Function at 0x14001f500
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402ad7a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401bd260
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401bd260
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001f5a2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026b630]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fe93
jmp 0x14001f5a5
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001ff2d
mov ecx, 0x18
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f5f0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fe9e
jmp 0x14001f5f3
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001ff38
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ede0
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f668
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f648
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f65a
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f6a5
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f686
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f698
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
test r15b, r15b
je 0x14001f6b1
xor eax, eax
jmp 0x14001fe5d
lea rcx, [rbp - 0x40]
call fcn.140021480
test eax, eax
jne 0x14001f7f4
lea ecx, [rax + 0x18]
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f6fd
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026b630]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fea9
jmp 0x14001f700
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001ff43
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f74b
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001feb4
jmp 0x14001f74e
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001ff4e
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f7b7
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f797
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f7a9
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f7f4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f7d5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f7e7
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cd4
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f842
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001febf
jmp 0x14001f845
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001ff59
mov ecx, 0x18
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f890
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001feca
jmp 0x14001f893
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001ff64
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f8fc
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f8dc
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f8ee
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f939
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f91a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f92c
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cd4
mov ecx, 0x18
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f987
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fed5
jmp 0x14001f98a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001ff6f
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f9d5
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fee0
jmp 0x14001f9d8
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001ff7a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fa43
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fa23
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fa35
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fa80
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fa61
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fa73
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cd4
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fad1
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001feeb
jmp 0x14001fad4
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001ff85
mov ecx, 0x18
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fb1e
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fef6
jmp 0x14001fb21
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001ff90
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fb89
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fb69
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fb7b
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fbc6
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fba7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fbb9
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
lea rcx, [rbp - 0x40]
call fcn.140021480
test eax, eax
jne 0x14001fe47
lea ecx, [rax + 0x18]
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fc12
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff01
jmp 0x14001fc15
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001ff9b
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fc5f
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff0c
jmp 0x14001fc62
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001ffa6
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fcca
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fcaa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fcbc
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fd07
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fce8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fcfa
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
lea rcx, [rbp - 0x40]
call fcn.140021480
test eax, eax
jne 0x14001fe47
lea ecx, [rax + 0x18]
call fcn.1400358fc
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fd53
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ff17
jmp 0x14001fd56
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001ffb1
mov ecx, 0x18
call fcn.1400358fc
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fda0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ff22
jmp 0x14001fda3
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001fe88
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ede0
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fe0b
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fdeb
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fdfd
call fcn.140035944
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003598c
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001fe47
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fe28
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fe3a
call fcn.140035944
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003598c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9cd4
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b72a0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
nop
mov ecx, 0x8007000e
call fcn.1401bb9b0
int3