Function at 0x41db6a
Capabilities:
Check os version

Disassembly:
push 0x6d0
mov eax, 0x4789c4
call fcn.0045e88a
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], ebx
call fcn.0040da47
mov dword [ebp - 4], ebx
mov dword [ebp - 0x630], 1
mov edi, dword [ebp - 0x630]
mov dword [ebp - 0x624], ebx
mov dword [ebp - 0x628], ebx
lea eax, [ebp - 0x6dc]
push eax
call fcn.0041ed54
mov dword [ebp - 4], 1
push dword [ebp - 0x628]
lea eax, [ebp - 0x6d4]
push ecx
push str.Partition
push ecx
push dword [ebp - 0x624]
push ecx
push str.DeviceHarddisk
push eax
call fcn.004169cb
add esp, 0xc
push eax
call fcn.004130c2
pop ecx
push eax
call fcn.004169cb
add esp, 0xc
push eax
call fcn.004130c2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.0041ee07
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
mov esi, dword [ebp - 0x2c]
jae 0x41dc28
lea esi, [ebp - 0x2c]
push ebx
push esi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.0041da6e
test eax, eax
jne 0x41dc69
push ebx
lea ecx, [ebp - 0x30]
push 1
call fcn.00403022
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041e013
cmp dword [ebp - 0x628], ebx
je 0x41de52
jmp 0x41ddaa
lea eax, [ebp - 0xbc]
push eax
call fcn.0041d663
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 3
push esi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x54], eax
call fcn.00402fff
lea eax, [ebp - 0x654]
push eax
push dword [ebp - 0x62c]
mov ecx, esi
call fcn.0041dade
test eax, eax
je 0x41dcc4
cmp byte [ebp - 0x63b], bl
setne al
mov byte [ebp - 0xbc], al
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0xb6], bl
cmp dword [ebp - 0x628], ebx
jne 0x41dcfc
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.0041ece7
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x88
cdq
idiv ecx
mov edi, eax
dec edi
jmp 0x41dd82
cmp dword [ebp - 0x628], 1
jne 0x41dd25
mov esi, dword [ebp - 0x620]
push edi
call fcn.0041ecbe
mov ecx, dword [eax + 0x60]
cmp ecx, dword [ebp - 0x5c]
jne 0x41dd25
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 0x58]
je 0x41ddc2
mov eax, dword [ebp - 0x628]
mov esi, dword [ebp - 0x620]
push edi
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.0041ecbe
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x60], al
cmp byte [ebp - 0xbb], bl
je 0x41dd59
push edi
call fcn.0041ecbe
mov byte [eax + 1], 1
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.0041ece7
lea eax, [ebp - 0xbc]
push eax
push edi
call fcn.0041ecbe
add eax, 0x6c
call fcn.0041ece7
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.0041d6cb
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403022
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041e013
inc dword [ebp - 0x628]
cmp dword [ebp - 0x628], 0x20
jl 0x41dbb8
jmp 0x41de52
mov esi, dword [ebp - 0x620]
push edi
call fcn.0041ecbe
push edi
mov byte [eax + 5], 1
call fcn.0041ecbe
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xb4]
add eax, 8
push ecx
mov ecx, eax
call fcn.00402f6d
push edi
call fcn.0041ecbe
push 0xffffffffffffffff
add eax, 0x24
push ebx
push eax
lea eax, [ebp - 0x98]
call fcn.0040306d
push edi
call fcn.0041ecbe
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x7c]
add eax, 0x40
push ecx
mov ecx, eax
call fcn.00402f6d
push edi
call fcn.0041ecbe
mov cl, byte [ebp - 0xb6]
mov byte [eax + 6], cl
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.0041d6cb
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403022
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041e013
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x40
jl 0x41dbb2
push 0x110
lea eax, [ebp - 0x1d0]
push ebx
push eax
mov dword [ebp - 0x1d4], 0x114
call fcn.0045f510
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1d0], 6
jb 0x41e005
mov dword [ebp - 0x624], ebx
mov esi, 0x230
lea eax, [ebp - 0x6dc]
push eax
call fcn.0041ed54
push dword [ebp - 0x624]
lea eax, [ebp - 0x6d4]
push ecx
push str.DeviceHarddiskVolume
push eax
mov dword [ebp - 4], 5
call fcn.004169cb
add esp, 0xc
push eax
call fcn.004130c2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.0041ee07
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0x10
mov edi, dword [ebp - 0x2c]
jae 0x41defc
lea edi, [ebp - 0x2c]
push ebx
push edi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.0041da6e
test eax, eax
je 0x41dfd6
push esi
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.0045f510
add esp, 0xc
push edi
lea eax, [ebp - 0x404]
push 0x47e2f0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
lea eax, [ebp - 0x628]
push eax
push esi
lea eax, [ebp - 0x404]
push eax
push esi
push eax
push 0x222038
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x41dfd6
cmp dword [ebp - 0x1d8], ebx
je 0x41dfd6
lea eax, [ebp - 0xbc]
push eax
call fcn.0041d663
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 7
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.00402fff
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x620]
mov byte [ebp - 0xb6], bl
call fcn.0041ece7
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 6
call fcn.0041d6cb
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403022
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041e013
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x100
jl 0x41dea9
mov eax, dword [ebp - 0x620]
call fcn.0045e90d
ret 4