Function at 0x431674
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0x43c
mov eax, 0x48ea8c
call fcn.0046dbc1
mov edi, ecx
xor esi, esi
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x448], esi
call fcn.00410b3d
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x424], esi
call fcn.00410b3d
lea ecx, [ebp - 0x3e8]
call fcn.00410b3d
lea ecx, [ebp - 0x3b4]
call fcn.00410b3d
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 1
push eax
push 0x4a43d8
push 1
push esi
push 0x4a43c8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push str.._rootcimv2
mov dword [ebp - 0x420], esi
call ebx
mov ecx, dword [ebp - 0x424]
lea esi, [ebp - 0x420]
push esi
xor esi, esi
push esi
mov edx, dword [ecx]
push esi
push esi
push esi
push esi
push esi
push eax
push ecx
call dword [edx + 0xc]
test eax, eax
js 0x431964
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x420]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x431958
push 0x4a4258
mov dword [ebp - 0x428], esi
call ebx
push str.select__FROM_Win32_BIOS
mov esi, eax
call ebx
mov ecx, dword [ebp - 0x420]
lea ebx, [ebp - 0x428]
push ebx
xor ebx, ebx
push ebx
mov edx, dword [ecx]
push 0x30
push eax
push esi
push ecx
call dword [edx + 0x50]
test eax, eax
js 0x431958
mov ecx, dword [ebp - 0x428]
mov dword [ebp - 0x430], ebx
test ecx, ecx
je 0x431952
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ecx]
lea edx, [ebp - 0x430]
push edx
lea edx, [ebp - 0x42c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x430], 0
je 0x43194c
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.SerialNumber
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x431829
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x314]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x348]
call fcn.00410c3a
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x41c]
call fcn.00410e51
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.00410e35
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Manufacturer
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x4318a6
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x348]
call fcn.00410c3a
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x3e8]
call fcn.00410e51
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.00410e35
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x444]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push str.Version
push eax
call dword [ecx + 0x10]
push 8
pop eax
cmp word [ebp - 0x444], ax
jne 0x431923
push ebx
push ebx
push 0x100
lea eax, [ebp - 0x114]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x43c]
push ebx
push 0xfde9
call esi
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x348]
call fcn.00410c3a
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00410e51
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 1
call fcn.00410e35
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x42c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x428]
test ecx, ecx
jne 0x431787
jmp 0x431952
mov ecx, dword [ebp - 0x428]
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x424]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x41c]
mov ecx, edi
push eax
call fcn.00406e2f
lea ecx, [ebp - 0x41c]
call fcn.004042a8
lea ecx, [ebp - 0x37c]
call fcn.00410e35
mov eax, edi
call fcn.0046db70
ret