Function at 0x4aa5f0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x26c
mov eax, dword [0x5322a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea eax, [ebp - 0x260]
push eax
mov esi, ecx
mov ebx, edx
mov dword [ebp - 0x260], 0x94
call edi
push 0x11c
lea ecx, [ebp - 0x128]
push 0
push ecx
call fcn.004e7d90
add esp, 0xc
lea edx, [ebp - 0x128]
push edx
mov dword [ebp - 0x128], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x124], 6
jne 0x4aad40
mov eax, 1
cmp dword [ebp - 0x120], eax
jne 0x4aad40
cmp byte [ebp - 0xe], al
jne 0x4aad40
mov eax, str.Windows_7
mov edx, esi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aa680
push 0x9c
lea eax, [ebp - 0xa8]
push 0
push eax
call fcn.004e7d90
add esp, 0xc
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4aa6c1
sub eax, edx
je 0x4aa6e5
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
push edx
push eax
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x268], eax
test eax, eax
je case.0x4aaeb8.29
push str.GetProductInfo
mov ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
xor edi, edi
test ebx, ebx
je 0x4aa76f
push 0x9c
lea edx, [ebp - 0x1c8]
push edi
push edx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x1c8]
push eax
mov dword [ebp - 0x1c8], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov edi, eax
test edi, edi
je 0x4aa76f
movzx edx, word [ebp - 0x132]
movzx eax, word [ebp - 0x134]
lea ecx, [ebp - 0x264]
push ecx
mov ecx, dword [ebp - 0x1c0]
push edx
mov edx, dword [ebp - 0x1c4]
push eax
push ecx
push edx
call ebx
mov edi, eax
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je case.0x4aaeb8.29
mov eax, dword [ebp - 0x264]
cmp eax, 0x30
ja case.0x4aaeb8.29
movzx ecx, byte [eax + 0x4abcd8]
jmp dword [ecx*4 + 0x4abc5c]
mov eax, str.Windows_7_Business_Edition
sub esi, eax
jmp 0x4aa7b0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa7b0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Business_Edition
sub esi, eax
jmp 0x4aa7e0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa7e0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Cluster_Server_Edition
sub esi, eax
jmp 0x4aa810
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa810
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Datacenter_Edition__full_installation_
sub esi, eax
jmp 0x4aa840
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa840
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Datacenter_Edition__core_installation_
sub esi, eax
jmp 0x4aa870
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa870
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Enterprise_Edition
sub esi, eax
jmp 0x4aa8a0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa8a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Enterprise_Edition
sub esi, eax
jmp 0x4aa8d0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa8d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Enterprise_Edition__full_installation_
sub esi, eax
jmp 0x4aa900
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Enterprise_Edition__core_installation_
sub esi, eax
jmp 0x4aa930
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa930
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Enterprise_Edition_for_Itanium_based_Systems
sub esi, eax
jmp 0x4aa960
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa960
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Home_Basic_Edition
sub esi, eax
jmp 0x4aa990
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa990
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Home_Basic_Edition
sub esi, eax
jmp 0x4aa9c0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa9c0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Home_Premium_Edition
sub esi, eax
jmp 0x4aa9f0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aa9f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Home_Premium_Edition
sub esi, eax
jmp 0x4aaa20
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaa20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Home_Server_Edition
sub esi, eax
jmp 0x4aaa50
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaa50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_for_Small_Business_Edition
sub esi, eax
jmp 0x4aaa80
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaa80
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Small_Business_Server
sub esi, eax
jmp 0x4aaab0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaab0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Small_Business_Server_Premium_Edition
sub esi, eax
jmp 0x4aaae0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaae0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Standard_Edition__full_installation_
sub esi, eax
jmp 0x4aab10
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aab10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Server_Standard_Edition__core_installation_
sub esi, eax
jmp 0x4aab40
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aab40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Starter_Edition
sub esi, eax
jmp 0x4aab70
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aab70
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Storage_Server_Enterprise_Edition
sub esi, eax
jmp 0x4aaba0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aaba0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Storage_Server_Express_Edition
sub esi, eax
jmp 0x4aabd0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aabd0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Storage_Server_Standard_Edition
sub esi, eax
jmp 0x4aac00
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aac00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Storage_Server_Workgroup_Edition
sub esi, eax
jmp 0x4aac30
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aac30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_An_unknown_product
sub esi, eax
jmp 0x4aac60
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aac60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Ultimate_Edition
sub esi, eax
jmp 0x4aac90
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aac90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Ultimate_Edition
sub esi, eax
jmp 0x4aacc0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aacc0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Web_Server_Edition
sub esi, eax
jmp 0x4aacf0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aacf0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_7_Professional
sub esi, eax
jmp 0x4aad20
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4aad20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
call fcn.004bbc50
test eax, eax
je 0x4ab45b
call fcn.004bbcc0
test eax, eax
je 0x4aad71
mov eax, str.Windows_8.1
mov edx, esi
sub edx, eax
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aad60
jmp 0x4aadaf
call fcn.004bc280
mov edx, esi
test eax, eax
je 0x4aad94
mov eax, str.Windows_10
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aad83
jmp 0x4aadaf
mov eax, str.Windows_8
sub edx, eax
jmp 0x4aada0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aada0
push 0x9c
lea edx, [ebp - 0xa8]
push 0
push edx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4aade1
sub eax, edx
je 0x4aae05
movzx ecx, word [ebp - 0x12]
movzx edx, word [ebp - 0x14]
push ecx
push edx
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x268], eax
test eax, eax
je case.0x4aaeb8.29
push str.GetProductInfo
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
xor edi, edi
test ebx, ebx
je 0x4aae8d
push 0x9c
lea ecx, [ebp - 0x1c8]
push edi
push ecx
call fcn.004e7d90
add esp, 0xc
lea edx, [ebp - 0x1c8]
push edx
mov dword [ebp - 0x1c8], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov edi, eax
test edi, edi
je 0x4aae8d
movzx ecx, word [ebp - 0x132]
movzx edx, word [ebp - 0x134]
lea eax, [ebp - 0x264]
push eax
mov eax, dword [ebp - 0x1c0]
push ecx
mov ecx, dword [ebp - 0x1c4]
push edx
push eax
push ecx
call ebx
mov edi, eax
mov edx, dword [ebp - 0x268]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je case.0x4aaeb8.29
mov eax, dword [ebp - 0x264]
cmp eax, 0x30
ja case.0x4aaeb8.29
movzx eax, byte [eax + 0x4abd88]
jmp dword [eax*4 + 0x4abd0c]
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aaec2
mov edi, esi
mov ecx, 9
mov esi, str._Business_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aaef0
mov edi, esi
mov ecx, 9
mov esi, str._Business_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aaf20
mov edi, esi
mov ecx, 0xc
mov esi, str._Cluster_Server_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aaf50
mov edi, esi
mov ecx, 0x17
mov esi, str._Server_Datacenter_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aaf80
mov edi, esi
mov ecx, 0x17
mov esi, str._Server_Datacenter_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aafb0
mov edi, esi
mov ecx, 0xa
mov esi, str._Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4aafe0
mov edi, esi
mov ecx, 0xa
mov esi, str._Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab010
mov edi, esi
mov ecx, 0x17
mov esi, str._Server_Enterprise_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab040
mov edi, esi
mov ecx, 0x17
mov esi, str._Server_Enterprise_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab070
mov edi, esi
mov ecx, 0x1a
mov esi, str._Server_Enterprise_Edition_for_Itanium_based_Systems
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab0a0
mov edi, esi
mov ecx, 0xa
mov esi, str._Home_Basic_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab0d0
mov edi, esi
mov ecx, 0xa
mov esi, str._Home_Basic_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab100
mov edi, esi
mov ecx, 0xb
mov esi, str._Home_Premium_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab130
mov edi, esi
mov ecx, 0xb
mov esi, str._Home_Premium_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab160
mov edi, esi
mov ecx, 0xa
mov esi, str._Home_Server_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab190
mov edi, esi
mov ecx, 0x11
mov esi, str._Server_for_Small_Business_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab1c0
mov edi, esi
mov ecx, 0xb
mov esi, str._Small_Business_Server
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab1f0
mov edi, esi
mov ecx, 0x13
mov esi, str._Small_Business_Server_Premium_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab220
mov edi, esi
mov ecx, 0x16
mov esi, str._Server_Standard_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab250
mov edi, esi
mov ecx, 0x16
mov esi, str._Server_Standard_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab280
mov edi, esi
mov ecx, 8
mov esi, str._Starter_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab2b0
mov edi, esi
mov ecx, 0x11
mov esi, str._Storage_Server_Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab2e0
mov edi, esi
mov ecx, 0x10
mov esi, str._Storage_Server_Express_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab310
mov edi, esi
mov ecx, 0x10
mov esi, str._Storage_Server_Standard_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab340
mov edi, esi
mov ecx, 0x11
mov esi, str._Storage_Server_Workgroup_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab370
mov edi, esi
mov ecx, 0xa
mov esi, str._An_unknown_product
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab3a0
mov edi, esi
mov ecx, 9
mov esi, str._Ultimate_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab3d0
mov edi, esi
mov ecx, 9
mov esi, str._Ultimate_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab400
mov edi, esi
mov ecx, 0xa
mov esi, str._Web_Server_Edition
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
add esi, 0xfffffffe
mov edi, edi
mov ax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4ab430
mov edi, esi
mov ecx, 7
mov esi, str._Professional
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
call fcn.004bbb70
test eax, eax
je 0x4ab4ea
mov eax, str.Windows_Server_2008
sub esi, eax
nop
movzx ecx, word [eax]
mov word [eax + esi], cx
add eax, 2
test cx, cx
jne 0x4ab470
push 0x9c
lea ecx, [ebp - 0xa8]
push 0
push ecx
call fcn.004e7d90
add esp, 0xc
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4ab4b1
sub eax, edx
je case.0x4aaeb8.29
movzx eax, word [ebp - 0x12]
movzx ecx, word [ebp - 0x14]
push eax
push ecx
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
call fcn.004bbbe0
test eax, eax
je 0x4ab57a
mov eax, str.Windows_Server_2008_R2
sub esi, eax
mov edi, edi
movzx ecx, word [eax]
mov word [eax + esi], cx
add eax, 2
test cx, cx
jne 0x4ab500
push 0x9c
lea edx, [ebp - 0xa8]
push 0
push edx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4ab541
sub eax, edx
je case.0x4aaeb8.29
movzx ecx, word [ebp - 0x12]
movzx edx, word [ebp - 0x14]
push ecx
push edx
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
call fcn.004bbf80
test eax, eax
je 0x4ab60a
mov eax, str.Windows_Server_2012_R2
sub esi, eax
mov edi, edi
movzx ecx, word [eax]
mov word [eax + esi], cx
add eax, 2
test cx, cx
jne 0x4ab590
push 0x9c
lea eax, [ebp - 0xa8]
push 0
push eax
call fcn.004e7d90
add esp, 0xc
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4ab5d1
sub eax, edx
je case.0x4aaeb8.29
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
push edx
push eax
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
call fcn.004bbf10
test eax, eax
je 0x4ab69d
call fcn.004bc4d0
test eax, eax
je 0x4ab641
mov eax, str.Windows_Server_2016
sub esi, eax
jmp 0x4ab630
movzx ecx, word [eax]
mov word [eax + esi], cx
add eax, 2
test cx, cx
jne 0x4ab630
jmp 0x4ab65f
mov eax, str.Windows_Server_2012
sub esi, eax
jmp 0x4ab650
movzx ecx, word [eax]
mov word [eax + esi], cx
add eax, 2
test cx, cx
jne 0x4ab650
push 0x9c
lea ecx, [ebp - 0xa8]
push 0
push ecx
call fcn.004e7d90
add esp, 0xc
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa8], 0x9c
call edi
lea eax, [ebp - 0x94]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4ab691
jmp 0x4ab4b8
cmp dword [ebp - 0x258], 0
jne 0x4abc00
mov eax, str.Windows_Vista
mov edx, esi
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab6b3
push 0x9c
lea edx, [ebp - 0x1c8]
push 0
push edx
call fcn.004e7d90
add esp, 0xc
lea eax, [ebp - 0x1c8]
push eax
mov dword [ebp - 0x1c8], 0x9c
call edi
lea eax, [ebp - 0x1b4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4ab6f4
sub eax, edx
je 0x4ab71e
movzx ecx, word [ebp - 0x132]
movzx edx, word [ebp - 0x134]
push ecx
push edx
push str.__SP_d._d_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.kernel32.dll
xor edi, edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je case.0x4aaeb8.29
push str.GetProductInfo
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x264], eax
test eax, eax
je 0x4ab7a4
push 0x9c
lea eax, [ebp - 0xa8]
push edi
push eax
call fcn.004e7d90
add esp, 0xc
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa8], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov edi, eax
test edi, edi
je 0x4ab7a4
movzx eax, word [ebp - 0x12]
movzx ecx, word [ebp - 0x14]
lea edx, [ebp - 0x268]
push edx
mov edx, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0xa4]
push ecx
push edx
push eax
call dword [ebp - 0x264]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je case.default.0x4ab7c2
mov eax, dword [ebp - 0x268]
cmp eax, 0x1c
ja case.default.0x4ab7c2
jmp dword [eax*4 + 0x4abdbc]
mov eax, str.Windows_Vista_Business_Edition
mov edx, esi
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab7d2
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Business_Edition
mov edx, esi
sub edx, eax
nop
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab7f0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Cluster_Server_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab810
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Datacenter_Edition__full_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab830
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Datacenter_Edition__core_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab850
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Enterprise_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab870
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Enterprise_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab890
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Enterprise_Edition__full_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab8b0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Enterprise_Edition__core_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab8d0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Enterprise_Edition_for_Itanium_based_Systems
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab8f0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Home_Basic_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab910
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Home_Basic_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab930
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Home_Premium_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab950
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Home_Premium_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab970
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Home_Server_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab990
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_for_Small_Business_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab9b0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Small_Business_Server
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4ab9d0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Small_Business_Server_Premium_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4ab9f0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Standard_Edition__full_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aba10
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Server_Standard_Edition__core_installation_
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aba30
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Starter_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aba50
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Storage_Server_Enterprise_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aba70
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Storage_Server_Express_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4aba90
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Storage_Server_Standard_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abab0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Storage_Server_Workgroup_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abad0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_An_unknown_product
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abaf0
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Ultimate_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abb10
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Ultimate_Edition
mov edx, esi
sub edx, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abb30
jmp case.default.0x4ab7c2
mov eax, str.Windows_Vista_Web_Server_Edition
mov edx, esi
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4abb50
mov al, byte [ebp - 0x12e]
cmp al, 3
je 0x4abb71
cmp al, 2
jne case.0x4aaeb8.29
mov al, byte [ebp - 0x130]
test al, al
jns 0x4abba2
mov eax, str.Windows_Vista_Datacenter_Server
sub esi, eax
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4abb82
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
test al, 2
je 0x4abbd0
mov eax, str.Windows_Server_2008_Enterprise
sub esi, eax
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4abbb0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows_Server_2008
sub esi, eax
jmp 0x4abbe0
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4abbe0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e3946
mov esp, ebp
pop ebp
ret
mov eax, str.Windows
sub esi, eax
jmp 0x4abc10
movzx ecx, word [eax]
mov word [esi + eax], cx
add eax, 2
test cx, cx
jne 0x4abc10
lea eax, [ebp - 0x24c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4abc28
sub eax, edx
je case.0x4aaeb8.29
lea ecx, [ebp - 0x24c]
push ecx
push str.___s_
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e3946
mov esp, ebp
pop ebp
ret