Function at 0x140044d30
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rdi, rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x21], r15b
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x140044dff
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x30
call fcn.1400c49fc
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x20
mov qword [rdi + 0x18], 0x2f
movups xmm0, xmmword [str.Failed_to_initialize_COM_library]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1401475b8]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], r15b
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x140045473
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044df5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045241
call fcn.1400c4c78
jmp 0x140045473
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x140044e9a
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x20
call fcn.1400c49fc
mov rdx, rax
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x1d
mov esi, 0x1f
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [str.Failed_to_initialize_security]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1401475e0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1401475e8]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x1401475ec]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
jmp 0x140044dbb
mov qword [rbp - 0x29], r15
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
lea r9, [0x1400d4708]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400d4718]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140044f1f
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x30
call fcn.1400c49fc
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x24
mov qword [rdi + 0x18], 0x2f
movups xmm0, xmmword [str.Failed_to_create_IWbemLocator_object]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140147600]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140147610]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
jmp 0x140044dbb
mov qword [rbp + 0x7f], r15
mov rax, qword [rbp - 0x29]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x18]
lea rcx, [rbp + 0xf]
call fcn.14003dac0
nop
mov rdx, qword [rax]
test rdx, rdx
je 0x140044f45
mov rdx, qword [rdx]
jmp 0x140044f48
mov rdx, r15
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x29]
call rbx
mov esi, eax
mov rbx, qword [rbp + 0xf]
test rbx, rbx
je 0x140044fc0
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140044fc0
test rbx, rbx
je 0x140044fc0
mov rcx, qword [rbx]
test rcx, rcx
je 0x140044fa1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140044fb3
call fcn.1400c4c78
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.1400c4c78
test esi, esi
jns 0x140045028
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x30
call fcn.1400c49fc
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x22
mov qword [rdi + 0x18], 0x2f
movups xmm0, xmmword [str.Could_not_connect_to_WMI_namespace]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140147628]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x140147638]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
jmp 0x140044dbb
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1400450d9
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x20
call fcn.1400c49fc
mov rdx, rax
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x1b
mov esi, 0x1f
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [str.Could_not_set_proxy_blanket]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140147650]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140147658]
mov word [rax + 0x18], cx
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rdx + 0x1a], al
mov byte [rdx + 0x1b], 0
jmp 0x140044dbb
mov qword [rbp - 1], r15
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, 0x18
call fcn.1400c49fc
mov rbx, rax
mov qword [rbp + 0x77], rax
test rax, rax
je 0x14004511d
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.SELECT_SerialNumber_FROM_Win32_Processor
call fcn.1400c5ba0
mov qword [rbx], rax
jmp 0x140045120
mov rbx, r15
mov qword [rbp + 0xf], rbx
test rbx, rbx
je 0x14004549e
mov rsi, qword [rbx]
mov ecx, 0x18
call fcn.1400c49fc
mov rbx, rax
mov qword [rbp + 0x77], rax
test rax, rax
je 0x140045162
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x140147540]
call fcn.1400c5ba0
mov qword [rbx], rax
jmp 0x140045165
mov rbx, r15
mov qword [rbp + 0x77], rbx
test rbx, rbx
je 0x14004548d
lea rax, [rbp - 1]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, 0x30
mov r8, rsi
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x7f]
call r14
mov ebx, eax
lea rcx, [rbp + 0x77]
call fcn.14003db40
nop
lea rcx, [rbp + 0xf]
call fcn.14003db40
test ebx, ebx
jns 0x140045248
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov ecx, 0x20
call fcn.1400c49fc
mov qword [rdi], rax
mov qword [rdi + reloc.WS2_32.dll_recv], 0x10
mov esi, 0x1f
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [str.WMI_query_failed]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x140045473
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044df5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140044df5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rbp + 7], r15
mov dword [rbp + 0x6f], r15d
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x1400452f7
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0x6f]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 7]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + 0x20]
cmp dword [rbp + 0x6f], 0
je 0x1400452f7
mov rcx, qword [rbp + 7]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x1f]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + 0x20]
cmp word [rbp + 0x1f], 8
jne 0x1400452d6
mov rcx, qword [rbp + 0x27]
call fcn.1400c5a80
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400452c0
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.140073c60
lea rcx, [rbp + 0x1f]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 7]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 1]
test rcx, rcx
jne 0x140045260
mov rcx, qword [rbp + 0x7f]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 1]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp qword [rbp - 0x11], 0
jne 0x140045464
mov r14, qword [rbp - 9]
cmp r14, 0x1b
jb 0x140045363
lea rbx, [rbp - 0x21]
cmp r14, 0xf
cmova rbx, qword [rbp - 0x21]
mov qword [rbp - 0x11], 0x1b
mov r8d, 0x1b
lea rdx, str.Serial_number_not_available
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1b], 0
jmp 0x140045464
mov rcx, r14
shr rcx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp r14, rax
jbe 0x1400453ab
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400c49fc
test rax, rax
je 0x140045454
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400453e9
lea rax, [r14 + rcx]
mov esi, 0x1f
cmp rax, rsi
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x1400453c9
mov rbx, r15
jmp 0x1400453e9
cmp rcx, 0x1000
jb 0x1400453e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140045498
jmp 0x14004538c
call fcn.1400c49fc
mov rbx, rax
mov qword [rbp - 0x11], 0x1b
mov qword [rbp - 9], rsi
movups xmm0, xmmword [str.Serial_number_not_available]
movups xmmword [rbx], xmm0
movsd xmm0, qword [0x1401476b0]
movsd qword [rbx + 0x10], xmm0
movzx ecx, word [0x1401476b8]
mov word [rbx + 0x18], cx
movzx eax, byte [0x1401476ba]
mov byte [rbx + 0x1a], al
mov byte [rbx + 0x1b], 0
cmp r14, 0xf
jbe 0x140045460
lea rdx, [r14 + 1]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004545b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004545b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c4c78
mov qword [rbp - 0x21], rbx
movups xmm0, xmmword [rbp - 0x21]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x11]
movups xmmword [rdi + 0x10], xmm1
mov rax, rdi
mov rbx, qword [rsp + 0xe0]
add rsp, 0xb0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1400c5a70
nop
call fcn.140002c50
int3
mov ecx, 0x8007000e
call fcn.1400c5a70
int3