Function at 0x420cd8
Capabilities:
Check os version

Disassembly:
push 0x6d0
mov eax, 0x47c4c7
call fcn.0046215a
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], ebx
call fcn.00421e49
mov dword [ebp - 4], ebx
mov dword [ebp - 0x630], 1
mov edi, dword [ebp - 0x630]
mov dword [ebp - 0x624], ebx
mov dword [ebp - 0x628], ebx
lea eax, [ebp - 0x6dc]
push eax
call fcn.00421fee
mov dword [ebp - 4], 1
push dword [ebp - 0x628]
lea eax, [ebp - 0x6d4]
push ecx
push str.Partition
push ecx
push dword [ebp - 0x624]
push ecx
push str.DeviceHarddisk
push eax
call fcn.00419b47
add esp, 0xc
push eax
call fcn.004162fa
pop ecx
push eax
call fcn.00419b47
add esp, 0xc
push eax
call fcn.004162fa
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.004220a1
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
mov esi, dword [ebp - 0x2c]
jae 0x420d96
lea esi, [ebp - 0x2c]
push ebx
push esi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.00420bdc
test eax, eax
jne 0x420dd7
push ebx
lea ecx, [ebp - 0x30]
push 1
call fcn.004030c2
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.00421181
cmp dword [ebp - 0x628], ebx
je 0x420fc0
jmp 0x420f18
lea eax, [ebp - 0xbc]
push eax
call fcn.00420772
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 3
push esi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x54], eax
call fcn.0040309f
lea eax, [ebp - 0x654]
push eax
push dword [ebp - 0x62c]
mov ecx, esi
call fcn.00420c4c
test eax, eax
je 0x420e32
cmp byte [ebp - 0x63b], bl
setne al
mov byte [ebp - 0xbc], al
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0xb6], bl
cmp dword [ebp - 0x628], ebx
jne 0x420e6a
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.00421f81
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x88
cdq
idiv ecx
mov edi, eax
dec edi
jmp 0x420ef0
cmp dword [ebp - 0x628], 1
jne 0x420e93
mov esi, dword [ebp - 0x620]
push edi
call fcn.00421f58
mov ecx, dword [eax + 0x60]
cmp ecx, dword [ebp - 0x5c]
jne 0x420e93
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 0x58]
je 0x420f30
mov eax, dword [ebp - 0x628]
mov esi, dword [ebp - 0x620]
push edi
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.00421f58
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x60], al
cmp byte [ebp - 0xbb], bl
je 0x420ec7
push edi
call fcn.00421f58
mov byte [eax + 1], 1
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.00421f81
lea eax, [ebp - 0xbc]
push eax
push edi
call fcn.00421f58
add eax, 0x6c
call fcn.00421f81
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.004207da
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.004030c2
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.00421181
inc dword [ebp - 0x628]
cmp dword [ebp - 0x628], 0x20
jl 0x420d26
jmp 0x420fc0
mov esi, dword [ebp - 0x620]
push edi
call fcn.00421f58
push edi
mov byte [eax + 5], 1
call fcn.00421f58
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xb4]
add eax, 8
push ecx
mov ecx, eax
call fcn.0040300d
push edi
call fcn.00421f58
push 0xffffffffffffffff
add eax, 0x24
push ebx
push eax
lea eax, [ebp - 0x98]
call fcn.0040310d
push edi
call fcn.00421f58
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x7c]
add eax, 0x40
push ecx
mov ecx, eax
call fcn.0040300d
push edi
call fcn.00421f58
mov cl, byte [ebp - 0xb6]
mov byte [eax + 6], cl
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.004207da
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.004030c2
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.00421181
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x40
jl 0x420d20
push 0x110
lea eax, [ebp - 0x1d0]
push ebx
push eax
mov dword [ebp - 0x1d4], 0x114
call fcn.00462d50
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1d0], 6
jb 0x421173
mov dword [ebp - 0x624], ebx
mov esi, 0x230
lea eax, [ebp - 0x6dc]
push eax
call fcn.00421fee
push dword [ebp - 0x624]
lea eax, [ebp - 0x6d4]
push ecx
push str.DeviceHarddiskVolume
push eax
mov dword [ebp - 4], 5
call fcn.00419b47
add esp, 0xc
push eax
call fcn.004162fa
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.004220a1
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0x10
mov edi, dword [ebp - 0x2c]
jae 0x42106a
lea edi, [ebp - 0x2c]
push ebx
push edi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.00420bdc
test eax, eax
je 0x421144
push esi
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.00462d50
add esp, 0xc
push edi
lea eax, [ebp - 0x404]
push 0x482c7c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
lea eax, [ebp - 0x628]
push eax
push esi
lea eax, [ebp - 0x404]
push eax
push esi
push eax
push 0x222038
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x421144
cmp dword [ebp - 0x1d8], ebx
je 0x421144
lea eax, [ebp - 0xbc]
push eax
call fcn.00420772
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 7
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.0040309f
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x620]
mov byte [ebp - 0xb6], bl
call fcn.00421f81
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 6
call fcn.004207da
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.004030c2
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.00421181
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x100
jl 0x421017
mov eax, dword [ebp - 0x620]
call fcn.004621dd
ret 4