Function at 0x1400509e0
Capabilities:
Reference wmi statements

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x110
mov rax, qword [0x14030a918]
xor rax, rsp
mov qword [rsp + 0x108], rax
mov r14, rdx
mov rbx, rcx
xor r15d, r15d
mov qword [rsp + 0x88], r15
movdqa xmm0, xmmword [0x1402c55e0]
movdqu xmmword [rsp + 0x98], xmm0
mov word [rsp + 0x88], r15w
mov byte [rsp + 0x80], r15b
lea rdx, str.srl::WMI::GetBiosValues
lea rcx, [rsp + 0x88]
call fcn.140009b0c
nop
call fcn.14001ff80
cmp dword [rax + 8], 4
jl 0x140050a68
lea rcx, [rsp + 0x80]
call fcn.140015b20
cmp byte [rbx + 0x28], 0
jne 0x140050a82
lea rcx, [rsp + 0x80]
call fcn.140017440
xor al, al
jmp 0x140050e54
xor sil, sil
mov byte [rsp + 0x30], sil
lea r8, [rsp + 0x48]
lea rdx, str.SELECT__FROM_Win32_BIOS
mov rcx, rbx
call fcn.140051c10
test al, al
je 0x140050e3c
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x44], r15d
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x44]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x38]
mov edi, 0xffffffff
lea r8d, [rdi + 2]
mov edx, edi
call qword [rax + 0x20]
test eax, eax
jne 0x140050e30
lea rcx, [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov sil, 1
mov byte [rsp + 0x30], sil
lea r9, [rsp + 0x50]
lea r8, [0x1402c05e8]
mov rdx, qword [rsp + 0x38]
call fcn.140051480
lea r9, [rsp + 0x50]
lea r8, str.name
mov rdx, qword [rsp + 0x38]
call fcn.140051480
test al, al
je 0x140050c0d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.140052ba0
nop
mov rax, qword [rax]
test rax, rax
je 0x140050b42
mov rdx, qword [rax]
jmp 0x140050b45
mov rdx, r15
lea rcx, [rsp + 0xa8]
call fcn.140009744
mov rdx, rax
mov rcx, r14
call fcn.140048ef0
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x140050ba5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050ba0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050e7d
call fcn.14000410c
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], r15w
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x140050c0d
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140050c0d
test rbx, rbx
je 0x140050c0d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140050bee
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140050c00
call fcn.140074804
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000410c
lea r9, [rsp + 0x50]
lea r8, str.Manufacturer
mov rdx, qword [rsp + 0x38]
call fcn.140051480
test al, al
je 0x140050d14
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140052ba0
nop
mov rax, qword [rax]
test rax, rax
je 0x140050c48
mov rdx, qword [rax]
jmp 0x140050c4b
mov rdx, r15
lea rcx, [rsp + 0xc8]
call fcn.140009744
lea rcx, [r14 + 0x30]
mov rdx, rax
call fcn.140048ef0
mov rdx, qword [rsp + 0xe0]
cmp rdx, 8
jb 0x140050cac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050ca7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050e83
call fcn.14000410c
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], 7
mov word [rsp + 0xc8], r15w
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x140050d14
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140050d14
test rbx, rbx
je 0x140050d14
mov rcx, qword [rbx]
test rcx, rcx
je 0x140050cf5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140050d07
call fcn.140074804
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000410c
lea r9, [rsp + 0x50]
lea r8, str.SMBIOSBIOSVersion
mov rdx, qword [rsp + 0x38]
call fcn.140051480
test al, al
je 0x140050e19
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140052ba0
nop
mov rax, qword [rax]
test rax, rax
je 0x140050d4f
mov rdx, qword [rax]
jmp 0x140050d52
mov rdx, r15
lea rcx, [rsp + 0xe8]
call fcn.140009744
lea rcx, [r14 + 0x10]
mov rdx, rax
call fcn.140048ef0
mov rdx, qword [rsp + 0x100]
cmp rdx, 8
jb 0x140050db3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050dae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050e89
call fcn.14000410c
mov qword [rsp + 0xf8], r15
mov qword [rsp + 0x100], 7
mov word [rsp + 0xe8], r15w
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x140050e19
lock xadd dword [rbx + 0x10], edi
cmp edi, 1
jne 0x140050e19
test rbx, rbx
je 0x140050e19
mov rcx, qword [rbx]
test rcx, rcx
je 0x140050dfa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140050e0c
call fcn.140074804
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000410c
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
jmp 0x140050e43
lea rcx, [rsp + 0x80]
call fcn.140017440
movzx eax, sil
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.140211820
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
call fcn.14021a85c
nop
call fcn.14021a85c
nop
call fcn.14021a85c
int3