Function at 0x14000d510
Capabilities:
Reference wmi statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rsi, rdx
mov r12, rcx
test rdx, rdx
je 0x14000da64
xor r13d, r13d
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x68]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], r13d
mov dword [rsp + 0x64], 0x80
mov word [rsp + 0x68], r13w
lea rax, [0x1401c16d8]
mov qword [rsp + 0x50], rax
mov rax, qword [rdx]
mov r15, qword [rax + 0xa0]
lea ecx, [r13 + 0x18]
call fcn.14002eee8
mov rbx, rax
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x14000d5be
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_VideoController
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000da8c
jmp 0x14000d5c1
mov rbx, r13
mov qword [rbp + 0xc8], rbx
test rbx, rbx
je 0x14000daa2
mov r14, qword [rbx]
mov ecx, 0x18
call fcn.14002eee8
mov rdi, rax
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14000d613
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x1401c1380]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000da97
jmp 0x14000d616
mov rdi, r13
mov qword [rbp + 0xb8], rdi
test rdi, rdi
je 0x14000da81
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0x30
mov r8, r14
mov rdx, qword [rdi]
mov rcx, rsi
call r15
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14000d689
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000d669
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000d67b
call fcn.14002ec58
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.14002ec58
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000d6c8
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d6a9
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d6bb
call fcn.14002ec58
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14002ec58
test esi, esi
jns 0x14000d6d3
xor al, al
jmp 0x14000da62
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000da60
movabs rsi, 0x100002600
mov edi, 0x20
mov r14d, 0xfffa
nop word [rax + rax]
mov dword [rbp + 0xc8], r13d
mov qword [rbp + 0xb8], r13
mov rax, qword [rcx]
lea rdx, [rbp + 0xc8]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xb8]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
test eax, eax
jne 0x14000da50
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
je 0x14000da50
cmp dword [rbp + 0xc8], eax
je 0x14000da4a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rax
lea rbx, str.Caption
nop word [rax + rax]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rdx, rbx
call qword [rax + 0x20]
test eax, eax
jns 0x14000d819
lea rdx, str.n_a
nop word [rax + rax]
movzx ecx, word [rdx]
cmp ecx, edi
ja 0x14000d7b3
bt rsi, rcx
jae 0x14000d7b3
add rdx, 2
jmp 0x14000d7a0
movzx r9d, di
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [r12 + r8*2], 0
jne 0x14000d7c0
test cx, cx
je 0x14000d9f0
lea eax, [rcx - 9]
test r14w, ax
jne 0x14000d7e8
cmp cx, 0xe
je 0x14000d7e8
mov r9d, edi
jmp 0x14000d80f
cmp r9w, di
jne 0x14000d7f3
cmp cx, di
je 0x14000d804
cmp r8, 0x1ff
jae 0x14000d804
mov word [r12 + r8*2], cx
inc r8
movzx r9d, word [rdx]
add rdx, 2
movzx ecx, word [rdx]
test cx, cx
jne 0x14000d7d4
jmp 0x14000d9f0
movzx eax, word [rsp + 0x38]
cmp eax, 3
je 0x14000d95b
cmp eax, 8
je 0x14000d8b5
lea rdx, str.n_a
movzx ecx, word [rdx]
cmp ecx, edi
ja 0x14000d84a
bt rsi, rcx
jae 0x14000d84a
add rdx, 2
jmp 0x14000d837
movzx r9d, di
mov r8, 0xffffffffffffffff
inc r8
cmp word [r12 + r8*2], 0
jne 0x14000d855
test cx, cx
je 0x14000d9f0
nop dword [rax]
lea eax, [rcx - 9]
test r14w, ax
jne 0x14000d884
cmp cx, 0xe
je 0x14000d884
mov r9d, edi
jmp 0x14000d8ab
cmp r9w, di
jne 0x14000d88f
cmp cx, di
je 0x14000d8a0
cmp r8, 0x1ff
jae 0x14000d8a0
mov word [r12 + r8*2], cx
inc r8
movzx r9d, word [rdx]
add rdx, 2
movzx ecx, word [rdx]
test cx, cx
jne 0x14000d870
jmp 0x14000d9f0
mov rax, qword [rsp + 0x40]
lea rdx, [0x1401c1388]
test rax, rax
cmovne rdx, rax
mov rcx, r12
call fcn.14000d460
lea r8, [0x1401c1418]
movzx ecx, word [r8]
cmp ecx, edi
ja 0x14000d8eb
bt rsi, rcx
jae 0x14000d8eb
add r8, 2
jmp 0x14000d8d7
movzx r9d, di
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp word [r12 + rdx*2], 0
jne 0x14000d900
test cx, cx
je 0x14000d951
lea eax, [rcx - 9]
test r14w, ax
jne 0x14000d924
cmp cx, 0xe
je 0x14000d924
mov r9d, edi
jmp 0x14000d94c
cmp r9w, di
jne 0x14000d92f
cmp cx, di
je 0x14000d940
cmp rdx, 0x1ff
jae 0x14000d940
mov word [r12 + rdx*2], cx
inc rdx
movzx r9d, word [r8]
add r8, 2
movzx ecx, word [r8]
test cx, cx
jne 0x14000d910
mov word [r12 + rdx*2], r13w
jmp 0x14000d9f5
mov r8d, dword [rsp + 0x40]
lea rdx, [0x1401c1390]
lea rcx, [rsp + 0x50]
call fcn.1400038c0
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14000d9f5
nop dword [rax + rax]
movzx eax, word [rdx]
cmp eax, edi
ja 0x14000d993
bt rsi, rax
jae 0x14000d993
add rdx, 2
jmp 0x14000d980
movzx r9d, di
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [r12 + r8*2], 0
jne 0x14000d9a0
test ax, ax
je 0x14000d9f0
lea ecx, [rax - 9]
test r14w, cx
jne 0x14000d9c4
cmp ax, 0xe
je 0x14000d9c4
mov r9d, edi
jmp 0x14000d9eb
cmp r9w, di
jne 0x14000d9cf
cmp ax, di
je 0x14000d9e0
cmp r8, 0x1ff
jae 0x14000d9e0
mov word [r12 + r8*2], ax
inc r8
movzx r9d, word [rdx]
add rdx, 2
movzx eax, word [rdx]
test ax, ax
jne 0x14000d9b0
mov word [r12 + r8*2], r13w
lea rcx, [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x14000da10
lea rbx, [rbx + rax*2]
add rbx, 2
mov rcx, qword [rbp + 0xb8]
cmp word [rbx], 0
jne 0x14000d770
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
jne 0x14000d700
jmp 0x14000da60
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000da60
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov al, 1
jmp 0x14000da66
xor al, al
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140025800
nop
mov ecx, 0x8007000e
call fcn.140025800
nop
mov ecx, 0x8007000e
call fcn.140025800
nop
mov ecx, 0x8007000e
call fcn.140025800
int3