Function at 0x1400b3470
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x14017e7c0]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rdx
mov qword [rbp - 9], rdx
xor r13d, r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov rbx, 0xffffffffffffffff
test eax, eax
jns 0x1400b35e0
movsxd rdx, eax
lea rax, str.Failed_to_initialize_COM_library._Error_code_
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], r13b
jne 0x1400b34e1
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b3554
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b354e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b354e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400b358f
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b358a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3ca5
call fcn.1401386d0
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
xor r8d, r8d
lea rdx, [0x14015ac07]
mov rcx, r14
call fcn.140003040
mov rax, r14
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1401386b0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x1400b36e9
movsxd rdx, eax
lea rax, str.Failed_to_initialize_security._Error_code_
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], r13b
jne 0x1400b3630
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b36a3
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b369d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b369d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400b36de
inc rdx
mov rcx, qword [rbp - 0x41]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400b36d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3ca5
call fcn.1401386d0
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400b358f
mov qword [rbp - 0x19], r13
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
lea r9, [0x1401540e0]
xor edx, edx
mov r8d, 1
lea rcx, [0x1401540f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x1400b37ae
movsxd rdx, eax
lea rax, str.Failed_to_create_IWbemLocator_object._Error_code_
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], r13b
jne 0x1400b3736
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b37a9
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b37a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b37a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
jmp 0x1400b36a3
mov qword [rbp - 0x21], r13
mov rax, qword [rbp - 0x19]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x18]
mov ecx, 0x18
call fcn.1401386d8
mov rdi, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x1400b3805
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x1400b3e5d
jmp 0x1400b3808
mov rdi, r13
mov qword [rbp - 0x79], rdi
test rdi, rdi
je 0x1400b3e73
lea rax, [rbp - 0x21]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x19]
call rsi
movsxd rsi, eax
mov ecx, ebx
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x1400b3880
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400b3861
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400b3873
call fcn.1401386d0
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.1401386d0
test esi, esi
jns 0x1400b3964
lea rdx, str.Could_not_connect._Error_code_
add rdx, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400b38a1
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b3914
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b390e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b390e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400b394f
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b394a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3ca5
call fcn.1401386d0
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400b358f
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1400b3a84
movsxd rdx, eax
lea rax, str._SYSMETRICS__Could_not_set_proxy_blanket._Error_code_
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400b39b7
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b3a2a
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3a24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b3a24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400b3a65
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3a60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3ca5
call fcn.1401386d0
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400b358f
mov qword [rbp - 0x11], r13
mov rax, qword [rbp - 0x21]
mov rcx, qword [rax]
mov r12, qword [rcx + 0xa0]
mov ecx, 0x18
call fcn.1401386d8
mov rdi, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x1400b3ad4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
lea rcx, str.SELECT_Name_FROM_Win32_Processor
call fcn.140139860
mov qword [rdi], rax
jmp 0x1400b3ad7
mov rdi, r13
mov qword [rbp - 0x79], rdi
test rdi, rdi
je 0x1400b3e73
mov r15, qword [rdi]
mov ecx, 0x18
call fcn.1401386d8
mov rsi, rax
mov qword [rbp - 0x51], rax
test rax, rax
je 0x1400b3b25
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], rax
mov qword [rsi + 8], r13
mov dword [rsi + 0x10], 1
lea rcx, [0x140163b74]
call fcn.140139860
mov qword [rsi], rax
jmp 0x1400b3b28
mov rsi, r13
mov qword [rbp - 0x51], rsi
test rsi, rsi
je 0x1400b3e7e
lea rax, [rbp - 0x11]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0x30
mov r8, r15
mov rdx, qword [rsi]
mov rcx, qword [rbp - 0x21]
call r12
movsxd r15, eax
mov ecx, ebx
lock xadd dword [rsi + 0x10], ecx
cmp ecx, 1
jne 0x1400b3b96
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400b3b76
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], r13
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400b3b88
call fcn.1401386d0
mov qword [rsi + 8], r13
mov edx, 0x18
mov rcx, rsi
call fcn.1401386d0
nop
mov eax, ebx
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x1400b3bd2
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400b3bb3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400b3bc5
call fcn.1401386d0
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.1401386d0
xorps xmm0, xmm0
xorps xmm1, xmm1
test r15d, r15d
jns 0x1400b3cac
lea rdx, str.Query_for_CPU_name_failed._Error_code_
add rdx, r15
movups xmmword [rbp - 0x41], xmm0
movdqu xmmword [rbp - 0x31], xmm1
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400b3bf4
mov r8, rbx
lea rcx, [rbp - 0x41]
call fcn.140003040
nop
lea r8, [rbp - 0x41]
lea rdx, str.ERROR:
lea rcx, [rbp - 0x71]
call fcn.1400b1560
nop
mov rdx, rax
call fcn.1400bcf60
nop
mov rdx, qword [rbp - 0x59]
cmp rdx, 0xf
jbe 0x1400b3c67
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3c61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b3c61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401386d0
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400b3a65
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3a60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b3a60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rbp - 9], r13
mov dword [rbp - 1], r13d
movups xmmword [rbp + 7], xmm0
movdqu xmmword [rbp + 0x17], xmm1
xor r8d, r8d
lea rdx, [0x14015ac07]
lea rcx, [rbp + 7]
call fcn.140003040
nop
mov rcx, qword [rbp - 0x11]
test rcx, rcx
je 0x1400b3e18
nop
mov rax, qword [rcx]
lea rdx, [rbp - 1]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 9]
mov r8d, 1
mov edx, ebx
call qword [rax + 0x20]
cmp dword [rbp - 1], 0
je 0x1400b3e18
mov rcx, qword [rbp - 9]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x41]
xor r8d, r8d
lea rdx, str.Name
call qword [rax + 0x20]
test eax, eax
js 0x1400b3df7
mov rsi, qword [rbp - 0x39]
mov ecx, 0x18
call fcn.1401386d8
mov rdi, rax
mov qword [rbp - 0x51], rax
test rax, rax
je 0x1400b3d7c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400b3d7f
test rsi, rsi
jne 0x1400b3e68
jmp 0x1400b3d7f
mov rdi, r13
mov qword [rbp - 0x79], rdi
test rdi, rdi
je 0x1400b3e52
mov rax, qword [rdi + 8]
test rax, rax
jne 0x1400b3da1
mov rcx, qword [rdi]
call fcn.140139740
mov qword [rdi + 8], rax
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400b3da4
mov rdx, rax
lea rcx, [rbp + 7]
call fcn.140004030
nop
mov eax, ebx
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x1400b3df7
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400b3dd8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400b3dea
call fcn.1401386d0
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.1401386d0
lea rcx, [rbp - 0x41]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 9]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x11]
test rcx, rcx
jne 0x1400b3ce0
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x11]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
movups xmm0, xmmword [rbp + 7]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbp + 0x17]
movups xmmword [r14 + 0x10], xmm1
jmp 0x1400b35b0
mov ecx, 0x8007000e
call fcn.140139730
nop
mov ecx, 0x8007000e
call fcn.140139730
nop
mov ecx, 0x8007000e
call fcn.140139730
nop
mov ecx, 0x8007000e
call fcn.140139730
nop
mov ecx, 0x8007000e
call fcn.140139730
int3