Function at 0x1400ecfd0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0xd8
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov r15, qword [0x14020c0b8]
mov rax, qword [r15]
cmp rax, 3
jbe 0x1400ed051
lea rax, str.Calling_CoCreateInstance_for_CLSID_WbemLocator
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x48], 0
lea rax, [0x1401ea940]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
lea r8, str.wmi::connection.cargo_registry_srcindex.crates.io_6f17d22bba15001fwmi_0.13.2_srcconnection.rs
lea rcx, [rsp + 0x48]
mov edx, 4
mov r9d, 0xb9
call fcn.1400f06c0
mov qword [rsp + 0x48], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea rcx, [0x1401eaa58]
lea r9, [0x1401ea940]
xor r14d, r14d
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1400ed2c3
mov r12, qword [rsp + 0x48]
test r12, r12
je 0x1400ed2cf
mov qword [rsp + 0x78], r12
mov rax, qword [r15]
lea r14, [rsp + 0x78]
cmp rax, 4
jb 0x1400ed11c
mov qword [rsp + 0xa8], r14
lea rax, [0x1400ef210]
mov qword [rsp + 0xb0], rax
lea rax, [0x1401eaa78]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x48], 0
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x20], 0
lea r8, str.wmi::connection.cargo_registry_srcindex.crates.io_6f17d22bba15001fwmi_0.13.2_srcconnection.rs
lea rcx, [rsp + 0x48]
mov edx, 4
mov r9d, 0xbd
call fcn.1400f06c0
mov qword [rsp + 0x90], r12
mov rax, qword [r15]
cmp rax, 3
jbe 0x1400ed185
lea rax, str.Calling_ConnectServer
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x48], 0
lea rax, [0x1401ea940]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
lea r8, str.wmi::connection.cargo_registry_srcindex.crates.io_6f17d22bba15001fwmi_0.13.2_srcconnection.rs
lea rcx, [rsp + 0x48]
mov edx, 4
mov r9d, 0xc3
call fcn.1400f06c0
mov rcx, rbx
mov rdx, rdi
call fcn.1400efb50
mov qword [rsp + 0x98], rax
call fcn.14000ede0
mov qword [rsp + 0xa0], rax
call fcn.14000ede0
mov qword [rsp + 0x80], rax
call fcn.14000ede0
mov qword [rsp + 0x78], rax
call fcn.14000ede0
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x90]
lea r8, [rsp + 0x98]
lea r9, [rsp + 0xa0]
call fcn.1400eeab0
cmp qword [rsp + 0x48], 0
mov rdi, qword [rsp + 0x50]
je 0x1400ed327
mov eax, dword [rsp + 0x58]
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x50], eax
lea rcx, [rsp + 0x48]
call fcn.1400ef500
mov edi, eax
cmp qword [rsp + 0x48], 0
je 0x1400ed257
lea rcx, [rsp + 0x48]
call fcn.1400efc80
lea rcx, [rsp + 0xa8]
call fcn.1400efc50
lea rcx, [rsp + 0x78]
call fcn.1400efc50
lea rcx, [rsp + 0x80]
call fcn.1400efc50
lea rcx, [rsp + 0xa0]
call fcn.1400efc50
lea rcx, [rsp + 0x98]
call fcn.1400efc50
movzx eax, byte [rsp + 0x8f]
mov byte [rsi + 3], al
movzx eax, word [rsp + 0x8d]
mov word [rsi + 1], ax
mov dword [rsi + 4], edi
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsi + 0x10], xmm0
mov byte [rsi], 0
jmp 0x1400ed4fe
mov ecx, eax
call fcn.1400ef730
mov r14d, edx
jmp 0x1400ed2d1
xor eax, eax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x48]
call fcn.1400ef500
mov edi, eax
cmp qword [rsp + 0x48], 0
je 0x1400ed2f9
lea rcx, [rsp + 0x48]
call fcn.1400efc80
movzx eax, byte [rsp + 0x82]
mov byte [rsi + 3], al
movzx eax, word [rsp + 0x80]
mov word [rsi + 1], ax
mov dword [rsi + 4], edi
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsi + 0x10], xmm0
mov byte [rsi], 0
jmp 0x1400ed50b
mov qword [rsp + 0xd0], rdi
lea rbx, [rsp + 0xa8]
mov rcx, rbx
call fcn.1400efc50
lea rcx, [rsp + 0x78]
call fcn.1400efc50
lea rcx, [rsp + 0x80]
call fcn.1400efc50
lea rcx, [rsp + 0xa0]
call fcn.1400efc50
mov rax, qword [r15]
cmp rax, 4
jb 0x1400ed3dc
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xa8], rax
lea rax, [0x1400ef250]
mov qword [rsp + 0xb0], rax
lea rax, str.Got_service
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x20], 0
lea r8, str.wmi::connection.cargo_registry_srcindex.crates.io_6f17d22bba15001fwmi_0.13.2_srcconnection.rs
lea rcx, [rsp + 0x48]
mov edx, 4
mov r9d, 0xd3
call fcn.1400f06c0
lea rcx, [rsp + 0x98]
call fcn.1400efc50
mov qword [rsp + 0xc0], rdi
mov rax, qword [r15]
cmp rax, 3
jbe 0x1400ed452
lea rax, [0x1401ea978]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x48], 0
lea rax, [0x1401ea940]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
lea r8, str.wmi::connection.cargo_registry_srcindex.crates.io_6f17d22bba15001fwmi_0.13.2_srcconnection.rs
lea rcx, [rsp + 0x48]
mov edx, 4
mov r9d, 0xa5
call fcn.1400f06c0
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
mov rcx, rdi
mov edx, 0xa
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x1400ed494
mov qword [rsi + 8], rdi
mov byte [rsi], 0x12
jmp 0x1400ed4fe
mov ecx, eax
call fcn.1400ef730
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], edx
lea rcx, [rsp + 0x48]
call fcn.1400ef500
mov edi, eax
cmp qword [rsp + 0x48], 0
je 0x1400ed4c2
lea rcx, [rsp + 0x48]
call fcn.1400efc80
movzx eax, byte [rsp + 0x7a]
mov byte [rsi + 3], al
movzx eax, word [rsp + 0x78]
mov word [rsi + 1], ax
mov dword [rsi + 4], edi
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsi + 8], xmm0
mov rax, qword [rsp + 0xb8]
mov qword [rsi + 0x18], rax
mov byte [rsi], 0
lea rcx, [rsp + 0xc0]
call fcn.1400efc80
lea rcx, [rsp + 0x90]
call fcn.1400efc80
mov rax, rsi
add rsp, 0xd8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret