Function at 0x14002b8d0
Capabilities:
Connect to wmi namespace via wbemlocator
Print debug messages

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r13, rcx
xor esi, esi
mov qword [rax + 0x18], rsi
lea r15, [rcx + 0x18]
mov qword [rsp + 0x20], r15
lea r9, [0x1400b2238]
xor edx, edx
lea r8d, [rsi + 1]
lea rcx, [0x1400b2258]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14002b92e
lea rcx, str.RtkMute:CoCreateInstance_CLSID_StdGlobalInterfaceTable__ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14002b93b
lea rcx, str.RtkMute:CoCreateInstance_CLSID_StdGlobalInterfaceTable__fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x1400a9050]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1400a9120]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14002bcf9
lea rcx, str.RtkMute:CoCreateInstance_CLSID_WbemLocator__ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea r14, [r13 + 0x20]
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
lea rdx, str.rootwmi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jne 0x14002b9f8
lea rcx, str.RtkMute:pIWbemLocator__ConnectServer_ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, str.RtkMute:pIWbemLocator__ConnectServer_WBEM_S_NO_ERROR_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [r14]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
lea rdi, [r13 + 0x80]
mov qword [rsp + 0x20], rdi
lea r9, [0x1400a90a0]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [0x1400a9140]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14002ba31
lea rcx, str.RtkMute:CoCreateInstance_CLSID_UnsecuredApartment__ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14002ba3e
lea rcx, str.RtkMute:CoCreateInstance_CLSID_UnsecuredApartment__fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, 0x40
call fcn.1400533a4
mov rbx, rax
test rax, rax
je 0x14002ba6d
lea rax, [0x1400bc4d0]
mov qword [rbx], rax
mov dword [rbx + 8], esi
mov qword [rbx + 0x10], rsi
lea rcx, [rbx + 0x18]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x14002ba70
mov rbx, rsi
mov qword [r13 + 0x68], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r11, qword [r13 + 0xc8]
mov rax, qword [r13 + 0x68]
mov qword [rax + 0x10], r11
mov rcx, qword [rdi]
mov rax, qword [rcx]
lea r8, [r13 + 0x78]
mov rdx, qword [r13 + 0x68]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jne 0x14002bab0
lea rcx, str.RtkMute:pUnsecApp__CreateObjectStub_m_pSink_ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14002babd
lea rcx, str.RtkMute:pUnsecApp__CreateObjectStub_m_pSink_fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, qword [r13 + 0x78]
mov rax, qword [rcx]
lea r8, [r13 + 0x70]
lea rdx, [0x1400a9060]
call qword [rax]
test eax, eax
jne 0x14002bae4
lea rcx, str.RtkMute:pStubUnk__QueryInterface_IID_IWbemObjectSink_ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14002baf1
lea rcx, str.RtkMute:pStubUnk__QueryInterface_IID_IWbemObjectSink_fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbp, qword [r14]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400533a4
mov rbx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14002bb2a
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_BIOSEvent
call fcn.140052bb0
mov qword [rbx], rax
jmp 0x14002bb2d
mov rbx, rsi
mov qword [rsp + 0x58], rbx
test rbx, rbx
jne 0x14002bb42
mov ecx, 0x8007000e
call fcn.140052ae0
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400533a4
mov rdi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14002bb78
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, [0x1400b6aa0]
call fcn.140052bb0
mov qword [rdi], rax
jmp 0x14002bb7b
mov rdi, rsi
mov qword [rsp + 0x60], rdi
test rdi, rdi
jne 0x14002bb90
mov ecx, 0x8007000e
call fcn.140052ae0
nop
test rbx, rbx
je 0x14002bb9a
mov r8, qword [rbx]
jmp 0x14002bb9d
mov r8, rsi
test rdi, rdi
je 0x14002bba7
mov rdx, qword [rdi]
jmp 0x14002bbaa
mov rdx, rsi
mov r10, qword [rbp]
mov rax, qword [r13 + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov r9d, 0x80
mov rcx, rbp
call qword [r10 + reloc.OLEAUT32.dll_VariantTimeToSystemTime]
mov r12d, eax
or ebp, 0xffffffff
test rdi, rdi
je 0x14002bc07
mov ecx, ebp
lock xadd dword [rdi + 0x10], ecx
add ecx, ebp
jne 0x14002bc07
mov rcx, qword [rdi]
test rcx, rcx
je 0x14002bbf0
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14002bbfe
call fcn.1400533e8
mov rcx, rdi
call fcn.1400533e8
nop
test rbx, rbx
je 0x14002bc3c
mov eax, ebp
lock xadd dword [rbx + 0x10], eax
add eax, 0xffffffff
jne 0x14002bc3c
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002bc26
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002bc34
call fcn.1400533e8
mov rcx, rbx
call fcn.1400533e8
test r12d, r12d
jne 0x14002bc50
lea rcx, str.RtkMute:m_pWMINamespace__ExecNotificationQueryAsync_ok_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14002bccf
lea rcx, str.RtkMute:m_pWMINamespace__ExecNotificationQueryAsync_fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call fcn.140054628
mov rcx, rax
test rax, rax
setne sil
test esi, esi
jne 0x14002bc7b
mov ecx, 0x80004005
call fcn.140012060
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xc8], rax
mov r8d, r12d
lea rdx, str.RtkMute:ret_x_r_n
lea rcx, [rsp + 0xc8]
call fcn.140015b40
mov rbx, qword [rsp + 0xc8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], ebp
add ebp, 0xffffffff
test ebp, ebp
jg 0x14002bccf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15]
mov rax, qword [rcx]
lea r9, [r13 + 0x90]
lea r8, [0x1400a9040]
mov rdx, qword [r14]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x14002bd06
lea rcx, str.RtkMute:CoCreateInstance_CLSID_WbemLocator__fail_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret