Function at 0x421ad0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42d2ca
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x43c010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + 0xa8d]
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
je 0x421b29
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_316]
cmp dword [ebp + 8], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0
jne 0x421b49
push str.SELECT__FROM_MSStorageDriver_FailurePredictData
jmp 0x421b4e
push str.SELECT__FROM_MSStorageDriver_FailurePredictThresholds
call dword [sym.imp.mfc140.dll_Ordinal_1528]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0x432b78
push 1
xor edi, edi
mov dword [ebp - 0x1c], 0
push edi
push 0x432c48
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x421dff
cmp dword [ebx + 0x128], 6
lea ecx, [ebp - 0x30]
push str.._rootWMI
sbb ebx, ebx
and ebx, 0xffffff80
sub ebx, 0xffffff80
call fcn.00418b90
mov eax, dword [eax]
mov byte [ebp - 4], 2
test eax, eax
je 0x421bc6
mov edx, dword [eax]
jmp 0x421bc8
xor edx, edx
mov eax, dword [ebp - 0x20]
lea esi, [ebp - 0x1c]
push esi
push 0
push 0
mov ecx, dword [eax]
push ebx
push 0
push 0
push 0
push edx
push eax
call dword [ecx + 0xc]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
mov ebx, eax
call fcn.00415770
test ebx, ebx
js 0x421dff
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0x1c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x421dff
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
lea ecx, [ebp - 0x34]
call fcn.004156a0
mov ebx, eax
push 0x4329fc
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.00418b90
mov ecx, eax
mov eax, dword [ebx]
mov byte [ebp - 4], 4
test eax, eax
je 0x421c4b
mov ebx, dword [eax]
jmp 0x421c4d
xor ebx, ebx
mov eax, dword [ecx]
test eax, eax
je 0x421c57
mov edx, dword [eax]
jmp 0x421c59
xor edx, edx
mov eax, dword [ebp - 0x1c]
lea esi, [ebp - 0x14]
push esi
push 0
push 0x30
mov ecx, dword [eax]
push ebx
push edx
push eax
call dword [ecx + 0x50]
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x30]
mov ebx, eax
call fcn.00415770
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00415770
test ebx, ebx
js 0x421dff
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x421e02
mov eax, dword [ecx]
lea edx, [ebp - 0x28]
push edx
lea edx, [ebp - 0x18]
push edx
push 1
push 0x2710
push ecx
call dword [eax + 0x10]
test eax, eax
js 0x421dff
cmp dword [ebp - 0x28], 1
jne 0x421dff
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 5
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x44]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.InstanceName
push eax
call dword [ecx + 0x10]
test eax, eax
jne 0x421d1a
cmp word [ebp - 0x44], 1
jbe 0x421d1a
push dword [ebp - 0x3c]
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_1528]
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_8679]
lea eax, [ebp - 0x44]
push eax
call ebx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0
lea ecx, [esi + 0xa8d]
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_4656]
test eax, eax
je 0x421d52
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x421c93
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x44]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.VendorSpecific
push eax
call dword [ecx + 0x10]
test eax, eax
jne 0x421d40
cmp word [ebp - 0x44], 1
jbe 0x421d40
cmp dword [ebp + 8], eax
mov dword [ebp + 8], eax
jne 0x421db0
nop dword [eax]
add eax, 0x200
add eax, esi
push eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp + 8], eax
cmp eax, 0x200
jl 0x421d80
mov ecx, dword [ebp - 0x2c]
push esi
call fcn.0041e700
jmp 0x421ddc
add eax, 0x400
add eax, esi
push eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp + 8], eax
cmp eax, 0x200
jl 0x421db0
mov ecx, dword [ebp - 0x2c]
push esi
call fcn.0041f410
mov edi, eax
lea eax, [ebp - 0x44]
push eax
call ebx
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x421dff
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0
test edx, edx
je 0x421e20
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
test ecx, ecx
je 0x421e31
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x421e45
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x421e59
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8