Function at 0x180011670
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0xa8]
sub rsp, 0x190
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov rax, qword [0x1800470b8]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov ecx, 0x6428
call fcn.180017d00
mov rsi, rax
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdi, 0xffffffffffffffff
mov edx, edi
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
lea rax, [0x1800495e0]
mov qword [rsp + 0x20], rax
lea r9, [0x180034ff0]
xor edx, edx
lea r8d, [r14 + 1]
lea rcx, [0x180034fe0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp qword [0x1800495e0], r14
je 0x180011813
lea ecx, [rdi + 0x19]
call fcn.180017cbc
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180011dcb
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180011dba
mov rcx, qword [0x1800495e0]
mov rax, qword [rcx]
lea rdx, [0x1800495d8]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x18]
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1800117dd
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800117be
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800117d0
call fcn.180017cf8
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.180017cf8
mov rcx, qword [0x1800495d8]
test rcx, rcx
je 0x180011813
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
xor edx, edx
mov r8d, 0x6428
mov rcx, rsi
call fcn.180019630
mov rdx, rsi
mov ecx, 7
call fcn.180012bd0
test eax, eax
jle 0x1800118c0
mov r9d, eax
mov r8, rsi
lea rdx, [rbp - 0x20]
call fcn.1800114d0
mov rbx, rax
lea rcx, [0x180047b70]
cmp rcx, rax
je 0x180011880
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b70], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047b80], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1800118c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800118bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011dc5
call fcn.180017cf8
xor edx, edx
mov r8d, 0x6428
mov rcx, rsi
call fcn.180019630
mov rdx, rsi
xor ecx, ecx
call fcn.180012bd0
lea r15, [0x180047b90]
test eax, eax
jle 0x18001196d
mov r9d, eax
mov r8, rsi
lea rdx, [rbp]
call fcn.1800114d0
mov rbx, rax
cmp r15, rax
je 0x18001192d
mov rcx, r15
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b90], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047ba0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x18001196d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011968
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011dd6
call fcn.180017cf8
xor edx, edx
mov r8d, 0x6428
mov rcx, rsi
call fcn.180019630
mov rdx, rsi
mov ecx, 1
call fcn.180012bd0
lea r12, [0x180047b50]
test eax, eax
jle 0x180011a1d
mov r9d, eax
mov r8, rsi
lea rdx, [rbp + 0x20]
call fcn.1800114d0
mov rbx, rax
cmp r12, rax
je 0x1800119dd
mov rcx, r12
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047b60], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x180011a1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011ddc
call fcn.180017cf8
xor edx, edx
mov r8d, 0x6428
mov rcx, rsi
call fcn.180019630
mov rdx, rsi
mov ecx, 8
call fcn.180012bd0
test eax, eax
jle 0x180011aca
mov r9d, eax
mov r8, rsi
lea rdx, [rbp + 0x40]
call fcn.1800114d0
mov rbx, rax
lea rcx, [0x180047b30]
cmp rcx, rax
je 0x180011a8a
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b30], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047b40], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x180011aca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011ac5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011de2
call fcn.180017cf8
mov rcx, qword [0x1800495d8]
test rcx, rcx
je 0x180011ae3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1800495d8], r14
mov rcx, qword [0x1800495e0]
test rcx, rcx
je 0x180011afc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1800495e0], r14
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, rsi
call fcn.180017cf8
cmp qword [0x180047ba0], r14
jne 0x180011c79
lea rcx, [rbp + 0x60]
call fcn.180013e20
nop
cmp qword [rax + 0x18], 0x10
jb 0x180011b2b
mov rax, qword [rax]
movdqa xmm0, xmmword [0x180040bb0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x180011b41
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1800022e0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.1800028e0
mov rbx, rax
cmp r15, rax
je 0x180011b9c
mov rcx, r15
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b90], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047ba0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180011bdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011bd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011de8
call fcn.180017cf8
movdqa xmm0, xmmword [0x180040ba0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180011c2b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011c26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011dee
call fcn.180017cf8
movdqa xmm0, xmmword [0x180040bb0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x180011c79
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011c74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011df4
call fcn.180017cf8
cmp qword [0x180047b60], 0
jne 0x180011d84
call fcn.1800136f0
movdqa xmm0, xmmword [0x180040bb0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180011ca0
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1800022e0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.1800028e0
mov rbx, rax
cmp r12, rax
je 0x180011cfb
mov rcx, r12
call fcn.180003ed0
movups xmm0, xmmword [rbx]
movaps xmmword [0x180047b50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x180047b60], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180011d3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011d36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011dfa
call fcn.180017cf8
movdqa xmm0, xmmword [0x180040ba0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r14w
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x180011d84
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011d7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011db4
call fcn.180017cf8
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.180017e90
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.18001c36c
int3
mov ecx, 0x8007000e
call fcn.180017150
int3
call fcn.18001c36c
int3
mov ecx, 0x8007000e
call fcn.180017150
int3
call fcn.18001c36c
int3
call fcn.18001c36c
int3
call fcn.18001c36c
nop
call fcn.18001c36c
nop
call fcn.18001c36c
nop
call fcn.18001c36c
nop
call fcn.18001c36c
int3