Function at 0x14000349c
Capabilities:
Reference sql statements
Reference wmi statements

Disassembly:
lea rdx, [0x140008448]
jmp main
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
lea rdx, str._wmi_:
mov rbx, rcx
call main
mov rcx, rbx
call fcn.1400013ec
mov r8d, 0x40
lea rdx, str._arch_:__02X_
mov rcx, rbx
call fcn.140001384
lea rcx, [rbp - 0x10]
call fcn.1400031e8
lea rdx, str.rootSecurityCenter2
lea rcx, [rbp - 0x10]
call fcn.14000306c
test eax, eax
je 0x140003580
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002774]
mov rcx, rbx
lea r9, str.SELECT__FROM_AntiVirusProduct
mov qword [rsp + 0x20], rax
lea r8, str.AntiVirusProduct
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002774]
mov rcx, rbx
lea r9, str.SELECT__FROM_FirewallProduct
mov qword [rsp + 0x20], rax
lea r8, str.FirewallProduct
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002774]
mov rcx, rbx
lea r9, str.SELECT__FROM_AntiSpywareProduct
mov qword [rsp + 0x20], rax
lea r8, str.AntiSpywareProduct
lea rdx, [rbp - 0x10]
call fcn.1400037b0
lea rdx, str.ROOTCIMV2
lea rcx, [rbp - 0x10]
call fcn.14000306c
test eax, eax
je 0x140003792
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002d20]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_Processor
mov qword [rsp + 0x20], rax
lea r8, str.Win32_Processor
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002da4]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_Product
mov qword [rsp + 0x20], rax
lea r8, str.Win32_Product
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002904]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_NetworkAdapter_WHERE_PhysicalAdapterTRUE
mov qword [rsp + 0x20], rax
lea r8, str.Win32_NetworkAdapter
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002e10]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_StartupCommand
mov qword [rsp + 0x20], rax
lea r8, str.Win32_StartupCommand
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x1400029bc]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_OperatingSystem
mov qword [rsp + 0x20], rax
lea r8, str.Win32_OperatingSystem
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002c80]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_Process
mov qword [rsp + 0x20], rax
lea r8, str.Win32_Process
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002f80]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_Volume
mov qword [rsp + 0x20], rax
lea r8, str.Win32_Volume
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002e94]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_UserAccount
mov qword [rsp + 0x20], rax
lea r8, str.Win32_UserAccount
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002898]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_GroupUser
mov qword [rsp + 0x20], rax
lea r8, str.Win32_GroupUser
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x1400027c4]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_ComputerSystem
mov qword [rsp + 0x20], rax
lea r8, str.Win32_ComputerSystem
lea rdx, [rbp - 0x10]
call fcn.1400037b0
mov rcx, rbx
call fcn.1400013f8
lea rax, [0x140002bc8]
mov rcx, rbx
lea r9, str.SELECT__FROM_Win32_PnPEntity_WHERE_ClassGuid_50dd5230_ba8a_11d1_bf5d_0000f805f530_
mov qword [rsp + 0x20], rax
lea r8, str.Win32_PnPEntity
lea rdx, [rbp - 0x10]
call fcn.1400037b0
lea rcx, [rbp - 0x10]
call fcn.1400031b4
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
jmp 0x140001404