Function at 0x140005430
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1401864c0]
xor rax, rsp
mov qword [rbp + 8], rax
mov rbx, r8
mov r14, rdx
mov r15, rcx
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rdx
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x50]
call fcn.14000a9d0
mov rcx, rax
call fcn.14000fb80
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rsi, rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14000ae10
mov rcx, rax
call fcn.14000fa60
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140008370
nop
mov rcx, r14
call fcn.14000eaa0
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.14000e650
mov rdi, rax
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.14000af00
mov rcx, rax
call fcn.14000fa30
mov rdx, rax
mov rcx, rdi
call fcn.14000e650
mov rdi, rax
mov rcx, r15
call fcn.14000eaa0
mov rdx, rax
mov rcx, rdi
call fcn.14000e650
xor r12d, r12d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x20], r12d
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x140155280]
xor edx, edx
lea r8d, [r12 + 1]
lea rcx, [0x140155290]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140005824
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
lea rdx, [rbp - 0x68]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
call qword [rax + 0x18]
test eax, eax
js 0x1400055bc
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 0xa]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1400055c5
mov rcx, qword [rbp - 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x60]
jmp 0x14000581e
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0xa0]
lea rcx, [rbp - 0x18]
call fcn.14000eaa0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140009750
nop
mov rcx, rax
call fcn.14000a8d0
mov rdi, rax
lea rdx, [0x14012c2d8]
lea rcx, [rsp + 0x68]
call fcn.140009750
nop
mov rcx, rax
call fcn.14000a8d0
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r12
mov r9d, 0x30
mov r8, rdi
mov rdx, rax
mov rcx, qword [rbp - 0x68]
call rsi
mov edi, eax
lea rcx, [rsp + 0x68]
call fcn.14000a500
nop
lea rcx, [rsp + 0x58]
call fcn.14000a500
test edi, edi
js 0x1400055b2
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x1400057ee
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x50]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rbp - 0x20], 0
je 0x1400057ee
mov rsi, qword [rbp - 0x50]
mov rax, qword [rsi]
mov rdi, qword [rax + 0x20]
mov rcx, r14
call fcn.14000eaa0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x48]
xor r8d, r8d
mov rdx, rax
mov rcx, rsi
call rdi
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
jne 0x1400057b7
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
jne 0x1400057b7
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
je 0x140005709
movsx rax, word [rbp - 0x40]
jmp 0x1400057bb
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
je 0x140005728
mov eax, dword [rbp - 0x40]
jmp 0x1400057bb
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
je 0x140005745
movzx eax, word [rbp - 0x40]
jmp 0x1400057bb
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
je 0x140005762
mov rax, qword [rbp - 0x40]
jmp 0x1400057bb
lea rdx, vtable.type_info.0
lea rcx, vtable.type_info.0
call fcn.14000a830
test al, al
je 0x14000577f
mov rax, qword [rbp - 0x40]
jmp 0x1400057bb
mov rdx, qword [rbp - 0x40]
lea rcx, [rsp + 0x68]
call fcn.140009750
nop
mov dl, 1
mov rcx, rax
call fcn.14000ec00
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.140011b80
nop
lea rcx, [rsp + 0x68]
call fcn.14000a500
jmp 0x1400057cd
movsxd rax, dword [rbp - 0x40]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.140011b80
lea rcx, [rbp - 0x48]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
jne 0x140005660
mov rcx, rbx
call fcn.140012160
test rax, rax
jne 0x140005806
lea edx, [rax + 1]
mov rcx, rbx
call fcn.140011d80
mov rcx, qword [rbp - 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lea rcx, [rbp - 0x18]
call fcn.140009f90
nop
mov rcx, r15
call fcn.140009f90
nop
mov rcx, r14
call fcn.140009f90
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1400e12a0
add rsp, 0x110
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret