Function at 0x4de348
Capabilities:
Reference sql statements
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3a
push 0
push 0
dec ecx
jne 0x4de350
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x3c], eax
xor eax, eax
push ebp
push 0x4defc7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x63b084
xor ecx, ecx
mov edx, 0x200
call fcn.004049a8
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4dcd20]
call fcn.004dcec0
mov dword [ebp - 0x40], eax
xor edx, edx
push ebp
push 0x4dee14
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4dedde
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x4defdc
mov edx, 0x4deff8
mov eax, dword [ebp - 0x40]
call fcn.004dcf20
lea eax, [ebp - 8]
call fcn.0040a280
push eax
push 0
push 0x10
push 0x4df000
push 0x4df014
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x3c]
call fcn.00412474
push dword [ebp - 0x54]
push 0x4df0ac
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.00407730
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x4c]
call fcn.004073f4
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x3c]
call fcn.0040a390
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040a390
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x4de44f
mov ecx, 0x4df0bc
mov dl, 1
mov eax, dword [0x4dd278]
call fcn.00417af8
call fcn.00405aac
lea eax, [ebp - 0x5c]
call fcn.0040a280
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x1c]
mov ecx, 0x4df0e8
call fcn.0040a2c4
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x4de4a3
mov ecx, 0x4df0bc
mov dl, 1
mov eax, dword [0x4dd278]
call fcn.00417af8
call fcn.00405aac
lea eax, [ebp - 0x60]
lea edx, [ebp - 0x38]
call fcn.004234b8
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0xc]
mov ecx, 0x4df0f8
call fcn.0040a2c4
lea eax, [ebp - 0x10]
call fcn.0040a280
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
call fcn.0040a390
lea eax, [ebp - 0x64]
call fcn.0040a280
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 0x18]
mov ecx, 0x4df0e8
call fcn.0040a2c4
jmp 0x4deb2b
lea eax, [ebp - 0x68]
lea edx, [ebp - 0x38]
call fcn.004234b8
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0x14]
mov ecx, 0x4df108
call fcn.0040a2c4
lea eax, [ebp - 0x74]
call fcn.00406cbc
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040a390
mov edx, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
call fcn.004073e0
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x6c]
call fcn.00411978
mov edx, dword [ebp - 0x6c]
lea eax, [ebp - 0x24]
mov ecx, 0
call fcn.004073bc
lea eax, [ebp - 0x20]
mov edx, 0x4df124
call fcn.00406360
lea eax, [ebp - 0x84]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x84]
call fcn.00426124
test al, al
je 0x4de5a1
lea eax, [ebp - 0x20]
mov edx, 0x4df124
call fcn.00406360
jmp 0x4de93c
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x30]
call fcn.0040a390
mov eax, dword [ebp - 0x58]
cmp eax, 0x10
jge 0x4de5e3
add eax, 0xfffffffe
sub eax, 2
jb 0x4de606
sub eax, 2
jb 0x4de754
sub eax, 2
je 0x4de7f0
sub eax, 3
je 0x4de7a3
jmp 0x4de93c
add eax, 0xfffffff0
sub eax, 5
jb 0x4de606
je 0x4de7f0
sub eax, 0x50
je 0x4de8ea
dec eax
je 0x4de914
jmp 0x4de93c
lea eax, [ebp - 0x94]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x94]
call fcn.00426460
test al, al
je 0x4de70a
lea eax, [ebp - 0xa4]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0xa4]
mov edx, 1
call fcn.00426404
test eax, eax
jl 0x4de93c
inc eax
mov dword [ebp - 0x48], eax
xor ebx, ebx
test ebx, ebx
jle 0x4de67c
lea eax, [ebp - 0x20]
mov edx, 0x4df134
call fcn.004066a8
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0x20]
call fcn.00407394
lea eax, [ebp - 0xa8]
push eax
push ebx
push 1
lea eax, [ebp - 0xcc]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.004264ec
add esp, 0x10
lea eax, [ebp - 0xbc]
call fcn.0041fc00
push edx
push eax
lea eax, [ebp - 0xac]
call fcn.00412680
mov edx, dword [ebp - 0xac]
pop eax
call fcn.0040758c
mov edx, dword [ebp - 0xa8]
lea eax, [ebp - 0x20]
mov ecx, 0
call fcn.004073bc
inc ebx
dec dword [ebp - 0x48]
jne 0x4de66b
jmp 0x4de93c
lea eax, [ebp - 0xe0]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0xe0]
call fcn.0041fc00
push edx
push eax
lea eax, [ebp - 0xd0]
call fcn.00412680
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0x20]
mov ecx, 0
call fcn.004073bc
jmp 0x4de93c
lea eax, [ebp - 0xf4]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0xf4]
call fcn.00420d00
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0xe4]
call fcn.00414f14
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0x20]
mov ecx, 0
call fcn.004073bc
jmp 0x4de93c
lea eax, [ebp - 0x104]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x104]
call fcn.00420744
test al, al
je 0x4de7de
lea eax, [ebp - 0x20]
mov edx, 0x4df144
call fcn.00406360
jmp 0x4de93c
lea eax, [ebp - 0x20]
mov edx, 0x4df158
call fcn.00406360
jmp 0x4de93c
lea eax, [ebp - 0x114]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x114]
call fcn.00426460
test al, al
je 0x4de8c0
lea eax, [ebp - 0x124]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x124]
mov edx, 1
call fcn.00426404
test eax, eax
jl 0x4de93c
inc eax
mov dword [ebp - 0x48], eax
xor ebx, ebx
test ebx, ebx
jle 0x4de866
lea eax, [ebp - 0x20]
mov edx, 0x4df134
call fcn.004066a8
push ebx
push 1
lea eax, [ebp - 0x148]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004264ec
add esp, 0x10
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x128]
call fcn.00421e5c
mov edx, dword [ebp - 0x128]
lea eax, [ebp - 0x20]
call fcn.004066a8
inc ebx
dec dword [ebp - 0x48]
jne 0x4de855
jmp 0x4de93c
lea eax, [ebp - 0x158]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea edx, [ebp - 0x158]
lea eax, [ebp - 0x20]
call fcn.00421e5c
jmp 0x4de93c
lea eax, [ebp - 0x168]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x20]
call fcn.00421e5c
jmp 0x4de93c
lea eax, [ebp - 0x178]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea edx, [ebp - 0x178]
lea eax, [ebp - 0x20]
call fcn.00421e5c
mov byte [0x63b284], 0
mov word [0x63b084], 0x40
mov eax, dword [ebp - 0x24]
mov edx, 0x4df16c
call fcn.00406a40
jne 0x4de97c
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x20]
call fcn.00407394
mov eax, dword [ebp - 0x17c]
xor edx, edx
call fcn.0041273c
mov word [0x63b086], ax
mov eax, dword [ebp - 0x24]
mov edx, 0x4df188
call fcn.00406a40
jne 0x4de9ac
lea eax, [ebp - 0x180]
mov edx, dword [ebp - 0x20]
call fcn.00407394
mov eax, dword [ebp - 0x180]
xor edx, edx
call fcn.0041273c
mov word [0x63b08a], ax
mov eax, dword [ebp - 0x24]
mov edx, 0x4df1a0
call fcn.00406a40
jne 0x4de9db
lea eax, [ebp - 0x184]
mov edx, dword [ebp - 0x20]
call fcn.00407394
mov eax, dword [ebp - 0x184]
xor edx, edx
call fcn.0041273c
mov dword [0x63b0fc], eax
mov eax, dword [ebp - 0x24]
mov edx, 0x4df1bc
call fcn.00406a40
jne 0x4dea0b
lea eax, [ebp - 0x188]
mov edx, dword [ebp - 0x20]
call fcn.00407394
mov eax, dword [ebp - 0x188]
xor edx, edx
call fcn.0041273c
mov word [0x63b090], ax
mov eax, dword [ebp - 0x24]
mov edx, 0x4df1d8
call fcn.00406a40
jne 0x4dea3b
lea eax, [ebp - 0x18c]
mov edx, dword [ebp - 0x20]
call fcn.00407394
mov eax, dword [ebp - 0x18c]
xor edx, edx
call fcn.0041273c
mov word [0x63b08e], ax
movzx eax, word [0x63b090]
imul word [0x63b08e]
mov word [0x63b08c], ax
mov eax, dword [ebp - 0x24]
mov edx, 0x4df1f4
call fcn.00406a40
jne 0x4dea75
mov eax, dword [ebp - 0x20]
call fcn.00406ac4
mov edx, 0x63b098
mov ecx, 0x14
call fcn.004ddc30
mov eax, dword [ebp - 0x24]
mov edx, 0x4df210
call fcn.00406a40
jne 0x4dead0
mov ebx, 1
jmp 0x4deab8
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x4deaac
mov eax, esi
sub eax, 0xa
cmp word [eax], 1
je 0x4deaac
lea eax, [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
call fcn.004064cc
mov esi, eax
movzx eax, byte [esi + ebx - 1]
mov byte [ebx + 0x63b0b1], al
inc ebx
lea eax, [ebp - 0x20]
xor edx, edx
call fcn.004064dc
call fcn.00406674
cmp ebx, eax
jg 0x4dead0
cmp ebx, 9
jl 0x4dea8b
mov eax, dword [ebp - 0x24]
mov edx, 0x4df230
call fcn.00406a40
jne 0x4deb2b
mov ebx, 1
jmp 0x4deb13
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x4deb07
mov eax, edi
sub eax, 0xa
cmp word [eax], 1
je 0x4deb07
lea eax, [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
call fcn.004064cc
mov edi, eax
movzx eax, byte [edi + ebx - 1]
mov byte [ebx + 0x63b0b9], al
inc ebx
lea eax, [ebp - 0x20]
xor edx, edx
call fcn.004064dc
call fcn.00406674
cmp ebx, eax
jg 0x4deb2b
cmp ebx, 0x29
jl 0x4deae6
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x4de501
cmp byte [0x63b098], 0
jne 0x4dedd4
lea eax, [ebp - 8]
call fcn.0040a280
push eax
push 0
push 0x10
push 0x4df000
push 0x4df244
lea edx, [ebp - 0x198]
mov eax, dword [ebp - 0x3c]
call fcn.00412474
push dword [ebp - 0x198]
push 0x4df0ac
lea eax, [ebp - 0x194]
mov edx, 3
call fcn.00407730
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
call fcn.004073f4
mov eax, dword [ebp - 0x190]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x3c]
call fcn.0040a390
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040a390
mov eax, dword [ebp - 0x58]
test eax, eax
jle 0x4dedd4
lea eax, [ebp - 0x19c]
call fcn.0040a280
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
mov edx, dword [ebp - 0x19c]
lea eax, [ebp - 0x1c]
mov ecx, 0x4df0e8
call fcn.0040a2c4
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x4dec30
mov ecx, 0x4df0bc
mov dl, 1
mov eax, dword [0x4dd278]
call fcn.00417af8
call fcn.00405aac
lea eax, [ebp - 0x1a0]
lea edx, [ebp - 0x38]
call fcn.004234b8
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0xc]
mov ecx, 0x4df0f8
call fcn.0040a2c4
lea eax, [ebp - 0x10]
call fcn.0040a280
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
call fcn.0040a390
lea eax, [ebp - 0x1a4]
call fcn.0040a280
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
mov edx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x18]
mov ecx, 0x4df0e8
call fcn.0040a2c4
jmp 0x4dedb9
lea eax, [ebp - 0x1a8]
lea edx, [ebp - 0x38]
call fcn.004234b8
mov edx, dword [ebp - 0x1a8]
lea eax, [ebp - 0x14]
mov ecx, 0x4df108
call fcn.0040a2c4
lea eax, [ebp - 0x1b4]
call fcn.00406cbc
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040a390
mov edx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
call fcn.004073e0
mov eax, dword [ebp - 0x1b0]
lea edx, [ebp - 0x1ac]
call fcn.00411978
mov edx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x24]
mov ecx, 0
call fcn.004073bc
mov eax, dword [ebp - 0x24]
mov edx, 0x4df1f4
call fcn.00406a40
jne 0x4dedb9
lea eax, [ebp - 0x20]
mov edx, 0x4df124
call fcn.00406360
lea eax, [ebp - 0x1c4]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea eax, [ebp - 0x1c4]
call fcn.00426124
test al, al
je 0x4ded62
lea eax, [ebp - 0x20]
mov edx, 0x4df124
call fcn.00406360
jmp 0x4deda2
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x30]
call fcn.0040a390
cmp dword [ebp - 0x58], 8
jne 0x4deda2
lea eax, [ebp - 0x1d4]
call fcn.0041e2c8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.0040a390
lea edx, [ebp - 0x1d4]
lea eax, [ebp - 0x20]
call fcn.00421e5c
mov eax, dword [ebp - 0x20]
call fcn.00406ac4
mov edx, 0x63b098
mov ecx, 0x14
call fcn.004ddc30
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x4dec9a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4dedfe
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4dee1b
mov eax, dword [ebp - 0x40]
call fcn.00404fdc
ret