Function at 0x14000c100
Capabilities:
Reference sql statements
Reference wmi statements

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r15, rcx
mov qword [rbp - 0x39], rcx
xor r14d, r14d
mov dword [rbp - 0x69], r14d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov dword [rbp - 0x69], 1
lea rcx, str.SELECT__FROM_Win32_PnPSignedDriver_WHERE_Location_IS_NOT_NULL
call fcn.14000bc50
mov r12, rax
test rax, rax
je 0x14000c4fe
mov qword [rbp - 0x29], r14
mov dword [rbp - 0x1d], r14d
mov rax, qword [rax]
mov rcx, r12
call qword [rax + 0x18]
mov rax, qword [r12]
lea rcx, [rbp - 0x1d]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x29]
lea edx, [r14 - 1]
lea r8d, [r14 + 1]
mov rcx, r12
call qword [rax + 0x20]
cmp dword [rbp - 0x1d], r14d
je 0x14000c4f4
mov rdi, qword [rbp - 0x29]
test rdi, rdi
je 0x14000c4f4
nop word [rax + rax]
lea r8, str.DeviceID
mov rdx, rdi
lea rcx, [rbp + 7]
call fcn.14000be20
nop
cmp qword [rbp + 0x17], 4
jbe 0x14000c466
lea rax, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova rax, qword [rbp + 7]
cmp dword [rax], 0x5c494350
jne 0x14000c466
lea r8, str.Location
mov rdx, rdi
lea rcx, [rbp - 0x19]
call fcn.14000be20
nop
cmp qword [rbp - 9], 0xc
jbe 0x14000c427
lea rax, [rbp - 0x19]
mov rcx, qword [rbp - 1]
cmp rcx, 0xf
seta dl
mov r8, qword [rbp - 0x19]
cmova rax, r8
cmp dword [rax], 0x20494350
jne 0x14000c42f
lea rcx, [rbp - 0x19]
test dl, dl
cmovne rcx, r8
add rcx, 8
call fcn.140016dfc
mov esi, eax
mov dword [rbp - 0x31], eax
xor r13b, r13b
xor bl, bl
mov dword [rbp - 0x21], ebx
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rcx, qword [rbp - 0x19]
lea rdx, str.device
call fcn.14000f07c
test rax, rax
je 0x14000c286
lea rcx, [rax + 7]
call fcn.140016dfc
mov r13d, eax
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rcx, qword [rbp - 0x19]
lea rdx, str.function
call fcn.14000f07c
test rax, rax
je 0x14000c2b3
lea rcx, [rax + 9]
call fcn.140016dfc
mov ebx, eax
mov dword [rbp - 0x21], eax
mov byte [rbp - 0x61], sil
mov byte [rbp - 0x60], r13b
mov byte [rbp - 0x5f], bl
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], r14
mov rsi, qword [rbp + 0x17]
lea r14, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r14, qword [rbp + 7]
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x14000c546
cmp rsi, 0xf
ja 0x14000c311
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x59], xmm0
jmp 0x14000c3a9
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x14000c330
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000c357
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000c379
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000c53a
mov rcx, rax
call fcn.14000d140
mov rcx, rax
test rax, rax
je 0x14000c540
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000c387
test rcx, rcx
je 0x14000c385
call fcn.14000d140
jmp 0x14000c387
xor eax, eax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.1400280a0
movups xmm0, xmmword [rbp - 0x59]
mov ebx, dword [rbp - 0x21]
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x14000c3dd
mov eax, dword [rbp - 0x31]
mov byte [rdx], al
mov byte [rdx + 1], r13b
mov byte [rdx + 2], bl
xor r14d, r14d
movups xmmword [rdx + 8], xmm0
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [rdx + 0x18], xmm0
lea edx, [r14 + 0xf]
mov byte [rbp - 0x59], r14b
add qword [r15 + 8], 0x28
jmp 0x14000c3f0
lea r8, [rbp - 0x61]
mov rcx, r15
call fcn.14000c730
mov rdx, qword [rbp - 0x41]
xor r14d, r14d
cmp rdx, 0xf
jbe 0x14000c427
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c422
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c540
call fcn.14000d3bc
mov r8, qword [rbp - 0x19]
mov rcx, qword [rbp - 1]
cmp rcx, 0xf
jbe 0x14000c466
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x14000c45e
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c52e
mov rcx, r8
call fcn.14000d3bc
mov qword [rbp - 0x31], r14
mov dword [rbp - 0x21], r14d
test rdi, rdi
je 0x14000c47e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x14000c488
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x18]
mov rax, qword [r12]
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x31]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
mov rcx, r12
call qword [rax + 0x20]
mov rdi, qword [rbp - 0x31]
cmp dword [rbp - 0x21], 0
cmove rdi, r14
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14000c4eb
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c534
call fcn.14000d3bc
test rdi, rdi
jne 0x14000c1c0
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x10]
mov rax, r15
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14000d120
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001637c
nop
call fcn.14001637c
nop
call fcn.140001240
int3
call fcn.14001637c
int3
call fcn.140003980
int3