Function at 0x14000dc20
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x100
mov rax, qword [0x140098280]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r15d, r15d
mov dword [rbp - 0x59], r15d
lea r12, [0x14009bda0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14000dce7
lea rdx, str.Failed_to_initialize_COM_library.
lea rcx, [0x14009a150]
call fcn.140048a00
mov rcx, rax
call fcn.140048cb0
xorps xmm0, xmm0
movups xmmword [0x14009bda0], xmm0
mov qword [0x14009bdb0], r15
mov qword [0x14009bdb8], r15
mov r8d, inet_ntoa
lea rdx, str.Unknown_COM
mov rcx, r12
call fcn.1400053b0
mov rax, r12
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400529d0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov qword [rbp - 0x29], r15
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
lea r9, [0x14007f328]
xor edx, edx
mov r8d, 1
lea rcx, [0x14007f338]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14000dd5f
lea rdx, str.Failed_to_create_IWbemLocator_object.
lea rcx, [0x14009a150]
call fcn.140048a00
mov rcx, rax
call fcn.140048cb0
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x14009bda0], xmm0
mov qword [0x14009bdb0], r15
mov qword [0x14009bdb8], r15
mov r8d, 0x14
lea rdx, str.Unknown_IWbemLocator
jmp 0x14000dcaf
mov qword [rbp - 0x31], r15
mov rax, qword [rbp - 0x29]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, 0x18
call fcn.1400529f8
mov rbx, rax
mov qword [rbp - 0x69], rax
test rax, rax
je 0x14000ddb6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000e476
jmp 0x14000ddb9
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x14000e492
lea rax, [rbp - 0x31]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x29]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000de33
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000de14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000de26
call fcn.1400529f0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.1400529f0
test edi, edi
jns 0x14000de8c
lea rdx, str.Could_not_connect_to_WMI.
lea rcx, [0x14009a150]
call fcn.140048a00
mov rcx, rax
call fcn.140048cb0
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x14009bda0], xmm0
mov qword [0x14009bdb0], r15
mov qword [0x14009bdb8], r15
mov r8d, inet_ntoa
lea rdx, str.Unknown_WMI
jmp 0x14000dcaf
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14000df1e
lea rdx, str.Could_not_set_proxy_blanket.
lea rcx, [0x14009a150]
call fcn.140048a00
mov rcx, rax
call fcn.140048cb0
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x14009bda0], xmm0
mov qword [0x14009bdb0], r15
mov qword [0x14009bdb8], r15
mov r8d, 0xf
lea rdx, str.Unknown_blanket
jmp 0x14000dcaf
mov qword [rbp - 0x19], r15
mov rax, qword [rbp - 0x31]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, 0x18
call fcn.1400529f8
mov rbx, rax
mov qword [rbp - 0x69], rax
test rax, rax
je 0x14000df6e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_DiskDrive
call fcn.1400526a0
mov qword [rbx], rax
jmp 0x14000df71
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x14000e492
mov rsi, qword [rbx]
mov ecx, 0x18
call fcn.1400529f8
mov rdi, rax
mov qword [rbp - 0x61], rax
test rax, rax
je 0x14000dfbf
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], 1
lea rcx, [0x140089300]
call fcn.1400526a0
mov qword [rdi], rax
jmp 0x14000dfc2
mov rdi, r15
mov qword [rbp - 0x61], rdi
test rdi, rdi
je 0x14000e49d
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, gethostbyname
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x31]
call r14
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14000e032
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000e012
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000e024
call fcn.1400529f0
mov qword [rdi + 8], r15
mov edx, 0x18
mov rcx, rdi
call fcn.1400529f0
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000e071
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e052
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e064
call fcn.1400529f0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.1400529f0
test esi, esi
jns 0x14000e0d4
lea rdx, str.Query_for_hardware_serial_number_failed.
lea rcx, [0x14009a150]
call fcn.140048a00
mov rcx, rax
call fcn.140048cb0
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [0x14009bda0], xmm0
mov qword [0x14009bdb0], r15
mov qword [0x14009bdb8], r15
mov r8d, 0xe
lea rdx, str.Unknown_serial
jmp 0x14000dcaf
mov qword [rbp - 0x21], r15
mov dword [rbp + 0xf], r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], 0xf
mov byte [rbp + 0x17], 0
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14000e247
mov rax, qword [rcx]
lea rdx, [rbp + 0xf]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x21]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + 0x20]
cmp dword [rbp + 0xf], 0
je 0x14000e247
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x11]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + 0x20]
test eax, eax
js 0x14000e230
mov rdi, qword [rbp - 9]
mov ecx, 0x18
call fcn.1400529f8
mov rbx, rax
mov qword [rbp - 0x61], rax
test rax, rax
je 0x14000e19f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000e1a2
test rdi, rdi
jne 0x14000e481
jmp 0x14000e1a2
mov rbx, r15
mov qword [rbp - 0x69], rbx
test rbx, rbx
je 0x14000e4a8
mov rax, qword [rbx + 8]
test rax, rax
jne 0x14000e1c4
mov rcx, qword [rbx]
call fcn.140052580
mov qword [rbx + 8], rax
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e1d0
mov rdx, rax
lea rcx, [rbp + 0x17]
call fcn.140047a50
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000e226
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e207
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e219
call fcn.1400529f0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.1400529f0
lea rcx, [rbp - 0x11]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x19]
test rcx, rcx
jne 0x14000e100
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rdi, qword [rbp + 0x27]
xorps xmm0, xmm0
test rdi, rdi
jne 0x14000e2a7
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 0xe
lea rdx, str.Unknown_Serial
lea rcx, [rbp - 0x51]
call fcn.1400053b0
lea rax, [rbp - 0x51]
mov ebx, 2
jmp 0x14000e384
movups xmmword [rbp - 0x11], xmm0
lea rsi, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rsi, qword [rbp + 0x17]
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x14000e4b3
cmp rdi, 0xf
ja 0x14000e2ea
mov qword [rbp - 1], rdi
mov qword [rbp + 7], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x11], xmm0
jmp 0x14000e37b
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x14000e326
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400529f8
mov rcx, rax
test rax, rax
je 0x14000e4bf
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000e360
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000e343
mov rax, r15
jmp 0x14000e360
cmp rcx, 0x1000
jb 0x14000e35b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e48c
jmp 0x14000e304
call fcn.1400529f8
mov qword [rbp - 0x11], rax
mov qword [rbp - 1], rdi
mov qword [rbp + 7], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.1400777c0
lea rax, [rbp - 0x11]
mov ebx, 4
movups xmm0, xmmword [rax]
movups xmmword [0x14009bda0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x14009bdb0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 1
test bl, 4
je 0x14000e3ef
and ebx, 0xfffffffb
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x14000e3ef
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e3e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e4b9
call fcn.1400529f0
nop
test bl, 2
je 0x14000e430
mov rdx, qword [rbp - 0x39]
cmp rdx, 0xf
jbe 0x14000e430
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e42a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e4bf
call fcn.1400529f0
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14000dcb7
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e466
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e470
call fcn.1400529f0
jmp 0x14000dcb7
call fcn.14005ffec
nop
mov ecx, 0x8007000e
call fcn.140052570
nop
mov ecx, 0x8007000e
call fcn.140052570
nop
call fcn.140001a30
nop
mov ecx, 0x8007000e
call fcn.140052570
nop
mov ecx, 0x8007000e
call fcn.140052570
nop
mov ecx, 0x8007000e
call fcn.140052570
int3
call fcn.140001bc0
nop
call fcn.14005ffec
nop
call fcn.14005ffec
int3