Function at 0x14000cef0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x140049090]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rcx
lea r14, [rcx + 8]
xor r12d, r12d
mov word [r14], r12w
add rcx, 0xa
xor edx, edx
mov r8d, 0x206
call fcn.140011b70
nop
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14000cfab
mov r8d, eax
lea rdx, str.Failed_to_initialize_COM_library._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
lea edx, [r12 + 0x5c]
lea rbx, str.D:GitScreenXpertScreenXpert3AsusFoldableSwitcherAsusFoldableSwitcherReceivingWMIClass.cpp
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000cf8f
lea edx, [r12 + 0x5c]
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000cf92
mov rax, rbx
mov r9, r14
lea r8, [0x140041ad0]
mov edx, SafeArrayLock
mov rcx, rax
call fcn.14000af50
jmp 0x14000cfb2
lea rbx, str.D:GitScreenXpertScreenXpert3AsusFoldableSwitcherAsusFoldableSwitcherReceivingWMIClass.cpp
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov r13d, 0xffffffff
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x14000d03e
mov r8d, eax
lea rdx, str.Failed_to_initialize_security._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
lea edx, [r13 + 0x5d]
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d01e
lea edx, [r13 + 0x5d]
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000d021
mov rax, rbx
mov r9, r14
lea r8, [0x140041ad0]
mov edx, 0x27
mov rcx, rax
call fcn.14000af50
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x90], r12
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [0x140033080]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140033060]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14000d0c8
mov r8d, eax
lea rdx, str.Failed_to_create_IWbemLocator_object._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d0a8
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000d0ab
mov rax, rbx
mov r9, r14
lea r8, [0x140041ad0]
mov edx, 0x39
mov rcx, rax
call fcn.14000af50
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x88], r12
mov ecx, SafeArrayPutElement
call fcn.14000ef10
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d111
mov qword [rax], r12
mov qword [rax + 0x10], 1
mov qword [rax + 8], r12
lea rcx, str.ROOTWMI
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000d5ec
jmp 0x14000d114
mov rdi, r12
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14000d5f7
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x88]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
call qword [rax + SafeArrayPutElement]
mov esi, eax
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000d199
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000d17a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000d18c
call fcn.14000f19c
mov qword [rdi + 8], r12
mov edx, SafeArrayPutElement
mov rcx, rdi
call fcn.14000f19c
test esi, esi
jns 0x14000d202
mov r8d, esi
lea rdx, str.Could_not_connect._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d1d4
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000d1d7
mov rax, rbx
mov r9, r14
lea r8, [0x140041ad0]
mov edx, 0x52
mov rcx, rax
call fcn.14000af50
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d226
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000d229
mov rax, rbx
lea r9, str.Connected_to_ROOTCIMV2_WMI_namespace__n
lea r8, [0x140041ad0]
mov edx, 0x57
mov rcx, rax
call fcn.14000ac30
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14000d2ed
mov r8d, eax
lea rdx, str.Could_not_set_proxy_blanket._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d2b1
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
inc rax
jmp 0x14000d2b4
mov rax, rbx
mov r9, r14
lea r8, [0x140041ad0]
mov edx, 0x6b
mov rcx, rax
call fcn.14000af50
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x98], r12
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [0x140033090]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [0x140033050]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, 0x228
call fcn.14000ef10
mov r15, rax
xor eax, eax
mov qword [r15 + 0xc], rax
mov dword [r15 + 0x14], eax
mov dword [r15 + 0x224], eax
lea rax, vtable.EventSink.0
mov qword [r15], rax
mov word [r15 + 0x18], r12w
lea rcx, [r15 + 0x1a]
xor edx, edx
mov r8d, 0x206
call fcn.140011b70
mov dword [r15 + 0x220], 0x5e
mov dword [r15 + 8], r12d
mov rax, qword [r15]
mov rcx, r15
call qword [rax + VariantCopy]
mov qword [rsp + 0xa0], r12
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
lea r8, [rsp + 0xa0]
mov rdx, r15
call qword [rax + SafeArrayPutElement]
mov qword [rsp + 0xa8], r12
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
lea r8, [rsp + 0xa8]
lea rdx, [0x140033070]
call qword [rax]
mov ecx, SafeArrayPutElement
call fcn.14000ef10
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d3ee
mov qword [rax], r12
mov qword [rax + 0x10], 1
mov qword [rax + 8], r12
lea rcx, str.SELECT__FROM_AsusAtkWmiEvent
call fcn.14000ebc0
mov qword [rdi], rax
jmp 0x14000d3f1
mov rdi, r12
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14000d601
mov ecx, SafeArrayPutElement
call fcn.14000ef10
mov rsi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d436
mov qword [rax], r12
mov qword [rax + 0x10], 1
mov qword [rax + 8], r12
lea rcx, [0x140041d78]
call fcn.14000ebc0
mov qword [rsi], rax
jmp 0x14000d439
mov rsi, r12
mov qword [rsp + 0x80], rsi
test rsi, rsi
je 0x14000d60c
mov rcx, qword [rsp + 0x88]
mov r10, qword [rcx]
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 0x80
mov r8, qword [rdi]
mov rdx, qword [rsi]
call qword [r10 + 0xb8]
mov r12d, eax
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14000d4c3
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000d49f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000d4b5
call fcn.14000f19c
mov qword [rsi + 8], 0
mov edx, SafeArrayPutElement
mov rcx, rsi
call fcn.14000f19c
nop
lock xadd dword [rdi + 0x10], r13d
cmp r13d, 1
jne 0x14000d507
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000d4e4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], 0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000d4fa
call fcn.14000f19c
mov qword [rdi + 8], 0
mov edx, SafeArrayPutElement
mov rcx, rdi
call fcn.14000f19c
test r12d, r12d
jns 0x14000d5b3
mov r8d, r12d
lea rdx, str.ExecNotificationQueryAsync_failed._Error_code__0x_X__n
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
test rax, rax
je 0x14000d546
mov edx, 0x5c
mov rcx, rbx
call fcn.140011298
lea rbx, [rax + 1]
mov r9, r14
lea r8, [0x140041ad0]
mov edx, 0x92
mov rcx, rbx
call fcn.14000af50
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, qword [rsp + 0x58]
jmp 0x14000d5bf
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.14000eef0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 0x8007000e
call fcn.14000ebb0
nop
mov ecx, 0x8007000e
call fcn.14000ebb0
mov ecx, 0x8007000e
call fcn.14000ebb0
nop
mov ecx, 0x8007000e
call fcn.14000ebb0
int3