Function at 0x1400a6030
Capabilities:
Reference sql statements

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov r13, rcx
or esi, 0xffffffff
mov r15d, esi
cmp qword [rcx], 0
je 0x1400a63b6
cmp qword [rcx + 8], 0
je 0x1400a63b6
call fcn.14000c5a0
mov rcx, rax
test rax, rax
jne 0x1400a6082
mov ecx, 0x80004005
call fcn.14000c2c0
int3
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
lea r8, [0x1400de840]
cmp rax, r8
jne 0x1400a609f
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
jmp 0x1400a60a1
call rdx
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, str.SELECT_PercentIdleTime_FROM_Win32_PerfFormattedData_Counters_ProcessorInformation_WHERE_Name_Total
lea rcx, [rbp - 0x48]
call fcn.14000d190
xor r12d, r12d
mov qword [rbp + 0x58], r12
lea ecx, [r12 + 0x18]
call fcn.140051bb8
mov rbx, rax
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1400a60ef
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
mov rcx, qword [rbp - 0x48]
call fcn.140055320
mov qword [rbx], rax
jmp 0x1400a60f2
mov rbx, r12
mov qword [rbp - 0x30], rbx
test rbx, rbx
jne 0x1400a6106
mov ecx, 0x8007000e
call fcn.1400552f0
nop
mov ecx, Ordinal_27
call fcn.140051bb8
mov rdi, rax
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1400a6138
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x1400dbe58]
call fcn.140055320
mov qword [rdi], rax
jmp 0x1400a613b
mov rdi, r12
mov qword [rbp - 0x38], rdi
test rdi, rdi
jne 0x1400a614f
mov ecx, 0x8007000e
call fcn.1400552f0
nop
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea rdx, [rbp + 0x58]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r12
mov r9d, Ordinal_50
mov r8, qword [rbx]
mov rdx, qword [rdi]
call qword [rax + 0xa0]
mov r14d, eax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x1400a61b5
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400a6196
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400a61a8
call fcn.140051bb0
mov qword [rdi + 8], r12
mov edx, Ordinal_27
mov rcx, rdi
call fcn.140051bb0
mov qword [rbp - 0x38], r12
mov eax, esi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400a61f5
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400a61d6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400a61e8
call fcn.140051bb0
mov qword [rbx + 8], r12
mov edx, Ordinal_27
mov rcx, rbx
call fcn.140051bb0
mov qword [rbp - 0x30], r12
lea rbx, [0x1400de840]
test r14d, r14d
je 0x1400a6212
mov byte [r13 + 0x19], 1
mov r15d, esi
jmp 0x1400a6378
mov r14d, r12d
mov edi, r12d
mov dword [rbp + 0x48], r12d
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x1400a6367
nop dword [rax]
mov qword [rbp + 0x60], r12
mov rax, qword [rcx]
lea rdx, [rbp + 0x48]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x60]
mov r8d, 1
mov edx, esi
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp + 0x48], 0
je 0x1400a6350
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x20]
xor r8d, r8d
lea rdx, [0x1400dbe60]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
test eax, eax
jne 0x1400a631e
call fcn.14000c5a0
test rax, rax
je 0x1400a6345
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x18]
lea r8, [0x1400de840]
cmp rcx, r8
jne 0x1400a62ae
lock inc dword [rax + 0x20]
add rax, 0x10
jmp 0x1400a62b3
mov rcx, rax
call rdx
add rax, 0x18
mov qword [rbp - 0x40], rax
mov r8, qword [rbp - 0x18]
lea rdx, [0x1400dbe80]
lea rcx, [rbp - 0x40]
call fcn.14000dab0
inc edi
mov rbx, qword [rbp - 0x40]
mov rcx, rbx
call fcn.14005a3ac
add r14d, eax
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
lea rbx, [0x1400de840]
jg 0x1400a631e
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rbx
jne 0x1400a631b
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400a631e
call r8
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x1400a6337
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x1400a6354
jmp 0x1400a6230
mov ecx, 0x80004005
call fcn.14000c2c0
int3
mov rcx, qword [rbp + 0x58]
test edi, edi
jle 0x1400a6367
mov eax, r14d
cdq
idiv edi
mov r15d, 0x64
sub r15d, eax
test r15d, r15d
sete al
mov byte [r13 + 0x19], al
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400a63b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rbx
jne 0x1400a63ae
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400a63b1
call r8
mov eax, r15d
jmp 0x1400a63b8
mov eax, esi
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret