Function at 0x14001f5a0
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402ad7a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401bd240
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401bd240
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001f642
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026b640]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff33
jmp 0x14001f645
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001ffcd
mov ecx, 0x18
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f690
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff3e
jmp 0x14001f693
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001ffd8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ee80
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f708
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f6e8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f6fa
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f745
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f726
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f738
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
test r15b, r15b
je 0x14001f751
xor eax, eax
jmp 0x14001fefd
lea rcx, [rbp - 0x40]
call fcn.140021520
test eax, eax
jne 0x14001f894
lea ecx, [rax + 0x18]
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f79d
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026b640]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff49
jmp 0x14001f7a0
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001ffe3
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f7eb
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff54
jmp 0x14001f7ee
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001ffee
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f857
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f837
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f849
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f894
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f875
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f887
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cb4
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f8e2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff5f
jmp 0x14001f8e5
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001fff9
mov ecx, 0x18
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f930
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff6a
jmp 0x14001f933
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x140020004
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f99c
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f97c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f98e
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f9d9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f9ba
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f9cc
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cb4
mov ecx, 0x18
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fa27
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff75
jmp 0x14001fa2a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14002000f
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fa75
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff80
jmp 0x14001fa78
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14002001a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fae3
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fac3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fad5
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fb20
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fb01
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fb13
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cb4
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fb71
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff8b
jmp 0x14001fb74
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x140020025
mov ecx, 0x18
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fbbe
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff96
jmp 0x14001fbc1
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x140020030
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fc29
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fc09
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fc1b
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fc66
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fc47
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fc59
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
lea rcx, [rbp - 0x40]
call fcn.140021520
test eax, eax
jne 0x14001fee7
lea ecx, [rax + 0x18]
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fcb2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ffa1
jmp 0x14001fcb5
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14002003b
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fcff
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ffac
jmp 0x14001fd02
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x140020046
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fd6a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fd4a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fd5c
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fda7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fd88
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fd9a
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
lea rcx, [rbp - 0x40]
call fcn.140021520
test eax, eax
jne 0x14001fee7
lea ecx, [rax + 0x18]
call fcn.1400358dc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fdf3
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ffb7
jmp 0x14001fdf6
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x140020051
mov ecx, 0x18
call fcn.1400358dc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fe40
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ffc2
jmp 0x14001fe43
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001ff28
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ee80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001feab
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fe8b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fe9d
call fcn.140035924
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003596c
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001fee7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fec8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001feda
call fcn.140035924
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003596c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cb4
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b7280
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
nop
mov ecx, 0x8007000e
call fcn.1401bb990
int3