r11 + 8], rcx
mov qword [0x005fd918], rax
cmp qword [0x005fd910], 0
je 0x433af8
nop dword [rax]
test rax, rax
je 0x433af8
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryExW]
lea rcx, str.ws2_32.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x433ae7
lea rbx, str.WSAGetOverlappedResult
mov ecx, 0x17
mov rdi, rcx
call sym.runtime.windowsFindfunc
cmp dword [0x00682e70], 0
je 0x433ac4
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x005fd920]
mov qword [r11 + 8], rcx
mov qword [0x005fd920], rax
test rax, rax
je 0x433ad6
add rsp, 0x38
pop rbp
ret
lea rax, [0x00519095]
mov ebx, 0x20
call sym.runtime.throw
lea rax, [0x005147a2]
mov ebx, 0x14
call sym.runtime.throw
lea rax, [0x00517fe5]
mov ebx, 0x1d
call sym.runtime.throw
lea rax, [0x00513f2d]
mov ebx, 0x13
call sym.runtime.throw
lea rax, [0x00513f1a]
mov ebx, 0x13
call sym.runtime.throw
lea rax, [0x005185c9]
mov ebx, 0x1e
call sym.runtime.throw
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.loadOptionalSyscalls