Function at 0x45fb60
Capabilities:
Encode data using xor
Reference sql statements
Reference wmi statements

Disassembly:
push 0xffffffffffffffff
push 0x4823c3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x18]
call fcn.0043a8f0
lea ecx, [esp + 0x44]
mov dword [esp + 0xbc], 0
call fcn.00452020
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xc], eax
mov byte [esp + 0xbc], 1
mov word [esp + 0x10], ax
mov eax, dword [esi]
and eax, 1
or eax, ecx
je 0x45fcbf
add esi, 8
push ecx
push str.SOFTWAREMicrosoftWindows_Genuine_Advantage
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, esi
call fcn.00457520
cmp eax, 1
mov edi, 6
jne 0x45fbfc
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
push ecx
push 0x497920
mov ecx, esi
call fcn.004575a0
cmp eax, 1
je 0x45fd1f
push 0
push str.SOFTWAREDescriptionMicrosoftRpcUuidTemporaryData
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, esi
call fcn.00457520
cmp eax, 1
jne 0x45fc37
lea edx, [esp + 0x14]
lea eax, [esp + 0xc]
push edx
push eax
push str.NetworkAddress
mov ecx, esi
mov dword [esp + 0x20], edi
call fcn.00457680
cmp eax, 1
je 0x45fd1f
push str.ROOTCIMV2
lea ecx, [esp + 0x48]
xor edi, edi
call fcn.00452110
cmp eax, 1
jne 0x45fc98
push str.SELECT__FROM_Win32_NetworkAdapterConfiguration_WHERE_IPEnabledtrue
lea ecx, [esp + 0x48]
call fcn.00452470
cmp eax, 1
jne 0x45fc86
lea ecx, [esp + 0x44]
call fcn.004526c0
test eax, eax
je 0x45fc86
push edi
lea ecx, [esp + 0x1c]
push edi
push ecx
push str.MACAddress
mov ecx, eax
call fcn.004528a0
cmp eax, 1
jne 0x45fc86
mov edi, eax
lea ecx, [esp + 0x44]
call fcn.00452440
cmp edi, 1
je 0x45fd1f
push 0x100
lea edx, [esp + 0x1c]
push 0x4a3290
push edx
push str.ProductId
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, esi
call fcn.00457b70
jmp 0x45fd1f
add esi, 8
push 0
push str.SystemCurrentControlSetServicesVxDDHCPDhcpInfo00
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, esi
call fcn.00457520
cmp eax, 1
jne 0x45fcfd
lea eax, [esp + 0x14]
lea ecx, [esp + 0xc]
push eax
push ecx
push str.HardwareAddress
mov ecx, esi
mov dword [esp + 0x20], 6
call fcn.00457680
cmp eax, 1
je 0x45fd1f
push 0
lea edx, [esp + 0x1c]
push 0x4a3290
push edx
push str.ProductId
push str.SoftwareMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, esi
call fcn.00457b70
lea ecx, [esp + 0x18]
call fcn.0043baf0
test eax, eax
je 0x45fd5f
lea ecx, [esp + 0x18]
xor edi, edi
call fcn.0043baf0
test eax, eax
jle 0x45fd85
push edi
lea ecx, [esp + 0x1c]
call fcn.0043ba70
mov bl, byte [esp + 0xc]
lea ecx, [esp + 0x18]
xor bl, al
inc edi
mov byte [esp + 0xc], bl
call fcn.0043baf0
cmp edi, eax
jl 0x45fd3b
jmp 0x45fd85
mov al, byte [esp + 0xc]
mov dl, byte [esp + 0xd]
mov cl, byte [esp + 0xe]
mov bl, byte [esp + 0xf]
xor al, dl
mov dl, byte [esp + 0x10]
xor al, cl
mov cl, byte [esp + 0x11]
xor al, bl
xor al, dl
xor al, cl
mov byte [esp + 0xc], al
mov ecx, esi
call fcn.00457770
mov bl, byte [esp + 0xc]
lea ecx, [esp + 0x44]
mov byte [esp + 0xbc], 0
call fcn.00452080
lea ecx, [esp + 0x18]
mov dword [esp + 0xbc], 0xffffffff
call fcn.0043a990
mov ecx, dword [esp + 0xb4]
pop edi
mov al, bl
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xb4
ret