Function at 0x431f98
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0x43c
mov eax, 0x48f87a
call fcn.0046e801
mov edi, ecx
xor esi, esi
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x448], esi
call fcn.004111d6
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x424], esi
call fcn.004111d6
lea ecx, [ebp - 0x3e8]
call fcn.004111d6
lea ecx, [ebp - 0x3b4]
call fcn.004111d6
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 1
push eax
push 0x4a53dc
push 1
push esi
push 0x4a53cc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push str.._rootcimv2
mov dword [ebp - 0x420], esi
call ebx
mov ecx, dword [ebp - 0x424]
lea esi, [ebp - 0x420]
push esi
xor esi, esi
push esi
mov edx, dword [ecx]
push esi
push esi
push esi
push esi
push esi
push eax
push ecx
call dword [edx + 0xc]
test eax, eax
js 0x432288
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x420]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x43227c
push 0x4a51f4
mov dword [ebp - 0x428], esi
call ebx
push str.select__FROM_Win32_BIOS
mov esi, eax
call ebx
mov ecx, dword [ebp - 0x420]
lea ebx, [ebp - 0x428]
push ebx
xor ebx, ebx
push ebx
mov edx, dword [ecx]
push 0x30
push eax
push esi
push ecx
call dword [edx + 0x50]
test eax, eax
js 0x43227c
mov ecx, dword [ebp - 0x428]
mov dword [ebp - 0x430], ebx
test ecx, ecx
je 0x432276
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ecx]
lea edx, [ebp - 0x430]
push edx
lea edx, [ebp - 0x42c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x430], 0
je 0x432270
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.SerialNumber
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x43214d
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x314]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x348]
call fcn.004112d3
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x41c]
call fcn.004114ea
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.004114ce
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Manufacturer
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x4321ca
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x348]
call fcn.004112d3
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x3e8]
call fcn.004114ea
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.004114ce
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Version
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x432247
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x114]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x348]
call fcn.004112d3
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x3b4]
call fcn.004114ea
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.004114ce
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x42c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x428]
test ecx, ecx
jne 0x4320ab
jmp 0x432276
mov ecx, dword [ebp - 0x428]
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x424]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x41c]
mov ecx, edi
push eax
call fcn.00406eb2
lea ecx, [ebp - 0x41c]
call fcn.004042a8
lea ecx, [ebp - 0x37c]
call fcn.004114ce
mov eax, edi
call fcn.0046e7b0
ret