Function at 0x14001a2b0
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402a87a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401b8eb0
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401b8eb0
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001a352
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x140266680]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac43
jmp 0x14001a355
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001acdd
mov ecx, 0x18
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a3a0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac4e
jmp 0x14001a3a3
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001ace8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b90
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a418
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a3f8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a40a
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a455
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a436
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a448
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
test r15b, r15b
je 0x14001a461
xor eax, eax
jmp 0x14001ac0d
lea rcx, [rbp - 0x40]
call fcn.14001c230
test eax, eax
jne 0x14001a5a4
lea ecx, [rax + 0x18]
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a4ad
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x140266680]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac59
jmp 0x14001a4b0
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001acf3
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a4fb
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac64
jmp 0x14001a4fe
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001acfe
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a567
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a547
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a559
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a5a4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a585
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a597
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5924
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a5f2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac6f
jmp 0x14001a5f5
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001ad09
mov ecx, 0x18
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a640
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac7a
jmp 0x14001a643
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001ad14
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a6ac
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a68c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a69e
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a6e9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a6ca
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a6dc
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5924
mov ecx, 0x18
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a737
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001ac85
jmp 0x14001a73a
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001ad1f
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a785
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac90
jmp 0x14001a788
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001ad2a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a7f3
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a7d3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a7e5
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a830
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a811
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a823
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5924
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a881
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001ac9b
jmp 0x14001a884
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001ad35
mov ecx, 0x18
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a8ce
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001aca6
jmp 0x14001a8d1
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001ad40
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001a939
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001a919
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001a92b
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001a976
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a957
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001a969
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
lea rcx, [rbp - 0x40]
call fcn.14001c230
test eax, eax
jne 0x14001abf7
lea ecx, [rax + 0x18]
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a9c2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001acb1
jmp 0x14001a9c5
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001ad4b
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001aa0f
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001acbc
jmp 0x14001aa12
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001ad56
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001aa7a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001aa5a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001aa6c
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001aab7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001aa98
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001aaaa
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
lea rcx, [rbp - 0x40]
call fcn.14001c230
test eax, eax
jne 0x14001abf7
lea ecx, [rax + 0x18]
call fcn.14003155c
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001ab03
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001acc7
jmp 0x14001ab06
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001ad61
mov ecx, 0x18
call fcn.14003155c
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001ab50
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001acd2
jmp 0x14001ab53
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001ac38
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.140019b90
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001abbb
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001ab9b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001abad
call fcn.1400315a4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.1400315ec
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001abf7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001abd8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001abea
call fcn.1400315a4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1400315ec
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c5924
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b2f00
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
nop
mov ecx, 0x8007000e
call fcn.1401b7600
int3