Function at 0x14004ac90
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0xb8
xor edi, edi
lea r15, [0x1403a2390]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x39], dil
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14004ad81
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, Ordinal_50
call fcn.1400e2004
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x20
mov qword [0x1403a23a8], 0x2f
movups xmm0, xmmword [str.Failed_to_initialize_COM_library]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140169ef8]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], dil
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x14004ad6e
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ad69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b24e
call fcn.1400e2280
mov rax, r15
add rsp, 0xb8
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x14004ae2e
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e2004
mov rdx, rax
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x1d
mov ebx, Ordinal_33
mov qword [0x1403a23a8], rbx
movups xmm0, xmmword [str.Failed_to_initialize_security]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140169f20]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140169f28]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x140169f2c]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
jmp 0x14004ad33
mov qword [rbp + 0x7f], rdi
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
lea r9, [0x1400f5b08]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400f5b18]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14004aec7
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, Ordinal_50
call fcn.1400e2004
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x24
mov qword [0x1403a23a8], 0x2f
movups xmm0, xmmword [str.Failed_to_create_IWbemLocator_object]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140169f40]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140169f50]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
jmp 0x14004ad33
mov qword [rbp + 0x77], rdi
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x18]
mov ecx, Ordinal_27
call fcn.1400e2004
mov rbx, rax
mov qword [rbp + 0x6f], rax
test rax, rax
je 0x14004af12
mov qword [rax + 8], rdi
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14004b495
jmp 0x14004af15
mov rbx, rdi
mov qword [rbp + 0x6f], rbx
test rbx, rbx
je 0x14004b4a6
lea rax, [rbp + 0x77]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x7f]
call rsi
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14004af8e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14004af6f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rdi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14004af81
call fcn.1400e2280
mov qword [rbx + 8], rdi
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1400e2280
test esi, esi
jns 0x14004b00a
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, Ordinal_50
call fcn.1400e2004
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x22
mov qword [0x1403a23a8], 0x2f
movups xmm0, xmmword [str.Could_not_connect_to_WMI_namespace]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140169f68]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x140169f78]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
jmp 0x14004ad33
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp + 0x77]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14004b0d2
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e2004
mov rdx, rax
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x1b
mov ebx, Ordinal_33
mov qword [0x1403a23a8], rbx
movups xmm0, xmmword [str.Could_not_set_proxy_blanket]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140169f90]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140169f98]
mov word [rax + 0x18], cx
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rdx + 0x1a], al
mov byte [rdx + 0x1b], 0
jmp 0x14004ad33
mov qword [rbp - 0x19], rdi
mov rax, qword [rbp + 0x77]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, Ordinal_27
call fcn.1400e2004
mov rbx, rax
mov qword [rbp + 0x6f], rax
test rax, rax
je 0x14004b116
mov qword [rax + 8], rdi
mov dword [rax + 0x10], 1
lea rcx, str.SELECT_SerialNumber_FROM_Win32_BIOS
call fcn.1400e3240
mov qword [rbx], rax
jmp 0x14004b119
mov rbx, rdi
mov qword [rbp - 1], rbx
test rbx, rbx
je 0x14004b4a6
mov rsi, qword [rbx]
mov ecx, Ordinal_27
call fcn.1400e2004
mov rbx, rax
mov qword [rbp + 0x6f], rax
test rax, rax
je 0x14004b15b
mov qword [rax + 8], rdi
mov dword [rax + 0x10], 1
lea rcx, [0x140169e80]
call fcn.1400e3240
mov qword [rbx], rax
jmp 0x14004b15e
mov rbx, rdi
mov qword [rbp + 0x6f], rbx
test rbx, rbx
je 0x14004b48a
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9d, Ordinal_50
mov r8, rsi
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x77]
call r14
mov ebx, eax
lea rcx, [rbp + 0x6f]
call fcn.14003e960
nop
lea rcx, [rbp - 1]
call fcn.14003e960
test ebx, ebx
jns 0x14004b255
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1403a2390], xmm0
mov qword [0x1403a23a0], rdi
mov qword [0x1403a23a8], rdi
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e2004
mov qword [0x1403a2390], rax
mov qword [0x1403a23a0], 0x10
mov ebx, Ordinal_33
mov qword [0x1403a23a8], rbx
movups xmm0, xmmword [str.WMI_query_failed]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x14004ad6e
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ad69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rbx
jbe 0x14004ad69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rbp - 0x11], rdi
mov dword [rbp + 0x67], edi
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14004b307
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x11]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp + 0x67], 0
je 0x14004b307
mov rcx, qword [rbp - 0x11]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 7]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp word [rbp + 7], 8
jne 0x14004b2e6
mov rcx, qword [rbp + 0xf]
call fcn.1400e3120
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004b2d0
mov rdx, rax
lea rcx, [rbp - 0x39]
call fcn.14007abb0
lea rcx, [rbp + 7]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x11]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
test rcx, rcx
jne 0x14004b270
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp qword [rbp - 0x29], 0
jne 0x14004b46f
mov rsi, qword [rbp - 0x21]
cmp rsi, 0x1b
jb 0x14004b373
lea rbx, [rbp - 0x39]
cmp rsi, 0xf
cmova rbx, qword [rbp - 0x39]
mov qword [rbp - 0x29], reloc.WLDAP32.dll_Ordinal_27
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.Serial_number_not_available
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1b], 0
jmp 0x14004b46f
mov rcx, rsi
shr rcx, 1
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rcx
cmp rsi, rax
jbe 0x14004b3bb
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400e2004
test rax, rax
je 0x14004b45f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14004b3f4
lea rax, [rsi + rcx]
mov ebx, Ordinal_33
cmp rax, rbx
cmova rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
je 0x14004b3f4
cmp rcx, 0x1000
jb 0x14004b3ec
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b4a0
jmp 0x14004b39c
call fcn.1400e2004
mov rdi, rax
mov qword [rbp - 0x29], reloc.WLDAP32.dll_Ordinal_27
mov qword [rbp - 0x21], rbx
movups xmm0, xmmword [str.Serial_number_not_available]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x140169ff0]
movsd qword [rdi + 0x10], xmm0
movzx ecx, word [0x140169ff8]
mov word [rdi + 0x18], cx
movzx eax, byte [0x140169ffa]
mov byte [rdi + 0x1a], al
mov byte [rdi + 0x1b], 0
cmp rsi, 0xf
jbe 0x14004b46b
lea rdx, [rsi + 1]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b466
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b466
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2280
mov qword [rbp - 0x39], rdi
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [0x1403a2390], xmm0
movups xmm1, xmmword [rbp - 0x29]
movups xmmword [0x1403a23a0], xmm1
jmp 0x14004ad6e
mov ecx, 0x8007000e
call fcn.1400e3110
nop
mov ecx, 0x8007000e
call fcn.1400e3110
nop
call fcn.1400034e0
int3
mov ecx, 0x8007000e
call fcn.1400e3110
int3