Function at 0x1400052a0
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x14000d018]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov rdi, rcx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor r8d, r8d
xor ecx, ecx
test eax, eax
jns 0x140005328
xor r9d, r9d
lea rdx, [0x14000ae5c]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov al, 1
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.140006cf0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
xor esi, esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea edx, [rsi - 1]
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov qword [rsp + 0x70], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [0x14000a710]
xor edx, edx
lea r8d, [rsi + 1]
lea rcx, [0x14000a700]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140005397
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14000ae60]
xor ecx, ecx
jmp 0x1400052f4
mov qword [rsp + 0x68], rsi
mov ecx, 0x18
call fcn.140006e8c
mov rbx, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1400053e4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rsi
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140005843
jmp 0x1400053e7
mov rbx, rsi
mov qword [rbp - 0x40], rbx
test rbx, rbx
je 0x14000584e
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x18]
mov r14d, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140005467
mov rcx, qword [rbx]
test rcx, rcx
je 0x140005448
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000545a
call fcn.140006ec8
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.140006ec8
test r14d, r14d
jns 0x140005497
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14000ae80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400052fa
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1400054ea
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400052fa
mov qword [rsp + 0x78], rsi
mov ecx, 0x18
call fcn.140006e8c
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000552e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rsi
mov dword [rbx + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call fcn.140007a60
mov qword [rbx], rax
jmp 0x140005531
mov rbx, rsi
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000584e
mov ecx, 0x18
call fcn.140006e8c
mov r14, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140005580
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rax
mov qword [r14 + 8], rsi
mov dword [r14 + 0x10], 1
lea rcx, [0x14000aea8]
call fcn.140007a60
mov qword [r14], rax
jmp 0x140005583
mov r14, rsi
mov qword [rsp + 0x60], r14
test r14, r14
je 0x140005838
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rsi
mov r9d, 0x30
mov r8, qword [rbx]
mov rdx, qword [r14]
call qword [rax + 0xa0]
mov r15d, eax
mov ecx, 0xffffffff
lock xadd dword [r14 + 0x10], ecx
cmp ecx, 1
jne 0x1400055fe
mov rcx, qword [r14]
test rcx, rcx
je 0x1400055de
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r14], rsi
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400055f0
call fcn.140006ec8
mov qword [r14 + 8], rsi
mov edx, 0x18
mov rcx, r14
call fcn.140006ec8
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000563d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000561e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140005630
call fcn.140006ec8
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.140006ec8
test r15d, r15d
js 0x1400054c9
mov qword [rbp - 0x80], rsi
mov dword [rbp - 0x48], esi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400057a3
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp - 0x48]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x80]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rbp - 0x48], 0
je 0x1400057a3
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x78]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x60]
xor r8d, r8d
lea rdx, str.Product
call qword [rax + 0x20]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x70]
lea r8, str._ws_Teleporter__ws
mov edx, 0x100
lea rcx, [rbp - 0x20]
call fcn.140005910
lea rax, [rbp - 0x20]
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x140005710
lea r8, [rbp - 0x38]
lea rcx, [rbp - 0x20]
call fcn.1400059f0
mov rbx, rsi
nop dword [rax]
cmp rbx, 8
jne 0x14000574b
lea r8, [0x14000aef4]
mov edx, 0xff
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
movzx r9d, byte [rbp + rbx - 0x38]
lea r8, str._.2X
mov edx, 5
lea rcx, [rbp - 0x40]
call fcn.140005980
lea r8, [rbp - 0x40]
mov edx, 0xff
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
inc rbx
cmp rbx, 0x10
jl 0x140005730
lea rcx, [rbp - 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
jne 0x140005660
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea r8, [0x14000af00]
mov edx, 0xff
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x1400057f0
test rax, rax
je 0x140005831
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
xor byte [rdx], 8
inc esi
lea rdx, [rdx + 1]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x140005820
movsxd rcx, esi
cmp rcx, rax
jb 0x140005810
xor al, al
jmp 0x1400052fc
mov ecx, 0x8007000e
call fcn.140007a50
nop
mov ecx, 0x8007000e
call fcn.140007a50
nop
mov ecx, 0x8007000e
call fcn.140007a50
int3