Function at 0x1002581c
Capabilities:
Check os version

Disassembly:
push 0x6d0
mov eax, 0x10042e96
call fcn.1002a6aa
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], ebx
call fcn.10026cc0
mov dword [ebp - 4], ebx
mov dword [ebp - 0x630], 1
mov edi, dword [ebp - 0x630]
mov dword [ebp - 0x620], ebx
mov dword [ebp - 0x628], ebx
lea eax, [ebp - 0x6dc]
push eax
call fcn.10026e67
mov dword [ebp - 4], 1
push dword [ebp - 0x628]
lea eax, [ebp - 0x6d4]
push ecx
push str.Partition
push ecx
push dword [ebp - 0x620]
push ecx
push str.DeviceHarddisk
push eax
call fcn.10022381
add esp, 0xc
push eax
call fcn.1001d2d2
pop ecx
push eax
call fcn.10022381
add esp, 0xc
push eax
call fcn.1001d2d2
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x6dc]
call fcn.10026f1a
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
mov esi, dword [ebp - 0x2c]
jae 0x100258d9
lea esi, [ebp - 0x2c]
push ebx
push esi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.10025725
test eax, eax
jne 0x1002591a
push ebx
lea ecx, [ebp - 0x30]
push 1
call fcn.10001d94
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.10025cc8
cmp dword [ebp - 0x628], ebx
je 0x10025b08
jmp 0x10025a5f
lea eax, [ebp - 0xbc]
push eax
call fcn.100251f5
mov eax, dword [ebp - 0x620]
mov byte [ebp - 4], 3
push esi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x54], eax
call fcn.10001d26
mov ebx, dword [ebp - 0x62c]
lea eax, [ebp - 0x654]
push eax
mov ecx, esi
call fcn.10025795
xor ebx, ebx
test eax, eax
je 0x10025977
cmp byte [ebp - 0x63b], bl
setne al
mov byte [ebp - 0xbc], al
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0xb6], bl
cmp dword [ebp - 0x628], ebx
jne 0x100259af
mov esi, dword [ebp - 0x624]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.10026dfb
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x88
cdq
idiv ecx
mov edi, eax
dec edi
jmp 0x10025a35
cmp dword [ebp - 0x628], 1
jne 0x100259d8
mov esi, dword [ebp - 0x624]
push edi
call fcn.10026dd2
mov ecx, dword [eax + 0x60]
cmp ecx, dword [ebp - 0x5c]
jne 0x100259d8
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 0x58]
je 0x10025a77
mov eax, dword [ebp - 0x628]
mov esi, dword [ebp - 0x624]
push edi
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.10026dd2
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x60], al
cmp byte [ebp - 0xbb], bl
je 0x10025a0c
push edi
call fcn.10026dd2
mov byte [eax + 1], 1
mov esi, dword [ebp - 0x624]
lea eax, [ebp - 0xbc]
push eax
mov eax, esi
call fcn.10026dfb
lea eax, [ebp - 0xbc]
push eax
push edi
call fcn.10026dd2
add eax, 0x6c
call fcn.10026dfb
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.1002525d
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.10001d94
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.10025cc8
xor ebx, ebx
inc dword [ebp - 0x628]
cmp dword [ebp - 0x628], 0x20
jl 0x1002586a
jmp 0x10025b08
mov esi, dword [ebp - 0x624]
push edi
call fcn.10026dd2
push edi
mov byte [eax + 5], 1
call fcn.10026dd2
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xb4]
add eax, 8
push ecx
mov ecx, eax
call fcn.10001c94
push edi
call fcn.10026dd2
add eax, 0x24
push 0xffffffffffffffff
push eax
xor ebx, ebx
lea eax, [ebp - 0x98]
call fcn.10001ddf
push edi
call fcn.10026dd2
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x7c]
add eax, 0x40
push ecx
mov ecx, eax
call fcn.10001c94
push edi
call fcn.10026dd2
mov cl, byte [ebp - 0xb6]
mov byte [eax + 6], cl
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.1002525d
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.10001d94
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.10025cc8
inc dword [ebp - 0x620]
cmp dword [ebp - 0x620], 0x40
jl 0x10025864
push 0x110
lea eax, [ebp - 0x1d0]
push ebx
push eax
mov dword [ebp - 0x1d4], 0x114
call fcn.1002bdc0
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1d0], 6
jb 0x10025cba
mov dword [ebp - 0x620], ebx
mov esi, 0x230
lea eax, [ebp - 0x6dc]
push eax
call fcn.10026e67
push dword [ebp - 0x620]
lea eax, [ebp - 0x6d4]
push ecx
push str.DeviceHarddiskVolume
push eax
mov dword [ebp - 4], 5
call fcn.10022381
add esp, 0xc
push eax
call fcn.1001d2d2
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x6dc]
call fcn.10026f1a
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0x10
mov edi, dword [ebp - 0x2c]
jae 0x10025bb1
lea edi, [ebp - 0x2c]
push ebx
push edi
push dword [ebp - 0x62c]
lea eax, [ebp - 0x61c]
call fcn.10025725
test eax, eax
je 0x10025c8b
push esi
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.1002bdc0
add esp, 0xc
push edi
lea eax, [ebp - 0x404]
push 0x1004a670
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
lea eax, [ebp - 0x628]
push eax
push esi
lea eax, [ebp - 0x404]
push eax
push esi
push eax
push 0x222038
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x10025c8b
cmp dword [ebp - 0x1d8], ebx
je 0x10025c8b
lea eax, [ebp - 0xbc]
push eax
call fcn.100251f5
mov eax, dword [ebp - 0x620]
mov byte [ebp - 4], 7
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb8], 1
mov dword [ebp - 0x54], eax
call fcn.10001d26
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x624]
mov byte [ebp - 0xb6], bl
call fcn.10026dfb
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 6
call fcn.1002525d
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.10001d94
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], bl
call fcn.10025cc8
inc dword [ebp - 0x620]
cmp dword [ebp - 0x620], 0x100
jl 0x10025b5f
mov eax, dword [ebp - 0x624]
call fcn.1002a72d
ret 4