Function at 0x406830
Capabilities:
Enumerate device drivers on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push edi
push str.Start_collect_OS_Info_n
call fcn.00406130
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_net_config_Workstation
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0x10
mov esi, dword [ebp + 8]
test edi, edi
je 0x406899
push str.net_config_Workstation
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_systeminfo
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x4068ed
push str.systeminfo
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_hostname
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406941
push str.hostname
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_net_users
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406995
push str.net_users
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_ipconfig__all
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x4069e9
push str.ipconfig__all
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_route_print
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406a3d
push str.route_print
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_arp__A
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406a91
push str.arp__A
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_netstat__ano
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406ae5
push str.netstat__ano
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_netsh_firewall_show_state
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406b39
push str.netsh_firewall_show_state
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_netsh_firewall_show_config
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406b8d
push str.netsh_firewall_show_config
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_schtasks__query__fo_LIST__v
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406be1
push str.schtasks__query__fo_LIST__v
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_tasklist__SVC
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406c35
push str.tasklist__SVC
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_net_start
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406c89
push str.net_start
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
push 0xea60
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push str.cmd.exe__c_DRIVERQUERY
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
call fcn.00406780
mov edi, dword [ebp - 0xc]
add esp, 0xc
test edi, edi
je 0x406cdd
push str.DRIVERQUERY
push str.Command:__s_n
call fcn.00406130
push dword [ebp - 8]
push edi
push esi
call fcn.00406060
push edi
call fcn.00406470
add esp, 0x18
pop edi
pop esi
mov esp, ebp
pop ebp
ret