Function at 0x1400231b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push rbp
lea rbp, [rsp - 0x19c0]
mov eax, 0x1ac0
call fcn.1401b7a40
sub rsp, rax
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x1ad0], rbx
mov qword [rsp + 0x1ad8], rsi
mov qword [rsp + 0x1ae0], rdi
mov rax, qword [0x1402ac7a8]
xor rax, rsp
mov qword [rbp + 0x19b0], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x9b0]
call fcn.1401bcf80
xor edx, edx
mov r8d, 0x190
lea rcx, [rbp + 0x20]
call fcn.1401bcf80
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x1401fdcd0]
xor edx, edx
lea r8d, [rsi + 1]
lea rcx, [0x1401fdce0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140023708
mov qword [rsp + 0x50], rsi
lea ecx, [rsi + 0x18]
call fcn.14003561c
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140023290
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14002373d
jmp 0x140023293
mov rbx, rsi
mov qword [rbp - 0x60], rbx
test rbx, rbx
je 0x140023748
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x18]
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140023312
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400232f3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140023305
call fcn.140035664
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.1400356ac
test edi, edi
js 0x140023353
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14002335d
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x58]
jmp 0x140023702
mov ecx, 0x18
call fcn.14003561c
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140023390
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, str.Win32_PnPEntity
call fcn.1401bb6e0
mov qword [rbx], rax
jmp 0x140023393
mov rbx, rsi
mov qword [rbp - 0x58], rbx
test rbx, rbx
je 0x140023753
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
lea r8d, [r9 + 1]
mov rdx, qword [rbx]
call qword [rax + 0x90]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140023402
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400233e3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400233f5
call fcn.140035664
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.1400356ac
mov dword [rsp + 0x68], esi
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x70]
mov edx, 0x2710
mov r8d, 1
call qword [rax + 0x20]
cmp eax, 1
je 0x1400236d8
test eax, eax
jne 0x140023402
lea ecx, [rax + 0x18]
call fcn.14003561c
mov rbx, rax
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140023468
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, str.PNPDeviceID
call fcn.1401bb6e0
mov qword [rbx], rax
jmp 0x14002346b
mov rbx, rsi
mov qword [rbp - 0x48], rbx
test rbx, rbx
je 0x140023732
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x80]
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x20]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400234d7
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400234b8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400234ca
call fcn.140035664
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.1400356ac
cmp word [rbp - 0x80], 1
je 0x1400234fd
mov r8, qword [rbp - 0x78]
mov edx, 0x104
lea rcx, [rbp + 0x9b0]
call fcn.1401c981c
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp word [rbp + 0x9b0], 0
je 0x140023402
mov r8d, 4
lea rdx, str.PCI_
lea rcx, [rbp + 0x9b0]
call fcn.1401ca434
test eax, eax
jne 0x140023402
lea ecx, [rax + 0x18]
call fcn.14003561c
mov rbx, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14002355c
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
lea rcx, str.Caption
call fcn.1401bb6e0
mov qword [rbx], rax
jmp 0x14002355f
mov rbx, rsi
mov qword [rbp - 0x38], rbx
test rbx, rbx
je 0x14002375e
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x80]
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x20]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400235cb
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400235ac
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400235be
call fcn.140035664
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.1400356ac
cmp word [rbp - 0x80], 1
je 0x1400235ee
mov r8, qword [rbp - 0x78]
mov edx, reloc.OLEAUT32.dll_SetErrorInfo
lea rcx, [rbp + 0x20]
call fcn.1401c981c
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp word [rbp + 0x20], 0
je 0x140023402
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
lea rdx, str.VEN_
lea rcx, [rbp + 0x9b0]
call fcn.1401bc490
mov rdi, rax
lea rdx, str.DEV_
lea rcx, [rbp + 0x9b0]
call fcn.1401bc490
mov rbx, rax
test rdi, rdi
je 0x14002366a
lea r8, [rdi + 8]
mov edx, 0x14
lea r9d, [rdx - 0x10]
lea rcx, [rbp - 8]
call fcn.1401ca0f8
test rbx, rbx
je 0x140023685
lea r8, [rbx + 8]
mov edx, 0x14
lea r9d, [rdx - 0x10]
lea rcx, [rbp - 0x30]
call fcn.1401ca0f8
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x1b0]
call fcn.1401bcf80
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x20]
lea r8, str.PCI:__s__0x_s_0x_s__r_n
mov edx, 0x104
lea rcx, [rbp + 0x1b0]
call fcn.140008670
lea rcx, [rbp + 0x1b0]
call fcn.140024850
jmp 0x140023402
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400236e8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400236f8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140023708
mov rax, qword [rcx]
call qword [rax + 0x10]
xor al, al
mov rcx, qword [rbp + 0x19b0]
xor rcx, rsp
call fcn.1401b6fc0
lea r11, [rsp + 0x1ac0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401bb6d0
nop
mov ecx, 0x8007000e
call fcn.1401bb6d0
nop
mov ecx, 0x8007000e
call fcn.1401bb6d0
int3
mov ecx, 0x8007000e
call fcn.1401bb6d0
int3
mov ecx, 0x8007000e
call fcn.1401bb6d0
int3