Function at 0x432024
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0x43c
mov eax, 0x48f933
call fcn.0046e891
mov edi, ecx
xor esi, esi
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x448], esi
call fcn.00411262
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x424], esi
call fcn.00411262
lea ecx, [ebp - 0x3e8]
call fcn.00411262
lea ecx, [ebp - 0x3b4]
call fcn.00411262
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 1
push eax
push 0x4a53e4
push 1
push esi
push 0x4a53d4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push str.._rootcimv2
mov dword [ebp - 0x420], esi
call ebx
mov ecx, dword [ebp - 0x424]
lea esi, [ebp - 0x420]
push esi
xor esi, esi
push esi
mov edx, dword [ecx]
push esi
push esi
push esi
push esi
push esi
push eax
push ecx
call dword [edx + 0xc]
test eax, eax
js 0x432314
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x420]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x432308
push 0x4a51fc
mov dword [ebp - 0x428], esi
call ebx
push str.select__FROM_Win32_BIOS
mov esi, eax
call ebx
mov ecx, dword [ebp - 0x420]
lea ebx, [ebp - 0x428]
push ebx
xor ebx, ebx
push ebx
mov edx, dword [ecx]
push 0x30
push eax
push esi
push ecx
call dword [edx + 0x50]
test eax, eax
js 0x432308
mov ecx, dword [ebp - 0x428]
mov dword [ebp - 0x430], ebx
test ecx, ecx
je 0x432302
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ecx]
lea edx, [ebp - 0x430]
push edx
lea edx, [ebp - 0x42c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x430], 0
je 0x4322fc
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.SerialNumber
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x4321d9
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x314]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x348]
call fcn.0041135f
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x41c]
call fcn.00411576
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.0041155a
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Manufacturer
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x432256
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x348]
call fcn.0041135f
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x3e8]
call fcn.00411576
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.0041155a
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Version
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x4322d3
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x114]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x348]
call fcn.0041135f
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00411576
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.0041155a
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x42c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x428]
test ecx, ecx
jne 0x432137
jmp 0x432302
mov ecx, dword [ebp - 0x428]
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x424]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x41c]
mov ecx, edi
push eax
call fcn.00406eb2
lea ecx, [ebp - 0x41c]
call fcn.004042a8
lea ecx, [ebp - 0x37c]
call fcn.0041155a
mov eax, edi
call fcn.0046e840
ret