Function at 0x140005902
Capabilities:
Reference wmi statements

Disassembly:
jmp 0x14010e430
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1402b0318]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r14d, r14d
mov dword [rbp - 0x79], r14d
mov qword [rbp - 0x61], r14
test rcx, rcx
je 0x14010e84e
lea ecx, [r14 + 0x18]
call fcn.1400012cb
mov rbx, rax
mov qword [rbp - 0x41], rax
test rax, rax
je 0x14010e4a4
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call fcn.1400045cf
mov qword [rbx], rax
jmp 0x14010e4a7
mov rbx, r14
mov qword [rbp - 0x41], rbx
test rbx, rbx
je 0x14010e883
mov ecx, 0x18
call fcn.1400012cb
mov rdi, rax
mov qword [rbp - 0x49], rax
test rax, rax
je 0x14010e4e6
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x14025c62c]
call fcn.1400045cf
mov qword [rdi], rax
jmp 0x14010e4e9
mov rdi, r14
mov qword [rbp - 0x49], rdi
test rdi, rdi
je 0x14010e878
mov rax, qword [rsi]
lea rcx, [rbp - 0x61]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov r9d, 0x30
mov r8, qword [rbx]
mov rdx, qword [rdi]
mov rcx, rsi
call qword [rax + 0xa0]
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14010e55e
mov rcx, qword [rdi]
test rcx, rcx
je 0x14010e53e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14010e550
call fcn.14000308a
mov qword [rdi + 8], r14
mov edx, 0x18
mov rcx, rdi
call fcn.140004863
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14010e59d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14010e57e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14010e590
call fcn.14000308a
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.140004863
test esi, esi
js 0x14010e84e
mov qword [rbp - 0x51], r14
mov dword [rbp - 0x69], r14d
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_void____ptr64]
nop
mov rcx, qword [rbp - 0x61]
mov edi, dword [rbp - 0x79]
test rcx, rcx
je 0x14010e71d
lea r15, [0x14025c630]
lea r12, str.Model
nop word [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp - 0x69]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x51]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rbp - 0x69], 0
je 0x14010e719
mov qword [rbp + 0x17], r15
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], r14
mov rsi, r14
mov rdx, r15
nop dword [rax + rax]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 1]
xor r8d, r8d
call qword [rax + 0x20]
mov r8d, 0xffffffff
mov rdx, qword [rbp + 7]
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf16_unsigned_short_int_const____ptr64__int_]
nop
lea rdx, [rbp - 9]
mov rcx, rax
call qword [sym.imp.Qt5Core.dll__trimmed_QString__QEHAA_AV1_XZ]
nop
lea rdx, [rbp - 0x31]
mov rcx, rax
call qword [sym.imp.Qt5Core.dll__toLower_QString__QEHAA_AV1_XZ]
nop
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_class_QString_const____ptr64____ptr64]
mov rbx, rax
or edi, 4
mov dword [rbp - 0x79], edi
mov r8d, 0xffffffff
lea rdx, [0x14019575c]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
nop
mov rdx, rax
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rdx, rbx
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
and edi, 0xfffffffb
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rsi, [rsi + 1]
mov rdx, qword [rbp + rsi*8 + 0x17]
test rdx, rdx
jne 0x14010e620
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x61]
test rcx, rcx
jne 0x14010e5e0
jmp 0x14010e71d
mov rcx, qword [rbp - 0x61]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, 0x15
lea rcx, str.microsoft_corporation
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x21], rax
or edi, 1
mov dword [rbp - 0x79], edi
mov r9d, 1
xor r8d, r8d
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::indexOf_class_QString_const____ptr64__int__enum_Qt::CaseSensitivity_const___ptr64]
cmp eax, 0xffffffff
je 0x14010e797
mov edx, 7
lea rcx, str.virtual
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x29], rax
or edi, 2
mov dword [rbp - 0x79], edi
mov r9d, 1
xor r8d, r8d
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::indexOf_class_QString_const____ptr64__int__enum_Qt::CaseSensitivity_const___ptr64]
cmp eax, 0xffffffff
je 0x14010e797
mov bl, 1
jmp 0x14010e799
xor bl, bl
test dil, 2
je 0x14010e7ad
and edi, 0xfffffffd
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
test dil, 1
je 0x14010e7bd
lea rcx, [rbp - 0x21]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
test bl, bl
jne 0x14010e83d
mov edx, 6
lea rcx, str.vmware
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x19], rax
mov r9d, 1
xor r8d, r8d
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::indexOf_class_QString_const____ptr64__int__enum_Qt::CaseSensitivity_const___ptr64]
mov ebx, eax
lea rcx, [rbp - 0x19]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
cmp ebx, 0xffffffff
jne 0x14010e83d
lea edx, [rbx + 0xb]
lea rcx, str.virtualbox
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x11], rax
lea r9d, [rbx + 2]
xor r8d, r8d
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::indexOf_class_QString_const____ptr64__int__enum_Qt::CaseSensitivity_const___ptr64]
mov ebx, eax
lea rcx, [rbp - 0x11]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
cmp ebx, 0xffffffff
jne 0x14010e83d
xor bl, bl
jmp 0x14010e83f
mov bl, 1
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, bl
jmp 0x14010e850
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400030c1
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140003d0f
nop
mov ecx, 0x8007000e
call fcn.140003d0f
int3