Function at 0x14001f320
Capabilities:
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402ac7a8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, rcx
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp - 0x40]
call fcn.1401bcd10
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0xc0]
call fcn.1401bcd10
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x14001f3c2
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026a620]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fcb3
jmp 0x14001f3c5
mov rsi, rbx
mov qword [rsp + 0x48], rsi
test rsi, rsi
je 0x14001fd4d
mov ecx, 0x18
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f410
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fcbe
jmp 0x14001f413
mov rdi, rbx
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x14001fd58
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ec00
test ax, ax
sete r15b
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f488
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f468
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f47a
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f4c5
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f4a6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f4b8
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
test r15b, r15b
je 0x14001f4d1
xor eax, eax
jmp 0x14001fc7d
lea rcx, [rbp - 0x40]
call fcn.1400212a0
test eax, eax
jne 0x14001f614
lea ecx, [rax + 0x18]
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f51d
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14026a620]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fcc9
jmp 0x14001f520
mov rdi, rbx
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14001fd63
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f56b
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fcd4
jmp 0x14001f56e
mov rsi, rbx
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x14001fd6e
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f5d7
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f5b7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f5c9
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f614
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f5f5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f607
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9784
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f662
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Model
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fcdf
jmp 0x14001f665
mov rsi, rbx
mov qword [rsp + 0x68], rsi
test rsi, rsi
je 0x14001fd79
mov ecx, 0x18
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f6b0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fcea
jmp 0x14001f6b3
mov rdi, rbx
mov qword [rsp + 0x70], rdi
test rdi, rdi
je 0x14001fd84
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f71c
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f6fc
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f70e
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f759
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f73a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f74c
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9784
mov ecx, 0x18
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f7a7
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.Product
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fcf5
jmp 0x14001f7aa
mov rdi, rbx
mov qword [rsp + 0x78], rdi
test rdi, rdi
je 0x14001fd8f
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f7f5
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fd00
jmp 0x14001f7f8
mov rsi, rbx
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x14001fd9a
mov dword [rsp + 0x20], 0x27
lea r9, [rbp + 0xc0]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f863
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f843
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f855
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f8a0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f881
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f893
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
lea r8, [rbp + 0xc0]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9784
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f8f1
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fd0b
jmp 0x14001f8f4
mov rsi, rbx
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14001fda5
mov ecx, 0x18
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001f93e
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BIOS
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fd16
jmp 0x14001f941
mov rdi, rbx
mov qword [rbp - 0x70], rdi
test rdi, rdi
je 0x14001fdb0
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rsi]
mov rcx, qword [rdi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001f9a9
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001f989
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001f99b
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001f9e6
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001f9c7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001f9d9
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
lea rcx, [rbp - 0x40]
call fcn.1400212a0
test eax, eax
jne 0x14001fc67
lea ecx, [rax + 0x18]
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fa32
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fd21
jmp 0x14001fa35
mov rdi, rbx
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14001fdbb
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fa7f
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_BaseBoard
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fd2c
jmp 0x14001fa82
mov rsi, rbx
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14001fdc6
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001faea
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001faca
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fadc
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14001fb27
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fb08
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fb1a
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
lea rcx, [rbp - 0x40]
call fcn.1400212a0
test eax, eax
jne 0x14001fc67
lea ecx, [rax + 0x18]
call fcn.1400353ac
mov rdi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fb73
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SerialNumber
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14001fd37
jmp 0x14001fb76
mov rdi, rbx
mov qword [rbp - 0x58], rdi
test rdi, rdi
je 0x14001fdd1
mov ecx, 0x18
call fcn.1400353ac
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001fbc0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_SystemEnclosure
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14001fd42
jmp 0x14001fbc3
mov rsi, rbx
mov qword [rbp - 0x50], rsi
test rsi, rsi
je 0x14001fca8
mov dword [rsp + 0x20], 0x27
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x38]
mov rdx, qword [rdi]
mov rcx, qword [rsi]
call fcn.14001ec00
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14001fc2b
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001fc0b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], rbx
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001fc1d
call fcn.1400353f4
mov qword [rsi + 8], rbx
mov edx, 0x18
mov rcx, rsi
call fcn.14003543c
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x14001fc67
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fc48
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001fc5a
call fcn.1400353f4
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.14003543c
lea r8, [rbp - 0x40]
mov edx, 0x400
mov rcx, r12
call fcn.1401c9784
mov eax, 1
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401b6d50
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
nop
mov ecx, 0x8007000e
call fcn.1401bb460
int3