Function at 0x1400da7f0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r13, rdx
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov edx, 0x80000000
lea ecx, [rax + rdx]
test edx, ecx
jne 0x1400da870
cmp eax, 0x80010119
je 0x1400da870
xor eax, eax
jmp 0x1400dadb0
mov qword [rbp - 0x11], r14
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
lea r9, [0x14044cba0]
mov r12d, 1
mov r8d, r12d
xor edx, edx
lea rcx, [0x14044cbb0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x1400da8a8
mov r12d, r14d
jmp 0x1400dad9d
mov qword [rbp - 0x19], r14
mov rbx, qword [rbp - 0x11]
mov rax, qword [rbx]
mov rsi, qword [rax + 0x18]
mov ecx, 0x18
call fcn.14014f518
mov rdi, rax
mov qword [rbp - 0x31], rax
test rax, rax
je 0x1400da8fc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r14
mov dword [rdi + 0x10], r12d
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x1400dade3
jmp 0x1400da8ff
mov rdi, r14
mov qword [rbp - 0x31], rdi
test rdi, rdi
je 0x1400dadee
lea rax, [rbp - 0x19]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
mov rcx, rbx
call rsi
mov ebx, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x1400da978
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400da959
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400da96b
call fcn.14014f510
mov qword [rdi + 8], r14
mov edx, 0x18
mov rcx, rdi
call fcn.14014f510
test ebx, ebx
js 0x1400dad8a
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x1400dad8a
mov qword [rbp - 0x21], r14
mov rbx, qword [rbp - 0x19]
mov rax, qword [rbx]
mov r15, qword [rax + 0xa0]
mov ecx, 0x18
call fcn.14014f518
mov rdi, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x1400daa03
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r14
mov dword [rdi + 0x10], r12d
lea rcx, str.SELECT_Index__MACAddress__Name_FROM_Win32_NetworkAdapter_where_AdapterTypeId0
call fcn.140150690
mov qword [rdi], rax
jmp 0x1400daa06
mov rdi, r14
mov qword [rbp - 0x71], rdi
test rdi, rdi
je 0x1400dadf9
mov r14, qword [rdi]
mov ecx, 0x18
call fcn.14014f518
mov rsi, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x1400daa51
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], rax
mov qword [rsi + 8], rax
mov dword [rsi + 0x10], r12d
lea rcx, [0x14050d49c]
call fcn.140150690
mov qword [rsi], rax
jmp 0x1400daa53
xor esi, esi
mov qword [rbp - 0x69], rsi
test rsi, rsi
je 0x1400dae04
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x30
mov r8, r14
mov rdx, qword [rsi]
mov rcx, rbx
call r15
mov ebx, eax
mov ecx, 0xffffffff
lock xadd dword [rsi + 0x10], ecx
cmp ecx, 1
jne 0x1400daace
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400daaaa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400daac0
call fcn.14014f510
mov qword [rsi + 8], 0
mov edx, 0x18
mov rcx, rsi
call fcn.14014f510
nop
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x1400dab15
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400daaf2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], 0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400dab08
call fcn.14014f510
mov qword [rdi + 8], 0
mov edx, 0x18
mov rcx, rdi
call fcn.14014f510
test ebx, ebx
jns 0x1400dab21
xor r12d, r12d
jmp 0x1400dad78
xor r14d, r14d
mov word [r13], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 7], r14
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r14w
mov esi, 0x7fffffff
mov qword [rbp - 0x31], r14
mov dword [rbp - 0x29], r14d
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
lea rdx, [rbp - 0x29]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x31]
mov r8d, r12d
lea edx, [r14 - 1]
call qword [rax + 0x20]
test eax, eax
js 0x1400dad1b
lea r15d, [r14 + 8]
nop dword [rax + rax]
cmp dword [rbp - 0x29], 0
je 0x1400dad1b
lea rcx, [rbp + 0x17]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x17]
xor r8d, r8d
lea rdx, str.Index
call qword [rax + 0x20]
test eax, eax
js 0x1400dacd1
cmp dword [rbp + 0x1f], esi
jge 0x1400dacd1
lea rcx, [rbp - 0x61]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x61]
xor r8d, r8d
lea rdx, str.MACAddress
call qword [rax + 0x20]
test eax, eax
js 0x1400dac1d
cmp r15w, word [rbp - 0x61]
jne 0x1400dac1d
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1400dac1d
mov r8, qword [rbp - 0x59]
mov edx, 0x12
mov rcx, r13
call fcn.1400d7bb0
lea rcx, [rbp - 0x61]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [rbp + 0x1f]
lea rcx, [rbp - 0x49]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x49]
xor r8d, r8d
lea rdx, [0x14050d518]
call qword [rax + 0x20]
test eax, eax
js 0x1400dacc7
cmp r15w, word [rbp - 0x49]
jne 0x1400dacc7
mov rcx, qword [rbp - 0x41]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1400dacc7
mov r9, qword [rbp - 0x41]
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp word [r9 + rdx*2], 0
jne 0x1400dac80
mov rax, qword [rbp + 0xf]
cmp rdx, rax
ja 0x1400dacbe
lea rdi, [rbp - 9]
cmp rax, 7
cmova rdi, qword [rbp - 9]
mov qword [rbp + 7], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
mov rcx, rdi
call fcn.1403ebbf0
mov word [rdi + rbx], r14w
jmp 0x1400dacc7
lea rcx, [rbp - 9]
call fcn.140023ce0
lea rcx, [rbp - 0x49]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp + 0x17]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x1400dacec
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov qword [rbp - 0x31], r14
mov dword [rbp - 0x29], r14d
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
lea rdx, [rbp - 0x29]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x31]
mov r8d, r12d
mov edx, 0xffffffff
call qword [rax + 0x20]
test eax, eax
jns 0x1400dab80
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x1400dad2b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 7
jbe 0x1400dad67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400dad62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400daddd
call fcn.14014f510
mov qword [rbp + 7], r14
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r14w
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x1400dad88
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x1400dad8d
mov r12d, r14d
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x1400dad9d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x11]
test rcx, rcx
je 0x1400dadad
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov eax, r12d
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14014f4f0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14015fa1c
nop
mov ecx, 0x8007000e
call fcn.140150680
nop
mov ecx, 0x8007000e
call fcn.140150680
nop
mov ecx, 0x8007000e
call fcn.140150680
nop
mov ecx, 0x8007000e
call fcn.140150680
int3