Function at 0x43ed5c
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0x30
mov eax, 0x4b70ac
call fcn.00487efd
mov dword [ebp - 0x20], edx
mov ebx, ecx
mov dword [ebp - 0x28], ebx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x34], edi
push str.ASSOCIATORS_OF_Win32_DiskDrive.DeviceID.PhysicalDrive_d_WHERE_ResultClassWin32_PnPEntity
lea ecx, [ebp - 0x30]
call fcn.00402306
mov dword [ebp - 4], 1
push str.ASSOCIATORS_OF_Win32_PnPEntity.DeviceID_s_WHERE_AssocClassWin32_SCSIControllerDevice
lea ecx, [ebp - 0x2c]
call fcn.00402306
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.0040364a
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.0040364a
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
push ecx
push 0x4c3850
push eax
push edi
push 0x4c3860
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x43ef1f
push str.._rootcimv2
lea ecx, [ebp - 0x24]
call fcn.004147ed
mov byte [ebp - 4], 5
mov eax, dword [eax]
test eax, eax
je 0x43edf9
mov edx, dword [eax]
jmp 0x43edfb
mov edx, edi
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
lea esi, [ebp - 0x14]
push esi
push edi
push edi
push 0x80
push edi
push edi
push edi
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.004147bc
test esi, esi
js 0x43ef1f
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x14]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x43ef1f
push dword [ebp - 0x20]
push dword [ebp - 0x30]
lea eax, [ebp - 0x18]
push eax
call fcn.00403636
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
mov esi, str.DeviceID
push esi
call fcn.00402306
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00401f6f
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x24]
call fcn.0043ebc7
pop ecx
pop ecx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x24]
cmp dword [eax - 0xc], 0
je 0x43ef00
push eax
push dword [ebp - 0x2c]
lea eax, [ebp - 0x18]
push eax
call fcn.00403636
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push esi
call fcn.00402306
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00401f6f
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.0043ebc7
pop ecx
pop ecx
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x20]
push eax
mov ecx, ebx
call fcn.00401ffd
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.0040259b
jmp 0x43ef0c
push 0x4c9ff4
mov ecx, ebx
call fcn.004022db
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.0040259b
mov dword [ebp - 4], 3
jmp 0x43ef50
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x43ef60
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x43ef70
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.0040259b
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.0040259b
mov dword [ebp - 4], edi
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.0040259b
mov eax, ebx
call fcn.00487e62
ret