Function at 0x140013890
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x140027040]
xor rax, rsp
mov qword [rbp + 0x130], rax
mov rbx, rcx
lea rdi, [rsp + 0x38]
xor eax, eax
lea r14, [0x14003f1f0]
mov ecx, 0x30
xor r15d, r15d
rep stosb byte [rdi], al
lea rdi, [rsp + 0x70]
mov ecx, 0x11c
rep stosb byte [rdi], al
mov rcx, r14
mov dword [rsp + 0x70], 0x11c
cmp dword [rcx], 0x1a
je 0x14001392b
inc eax
add rcx, 0x30
cmp eax, 0x1f
jb 0x1400138f1
xor eax, eax
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.1400160d0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
cdqe
lea rcx, [rax + rax*2]
add rcx, rcx
cmp byte [r14 + rcx*8 + 0x24], r15b
je 0x140013901
mov eax, r15d
mov rcx, r14
cmp dword [rcx], 0x1a
je 0x140013a8e
inc eax
add rcx, 0x30
cmp eax, 0x1f
jb 0x140013941
mov rax, r15
lea rcx, [rsp + 0x70]
call rax
mov eax, r15d
mov rcx, r14
cmp dword [rcx], 4
je 0x140013aac
inc eax
add rcx, 0x30
cmp eax, 0x1f
jb 0x140013965
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [rbp - 0x80], 2
jne 0x140013901
cmp dword [rsp + 0x74], 4
jbe 0x140013901
mov edi, 0x104
mov qword [rsp + 0x268], rsi
lea r8, str.Microsoft
mov edx, edi
sub r8, rbx
mov rcx, rbx
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x1400139e3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x1400139e3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400139c0
test rdx, rdx
lea rax, [rcx - 2]
mov esi, 0x7ffffffe
cmovne rax, rcx
cmp dword [rsp + 0x74], 0xa
mov word [rax], r15w
jne 0x140013c6e
cmp dword [rsp + 0x78], r15d
jne case.0x140013f9b.5
cmp byte [rbp + 0x8a], 1
mov rcx, rdi
mov rax, rbx
jne 0x140013b06
cmp word [rax], r15w
je 0x140013a30
add rax, 2
sub rcx, 1
jne 0x140013a20
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Windows_10
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013a60
jmp 0x140015351
cdqe
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], r15b
je 0x140013955
mov rax, qword [r14 + rax*8 + 0x28]
jmp 0x140013958
cdqe
lea rcx, [rax + rax*2]
add rcx, rcx
cmp byte [r14 + rcx*8 + 0x24], r15b
je 0x140013979
mov eax, r15d
mov rcx, r14
cmp dword [rcx], 4
je 0x140013ae5
inc eax
add rcx, 0x30
cmp eax, 0x1f
jb 0x140013ac6
mov rax, r15
lea rcx, [rsp + 0x38]
call rax
jmp 0x140013984
cdqe
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], r15b
je 0x140013ad6
mov rax, qword [r14 + rax*8 + 0x28]
lea rcx, [rsp + 0x38]
call rax
jmp 0x140013984
cmp dword [rsp + 0x7c], 0x4563
jbe 0x140013b7e
cmp word [rax], r15w
je 0x140013b20
add rax, 2
sub rcx, 1
jne 0x140013b10
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Windows_Server_20XX
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013b50
jmp 0x140015351
cmp dword [rsp + 0x7c], 0x3839
jbe 0x140013c00
cmp word [rax], r15w
je 0x140013b98
add rax, 2
sub rcx, 1
jne 0x140013b88
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Windows_Server_2019
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013bd0
jmp 0x140015351
cmp word [rax], r15w
je 0x140013c10
add rax, 2
sub rcx, 1
jne 0x140013c00
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Windows_Server_2016
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013c40
jmp 0x140015351
cmp dword [rsp + 0x74], 6
jne 0x140014822
cmp dword [rsp + 0x78], r15d
jne 0x140013d62
cmp byte [rbp + 0x8a], 1
mov rcx, rdi
mov rax, rbx
jne 0x140013cf6
cmp word [rax], r15w
je 0x140013ca3
add rax, 2
sub rcx, 1
jne 0x140013c93
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013d53
lea r9, str.Windows_Vista
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140013d53
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140013d53
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013cd3
jmp 0x140013d53
cmp word [rax], r15w
je 0x140013d06
add rax, 2
sub rcx, 1
jne 0x140013cf6
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013d53
lea r9, str.Windows_Server_2008
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140013d53
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140013d53
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013d32
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
cmp dword [rsp + 0x78], 1
jne 0x140013e50
cmp byte [rbp + 0x8a], 1
mov rcx, rdi
mov rax, rbx
jne 0x140013de3
nop dword [rax]
cmp word [rax], r15w
je 0x140013d90
add rax, 2
sub rcx, 1
jne 0x140013d80
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013e41
lea r9, str.Windows_7
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140013e41
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140013e41
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013dc0
jmp 0x140013e41
cmp word [rax], r15w
je 0x140013df3
add rax, 2
sub rcx, 1
jne 0x140013de3
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013e41
lea r9, str.Windows_Server_2008_R2
mov rax, rsi
sub r9, rcx
nop
test rax, rax
je 0x140013e41
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140013e41
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013e20
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
cmp dword [rsp + 0x78], 2
jne 0x140013f40
cmp byte [rbp + 0x8a], 1
mov rcx, rdi
mov rax, rbx
jne 0x140013ed3
nop word [rax + rax]
cmp word [rax], r15w
je 0x140013e80
add rax, 2
sub rcx, 1
jne 0x140013e70
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013f31
lea r9, str.Windows_8
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140013f31
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140013f31
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013eb0
jmp 0x140013f31
cmp word [rax], r15w
je 0x140013ee3
add rax, 2
sub rcx, 1
jne 0x140013ed3
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140013f40
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140013f31
lea r9, str.Windows_Server_2012
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140013f31
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140013f31
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140013f10
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov ecx, r15d
mov rax, r14
cmp dword [rax], 5
je 0x140013f9d
inc ecx
add rax, 0x30
cmp ecx, 0x1f
jb 0x140013f46
mov rax, r15
mov edx, dword [rsp + 0x78]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov ecx, dword [rsp + 0x74]
xor r8d, r8d
call rax
mov eax, dword [rsp + 0x30]
dec eax
cmp eax, 0x2f
ja case.0x140013f9b.5
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x15650]
mov ecx, dword [rdx + rax*4 + 0x15604]
add rcx, rdx
jmp rcx
movsxd rax, ecx
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], r15b
je 0x140013f56
mov rax, qword [r14 + rax*8 + 0x28]
jmp 0x140013f59
mov rcx, rdi
mov rax, rbx
nop dword [rax + rax]
cmp word [rax], r15w
je 0x140013fd0
add rax, 2
sub rcx, 1
jne 0x140013fc0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Ultimate_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014000
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014044
add rax, 2
sub rcx, 1
jne 0x140014034
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Professional
mov r8, rsi
sub rax, rcx
test r8, r8
je 0x140015351
movzx r9d, word [rax + rcx]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x140014074
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400140b8
add rax, 2
sub rcx, 1
jne 0x1400140a8
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Home_Premium_Edition
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400140f0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014134
add rax, 2
sub rcx, 1
jne 0x140014124
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Home_Basic_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014164
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400141a8
add rax, 2
sub rcx, 1
jne 0x140014198
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Enterprise_Edition
mov r8, rsi
sub rax, rcx
nop dword [rax + rax]
test r8, r8
je 0x140015351
movzx r9d, word [rax + rcx]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400141e0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014224
add rax, 2
sub rcx, 1
jne 0x140014214
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Business_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014254
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014298
add rax, 2
sub rcx, 1
jne 0x140014288
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Starter_Edition
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400142d0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014314
add rax, 2
sub rcx, 1
jne 0x140014304
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Cluster_Server_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014344
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014388
add rax, 2
sub rcx, 1
jne 0x140014378
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_Edition
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400143c0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014404
add rax, 2
sub rcx, 1
jne 0x1400143f4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_Edition__core_installation_
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014434
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014478
add rax, 2
sub rcx, 1
jne 0x140014468
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Enterprise_Edition
mov r8, rsi
sub rax, rcx
nop dword [rax + rax]
test r8, r8
je 0x140015351
movzx r9d, word [rcx + rax]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400144b0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400144f4
add rax, 2
sub rcx, 1
jne 0x1400144e4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Enterprise_Edition__core_installation_
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014524
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014568
add rax, 2
sub rcx, 1
jne 0x140014558
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Enterprise_Edition_for_Itanium_based_Systems
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400145a0
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400145e4
add rax, 2
sub rcx, 1
jne 0x1400145d4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Small_Business_Server
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014614
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014658
add rax, 2
sub rcx, 1
jne 0x140014648
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Small_Business_Server_Premium_Edition
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014690
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400146d4
add rax, 2
sub rcx, 1
jne 0x1400146c4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Standard_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014704
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014748
add rax, 2
sub rcx, 1
jne 0x140014738
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Standard_Edition__core_installation_
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014780
jmp 0x140015351
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400147c4
add rax, 2
sub rcx, 1
jne 0x1400147b4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Web_Server_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400147f4
jmp 0x140015351
cmp dword [rsp + 0x74], 5
jne case.0x140013f9b.5
mov eax, dword [rsp + 0x78]
cmp eax, 2
jne 0x140014fa0
lea ecx, [rax + 0x57]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x1400148be
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x140014860
add rax, 2
sub rcx, 1
jne 0x140014850
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140014ab8
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140014aa9
lea r9, str.Windows_Server_2003_R2_
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140014aa9
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140014aa9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014890
jmp 0x140014aa9
mov eax, 0x2000
test word [rbp + 0x88], ax
je 0x140014940
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400148e2
add rax, 2
sub rcx, 1
jne 0x1400148d2
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140014ab8
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140014aa9
lea r9, str.Windows_Storage_Server_2003
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140014aa9
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140014aa9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014912
jmp 0x140014aa9
mov eax, 0x8000
test word [rbp + 0x88], ax
je 0x1400149c2
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014964
add rax, 2
sub rcx, 1
jne 0x140014954
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140014ab8
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140014aa9
lea r9, str.Windows_Home_Server
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140014aa9
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140014aa9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014994
jmp 0x140014aa9
cmp byte [rbp + 0x8a], 1
jne 0x140014a47
cmp word [rsp + 0x38], 9
jne 0x140014a47
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x1400149f0
add rax, 2
sub rcx, 1
jne 0x1400149e0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140014aa9
lea r9, str.Windows_XP_Professional_x64_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140014aa9
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140014aa9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014a20
jmp 0x140014aa9
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x140014a60
add rax, 2
sub rcx, 1
jne 0x140014a50
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140014ab8
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140014aa9
lea r9, str.Windows_Server_2003_
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140014aa9
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140014aa9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014a88
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
cmp byte [rbp + 0x8a], 1
je case.0x140013f9b.5
cmp word [rsp + 0x38], 6
jne 0x140014bce
movzx eax, byte [rbp + 0x88]
test al, al
jns 0x140014b50
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x140014af2
add rax, 2
sub rcx, 1
jne 0x140014ae2
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_Edition_for_Itanium_based_Systems
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014b22
jmp 0x140015351
test al, 2
je case.0x140013f9b.5
mov rcx, rdi
mov rax, rbx
nop
cmp word [rax], r15w
je 0x140014b70
add rax, 2
sub rcx, 1
jne 0x140014b60
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Enterprise_Edition_for_Itanium_based_Systems
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014ba0
jmp 0x140015351
cmp word [rsp + 0x38], 9
mov rcx, rdi
jne 0x140014d41
movzx eax, byte [rbp + 0x88]
test al, al
jns 0x140014c5e
mov rax, rbx
nop dword [rax + rax]
cmp word [rax], r15w
je 0x140014c00
add rax, 2
sub rcx, 1
jne 0x140014bf0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_x64_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014c30
jmp 0x140015351
test al, 2
mov rax, rbx
je 0x140014cd3
cmp word [rax], r15w
je 0x140014c75
add rax, 2
sub rcx, 1
jne 0x140014c65
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Enterprise_x64_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014ca5
jmp 0x140015351
cmp word [rax], r15w
je 0x140014ce3
add rax, 2
sub rcx, 1
jne 0x140014cd3
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Standard_x64_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014d13
jmp 0x140015351
mov eax, 0x4000
test word [rbp + 0x88], ax
je 0x140014dc0
mov rax, rbx
cmp word [rax], r15w
je 0x140014d62
add rax, 2
sub rcx, 1
jne 0x140014d52
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Compute_Cluster_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014d92
jmp 0x140015351
movzx eax, word [rbp + 0x88]
test al, al
jns 0x140014e3e
mov rax, rbx
nop
cmp word [rax], r15w
je 0x140014de0
add rax, 2
sub rcx, 1
jne 0x140014dd0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014e10
jmp 0x140015351
test al, 2
je 0x140014eb3
mov rax, rbx
cmp word [rax], r15w
je 0x140014e55
add rax, 2
sub rcx, 1
jne 0x140014e45
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Enterprise_Edition
mov r8, rsi
sub rax, rcx
test r8, r8
je 0x140015351
movzx r9d, word [rax + rcx]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x140014e85
jmp 0x140015351
mov eax, 0x400
test word [rbp + 0x88], ax
mov rax, rbx
je 0x140014f32
cmp word [rax], r15w
je 0x140014ed4
add rax, 2
sub rcx, 1
jne 0x140014ec4
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Web_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014f04
jmp 0x140015351
cmp word [rax], r15w
je 0x140014f42
add rax, 2
sub rcx, 1
jne 0x140014f32
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Standard_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014f72
jmp 0x140015351
cmp eax, 1
jne 0x14001510e
mov rcx, rdi
mov rax, rbx
nop
cmp word [rax], r15w
je 0x140014fc0
add rax, 2
sub rcx, 1
jne 0x140014fb0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015018
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015009
lea r9, str.Windows_XP
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015009
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015009
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140014fe8
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov eax, 0x200
mov rcx, rdi
test word [rbp + 0x88], ax
mov rax, rbx
je 0x1400150a0
nop dword [rax]
cmp word [rax], r15w
je 0x140015040
add rax, 2
sub rcx, 1
jne 0x140015030
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Home_Edition
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140015070
jmp 0x140015351
cmp word [rax], r15w
je 0x1400150b0
add rax, 2
sub rcx, 1
jne 0x1400150a0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Professional
mov r8, rsi
sub rax, rcx
test r8, r8
je 0x140015351
movzx r9d, word [rcx + rax]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400150e0
jmp 0x140015351
test eax, eax
jne case.0x140013f9b.5
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x140015130
add rax, 2
sub rcx, 1
jne 0x140015120
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015188
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015179
lea r9, str.Windows_2000
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015179
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015179
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140015158
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
cmp byte [rbp + 0x8a], 1
mov rcx, rdi
jne 0x140015205
mov rax, rbx
cmp word [rax], r15w
je 0x1400151a7
add rax, 2
sub rcx, 1
jne 0x140015197
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea rax, str.Professional
mov r8, rsi
sub rax, rcx
test r8, r8
je 0x140015351
movzx r9d, word [rcx + rax]
test r9w, r9w
je 0x140015351
mov word [rcx], r9w
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400151d7
jmp 0x140015351
movzx eax, byte [rbp + 0x88]
test al, al
jns 0x140015281
mov rax, rbx
cmp word [rax], r15w
je 0x140015223
add rax, 2
sub rcx, 1
jne 0x140015213
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Datacenter_Server
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015351
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140015253
jmp 0x140015351
test al, 2
mov rax, rbx
je 0x1400152f7
cmp word [rax], r15w
je 0x140015298
add rax, 2
sub rcx, 1
jne 0x140015288
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Advanced_Server
mov rax, rsi
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400152d0
jmp 0x140015351
cmp word [rax], r15w
je 0x140015307
add rax, 2
sub rcx, 1
jne 0x1400152f7
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je case.0x140013f9b.5
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015351
lea r9, str.Server
mov rax, rsi
sub r9, rcx
nop
test rax, rax
je 0x140015351
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015351
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140015330
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov rcx, rdi
lea rax, [rbp - 0x7c]
cmp word [rax], r15w
je 0x140015377
add rax, 2
sub rcx, 1
jne 0x140015367
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015475
test rax, rax
je 0x140015475
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x1400153b0
add rax, 2
sub rcx, 1
jne 0x1400153a0
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015408
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x1400153f9
lea r9, [0x140021138]
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x1400153f9
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x1400153f9
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400153d8
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov rcx, rdi
mov rax, rbx
nop
cmp word [rax], r15w
je 0x140015420
add rax, 2
sub rcx, 1
jne 0x140015410
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015475
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x140015466
lea r9, [rbp - 0x7c]
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x140015466
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140015466
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x140015445
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov r9d, dword [rsp + 0x7c]
lea r8, str.__build__u_
mov edx, 0x50
lea rcx, [rbp + 0x90]
call fcn.140013230
mov rcx, rdi
mov rax, rbx
cmp word [rax], r15w
je 0x1400154a8
add rax, 2
sub rcx, 1
jne 0x140015498
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x140015500
mov rdx, rdi
lea rcx, [rbx + rax*2]
sub rdx, rax
je 0x1400154f1
lea r9, [rbp + 0x90]
mov rax, rsi
sub r9, rcx
test rax, rax
je 0x1400154f1
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x1400154f1
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400154d0
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
cmp dword [rsp + 0x74], 6
jb 0x1400155ef
movzx eax, word [rsp + 0x38]
cmp ax, 9
jne 0x140015580
mov rcx, rdi
mov rax, rbx
nop dword [rax]
cmp word [rax], r15w
je 0x140015530
add rax, 2
sub rcx, 1
jne 0x140015520
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x1400155ef
lea rcx, [rbx + rax*2]
sub rdi, rax
je 0x1400155e0
lea rdx, str._64_bit
sub rdx, rcx
nop word [rax + rax]
test rsi, rsi
je 0x1400155e0
movzx eax, word [rdx + rcx]
test ax, ax
je 0x1400155e0
mov word [rcx], ax
dec rsi
add rcx, 2
sub rdi, 1
jne 0x140015560
jmp 0x1400155e0
test ax, ax
jne 0x1400155ef
mov rcx, rdi
mov rax, rbx
nop dword [rax + rax]
cmp word [rax], r15w
je 0x1400155a0
add rax, 2
sub rcx, 1
jne 0x140015590
mov rax, rdi
sub rax, rcx
test rcx, rcx
cmove rax, r15
je 0x1400155ef
lea rcx, [rbx + rax*2]
sub rdi, rax
je 0x1400155e0
lea rdx, str._32_bit
sub rdx, rcx
test rsi, rsi
je 0x1400155e0
movzx eax, word [rdx + rcx]
test ax, ax
je 0x1400155e0
mov word [rcx], ax
dec rsi
add rcx, 2
sub rdi, 1
jne 0x1400155c2
test rdi, rdi
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov rsi, qword [rsp + 0x268]
mov eax, 1
jmp 0x140013903