Function at 0x140043610
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp], rax
mov rsi, rdx
mov rdi, rcx
xor r15d, r15d
mov qword [rsp + 0x50], r15
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [0x1400c30c8]
xor edx, edx
lea r8d, [r15 + 1]
lea rcx, [0x1400c30b8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140043749
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400448f0
nop
mov r8, rax
lea rdx, str.Failed_to_create_IWbemLocator_object._Err_
lea rcx, [rbp - 0x60]
call fcn.140022020
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400436d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400436cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f2d
call fcn.140071a3c
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
call fcn.140005b40
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov rcx, rax
call fcn.14001ed30
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140043edd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f0a
jmp 0x140043ed8
mov qword [rsp + 0x58], r15
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov r14, qword [rcx + 0x18]
mov ecx, 0x18
call fcn.140071a00
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140043797
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.._rootCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140043f10
jmp 0x14004379a
mov rbx, r15
mov qword [rsp + 0x70], rbx
test rbx, rbx
je 0x140043f33
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call r14
mov r14d, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140043819
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400437fa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14004380c
call fcn.140071a3c
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.140071a3c
test r14d, r14d
jns 0x140043903
mov edx, r14d
lea rcx, [rbp - 0x60]
call fcn.1400448f0
nop
mov r8, rax
lea rdx, str.Could_not_connect._Err_
lea rcx, [rbp - 0x80]
call fcn.140022020
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140043883
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004387e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f3e
call fcn.140071a3c
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
call fcn.140005b40
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rcx, rax
call fcn.14001ed30
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + select]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140043edd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f1b
jmp 0x140043ed8
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x140043a25
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400448f0
nop
mov r8, rax
lea rdx, str.Could_not_set_proxy_blanket._Err_
lea rcx, [rbp - 0x80]
call fcn.140022020
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14004399a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f44
call fcn.140071a3c
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
call fcn.140005b40
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rcx, rax
call fcn.14001ed30
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + select]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140043edd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f21
jmp 0x140043ed8
cmp qword [rdi + 0x18], 8
jb 0x140043a2f
mov rdi, qword [rdi]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r12, rax
lea rcx, str.Win32_NetworkAdapter
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r13, rax
mov qword [rsp + 0x60], r15
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x30]
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
call r10
test eax, eax
jns 0x140043b7c
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400448f0
nop
mov r8, rax
lea rdx, str.Failed_GetObject_IWbemClassObject._Err_
lea rcx, [rbp - 0x80]
call fcn.140022020
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140043adf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ada
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f4a
call fcn.140071a3c
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
call fcn.140005b40
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rcx, rax
call fcn.14001ed30
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + select]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140043edd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f27
jmp 0x140043ed8
mov qword [rsp + 0x78], r15
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x78]
xor edx, edx
call qword [rax + 0x78]
mov qword [rsp + 0x68], r15
mov r15, qword [rsi + 0x10]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 0x1f
jb 0x140043f50
cmp qword [rsi + 0x18], 8
jb 0x140043bc0
mov rsi, qword [rsi]
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea r14, [r15 + 0x1f]
mov ebx, 7
lea rdi, [rbp - 0x80]
cmp r14, rbx
jbe 0x140043c12
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140043bf1
mov rbx, rcx
jmp 0x140043bfe
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x80]
call fcn.140003f10
mov rdi, rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
movaps xmm0, xmmword [str.Win32_NetworkAdapter.DeviceID_]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x1400bdf70]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x1400bdf80]
movups xmmword [rdi + 0x20], xmm0
movsd xmm1, qword [0x1400bdf90]
movsd qword [rdi + 0x30], xmm1
mov eax, dword [0x1400bdf98]
mov dword [rdi + 0x38], eax
movzx eax, word [0x1400bdf9c]
mov word [rdi + 0x3c], ax
lea rcx, [rdi + 0x3e]
lea r8, [r15 + r15]
mov rdx, rsi
call fcn.140079530
xor ebx, ebx
mov word [rdi + r14*2], bx
lea r8d, [rbx + 1]
lea rdx, [0x1400b91d8]
lea rcx, [rbp - 0x80]
call fcn.140016340
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140043cf0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ceb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f56
call fcn.140071a3c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], bx
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
mov r10, qword [rax + 0xc0]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r12
call r10
test eax, eax
jns 0x140043e5d
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400448f0
nop
mov r8, rax
lea rdx, str.Could_not_execute_method._Err_
lea rcx, [rbp - 0x20]
call fcn.140022020
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140043dac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043da7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f5c
call fcn.140071a3c
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], bx
call fcn.140005b40
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rdx, qword [rbp - 0x20]
mov rcx, rax
call fcn.14001ed30
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140043e04
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + select]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140043ea1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043e56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f62
call fcn.140071a3c
jmp 0x140043ea1
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140043e8a
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + select]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + select]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140043edd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043ed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043f04
call fcn.140071a3c
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140071b40
mov rbx, qword [rsp + 0x160]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140085c7c
int3
call fcn.140085c7c
nop
mov ecx, 0x8007000e
call fcn.140077680
nop
call fcn.140085c7c
int3
call fcn.140085c7c
int3
call fcn.140085c7c
nop
call fcn.140085c7c
nop
mov ecx, 0x8007000e
call fcn.140077680
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140003e60
nop
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140085c7c
int3