Function at 0x1400dfda0
Capabilities:
Get geographical location
Reference wmi statements

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x90], rbx
mov r14, rdx
xor r15d, r15d
mov qword [rbp - 0x28], r15
mov rdx, qword [str.ROOTCIMV2]
lea rcx, [rbp - 0x28]
call fcn.1400eacd0
test eax, eax
jns 0x1400dfde5
mov ebx, r15d
jmp 0x1400e0134
mov qword [rbp - 0x30], r15
mov rbx, qword [rbp - 0x28]
mov ecx, 0x18
call fcn.140129aa4
mov rsi, rax
mov qword [rbp - 0x18], rax
test rax, rax
je 0x1400dfe2e
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_OperatingSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
jne 0x1400dfe31
mov ecx, 0x8007000e
call fcn.14012afb0
int3
mov rsi, r15
mov qword [rbp - 0x18], rsi
test rsi, rsi
jne 0x1400dfe45
mov ecx, 0x8007000e
call fcn.14012afb0
nop
mov ecx, 0x18
call fcn.140129aa4
mov rdi, rax
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1400dfe86
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x140233f08]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400dfe89
mov ecx, 0x8007000e
call fcn.14012afb0
int3
mov rdi, r15
mov qword [rbp - 0x10], rdi
test rdi, rdi
jne 0x1400dfe9d
mov ecx, 0x8007000e
call fcn.14012afb0
nop
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x1400dfeac
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x30], r15
mov rax, qword [rbx]
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r15
mov r9d, 0x30
mov r8, qword [rsi]
mov rdx, qword [rdi]
mov rcx, rbx
call qword [rax + 0xa0]
mov ebx, eax
mov rcx, rdi
call fcn.1400e0a90
nop
mov rcx, rsi
call fcn.1400e0a90
test ebx, ebx
mov ebx, r15d
js 0x1400e0121
mov dword [rbp + 0x40], r15d
mov qword [rbp + 0x48], r15
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x48]
mov r8d, 1
or edx, 0xffffffff
call qword [rax + 0x20]
test eax, eax
js 0x1400e010e
cmp dword [rbp + 0x40], 0
je 0x1400e010e
lea rbx, vtable.SpeedBit::Utils::Std::StringValueW_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___.0
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 8]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.Caption
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0x28]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.Version
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0x48]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.BuildNumber
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0x68]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.BuildType
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0x88]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.Codeset
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0xa8]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.CountryCode
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0xc8]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.Locale
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0xe8]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.OSArchitecture
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
mov qword [rbp - 0x10], rbx
lea rax, [r14 + 0x108]
mov qword [rbp - 8], rax
lea r8, [rbp - 0x10]
lea rdx, str.TotalVisibleMemorySize
lea rcx, [rbp + 0x48]
call fcn.1400eaf20
nop
lea r8, [r14 + 0x128]
xor r9d, r9d
lea rdx, str.OSLanguage
lea rcx, [rbp + 0x48]
call fcn.1400eaeb0
lea r8, [r14 + 0x12c]
xor r9d, r9d
lea rdx, str.OSProductSuite
lea rcx, [rbp + 0x48]
call fcn.1400eaeb0
xor r9d, r9d
lea r8, [r14 + 0x130]
lea rdx, str.OSType
lea rcx, [rbp + 0x48]
call fcn.1400eae40
xor r9d, r9d
lea r8, [r14 + 0x136]
lea rdx, str.CurrentTimeZone
lea rcx, [rbp + 0x48]
call fcn.1400eae40
xor r9d, r9d
lea r8, [r14 + 0x132]
lea rdx, str.ServicePackMajorVersion
lea rcx, [rbp + 0x48]
call fcn.1400eae40
xor r9d, r9d
lea r8, [r14 + 0x134]
lea rdx, str.ServicePackMinorVersion
lea rcx, [rbp + 0x48]
call fcn.1400eae40
mov ebx, 1
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x1400e011d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp + 0x48], r15
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x1400e0130
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x30], r15
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400e0144
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov eax, ebx
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret