Function at 0x41e8e1
Capabilities:
Check os version

Disassembly:
push 0x6d0
mov eax, 0x479d81
call fcn.0045fd3a
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], ebx
call fcn.00406728
mov dword [ebp - 4], ebx
mov dword [ebp - 0x630], 1
mov edi, dword [ebp - 0x630]
mov dword [ebp - 0x624], ebx
mov dword [ebp - 0x628], ebx
lea eax, [ebp - 0x6dc]
push eax
call fcn.0041fbc0
mov dword [ebp - 4], 1
push dword [ebp - 0x628]
lea eax, [ebp - 0x6d4]
push ecx
push str.Partition
push ecx
push dword [ebp - 0x624]
push ecx
push str.DeviceHarddisk
push eax
call fcn.004174d7
add esp, 0xc
push eax
call fcn.00413c52
pop ecx
push eax
call fcn.004174d7
add esp, 0xc
push eax
call fcn.00413c52
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.0041fc73
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
mov esi, dword [ebp - 0x2c]
jae 0x41e99f
lea esi, [ebp - 0x2c]
push ebx
push esi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.0041e7e5
test eax, eax
jne 0x41e9e0
push ebx
lea ecx, [ebp - 0x30]
push 1
call fcn.00403021
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041ed8a
cmp dword [ebp - 0x628], ebx
je 0x41ebc9
jmp 0x41eb21
lea eax, [ebp - 0xbc]
push eax
call fcn.0041e37b
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 3
push esi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x54], eax
call fcn.00402ffe
lea eax, [ebp - 0x654]
push eax
push dword [ebp - 0x62c]
mov ecx, esi
call fcn.0041e855
test eax, eax
je 0x41ea3b
cmp byte [ebp - 0x63b], bl
setne al
mov byte [ebp - 0xbc], al
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0xb6], bl
cmp dword [ebp - 0x628], ebx
jne 0x41ea73
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.0041fb53
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x88
cdq
idiv ecx
mov edi, eax
dec edi
jmp 0x41eaf9
cmp dword [ebp - 0x628], 1
jne 0x41ea9c
mov esi, dword [ebp - 0x620]
push edi
call fcn.0041fb2a
mov ecx, dword [eax + 0x60]
cmp ecx, dword [ebp - 0x5c]
jne 0x41ea9c
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 0x58]
je 0x41eb39
mov eax, dword [ebp - 0x628]
mov esi, dword [ebp - 0x620]
push edi
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.0041fb2a
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x60], al
cmp byte [ebp - 0xbb], bl
je 0x41ead0
push edi
call fcn.0041fb2a
mov byte [eax + 1], 1
mov esi, dword [ebp - 0x620]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.0041fb53
lea eax, [ebp - 0xbc]
push eax
push edi
call fcn.0041fb2a
add eax, 0x6c
call fcn.0041fb53
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.0041e3e3
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403021
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041ed8a
inc dword [ebp - 0x628]
cmp dword [ebp - 0x628], 0x20
jl 0x41e92f
jmp 0x41ebc9
mov esi, dword [ebp - 0x620]
push edi
call fcn.0041fb2a
push edi
mov byte [eax + 5], 1
call fcn.0041fb2a
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xb4]
add eax, 8
push ecx
mov ecx, eax
call fcn.00402f6c
push edi
call fcn.0041fb2a
push 0xffffffffffffffff
add eax, 0x24
push ebx
push eax
lea eax, [ebp - 0x98]
call fcn.0040306c
push edi
call fcn.0041fb2a
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x7c]
add eax, 0x40
push ecx
mov ecx, eax
call fcn.00402f6c
push edi
call fcn.0041fb2a
mov cl, byte [ebp - 0xb6]
mov byte [eax + 6], cl
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.0041e3e3
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403021
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041ed8a
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x40
jl 0x41e929
push 0x110
lea eax, [ebp - 0x1d0]
push ebx
push eax
mov dword [ebp - 0x1d4], 0x114
call fcn.00460930
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1d0], 6
jb 0x41ed7c
mov dword [ebp - 0x624], ebx
mov esi, 0x230
lea eax, [ebp - 0x6dc]
push eax
call fcn.0041fbc0
push dword [ebp - 0x624]
lea eax, [ebp - 0x6d4]
push ecx
push str.DeviceHarddiskVolume
push eax
mov dword [ebp - 4], 5
call fcn.004174d7
add esp, 0xc
push eax
call fcn.00413c52
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6dc]
call fcn.0041fc73
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0x10
mov edi, dword [ebp - 0x2c]
jae 0x41ec73
lea edi, [ebp - 0x2c]
push ebx
push edi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.0041e7e5
test eax, eax
je 0x41ed4d
push esi
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.00460930
add esp, 0xc
push edi
lea eax, [ebp - 0x404]
push 0x480c70
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
lea eax, [ebp - 0x628]
push eax
push esi
lea eax, [ebp - 0x404]
push eax
push esi
push eax
push 0x222038
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x41ed4d
cmp dword [ebp - 0x1d8], ebx
je 0x41ed4d
lea eax, [ebp - 0xbc]
push eax
call fcn.0041e37b
mov eax, dword [ebp - 0x624]
mov byte [ebp - 4], 7
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.00402ffe
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x620]
mov byte [ebp - 0xb6], bl
call fcn.0041fb53
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 6
call fcn.0041e3e3
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403021
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.0041ed8a
inc dword [ebp - 0x624]
cmp dword [ebp - 0x624], 0x100
jl 0x41ec20
mov eax, dword [ebp - 0x620]
call fcn.0045fdbd
ret 4