Function at 0x42a490
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e0773
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x663000]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x1f0]
push 0x118
xorps xmm0, xmm0
mov dword [ebp - 0x238], esi
push 0
push eax
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x244], 0
movups xmmword [ebp - 0x254], xmm0
call fcn.005b3720
add esp, 0xc
mov dword [ebp - 0x1f4], 0x11c
lea eax, [ebp - 0x1f4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x42b6af
cmp dword [ebp - 0x1f0], 6
jb 0x42a572
lea eax, [ebp - 0x220]
push eax
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x22c]
call fcn.00428150
add esp, 4
test al, al
je 0x42a572
mov ecx, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x1f0], ecx
jne 0x42a55a
cmp dword [ebp - 0x1ec], eax
je 0x42a572
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1e8], eax
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x42a598
lea ecx, [ebp - 0x264]
push ecx
call eax
jmp 0x42a5a5
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x1e4], 2
jne 0x42b6af
cmp dword [ebp - 0x1f0], 4
jbe 0x42b6af
mov edi, str.Microsoft
mov edx, 0x100
mov ecx, esi
sub edi, esi
nop dword [eax]
lea eax, [edx + 0x7ffffefe]
test eax, eax
je 0x42a5ee
movzx eax, word [edi + ecx]
test ax, ax
je 0x42a5ee
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x42a5d0
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
mov ax, word [ebp - 0x264]
cmp ax, 6
jne 0x42a696
push ecx
push 0x11660
lea ecx, [ebp - 0xd8]
call fcn.0041de30
mov dword [ebp - 4], 0
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
mov dword [ebp - method.srl::Value.virtual_0], vtable.srl::Value.0
call fcn.0041e070
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116c0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 2
call fcn.0041de30
mov byte [ebp - 4], 3
jmp 0x42a716
cmp ax, 9
jne 0x42a737
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11660
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 4
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 5
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116c1
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 6
call fcn.0041de30
mov byte [ebp - 4], 7
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1f0], 0xa
mov byte [ebp - 0x226], 0
mov byte [ebp - 0x225], 0
mov byte [ebp - 0x227], 0
jne 0x42a7ff
cmp dword [ebp - 0x1e8], 0x55f0
mov edx, 0x100
mov ecx, esi
jb 0x42a7a6
push str.Windows_11
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x117a4
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 8
call fcn.0041de30
mov byte [ebp - 4], 9
jmp 0x42a7de
push str.Windows_10
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1175c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xa
call fcn.0041de30
mov byte [ebp - 4], 0xb
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1f0], 6
jne case.0x42abc2.5
cmp dword [ebp - 0x1ec], 0
jne 0x42a8dd
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42a884
push str.Windows_Vista
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11653
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xc
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xd
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov byte [ebp - 0x226], 1
jmp 0x42a8d6
push str.Windows_Server_2008
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11729
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xe
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xf
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 1
jne 0x42a9ae
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42a955
push str.Windows_7
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116b6
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x10
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x11
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov byte [ebp - 0x225], 1
jmp 0x42a9a7
push str.Windows_Server_2008_R2
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1172a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x12
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x13
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 2
jne 0x42aacb
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42aa72
push str.Windows_8
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x14
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x15
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x16
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x17
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov byte [ebp - 0x227], 1
jmp 0x42aac4
push str.Windows_Server_2012
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173d
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x18
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x19
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 3
jne 0x42ab7b
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42ab22
push str.Windows_8.1
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1174e
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1a
call fcn.0041de30
mov byte [ebp - 4], 0x1b
jmp 0x42ab5a
push str.Windows_Server_2012_R2
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1174f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1c
call fcn.0041de30
mov byte [ebp - 4], 0x1d
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
push str.GetProductInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x234]
push ecx
push 0
push 0
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
call eax
mov eax, dword [ebp - 0x234]
dec eax
cmp eax, 0x2f
ja case.0x42abc2.5
movzx eax, byte [eax + 0x42b720]
jmp dword [eax*4 + 0x42b6d4]
push str.Professional_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x225], 0
je 0x42ac37
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11738
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1e
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x1f
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x227], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11746
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x20
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x21
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 0
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x22
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x23
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Ultimate_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x226], 0
je 0x42ad4e
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166b
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x24
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x25
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x225], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11735
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x26
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x27
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Home_Premium_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x226], 0
je 0x42ae1d
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x28
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x29
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x225], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11739
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2a
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2b
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Home_Basic_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x226], 0
je 0x42aeec
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11669
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2c
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2d
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x225], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2e
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2f
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Enterprise_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x226], 0
je 0x42afbb
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11668
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x30
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x31
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x225], 0
je 0x42b018
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11737
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x32
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x33
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
cmp byte [ebp - 0x227], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11747
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x34
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x35
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 0
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x36
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x37
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Business_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x226], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11667
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x38
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x39
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Starter_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp byte [ebp - 0x225], 0
je case.0x42abc2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173b
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3a
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3b
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
jmp case.0x42abc2.5
push str.Cluster_Server_Edition
jmp 0x42b1ed
push str.Datacenter_Edition
jmp 0x42b1ed
push str.Datacenter_Edition__core_installation_
jmp 0x42b1ed
push str.Enterprise_Edition
jmp 0x42b1ed
push str.Enterprise_Edition__core_installation_
jmp 0x42b1ed
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x42b1ed
push str.Small_Business_Server
jmp 0x42b1ed
push str.Small_Business_Server_Premium_Edition
jmp 0x42b1ed
push str.Standard_Edition
jmp 0x42b1ed
push str.Standard_Edition__core_installation_
jmp 0x42b1ed
push str.Web_Server_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp dword [ebp - 0x1f0], 5
jne 0x42b5ae
mov eax, dword [ebp - 0x1ec]
cmp eax, 2
jne 0x42b470
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x42b265
push str.Windows_Server_2003_R2_
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3c
call fcn.0041de30
mov byte [ebp - 4], 0x3d
jmp 0x42b39a
mov eax, dword [ebp - 0xdc]
mov ecx, 0x2000
cmp ax, cx
jne 0x42b2b9
push str.Windows_Storage_Server_2003
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3e
call fcn.0041de30
mov byte [ebp - 4], 0x3f
jmp 0x42b39a
mov ecx, 0x8000
cmp ax, cx
jne 0x42b307
push str.Windows_Home_Server
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11744
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x40
call fcn.0041de30
mov byte [ebp - 4], 0x41
jmp 0x42b39a
cmp byte [ebp - 0xda], 1
jne 0x42b35b
cmp word [ebp - 0x264], 9
jne 0x42b35b
push str.Windows_XP_Professional_x64_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x42
call fcn.0041de30
mov byte [ebp - 4], 0x43
jmp 0x42b39a
push str.Windows_Server_2003_
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x44
call fcn.0041de30
mov byte [ebp - 4], 0x45
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xda], 1
je 0x42b45d
mov ax, word [ebp - 0x264]
cmp ax, 6
jne 0x42b3f1
mov eax, dword [ebp - 0xdc]
test al, al
jns 0x42b3e6
push str.Datacenter_Edition_for_Itanium_based_Systems
jmp 0x42b451
test al, 2
je 0x42b45d
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x42b451
cmp ax, 9
mov eax, dword [ebp - 0xdc]
jne 0x42b41a
test al, al
jns 0x42b409
mov eax, str.Datacenter_x64_Edition
push eax
jmp 0x42b451
test al, 2
mov eax, str.Enterprise_x64_Edition
jne 0x42b417
mov eax, str.Standard_x64_Edition
push eax
jmp 0x42b451
test eax, 0x4000
je 0x42b428
push str.Compute_Cluster_Edition
jmp 0x42b451
test al, al
jns 0x42b433
push str.Datacenter_Edition
jmp 0x42b451
test al, 2
je 0x42b43e
push str.Enterprise_Edition
jmp 0x42b451
test eax, 0x400
je 0x42b44c
push str.Web_Edition
jmp 0x42b451
push str.Standard_Edition
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
cmp dword [ebp - 0x1f0], 5
jne 0x42b5ae
mov eax, dword [ebp - 0x1ec]
cmp eax, 1
jne 0x42b510
push str.Windows_XP
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x46
call fcn.0041de30
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x47
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0xd8]
call fcn.0041e070
mov dword [ebp - 4], 0xffffffff
mov ecx, str.Home_Edition
test dword [ebp - 0xdc], 0x200
mov eax, str.Professional
mov edx, 0x100
cmovne eax, ecx
mov ecx, esi
push eax
call fcn.0042a350
cmp dword [ebp - 0x1f0], 5
jne 0x42b5ae
mov eax, dword [ebp - 0x1ec]
test eax, eax
jne 0x42b5ae
push str.Windows_2000
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x23c], 1
push 0
push 0x1165e
lea ecx, [ebp - 0x21c]
mov dword [ebp - 4], 0x48
call fcn.0041de30
push 0
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x49
push ecx
push eax
call fcn.00444dc0
lea ecx, [ebp - 0x21c]
call fcn.0041e070
cmp byte [ebp - 0xda], 1
jne 0x42b581
push str.Professional
jmp 0x42b5a2
mov eax, dword [ebp - 0xdc]
test al, al
jns 0x42b592
push str.Datacenter_Server
jmp 0x42b5a2
test al, 2
je 0x42b59d
push str.Advanced_Server
jmp 0x42b5a2
push str.Server
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
lea ecx, [ebp - 0x1e0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b5b7
sub ecx, edx
sar ecx, 1
je 0x42b5ec
push 0x62ddcc
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
lea eax, [ebp - 0x1e0]
mov edx, 0x100
push eax
mov ecx, esi
call fcn.0042a350
push dword [ebp - 0x1e8]
lea eax, [ebp - 0xb0]
push str.__build__d_
push 0x50
push eax
call fcn.0042a3c0
add esp, 0x10
mov ecx, 0x100
mov eax, esi
nop
cmp word [eax], 0
je 0x42b61e
add eax, 2
sub ecx, 1
jne 0x42b610
mov eax, 0x100
mov edi, ecx
sub eax, ecx
neg edi
sbb edi, edi
and edi, eax
test ecx, ecx
je 0x42b67c
mov edx, 0x100
lea ecx, [esi + edi*2]
sub edx, edi
je 0x42b66f
lea esi, [ebp - 0xb0]
mov eax, SysReAllocString
sub esi, ecx
nop word [eax + eax]
test eax, eax
je 0x42b669
movzx edi, word [esi + ecx]
test di, di
je 0x42b669
mov word [ecx], di
dec eax
add ecx, 2
sub edx, 1
jne 0x42b650
mov esi, dword [ebp - 0x238]
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x1f0], 6
jb 0x42b6af
mov ax, word [ebp - 0x264]
cmp ax, 9
jne 0x42b699
push str.__64_bit
jmp 0x42b6a3
test ax, ax
jne 0x42b6af
push str.__32_bit
mov edx, 0x100
mov ecx, esi
call fcn.0042a350
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005af765
mov esp, ebp
pop ebp
ret 4