Function at 0x405a50
Capabilities:
Reference sql statements
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42f550
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x64
mov eax, dword [0x493224]
xor eax, ebp
mov dword [ebp - 0x28], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00409e70
mov byte [ebp - 4], 1
mov dword [ebp - 0x24], str.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
mov dword [ebp - 0x1c], str.vtPq8lLpjVfcgCqGIUwej4wrO5hrxD3NcMuMnDlB8IHTfYsvynbh1cIyxjeAVtiVd9xudkL7qxzy95ShOO1CJmd2CunuW43tMBsQvweBTNawga7Tzn464awqmShNkPQ3hRhH0R93T6MgdnlaYQM7qItFEUugaa03dmtxlqbNqcMj4PuDoOfF9x805fDIVpBKff6m2GjudqCMUyi2mtm4tRfKm3VdBKM69wC8kcjvcPNVyTfD3UCucT0OsQy9zzEpFANt9roo46l6DrX0ae2vjGDhO0h2HTjTSzLSBlaR4KI8kmdo8XfRnpNMqUkolKGrLJFuaC6PuHoEBXvFXBpzhQlXpuStDhmjRd9EBCTbIgK4jK2ahs6SesjtUY4hzJBpl2e26nvOe7av5iFIDY2jJ5birKuQhmO0iOp5hDaWr2PyWGrnOlTnjmIoz5269km0QD0cW1SIzfhB3WAiifeQGluY1Cy6d28KgMC5lICl4L4Ctxt34F9i2RXkBoBvVAXj4L7J3vpX1X9sObhfF9FIP4hWdv8QvSQohFcHTpWUveXRptheaLJBMqaxFbrFVGRrs7uTYOzKG1fCmPU36faRSJ3YfxuhWt7OPWYdH9N0V3cbPL5WJmJriozAUKdUrrmR6oz8AlXSQvk7NDgaXtut4N5YSFvwKrJFIHLkldhaiqa1zgApLgf2O8kWhjluKmDyeSqwrzEUyCPNBdUmAgJ5jBtH4QsJWYS7tyDssD0YI79UTXz1dIRCqUEg2AfIp1NcD1DS2YbYM0Bi5WkBIsMF46UlLYPnK27XLAU2XVwI5ciMPi57d3kaXhemxhiAhuIDLHUUoIqYCDysM4Wq4PHAUbzyBqPY2tqLiWAeNr81ur9eQYA6xD700VeEd6u7qvptSAaFtQlCLkwPsF5XBtA1eV2kvxgooBF9mUYhCuzPdxJSx2PtnphDwkGmntJ7k4wNGguysEbIjNpRrgBIdwniO3HHob4t3rC63Vak6olzhDlMXoVBjrBmWqmfv3r95MnMkcQJgBQFDECUkYt69SxLYMVXga553ISVfnbuYaLyHeEWQqwlhbw9mJT3MQ3YrCQTDWJb2Tv1vRXQbl3HjMCauKv2FkldQE9ipNMGtBRAE0wPi0gyXvQkCqFY3Ipm9FNHxeABedollVJnvhzfYAbRQw2tD29iz94O5Sli2NkQkRugrLzcNGMxYQlvyGUV4yEmM4z8cjwd77oTgHYIuCkThgxdF8w6bvUususyagckTjwYWP7l7vJETqUG3UT3RveY240YRiu95MYgDiAy78M1TPKMReHuwPV6Ib6qtngfk5jYyB32W43nXvXhIuWLIOvuH2x5M2T4H0s68mgSYBYdyUWLFnWRfMse4xVikgqULBD71a3CANOdL8MNxyBMMPESawXFzezQeUzHlVMC50q6peMPfXsvY6WacR9qiA3RdLonElkcghd1IzaxXrWWDjivENTltTtHsUGwuXUir767Bt8AOAvfWjmceLPrk3C6818iU3jz8JD4VWfQuCu2misFFhYANIrwSjghheTOLtLxhRhS9hanCMACHXIGDtW8TBvvdpI6UGQ80W6WuWBNHDjV4B3xNi4LoLhfGmQXvUHGtrV3RUXgokUS7UavVn1hI78Juj2pp6LQLSCzTeywFgvkmI2EGjGQrxggYFMDH8CvUDyxSXlbdQd8qRjqEN4hMdVKl83abRSuxMqw21an0WriLG2z2Naopg52S7g2xCo0Tz1bWeC2b19qNWpdFqX9nKuF2JnSk7hwWv6cAp8V0jOILSWJ30wxzFthOKtFD1AONv86NUPFAW5tFPwpnq4VXSRvSD4ofm64G21VBq9lTqVWxaT1DVQ8L07nKi4cdhDauq6zWlzumkbNkNAgOfiF298BniLlkF15ndtdfIDHavxuWhGF5VDJ4Ky7HjQ7aectXv6xcVwIxV8w7Yuw5a2XsCE3H4mF3wgFr0NDKC3wHBsih7pKYEwt2PhGomKa
mov dword [ebp - 0x20], str.J4nHAFEruoBDz2swc9yd5KbXvkAMX1kuadfo00RfdUPdSqH3ADgl8ec7mWLK9KK0AESMcSvQAGhFI70WUBQGh8XJQ5Ik7weRn7kYc5vQSYJSR1sNhfLh3YHGFgm2YSSEOLUtzsOTN4LAjOKIBeHuCACUXWog26nv2gd0AbqJn7Ii7Q2nKFB
push 0x47b4b4
push str.SELECT__FROM_Win32_NetworkAdapter_WHERE__Name_LIKE__TAP___AND__NOT_PNPDeviceID_LIKE__ISATAP___AND__NetEnabled__True_
push str.ROOTCIMV2
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.00405cf0
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x74], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x74]
push edx
lea ecx, [ebp - 0x44]
call fcn.00405f20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.00403fd0
mov dword [ebp - 0x14], str.lXdArfFHFWYEPC6L41BgfQQFYYCdTteNHhrtln133BxNgAA9FoWzMU1yU6EYlpktej5udALfbGDFpx76XzojlJa9vGHPVO5Icn23k3400MFa7CM2pRGgfOcUF7OOjW7uLetOy666RuP1pHeVpYUwtT4tGDNOjLxk15QQtk4qti3KnjApc8n
mov dword [ebp - 0x18], str.AErdoiraQiS0jNed8oaAqqnaWp7dOJ4JhVlQ2jGNHvaxnnLhrq0c3ocr3O5W4QVO8uoa4XKLC42VNzAo77L7C2WhSh01ybQxGC0ApkRErOravqDHJBhPqaEe5fXfjdkH2SRadtls3j7p9ssdkoHsXDqgcTUB41q4C96AOwBydTFW2H9QkbuMWksFLeAcf9Mequ4cNA8JGHucdJprFXtcg61ceYxi1EEGPiuWSOtabzQKqEuEKYLK1QsV3Fchc8PQGcqu2mgnkaMk81f7oLP7vvboAxMFlGG0j5f3pndlJRcLrW6hQ5tDgXItbEnbGVbjs8Dxm38nYQO4e42wS0NgXbDr7MPAd0QQkLFvtARez4cm3wD7FNgCz7BXCxSRxxPzBGF7vco0WdHU9X4d
lea ecx, [ebp - 0x44]
call fcn.00405fc0
movzx eax, al
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x65], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403fd0
mov al, byte [ebp - 0x65]
jmp 0x405b48
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.004195fb
mov esp, ebp
pop ebp
ret