Function at 0x180007090
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x180027080]
mov r14, r8
mov rsi, rdx
mov rbx, rcx
call qword [rax + 0xd8]
xor r15d, r15d
test al, al
je 0x180007122
test rbx, rbx
jne 0x18000713d
mov rcx, qword [0x180027670]
test rcx, rcx
je 0x1800070dd
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [0x180027680]
test rcx, rcx
je 0x1800070ef
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [0x180027520]
test rcx, rcx
je 0x180007101
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x180027638]
test rcx, rcx
je 0x180007113
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
cmp byte [0x1800271cd], r15b
je 0x180007122
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
or r12d, 0xffffffff
cmp byte [0x1800271cd], r15b
jne 0x180007188
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov qword [rsp + 0x40], r15
xor r9d, r9d
mov dword [rsp + 0x38], r15d
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov edx, r12d
mov dword [rsp + 0x28], 3
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov byte [0x1800271cd], 1
mov rcx, qword [0x180027638]
test rcx, rcx
jne 0x1800071ca
lea rax, [0x180027638]
xor edx, edx
lea r8d, [rcx + 1]
mov qword [rsp + 0x20], rax
lea rcx, [0x180001220]
lea r9, [0x180001210]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov rcx, qword [0x180027638]
test rcx, rcx
je 0x1800072c8
mov rax, qword [0x180027680]
test rax, rax
jne 0x1800071f1
lea rcx, [0x1800011c8]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [0x180027638]
mov qword [0x180027680], rax
cmp qword [0x180027520], r15
jne 0x180007237
mov r10, qword [rcx]
lea rdx, [0x180027520]
mov qword [rsp + 0x40], rdx
xor r9d, r9d
mov qword [rsp + 0x38], r15
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov rdx, rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
call qword [r10 + 0x18]
cmp qword [0x180027520], r15
je 0x1800072c8
cmp qword [0x180027670], r15
jne 0x180007259
lea rcx, [0x1800011e0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [0x180027670], rax
test rax, rax
je 0x1800072c8
mov rcx, rbx
call fcn.180004e54
mov rdi, rax
test rax, rax
je 0x1800072c8
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rbx, rbx
je 0x1800072c8
mov rcx, qword [0x180027520]
lea rdx, [rbp - 8]
mov qword [rsp + 0x28], rdx
mov r9d, gethostbyname
mov rdx, qword [0x180027670]
mov r8, rbx
mov qword [rbp - 8], r15
mov r10, qword [rcx]
mov qword [rsp + 0x20], r15
call qword [r10 + 0xa0]
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x1800072d0
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, r12d
jmp 0x180007124
mov qword [rbp - 0x10], r15
mov ebx, r15d
mov dword [rbp + 0x48], r15d
mov rax, qword [rcx]
lea rdx, [rbp + 0x48]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x10]
mov edx, r12d
mov r8d, 1
call qword [rax + 0x20]
test eax, eax
jne 0x180007329
inc ebx
test rsi, rsi
je 0x18000730f
mov rdx, qword [rbp - 0x10]
mov rcx, r14
call rsi
test eax, eax
js 0x18000731f
mov rcx, qword [rbp - 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 8]
jmp 0x1800072db
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 8]
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov eax, ebx
jmp 0x180007124