Function at 0x14001bdc0
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14029f7a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401b5d40
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401b5d40
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001be62
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14025e700]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c753
jmp 0x14001be65
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001c7ed
mov ecx, 0x18
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001beb0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c75e
jmp 0x14001beb3
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001c7f8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001b6d0
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001bf28
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001bf08
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001bf1a
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001bf65
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001bf46
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001bf58
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
test r15b, r15b
je 0x14001bf71
xor eax, eax
jmp 0x14001c71d
lea rcx, [rbp - 0x40]
call fcn.14001dd40
test eax, eax
jne 0x14001c0b4
lea ecx, [rax + 0x18]
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001bfbd
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14025e700]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c769
jmp 0x14001bfc0
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001c803
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c00b
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c774
jmp 0x14001c00e
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001c80e
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c077
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c057
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c069
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001c0b4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c095
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c0a7
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c09c0
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c102
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c77f
jmp 0x14001c105
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001c819
mov ecx, 0x18
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c150
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c78a
jmp 0x14001c153
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001c824
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001c1bc
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c19c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c1ae
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c1f9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c1da
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c1ec
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c09c0
mov ecx, 0x18
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c247
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c795
jmp 0x14001c24a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001c82f
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c295
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c7a0
jmp 0x14001c298
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001c83a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c303
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c2e3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c2f5
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001c340
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c321
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c333
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c09c0
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c391
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c7ab
jmp 0x14001c394
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001c845
mov ecx, 0x18
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c3de
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c7b6
jmp 0x14001c3e1
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001c850
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001c449
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c429
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c43b
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c486
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c467
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c479
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
lea rcx, [rbp - 0x40]
call fcn.14001dd40
test eax, eax
jne 0x14001c707
lea ecx, [rax + 0x18]
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c4d2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c7c1
jmp 0x14001c4d5
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001c85b
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c51f
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c7cc
jmp 0x14001c522
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001c866
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c58a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c56a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c57c
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001c5c7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c5a8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c5ba
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
lea rcx, [rbp - 0x40]
call fcn.14001dd40
test eax, eax
jne 0x14001c707
lea ecx, [rax + 0x18]
call fcn.1400300bc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c613
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001c7d7
jmp 0x14001c616
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001c871
mov ecx, 0x18
call fcn.1400300bc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001c660
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001c7e2
jmp 0x14001c663
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001c748
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001b6d0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001c6cb
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001c6ab
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c6bd
call fcn.140030104
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003014c
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001c707
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c6e8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c6fa
call fcn.140030104
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003014c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c09c0
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b1a60
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
nop
mov ecx, 0x8007000e
call fcn.1401b4490
int3