Function at 0x14000513c
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 8], rcx
push r14
sub rsp, 0xe0
mov qword [rax - 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov ebx, r8d
mov rsi, rdx
test r9, r9
je 0x1400054ad
test rdx, rdx
je 0x1400054ad
test r8d, r8d
je 0x1400054ad
call fcn.1400062ec
and qword [rsp + 0x50], 0
and qword [rsp + 0x80], 0
and qword [rsp + 0x58], 0
mov r8d, ebx
xor edx, edx
mov rcx, rsi
call sub.MSVCR110.dll_memset
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [0x140017638]
xor edx, edx
lea r8d, [rdx + 0x17]
lea rcx, [0x140018a00]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140005452
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or edx, 0xffffffff
lea rcx, str.._
call fcn.140003604
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140005202
mov ecx, 0x8007000e
call fcn.140001008
lea rdx, str.rootCIMV2
lea rcx, [rsp + 0x58]
call fcn.140003720
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rdx
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x58]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
js 0x140005452
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x140005452
and qword [rsp + 0x70], 0
and dword [rsp + 0x8c], 0
and qword [rsp + 0x68], 0
mov r14, qword [rsp + 0x50]
or edx, 0xffffffff
lea rcx, str.Win32_BaseBoard
call fcn.140003604
mov rbx, rax
mov qword [rsp + 0x98], rax
test rax, rax
jne 0x1400052cc
mov ecx, 0x8007000e
call fcn.140001008
nop
mov rax, qword [r14]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea r8d, [r9 + 1]
mov rdx, rbx
mov rcx, r14
call qword [rax + SysAllocStringByteLen]
mov r14d, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test r14d, r14d
jns 0x140005316
mov dword [rsp + 0x60], 0x80004005
lea rdx, [0x14001f8a8]
lea rcx, [rsp + 0x60]
call sub.MSVCR110.dll__CxxThrowException
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x8c]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x68]
mov edx, 0x2710
mov r8d, 1
call qword [rax + 0x20]
cmp eax, 1
jne 0x140005362
mov dword [rsp + 0x88], 0x80004005
lea rdx, [0x14001f8a8]
lea rcx, [rsp + 0x88]
call sub.MSVCR110.dll__CxxThrowException
test eax, eax
jne 0x14000542f
xor edx, edx
lea r8d, [rax + 0x18]
lea rcx, [rsp + 0xa0]
call sub.MSVCR110.dll_memset
lea rcx, [rsp + 0xa0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov r14, qword [rsp + 0x68]
or edx, 0xffffffff
lea rcx, str.SerialNumber
call fcn.140003604
mov rbx, rax
mov qword [rsp + 0x98], rax
test rax, rax
jne 0x1400053bb
mov ecx, 0x8007000e
call fcn.140001008
nop
mov rax, qword [r14]
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
lea r9, [rsp + 0xa0]
xor r8d, r8d
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x20]
mov r14d, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test r14d, r14d
jns 0x14000540e
mov dword [rsp + 0x90], 0x80004005
lea rdx, [0x14001f8a8]
lea rcx, [rsp + 0x90]
call sub.MSVCR110.dll__CxxThrowException
lea rdx, [rsp + 0xa0]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
nop
lea rcx, [rsp + 0xa0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140005440
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140005450
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000546c
mov dword [rsp + 0x78], 0x80004005
lea rdx, [0x14001f8a8]
lea rcx, [rsp + 0x78]
call sub.MSVCR110.dll__CxxThrowException
nop
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000548c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000549c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xf0]
call fcn.140007b18
xor eax, eax
jmp 0x1400054b2
mov eax, 0x80070057
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret