Function at 0x14000fff0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x140
mov qword [rbp - 0x60], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r14, rdx
xor r12d, r12d
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x70], r12
mov edi, r12d
test rdx, rdx
jne 0x140010045
mov esi, 0x80004003
jmp 0x1400102ab
mov r15d, r8d
mov r8d, r8d
xor edx, edx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [0x140067ab0]
xor edx, edx
lea r8d, [rdx + 0x17]
lea rcx, [0x140071ca8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test eax, eax
js 0x1400102ab
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or edx, 0xffffffff
lea rcx, str.._
call fcn.14000e0c4
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1400102ff
lea rdx, str.rootCIMV2
lea rcx, [rsp + 0x78]
call fcn.14000e214
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdi, qword [rsp + 0x78]
mov rdx, rdi
call qword [rax + 0x18]
mov esi, eax
test eax, eax
js 0x1400102ab
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov esi, eax
test eax, eax
js 0x1400102ab
mov qword [rsp + 0x68], r12
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x60], r12
mov rsi, qword [rsp + 0x50]
or edx, 0xffffffff
lea rcx, str.Win32_BaseBoard
call fcn.14000e0c4
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14001030a
mov rax, qword [rsi]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea r13d, [r9 + 1]
mov r8d, r13d
mov rdx, rbx
mov rcx, rsi
call qword [rax + SysAllocStringByteLen]
mov esi, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
js 0x140010289
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, r13d
mov edx, 0x2710
call qword [rax + 0x20]
mov esi, eax
cmp eax, r13d
jne 0x1400101c9
mov esi, r13d
jmp 0x140010289
test eax, eax
jne 0x140010289
xor edx, edx
lea r8d, [rax + 0x18]
lea rcx, [rbp - 0x78]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rsp + 0x60]
or r13, 0xffffffffffffffff
mov edx, r13d
lea rcx, str.SerialNumber
call fcn.14000e0c4
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140010315
mov rax, qword [rsi]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x78]
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call qword [rax + 0x20]
mov esi, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [0x140067aa8]
mov r8, r13
lea edx, [r13 + 0x79]
lea rcx, [rbp - 0x50]
call fcn.140008c50
mov r9, r13
lea r8, [rbp - 0x50]
mov rdx, r15
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
nop
lea rcx, [rbp - 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14001029a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400102ab
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400102c6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400102d6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, esi
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140059ef0
mov rbx, qword [rsp + 0x180]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.14000e2ec
nop
mov ecx, 0x8007000e
call fcn.14000e2ec
nop
mov ecx, 0x8007000e
call fcn.14000e2ec
int3