Function at 0x429a90
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e1f03
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x660ff8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x1f0]
push pe_nt_image_headers32
xorps xmm0, xmm0
mov dword [ebp - 0x238], esi
push 0
push eax
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x244], 0
movups xmmword [ebp - 0x254], xmm0
call fcn.005b4d50
add esp, 0xc
mov dword [ebp - 0x1f4], 0x11c
lea eax, [ebp - 0x1f4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x42acaf
cmp dword [ebp - 0x1f0], 6
jb 0x429b72
lea eax, [ebp - 0x220]
push eax
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x22c]
call fcn.00427770
add esp, 4
test al, al
je 0x429b72
mov ecx, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x1f0], ecx
jne 0x429b5a
cmp dword [ebp - 0x1ec], eax
je 0x429b72
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1e8], eax
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x429b98
lea ecx, [ebp - 0x264]
push ecx
call eax
jmp 0x429ba5
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x1e4], 2
jne 0x42acaf
cmp dword [ebp - 0x1f0], 4
jbe 0x42acaf
mov edi, str.Microsoft
mov edx, 0x100
mov ecx, esi
sub edi, esi
nop dword [eax]
lea eax, [edx + 0x7ffffefe]
test eax, eax
je 0x429bee
movzx eax, word [edi + ecx]
test ax, ax
je 0x429bee
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x429bd0
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
mov ax, word [ebp - 0x264]
cmp ax, 6
jne 0x429c96
push ecx
push 0x11660
lea ecx, [ebp - 0xd8]
call fcn.0041dbf0
mov dword [ebp - 4], 0
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
mov dword [ebp - method.srl::Value.virtual_0], vtable.srl::Value.0
call fcn.0041de20
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116c0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 2
call fcn.0041dbf0
mov byte [ebp - 4], 3
jmp 0x429d16
cmp ax, 9
jne 0x429d37
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11660
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 4
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 5
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116c1
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 6
call fcn.0041dbf0
mov byte [ebp - 4], 7
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1f0], 0xa
mov byte [ebp - 0x226], 0
mov byte [ebp - 0x225], 0
mov byte [ebp - 0x227], 0
jne 0x429dff
cmp dword [ebp - 0x1e8], 0x55f0
mov edx, 0x100
mov ecx, esi
jb 0x429da6
push str.Windows_11
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x117a4
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 8
call fcn.0041dbf0
mov byte [ebp - 4], 9
jmp 0x429dde
push str.Windows_10
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1175c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xa
call fcn.0041dbf0
mov byte [ebp - 4], 0xb
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1f0], 6
jne case.0x42a1c2.5
cmp dword [ebp - 0x1ec], 0
jne 0x429edd
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x429e84
push str.Windows_Vista
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11653
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xc
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xd
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov byte [ebp - 0x226], 1
jmp 0x429ed6
push str.Windows_Server_2008
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11729
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xe
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xf
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 1
jne 0x429fae
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x429f55
push str.Windows_7
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x116b6
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x10
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x11
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov byte [ebp - 0x225], 1
jmp 0x429fa7
push str.Windows_Server_2008_R2
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1172a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x12
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x13
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 2
jne 0x42a0cb
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42a072
push str.Windows_8
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x14
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x15
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x16
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x17
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov byte [ebp - 0x227], 1
jmp 0x42a0c4
push str.Windows_Server_2012
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173d
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x18
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x19
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ec], 3
jne 0x42a17b
cmp byte [ebp - 0xda], 1
mov edx, 0x100
mov ecx, esi
jne 0x42a122
push str.Windows_8.1
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1174e
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1a
call fcn.0041dbf0
mov byte [ebp - 4], 0x1b
jmp 0x42a15a
push str.Windows_Server_2012_R2
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1174f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1c
call fcn.0041dbf0
mov byte [ebp - 4], 0x1d
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
push str.GetProductInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x234]
push ecx
push 0
push 0
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
call eax
mov eax, dword [ebp - 0x234]
dec eax
cmp eax, 0x2f
ja case.0x42a1c2.5
movzx eax, byte [eax + 0x42ad20]
jmp dword [eax*4 + 0x42acd4]
push str.Professional_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x225], 0
je 0x42a237
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11738
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x1e
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x1f
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x227], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11746
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x20
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x21
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 0
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x22
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x23
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Ultimate_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x226], 0
je 0x42a34e
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166b
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x24
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x25
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x225], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11735
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x26
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x27
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Home_Premium_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x226], 0
je 0x42a41d
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x28
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x29
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x225], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11739
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2a
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2b
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Home_Basic_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x226], 0
je 0x42a4ec
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11669
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2c
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2d
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x225], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173a
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x2e
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2f
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Enterprise_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x226], 0
je 0x42a5bb
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11668
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x30
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x31
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x225], 0
je 0x42a618
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11737
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x32
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x33
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
cmp byte [ebp - 0x227], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11747
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x34
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x35
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 0
push 0
push 0x11745
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x36
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x37
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Business_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x226], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11667
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x38
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x39
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Starter_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp byte [ebp - 0x225], 0
je case.0x42a1c2.5
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1173b
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3a
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3b
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
jmp case.0x42a1c2.5
push str.Cluster_Server_Edition
jmp 0x42a7ed
push str.Datacenter_Edition
jmp 0x42a7ed
push str.Datacenter_Edition__core_installation_
jmp 0x42a7ed
push str.Enterprise_Edition
jmp 0x42a7ed
push str.Enterprise_Edition__core_installation_
jmp 0x42a7ed
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x42a7ed
push str.Small_Business_Server
jmp 0x42a7ed
push str.Small_Business_Server_Premium_Edition
jmp 0x42a7ed
push str.Standard_Edition
jmp 0x42a7ed
push str.Standard_Edition__core_installation_
jmp 0x42a7ed
push str.Web_Server_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp dword [ebp - 0x1f0], 5
jne 0x42abae
mov eax, dword [ebp - 0x1ec]
cmp eax, 2
jne 0x42aa70
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x42a865
push str.Windows_Server_2003_R2_
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3c
call fcn.0041dbf0
mov byte [ebp - 4], 0x3d
jmp 0x42a99a
mov eax, dword [ebp - 0xdc]
mov ecx, 0x2000
cmp ax, cx
jne 0x42a8b9
push str.Windows_Storage_Server_2003
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x3e
call fcn.0041dbf0
mov byte [ebp - 4], 0x3f
jmp 0x42a99a
mov ecx, 0x8000
cmp ax, cx
jne 0x42a907
push str.Windows_Home_Server
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x11744
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x40
call fcn.0041dbf0
mov byte [ebp - 4], 0x41
jmp 0x42a99a
cmp byte [ebp - 0xda], 1
jne 0x42a95b
cmp word [ebp - 0x264], 9
jne 0x42a95b
push str.Windows_XP_Professional_x64_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x42
call fcn.0041dbf0
mov byte [ebp - 4], 0x43
jmp 0x42a99a
push str.Windows_Server_2003_
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1165f
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x44
call fcn.0041dbf0
mov byte [ebp - 4], 0x45
push 0
lea ecx, [ebp - 0x224]
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xda], 1
je 0x42aa5d
mov ax, word [ebp - 0x264]
cmp ax, 6
jne 0x42a9f1
mov eax, dword [ebp - 0xdc]
test al, al
jns 0x42a9e6
push str.Datacenter_Edition_for_Itanium_based_Systems
jmp 0x42aa51
test al, 2
je 0x42aa5d
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x42aa51
cmp ax, 9
mov eax, dword [ebp - 0xdc]
jne 0x42aa1a
test al, al
jns 0x42aa09
mov eax, str.Datacenter_x64_Edition
push eax
jmp 0x42aa51
test al, 2
mov eax, str.Enterprise_x64_Edition
jne 0x42aa17
mov eax, str.Standard_x64_Edition
push eax
jmp 0x42aa51
test eax, 0x4000
je 0x42aa28
push str.Compute_Cluster_Edition
jmp 0x42aa51
test al, al
jns 0x42aa33
push str.Datacenter_Edition
jmp 0x42aa51
test al, 2
je 0x42aa3e
push str.Enterprise_Edition
jmp 0x42aa51
test eax, 0x400
je 0x42aa4c
push str.Web_Edition
jmp 0x42aa51
push str.Standard_Edition
mov edx, 0x100
mov ecx, esi
call fcn.00429950
cmp dword [ebp - 0x1f0], 5
jne 0x42abae
mov eax, dword [ebp - 0x1ec]
cmp eax, 1
jne 0x42ab10
push str.Windows_XP
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x220], 1
push 0
push 0x1166c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x46
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x47
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0xd8]
call fcn.0041de20
mov dword [ebp - 4], 0xffffffff
mov ecx, str.Home_Edition
test dword [ebp - 0xdc], 0x200
mov eax, str.Professional
mov edx, 0x100
cmovne eax, ecx
mov ecx, esi
push eax
call fcn.00429950
cmp dword [ebp - 0x1f0], 5
jne 0x42abae
mov eax, dword [ebp - 0x1ec]
test eax, eax
jne 0x42abae
push str.Windows_2000
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov dword [ebp - method.srl::Exists.virtual_0], vtable.srl::Exists.0
mov byte [ebp - 0x23c], 1
push 0
push 0x1165e
lea ecx, [ebp - 0x21c]
mov dword [ebp - 4], 0x48
call fcn.0041dbf0
push 0
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x49
push ecx
push eax
call fcn.004448b0
lea ecx, [ebp - 0x21c]
call fcn.0041de20
cmp byte [ebp - 0xda], 1
jne 0x42ab81
push str.Professional
jmp 0x42aba2
mov eax, dword [ebp - 0xdc]
test al, al
jns 0x42ab92
push str.Datacenter_Server
jmp 0x42aba2
test al, 2
je 0x42ab9d
push str.Advanced_Server
jmp 0x42aba2
push str.Server
mov edx, 0x100
mov ecx, esi
call fcn.00429950
lea ecx, [ebp - 0x1e0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42abb7
sub ecx, edx
sar ecx, 1
je 0x42abec
push 0x62bf00
mov edx, 0x100
mov ecx, esi
call fcn.00429950
lea eax, [ebp - 0x1e0]
mov edx, 0x100
push eax
mov ecx, esi
call fcn.00429950
push dword [ebp - 0x1e8]
lea eax, [ebp - 0xb0]
push str.__build__d_
push 0x50
push eax
call fcn.004299c0
add esp, 0x10
mov ecx, 0x100
mov eax, esi
nop
cmp word [eax], 0
je 0x42ac1e
add eax, 2
sub ecx, 1
jne 0x42ac10
mov eax, 0x100
mov edi, ecx
sub eax, ecx
neg edi
sbb edi, edi
and edi, eax
test ecx, ecx
je 0x42ac7c
mov edx, 0x100
lea ecx, [esi + edi*2]
sub edx, edi
je 0x42ac6f
lea esi, [ebp - 0xb0]
mov eax, SysReAllocString
sub esi, ecx
nop word [eax + eax]
test eax, eax
je 0x42ac69
movzx edi, word [esi + ecx]
test di, di
je 0x42ac69
mov word [ecx], di
dec eax
add ecx, 2
sub edx, 1
jne 0x42ac50
mov esi, dword [ebp - 0x238]
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x1f0], 6
jb 0x42acaf
mov ax, word [ebp - 0x264]
cmp ax, 9
jne 0x42ac99
push str.__64_bit
jmp 0x42aca3
test ax, ax
jne 0x42acaf
push str.__32_bit
mov edx, 0x100
mov ecx, esi
call fcn.00429950
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b0d47
mov esp, ebp
pop ebp
ret 4