Function at 0x14001a2a0
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402a87a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401b8ea0
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401b8ea0
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001a342
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x1402665a0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac33
jmp 0x14001a345
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001accd
mov ecx, 0x18
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a390
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac3e
jmp 0x14001a393
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001acd8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b80
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a408
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a3e8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a3fa
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a445
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a426
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a438
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
test r15b, r15b
je 0x14001a451
xor eax, eax
jmp 0x14001abfd
lea rcx, [rbp - 0x40]
call fcn.14001c220
test eax, eax
jne 0x14001a594
lea ecx, [rax + 0x18]
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a49d
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x1402665a0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac49
jmp 0x14001a4a0
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001ace3
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a4eb
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac54
jmp 0x14001a4ee
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001acee
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a557
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a537
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a549
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a594
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a575
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a587
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5914
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a5e2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac5f
jmp 0x14001a5e5
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001acf9
mov ecx, 0x18
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a630
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac6a
jmp 0x14001a633
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001ad04
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a69c
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a67c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a68e
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a6d9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a6ba
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a6cc
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5914
mov ecx, 0x18
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a727
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac75
jmp 0x14001a72a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001ad0f
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a775
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac80
jmp 0x14001a778
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001ad1a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a7e3
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a7c3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a7d5
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a820
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a801
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a813
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5914
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a871
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac8b
jmp 0x14001a874
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001ad25
mov ecx, 0x18
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a8be
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac96
jmp 0x14001a8c1
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001ad30
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a929
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a909
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a91b
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a966
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a947
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a959
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
lea rcx, [rbp - 0x40]
call fcn.14001c220
test eax, eax
jne 0x14001abe7
lea ecx, [rax + 0x18]
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a9b2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001aca1
jmp 0x14001a9b5
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001ad3b
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a9ff
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001acac
jmp 0x14001aa02
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001ad46
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001aa6a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001aa4a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001aa5c
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001aaa7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001aa88
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001aa9a
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
lea rcx, [rbp - 0x40]
call fcn.14001c220
test eax, eax
jne 0x14001abe7
lea ecx, [rax + 0x18]
call fcn.14003154c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001aaf3
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001acb7
jmp 0x14001aaf6
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001ad51
mov ecx, 0x18
call fcn.14003154c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001ab40
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001acc2
jmp 0x14001ab43
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001ac28
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b80
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001abab
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001ab8b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001ab9d
call fcn.140031594
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315dc
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001abe7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001abc8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001abda
call fcn.140031594
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315dc
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5914
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b2ef0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
nop
mov ecx, 0x8007000e
call fcn.1401b75f0
int3