Function at 0x140012cf0
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x100
mov rax, qword [0x1400eb0c0]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r15d, r15d
mov dword [rbp - 0x59], r15d
lea r12, [0x1400ed000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x140012dc3
lea rdx, str.Failed_to_initialize_COM_library.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140043540
lea rdx, [0x140043710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [0x1400ed000], xmm0
mov qword [0x1400ed010], r15
mov qword [0x1400ed018], r15
mov r8d, ntohl
lea rdx, str.Unknown_COM
mov rcx, r12
call fcn.140045100
mov rax, r12
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400bbb00
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov qword [rbp - 0x29], r15
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
lea r9, [0x1400d2888]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400d2898]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140012e43
lea rdx, str.Failed_to_create_IWbemLocator_object.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140043540
lea rdx, [0x140043710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1400ed000], xmm0
mov qword [0x1400ed010], r15
mov qword [0x1400ed018], r15
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Unknown_IWbemLocator
jmp 0x140012d8b
mov qword [rbp - 0x31], r15
mov rax, qword [rbp - 0x29]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, Ordinal_27
call fcn.1400bbb28
mov rbx, rax
mov qword [rbp - 0x69], rax
test rax, rax
je 0x140012e9a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140013583
jmp 0x140012e9d
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x14001359f
lea rax, [rbp - 0x31]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x29]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140012f17
mov rcx, qword [rbx]
test rcx, rcx
je 0x140012ef8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140012f0a
call fcn.1400bbb20
mov qword [rbx + 8], r15
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1400bbb20
test edi, edi
jns 0x140012f78
lea rdx, str.Could_not_connect_to_WMI.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140043540
lea rdx, [0x140043710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1400ed000], xmm0
mov qword [0x1400ed010], r15
mov qword [0x1400ed018], r15
mov r8d, ntohl
lea rdx, str.Unknown_WMI
jmp 0x140012d8b
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x140013012
lea rdx, str.Could_not_set_proxy_blanket.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140043540
lea rdx, [0x140043710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1400ed000], xmm0
mov qword [0x1400ed010], r15
mov qword [0x1400ed018], r15
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Unknown_blanket
jmp 0x140012d8b
mov qword [rbp - 0x19], r15
mov rax, qword [rbp - 0x31]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, Ordinal_27
call fcn.1400bbb28
mov rbx, rax
mov qword [rbp - 0x69], rax
test rax, rax
je 0x140013062
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_DiskDrive
call fcn.1400bb7d0
mov qword [rbx], rax
jmp 0x140013065
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x14001359f
mov rsi, qword [rbx]
mov ecx, Ordinal_27
call fcn.1400bbb28
mov rdi, rax
mov qword [rbp - 0x61], rax
test rax, rax
je 0x1400130b3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], 1
lea rcx, [0x1400d2d90]
call fcn.1400bb7d0
mov qword [rdi], rax
jmp 0x1400130b6
mov rdi, r15
mov qword [rbp - 0x61], rdi
test rdi, rdi
je 0x1400135aa
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, Ordinal_50
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x31]
call r14
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x140013126
mov rcx, qword [rdi]
test rcx, rcx
je 0x140013106
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140013118
call fcn.1400bbb20
mov qword [rdi + 8], r15
mov edx, Ordinal_27
mov rcx, rdi
call fcn.1400bbb20
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140013165
mov rcx, qword [rbx]
test rcx, rcx
je 0x140013146
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140013158
call fcn.1400bbb20
mov qword [rbx + 8], r15
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1400bbb20
test esi, esi
jns 0x1400131d0
lea rdx, str.Query_for_hardware_serial_number_failed.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140043540
lea rdx, [0x140043710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x1400ed000], xmm0
mov qword [0x1400ed010], r15
mov qword [0x1400ed018], r15
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Unknown_serial
jmp 0x140012d8b
mov qword [rbp - 0x21], r15
mov dword [rbp + 0xf], r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x17], 0
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x140013347
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0xf]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x21]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp + 0xf], 0
je 0x140013347
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x11]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
test eax, eax
js 0x140013330
mov rdi, qword [rbp - 9]
mov ecx, Ordinal_27
call fcn.1400bbb28
mov rbx, rax
mov qword [rbp - 0x61], rax
test rax, rax
je 0x14001329f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400132a2
test rdi, rdi
jne 0x14001358e
jmp 0x1400132a2
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x1400135b5
mov rax, qword [rbx + 8]
test rax, rax
jne 0x1400132c4
mov rcx, qword [rbx]
call fcn.1400bb6b0
mov qword [rbx + 8], rax
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400132d0
mov rdx, rax
lea rcx, [rbp + 0x17]
call fcn.140042b40
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140013326
mov rcx, qword [rbx]
test rcx, rcx
je 0x140013307
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140013319
call fcn.1400bbb20
mov qword [rbx + 8], r15
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1400bbb20
lea rcx, [rbp - 0x11]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
test rcx, rcx
jne 0x140013200
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rdi, qword [rbp + 0x27]
xorps xmm0, xmm0
test rdi, rdi
jne 0x1400133a7
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Unknown_Serial
lea rcx, [rbp - 0x51]
call fcn.140045100
lea rax, [rbp - 0x51]
mov ebx, 2
jmp 0x140013484
movups xmmword [rbp - 0x11], xmm0
lea rsi, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rsi, qword [rbp + 0x17]
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x14001357d
cmp rdi, 0xf
ja 0x1400133ea
mov qword [rbp - 1], rdi
mov qword [rbp + 7], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x11], xmm0
jmp 0x14001347b
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140013426
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400bbb28
mov rcx, rax
test rax, rax
je 0x140013529
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140013460
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140013443
mov rax, r15
jmp 0x140013460
cmp rcx, 0x1000
jb 0x14001345b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140013599
jmp 0x140013404
call fcn.1400bbb28
mov qword [rbp - 0x11], rax
mov qword [rbp - 1], rdi
mov qword [rbp + 7], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x11]
mov ebx, 4
movups xmm0, xmmword [rax]
movups xmmword [0x1400ed000], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x1400ed010], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 1
test bl, 4
je 0x1400134f2
and ebx, 0xfffffffb
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x1400134f2
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400134ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400134ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
nop
test bl, 2
je 0x140013536
mov rdx, qword [rbp - 0x39]
cmp rdx, 0xf
jbe 0x140013536
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013530
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013530
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140012d93
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013573
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
jmp 0x140012d93
call fcn.1400026b0
nop
mov ecx, 0x8007000e
call fcn.1400bb6a0
nop
mov ecx, 0x8007000e
call fcn.1400bb6a0
nop
call fcn.1400024f0
nop
mov ecx, 0x8007000e
call fcn.1400bb6a0
nop
mov ecx, 0x8007000e
call fcn.1400bb6a0
nop
mov ecx, 0x8007000e
call fcn.1400bb6a0
int3