Function at 0x52ec10
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
sub esp, 0x88
push esi
push edi
xor edi, edi
push 0x4c
lea eax, [esp + 0x48]
push edi
push eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x4c], edi
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 8]
push ecx
push 0x559140
push 1
push edi
push 0x559130
mov dword [esp + 0x28], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x24], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x52eeaf
cmp dword [esp + 8], edi
je 0x52eeaf
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push ebx
push str.._rootcimv2
call esi
mov ebx, eax
cmp ebx, edi
mov dword [esp + 0x2c], ebx
je 0x52eeae
push ebp
push str.Win32_PNPEntity
call esi
mov ebp, eax
cmp ebp, edi
mov dword [esp + 0x2c], ebp
je 0x52ee92
push str.DeviceID
call esi
cmp eax, edi
mov dword [esp + 0x28], eax
je 0x52ee92
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
lea ecx, [esp + 0x1c]
push ecx
push edi
push edi
push edi
push edi
push edi
push edi
push ebx
push eax
call edx
test eax, eax
jl 0x52ee92
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x52ee92
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push edi
push edi
push ebp
push eax
mov eax, dword [ecx + 0x48]
call eax
test eax, eax
jl 0x52ee92
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x52ee92
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x4c]
push edx
push 0x14
push 0x2710
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jl 0x52ee92
mov ebx, dword [sym.imp.MSVCR80.dll_swscanf]
mov esi, dword [sym.imp.MSVCR80.dll_wcsstr]
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x52ee8e
xor ebp, ebp
cmp eax, edi
jbe 0x52ee65
lea esp, [esp]
mov eax, dword [esp + ebp*4 + 0x48]
mov ecx, dword [eax]
push edi
push edi
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x34]
push edi
push edx
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jl 0x52ee44
cmp word [esp + 0x38], 8
jne 0x52ee44
mov eax, dword [esp + 0x40]
cmp eax, edi
je 0x52ee44
push 0x5590d4
push eax
call esi
add esp, 8
test eax, eax
je 0x52ee44
mov ecx, dword [esp + 0x40]
push str.VID_
push ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], edi
call esi
add esp, 8
cmp eax, edi
je 0x52ede0
lea edx, [esp + 0x20]
push edx
push str.VID__4X
push eax
call ebx
add esp, 0xc
cmp eax, 1
je 0x52ede0
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x40]
push str.PID_
push eax
call esi
add esp, 8
cmp eax, edi
je 0x52ee0c
lea ecx, [esp + 0x24]
push ecx
push 0x55909c
push eax
call ebx
add esp, 0xc
cmp eax, 1
je 0x52ee0c
mov dword [esp + 0x24], edi
movzx edx, word [esp + 0x24]
movzx eax, word [esp + 0x20]
lea ecx, [esp + 0x34]
shl edx, 0x10
push ecx
or edx, eax
push 0x690dd4
mov dword [esp + 0x3c], edx
call fcn.0052ebe0
add esp, 8
test al, al
jne 0x52ee44
lea edx, [esp + 0x34]
push edx
mov ecx, 0x690dd4
call fcn.0052eb90
mov eax, dword [esp + ebp*4 + 0x48]
cmp eax, edi
je 0x52ee58
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + ebp*4 + 0x48], edi
add ebp, 1
cmp ebp, dword [esp + 0x18]
jb 0x52ed60
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x4c]
push edx
push 0x14
push 0x2710
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
mov ebp, dword [esp + 0x2c]
jge 0x52ed43
mov ebx, dword [esp + 0x30]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ebx
call esi
mov eax, dword [esp + 0x28]
cmp eax, edi
je 0x52eea6
push eax
call esi
cmp ebp, edi
je 0x52eead
push ebp
call esi
pop ebp
pop ebx
xor esi, esi
mov eax, dword [esp + esi*4 + 0x40]
cmp eax, edi
je 0x52eec5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + esi*4 + 0x40], edi
add esi, 1
cmp esi, 0x14
jb 0x52eeb1
mov eax, dword [esp + 0xc]
cmp eax, edi
je 0x52eee1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], edi
mov eax, dword [esp + 8]
cmp eax, edi
je 0x52eef5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x14]
cmp eax, edi
pop edi
pop esi
je 0x52ef07
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [0x690dd0], 1
add esp, 0x88
ret