Function at 0x14001f280
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402ac7a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401bcf00
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401bcf00
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001f322
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026a550]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc13
jmp 0x14001f325
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001fcad
mov ecx, 0x18
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f370
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc1e
jmp 0x14001f373
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001fcb8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001eb60
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f3e8
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f3c8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f3da
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f425
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f406
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f418
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
test r15b, r15b
je 0x14001f431
xor eax, eax
jmp 0x14001fbdd
lea rcx, [rbp - 0x40]
call fcn.140021200
test eax, eax
jne 0x14001f574
lea ecx, [rax + 0x18]
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f47d
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026a550]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc29
jmp 0x14001f480
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001fcc3
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f4cb
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc34
jmp 0x14001f4ce
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001fcce
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f537
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f517
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f529
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f574
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f555
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f567
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9974
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f5c2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc3f
jmp 0x14001f5c5
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001fcd9
mov ecx, 0x18
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f610
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc4a
jmp 0x14001f613
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001fce4
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f67c
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f65c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f66e
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f6b9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f69a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f6ac
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9974
mov ecx, 0x18
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f707
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc55
jmp 0x14001f70a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001fcef
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f755
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc60
jmp 0x14001f758
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001fcfa
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f7c3
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f7a3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f7b5
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f800
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f7e1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f7f3
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9974
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f851
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc6b
jmp 0x14001f854
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001fd05
mov ecx, 0x18
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f89e
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc76
jmp 0x14001f8a1
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001fd10
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f909
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f8e9
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f8fb
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f946
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f927
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f939
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
lea rcx, [rbp - 0x40]
call fcn.140021200
test eax, eax
jne 0x14001fbc7
lea ecx, [rax + 0x18]
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f992
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc81
jmp 0x14001f995
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001fd1b
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f9df
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fc8c
jmp 0x14001f9e2
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001fd26
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fa4a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fa2a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fa3c
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fa87
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fa68
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fa7a
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
lea rcx, [rbp - 0x40]
call fcn.140021200
test eax, eax
jne 0x14001fbc7
lea ecx, [rax + 0x18]
call fcn.14003559c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fad3
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fc97
jmp 0x14001fad6
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001fd31
mov ecx, 0x18
call fcn.14003559c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fb20
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fca2
jmp 0x14001fb23
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001fc08
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001eb60
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fb8b
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fb6b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fb7d
call fcn.1400355e4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003562c
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001fbc7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fba8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fbba
call fcn.1400355e4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003562c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9974
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b6f40
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
nop
mov ecx, 0x8007000e
call fcn.1401bb650
int3