Function at 0x14001d340
Capabilities:
Get hostname
Inspect section memory permissions
Resolve dns

Disassembly:
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0xb20]
sub rsp, 0xc20
mov rax, qword [0x14021b0e0]
xor rax, rsp
mov qword [rbp + 0xb10], rax
mov rdi, rcx
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x160
call fcn.14014a5c0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x20]
call fcn.14001b080
lea rcx, [rbp + 0x100]
test eax, eax
je 0x14001e99d
lea rdx, [0x1401e9c5c]
call fcn.14001eb00
cmp dword [rbp - 0x2c], 5
lea r8, str.OS:
mov edx, 0x800
lea rcx, [rbp + 0x100]
jne 0x14001d3c5
call fcn.140150800
jmp 0x14001d3ca
call fcn.140150860
mov ecx, dword [rbp - 0x2c]
sub ecx, 1
je 0x14001e0d7
sub ecx, 1
je 0x14001e0ce
sub ecx, 1
je 0x14001df22
sub ecx, 1
je 0x14001d447
cmp ecx, 1
je 0x14001d411
lea rdx, str.Unknown_OS
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
mov eax, dword [rbp - 0x38]
cmp eax, 7
jb 0x14001d425
lea r8, str.Windows_Embedded_Compact
jmp 0x14001e0de
cmp eax, 4
jne 0x14001d43b
cmp dword [rbp - 0x34], 0
lea r8, str.Windows_CE_.NET
ja 0x14001e0de
lea r8, str.Windows_CE
jmp 0x14001e0de
mov ecx, dword [rbp - 0x38]
cmp ecx, 4
ja 0x14001d546
lea r8, str.Windows_NT
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov ecx, dword [rbp - 0x2c]
mov edx, dword [rbp + 0x70]
mov eax, dword [rbp - 0x38]
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001d48f
cmp edx, 1
jne 0x14001d48f
lea r8, str.__Workstation_
jmp 0x14001d4e9
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001d4aa
cmp edx, 2
jne 0x14001d4aa
lea r8, str.__Server_
jmp 0x14001d4e9
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001d4ca
cmp edx, 3
jne 0x14001d4ca
test byte [rbp + 0x60], cl
je 0x14001d4ca
lea r8, str.__Primary_Domain_Controller_
jmp 0x14001d4e9
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001d500
cmp edx, 3
jne 0x14001d500
test byte [rbp + 0x60], 8
je 0x14001d500
lea r8, str.__Backup_Domain_Controller_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp - 0x38]
mov ecx, dword [rbp - 0x2c]
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001d51f
test byte [rbp + 0x60], 0x20
je 0x14001d51f
lea r8, str.___Datacenter_
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0ef
cmp eax, ecx
ja 0x14001e0ef
test byte [rbp + 0x60], 2
je 0x14001e0ef
lea r8, str.___Enterprise_
jmp 0x14001e0de
mov edx, dword [rbp - 0x34]
cmp ecx, 5
jne 0x14001d7ee
test edx, edx
jne 0x14001d60b
test byte [rbp + 0x64], 0x80
je 0x14001d569
lea r8, str.Windows_2000__Professional_
jmp 0x14001d58f
mov eax, dword [rbp + 0x70]
cmp eax, 2
jne 0x14001d57a
lea r8, str.Windows_2000_Server
jmp 0x14001d58f
cmp eax, 3
lea r8, str.Windows_2000__Domain_Controller_
lea rcx, str.Windows_2000
cmovne r8, rcx
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov edx, dword [rbp - 0x2c]
mov r8d, dword [rbp + 0x60]
mov ecx, dword [rbp - 0x34]
mov eax, dword [rbp - 0x38]
cmp edx, 4
jne 0x14001e0ef
cmp eax, 5
jne 0x14001d5d1
test ecx, ecx
jne 0x14001d5d1
test r8b, 0x20
je 0x14001d5d1
lea r8, str.___Datacenter_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 5
jne 0x14001e0ef
test ecx, ecx
jne 0x14001e0ef
cmp dword [rbp + 0x70], 2
jne 0x14001e0ef
test r8b, 2
je 0x14001e0ef
lea r8, str.___Advanced_Server_
jmp 0x14001e0de
cmp ecx, 5
jne 0x14001d7ee
test edx, edx
je 0x14001d7ee
mov eax, dword [rbp + 0x60]
bt eax, 0x10
jae 0x14001d62e
lea r8, str.Windows_XP__Starter_Edition_
jmp 0x14001d6a2
test al, 0x40
je 0x14001d63b
lea r8, str.Windows_XP__Personal_
jmp 0x14001d6a2
test byte [rbp + 0x64], 0x80
je 0x14001d64a
lea r8, str.Windows_XP__Professional_
jmp 0x14001d6a2
mov ecx, dword [rbp + 0x70]
cmp ecx, 2
jne 0x14001d661
bt eax, 0x11
jb 0x14001d661
lea r8, str.Windows_Server_2003
jmp 0x14001d6a2
cmp ecx, 3
jne 0x14001d675
bt eax, 0x11
jb 0x14001d675
lea r8, str.Windows_Server_2003__Domain_Controller_
jmp 0x14001d6a2
cmp ecx, 2
jne 0x14001d689
bt eax, 0x11
jae 0x14001d689
lea r8, str.Windows_Server_2003_R2
jmp 0x14001d6a2
cmp ecx, 3
jne 0x14001d69b
lea r8, str.Windows_Server_2003_R2__Domain_Controller_
bt eax, 0x11
jb 0x14001d6a2
lea r8, str.Windows_XP
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp - 0x2c]
mov eax, dword [rbp + 0x60]
mov edx, dword [rbp - 0x34]
mov ecx, dword [rbp - 0x38]
cmp r8d, 4
jne 0x14001d6fe
cmp ecx, 5
jne 0x14001d6d9
test edx, edx
je 0x14001d6d9
test al, 0x20
je 0x14001d6d9
bt eax, 0x11
jae 0x14001d6f2
cmp r8d, 4
jne 0x14001d6fe
cmp ecx, 5
jne 0x14001d6fe
test edx, edx
je 0x14001d6fe
test al, 0x20
je 0x14001d6fe
bt eax, 0x11
jae 0x14001d6fe
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
mov r9d, dword [rbp + 0x70]
cmp r8d, 4
jne 0x14001d790
cmp ecx, 5
jne 0x14001d726
test edx, edx
je 0x14001d726
cmp r9d, 2
jne 0x14001d726
bt eax, 0x11
jb 0x14001d726
test r9b, al
jne 0x14001d746
cmp r8d, 4
jne 0x14001d790
cmp ecx, 5
jne 0x14001d752
test edx, edx
je 0x14001d752
cmp r9d, 2
jne 0x14001d752
bt eax, 0x11
jb 0x14001d752
test r9b, al
je 0x14001d752
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
cmp r8d, 4
jne 0x14001d790
cmp ecx, 5
jne 0x14001d76b
test edx, edx
je 0x14001d76b
test al, al
jns 0x14001d76b
bt eax, 0x11
jae 0x14001d784
cmp r8d, 4
jne 0x14001d790
cmp ecx, 5
jne 0x14001d790
test edx, edx
je 0x14001d790
test al, al
jns 0x14001d790
bt eax, 0x11
jae 0x14001d790
lea r8, str.___Web_Edition_
jmp 0x14001e0de
mov r9d, dword [rbp + 0x64]
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 5
jne 0x14001d7b3
test edx, edx
je 0x14001d7b3
test r9b, 0x20
je 0x14001d7b3
bt eax, 0x11
jae 0x14001d7e2
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 5
jne 0x14001e0ef
test edx, edx
je 0x14001e0ef
test r9b, 0x20
je 0x14001e0ef
bt eax, 0x11
jae 0x14001e0ef
lea r8, str.___Standard_Edition_
jmp 0x14001e0de
cmp ecx, 6
jne 0x14001dd3a
test edx, edx
jne 0x14001d93f
mov eax, dword [rbp + 0x60]
bt eax, 0x10
jae 0x14001d811
lea r8, str.Windows_Vista__Starter_Edition_
jmp 0x14001d880
bt eax, 0x18
jae 0x14001d820
lea r8, str.Windows_Vista__Home_Basic_
jmp 0x14001d880
bt eax, 0x19
jae 0x14001d82f
lea r8, str.Windows_Vista__Home_Premium_
jmp 0x14001d880
bt eax, 0x1b
jae 0x14001d83e
lea r8, str.Windows_Vista__Business_
jmp 0x14001d880
test al, 2
je 0x14001d84b
lea r8, str.Windows_Vista__Enterprise_
jmp 0x14001d880
bt eax, 0x16
jae 0x14001d85a
lea r8, str.Windows_Vista__Ultimate_
jmp 0x14001d880
mov eax, dword [rbp + 0x70]
cmp eax, 2
jne 0x14001d86b
lea r8, str.Windows_Server_2008
jmp 0x14001d880
cmp eax, 3
lea r8, str.Windows_Server_2008__Domain_Controller_
lea rcx, str.Windows_Vista
cmovne r8, rcx
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov edx, dword [rbp - 0x2c]
mov r8d, dword [rbp + 0x60]
mov ecx, dword [rbp - 0x34]
mov eax, dword [rbp - 0x38]
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001d8c2
test ecx, ecx
jne 0x14001d8c2
test r8b, 0x20
je 0x14001d8c2
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001d8ec
test ecx, ecx
jne 0x14001d8ec
cmp dword [rbp + 0x70], 2
jne 0x14001d8ec
test r8b, 2
je 0x14001d8ec
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001d90f
test ecx, ecx
jne 0x14001d90f
test r8b, r8b
jns 0x14001d90f
lea r8, str.___Web_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001e0ef
test ecx, ecx
jne 0x14001e0ef
test byte [rbp + 0x64], 0x20
je 0x14001e0ef
lea r8, str.___Standard_Edition_
jmp 0x14001e0de
cmp ecx, 6
jne 0x14001dd3a
cmp edx, 1
jne 0x14001da8e
mov ecx, dword [rbp + 0x64]
bt ecx, 0x11
jae 0x14001d963
lea r8, str.Windows_7_Thin_PC
jmp 0x14001d9e2
mov eax, dword [rbp + 0x60]
bt eax, 0x10
jae 0x14001d975
lea r8, str.Windows_7__Starter_Edition_
jmp 0x14001d9e2
bt eax, 0x18
jae 0x14001d984
lea r8, str.Windows_7__Home_Basic_
jmp 0x14001d9e2
bt eax, 0x19
jae 0x14001d993
lea r8, str.Windows_7__Home_Premium_
jmp 0x14001d9e2
test cl, cl
jns 0x14001d9a0
lea r8, str.Windows_7__Professional_
jmp 0x14001d9e2
test al, 2
je 0x14001d9ad
lea r8, str.Windows_7__Enterprise_
jmp 0x14001d9e2
bt eax, 0x16
jae 0x14001d9bc
lea r8, str.Windows_7__Ultimate_
jmp 0x14001d9e2
mov eax, dword [rbp + 0x70]
cmp eax, 2
jne 0x14001d9cd
lea r8, str.Windows_Server_2008_R2
jmp 0x14001d9e2
cmp eax, 3
lea r8, str.Windows_Server_2008_R2__Domain_Controller_
lea rcx, str.Windows_7
cmovne r8, rcx
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov edx, dword [rbp - 0x2c]
mov r8d, dword [rbp + 0x60]
mov ecx, dword [rbp - 0x34]
mov eax, dword [rbp - 0x38]
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001da25
cmp ecx, 1
jne 0x14001da25
test r8b, 0x20
je 0x14001da25
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001da50
cmp ecx, 1
jne 0x14001da50
cmp dword [rbp + 0x70], 2
jne 0x14001da50
test r8b, 2
je 0x14001da50
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001da74
cmp ecx, 1
jne 0x14001da74
test r8b, r8b
jns 0x14001da74
lea r8, str.___Web_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001e0ef
cmp ecx, 1
jmp 0x14001d923
cmp ecx, 6
jne 0x14001dd3a
cmp edx, 2
jne 0x14001dbc3
mov edx, dword [rbp + 0x64]
bt edx, 0x11
jae 0x14001dab2
lea r8, str.Windows_8_Thin_PC
jmp 0x14001db19
mov eax, dword [rbp + 0x70]
cmp eax, 1
jne 0x14001dac9
cmp dword [rbp - 0x28], 9
jne 0x14001dac9
lea r8, str.Windows_8_RT
jmp 0x14001db19
mov ecx, dword [rbp + 0x60]
bt ecx, 0x10
jae 0x14001dadb
lea r8, str.Windows_8__Starter_Edition_
jmp 0x14001db19
test dl, dl
jns 0x14001dae8
lea r8, str.Windows_8__Pro_
jmp 0x14001db19
test cl, 2
je 0x14001daf6
lea r8, str.Windows_8__Enterprise_
jmp 0x14001db19
cmp eax, 2
jne 0x14001db04
lea r8, str.Windows_Server_2012
jmp 0x14001db19
cmp eax, 3
lea r8, str.Windows_Server_2012__Domain_Controller_
lea rcx, str.Windows_8
cmovne r8, rcx
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov edx, dword [rbp - 0x2c]
mov r8d, dword [rbp + 0x60]
mov ecx, dword [rbp - 0x34]
mov eax, dword [rbp - 0x38]
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001db5c
cmp ecx, 2
jne 0x14001db5c
test r8b, 0x20
je 0x14001db5c
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001db85
cmp ecx, 2
jne 0x14001db85
cmp dword [rbp + 0x70], ecx
jne 0x14001db85
test cl, r8b
je 0x14001db85
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001dba9
cmp ecx, 2
jne 0x14001dba9
test r8b, r8b
jns 0x14001dba9
lea r8, str.___Web_Edition_
jmp 0x14001e0de
cmp edx, 4
jne 0x14001e0ef
cmp eax, 6
jne 0x14001e0ef
cmp ecx, 2
jmp 0x14001d923
cmp ecx, 6
jne 0x14001dd3a
cmp edx, 3
jne 0x14001dd37
mov ecx, dword [rbp + 0x64]
bt ecx, 0x11
jae 0x14001dbe7
lea r8, str.Windows_8.1_Thin_PC
jmp 0x14001dc39
mov eax, dword [rbp + 0x60]
bt eax, 0x10
jae 0x14001dbf9
lea r8, str.Windows_8.1__Starter_Edition_
jmp 0x14001dc39
test cl, cl
jns 0x14001dc06
lea r8, str.Windows_8.1__Pro_
jmp 0x14001dc39
test al, 2
je 0x14001dc13
lea r8, str.Windows_8.1__Enterprise_
jmp 0x14001dc39
mov eax, dword [rbp + 0x70]
cmp eax, 2
jne 0x14001dc24
lea r8, str.Windows_Server_2012_R2
jmp 0x14001dc39
cmp eax, 3
lea r8, str.Windows_Server_2012_R2__Domain_Controller_
lea rcx, str.Windows_8.1
cmovne r8, rcx
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x64]
bt eax, 0x17
jae 0x14001dc6e
lea r8, str.___with_Bing___CoreConnected_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x64]
bt eax, 0x16
jae 0x14001dc8f
lea r8, str.___Update_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x64]
mov r8d, dword [rbp - 0x2c]
mov r9d, dword [rbp + 0x60]
mov edx, dword [rbp - 0x34]
mov ecx, dword [rbp - 0x38]
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 6
jne 0x14001dcc3
cmp edx, 3
jne 0x14001dcc3
test r9b, 0x20
je 0x14001dcc3
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 6
jne 0x14001dcef
cmp edx, 3
jne 0x14001dcef
cmp dword [rbp + 0x70], 2
jne 0x14001dcef
test r9b, 2
je 0x14001dcef
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 6
jne 0x14001dd14
cmp edx, 3
jne 0x14001dd14
test r9b, r9b
jns 0x14001dd14
lea r8, str.___Web_Edition_
jmp 0x14001e0de
cmp r8d, 4
jne 0x14001e0ef
cmp ecx, 6
jne 0x14001e0ef
cmp edx, 3
jne 0x14001e0ef
test al, 0x20
jmp 0x14001d92d
cmp ecx, 6
ja 0x14001dd4b
jne 0x14001e0ef
cmp edx, 4
jb 0x14001e0ef
mov r9d, dword [rbp - 0x30]
mov r8d, dword [rbp + 0x70]
lea eax, [r9 - 0x44c0]
cmp eax, 0x76f
ja 0x14001dd6e
lea eax, [r8 - 2]
cmp eax, 1
jbe 0x14001e0ef
cmp ecx, 6
ja 0x14001dd7a
jne 0x14001dd98
cmp edx, 4
jb 0x14001dd95
lea eax, [r9 - 0x4c30]
cmp eax, 0x1910
ja 0x14001dd95
lea eax, [r8 - 2]
cmp eax, 1
jbe 0x14001e0ef
cmp ecx, 6
ja 0x14001dda1
jne 0x14001ddb7
cmp edx, 4
jb 0x14001ddb7
cmp r9d, 0x6541
jb 0x14001ddb7
lea eax, [r8 - 2]
cmp eax, 1
jbe 0x14001e0ef
cmp ecx, 6
ja 0x14001ddc3
jne 0x14001ddd6
cmp edx, 4
jb 0x14001ddd6
cmp r9d, 0x534f
jb 0x14001ddd6
cmp r8d, 1
je 0x14001e0ef
mov eax, dword [rbp + 0x64]
bt eax, 0x11
jae 0x14001ddeb
lea r8, str.Windows_10_Thin_PC
jmp 0x14001de96
cmp ecx, 6
jne 0x14001de0d
cmp edx, 2
jne 0x14001de0d
cmp r8d, 1
jne 0x14001de0d
cmp dword [rbp - 0x28], 9
jne 0x14001de0d
lea r8, str.Windows_10_RT
jmp 0x14001de96
mov ecx, dword [rbp + 0x60]
bt ecx, 0x10
jae 0x14001de1f
lea r8, str.Windows_10__Starter_Edition_
jmp 0x14001de96
bt eax, 0x1a
jae 0x14001de2e
lea r8, str.Windows_10__Home_
jmp 0x14001de96
test al, al
jns 0x14001de3b
lea r8, str.Windows_10__Pro_
jmp 0x14001de96
test cl, 2
je 0x14001de49
lea r8, str.Windows_10__Enterprise_
jmp 0x14001de96
test eax, eax
jns 0x14001de56
lea r8, str.Windows_10_Nano_Server
jmp 0x14001de96
test byte [rbp + 0x68], 2
je 0x14001de65
lea r8, str.Windows_10_ARM64_Server
jmp 0x14001de96
lea rdx, [rsp + 0x30]
call fcn.14001d1e0
test eax, eax
je 0x14001de8f
cmp r8d, 2
jne 0x14001de82
lea r8, str.Windows_Server_2016
jmp 0x14001de96
cmp r8d, 3
lea r8, str.Windows_Server_2016__Domain_Controller_
je 0x14001de96
lea r8, str.Windows_10
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp + 0x64]
bt r8d, 0x17
jae 0x14001dece
lea r8, str.___with_Bing___CoreConnected_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp + 0x64]
lea rdx, [rsp + 0x30]
call fcn.14001d1e0
test eax, eax
je 0x14001e0ef
mov eax, dword [rbp + 0x60]
test al, 0x20
je 0x14001def3
lea r8, str.___Datacenter_Edition_
jmp 0x14001e0de
cmp dword [rbp + 0x70], 2
jne 0x14001df09
test al, 2
je 0x14001df09
lea r8, str.___Enterprise_Edition_
jmp 0x14001e0de
test al, al
jns 0x14001df19
lea r8, str.___Web_Edition_
jmp 0x14001e0de
test r8b, 0x20
jmp 0x14001d92d
mov ecx, dword [rbp - 0x38]
mov r8d, dword [rbp - 0x30]
mov edx, dword [rbp - 0x34]
cmp ecx, 4
jne 0x14001e0b2
test edx, edx
jne 0x14001df61
cmp r8d, 0x3b6
jne 0x14001df61
lea rdx, str.Windows_95
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
lea eax, [r8 - 0x3b7]
cmp eax, 0x81
ja 0x14001df97
lea rdx, str.Windows_95_SP1
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0xa
jae 0x14001dfd2
lea eax, [r8 - 0x439]
cmp eax, 0x84
ja 0x14001dfd2
lea rdx, str.Windows_95_B__aka_OSR2_
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0xa
jae 0x14001e008
cmp r8d, 0x4be
jb 0x14001e008
lea rdx, str.Windows_95_C__aka_OSR2.5_
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0xa
jne 0x14001e03e
cmp r8d, 0x7ce
jne 0x14001e03e
lea rdx, str.Windows_98
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0xa
jne 0x14001e072
lea eax, [r8 - 0x7cf]
cmp eax, 0xb7
ja 0x14001e072
lea rdx, str.Windows_98_SP1
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0xa
jne 0x14001e0a1
cmp r8d, 0x887
jb 0x14001e0a1
lea rdx, str.Windows_98_Second_Edition
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
cmp ecx, 4
jne 0x14001e0b2
cmp edx, 0x5a
lea rdx, str.Windows_Millenium_Edition
je 0x14001e0b9
lea rdx, str.Windows___
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
jmp 0x14001e0de
lea r8, str.Windows
jmp 0x14001e0de
lea r8, [0x1401efcd0]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
movsxd rax, dword [rbp - 0x28]
cmp eax, 0xa
ja case.0x14001e109.0
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1ead4]
add rcx, rdx
jmp rcx
lea r8, str.___x86_32_Processor_
jmp 0x14001e16c
lea r8, str.___MIPS_Processor_
jmp 0x14001e16c
lea r8, str.___Alpha_Processor_
jmp 0x14001e16c
lea r8, str.___PPC_Processor_
jmp 0x14001e16c
lea r8, str.___IA64_Itanium_2__Processor_
jmp 0x14001e16c
lea r8, str.___x86_64_Processor_
jmp 0x14001e16c
lea r8, str.___Alpha64_Processor_
jmp 0x14001e16c
lea r8, str.___MSIL_Processor_
jmp 0x14001e16c
lea r8, str.___ARM_Processor_
jmp 0x14001e16c
lea r8, str.___SHX_Processor_
jmp 0x14001e16c
lea r8, str.___Unknown_Processor_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp - 0x38]
lea rdx, str._v_d.
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp - 0x34]
mov eax, 0xcccccccd
mul r8d
shr edx, 3
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
lea rcx, [rbp + 0x90]
je 0x14001e1db
cmp r8d, 9
jbe 0x14001e1de
lea rdx, str._02d
jmp 0x14001e1e5
mov r8d, edx
lea rdx, str._01d
call fcn.14001eb60
lea r8, [rbp + 0x90]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov r8d, dword [rbp - 0x30]
test r8d, r8d
je 0x14001e236
lea rdx, str._Build:_d
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
lea r8, [0x1401f067c]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
movzx eax, word [rbp + 0x5c]
test ax, ax
je 0x14001e33f
movzx ecx, word [rbp + 0x5e]
test cx, cx
je 0x14001e30f
mov r8d, dword [rbp - 0x2c]
mov r10d, dword [rbp + 0x60]
mov r9d, dword [rbp - 0x34]
mov edx, dword [rbp - 0x38]
cmp r8d, 4
jne 0x14001e2f4
cmp edx, r8d
ja 0x14001e2a4
cmp eax, 6
jne 0x14001e2aa
cmp ecx, 1
jne 0x14001e2aa
lea rdx, str.Service_Pack:_6a
lea rcx, [rbp + 0x90]
call fcn.14001eb60
jmp 0x14001e325
cmp r8d, 4
jne 0x14001e2f4
cmp edx, 5
jne 0x14001e2ba
test r9d, r9d
je 0x14001e2ba
test r10b, 0x40
jne 0x14001e2d6
cmp r8d, 4
jne 0x14001e2f4
cmp edx, 5
jne 0x14001e2f4
test r9d, r9d
je 0x14001e2f4
cmp dword [rbp + 0x70], 1
jne 0x14001e2f4
test r10b, 0x40
jne 0x14001e2f4
cmp eax, 1
jne 0x14001e2f4
cmp ecx, eax
jne 0x14001e2f4
lea rdx, str.Service_Pack:_1a
lea rcx, [rbp + 0x90]
call fcn.14001eb60
jmp 0x14001e325
mov r9d, ecx
lea rdx, str.Service_Pack:_d._d
lea rcx, [rbp + 0x90]
mov r8d, eax
call fcn.14001eb60
jmp 0x14001e325
mov r8d, eax
lea rdx, str.Service_Pack:_d
lea rcx, [rbp + 0x90]
call fcn.14001eb60
lea r8, [rbp + 0x90]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
jmp 0x14001e35e
movzx eax, word [rbp + 0x5e]
test ax, ax
je 0x14001e35e
mov r8d, eax
lea rdx, str.Service_Pack:0._d
lea rcx, [rbp + 0x90]
call fcn.14001eb60
mov ecx, dword [rbp + 0x60]
mov eax, ecx
shr eax, 0x13
and eax, 1
je 0x14001e379
test cl, 2
je 0x14001e379
lea r8, str.___Storage_Server_Enterprise_
jmp 0x14001e3c7
test byte [rbp + 0x64], 8
je 0x14001e388
lea r8, str.___Storage_Server_Express_
jmp 0x14001e3c7
test eax, eax
je 0x14001e39b
test byte [rbp + 0x64], 0x20
je 0x14001e39b
lea r8, str.___Storage_Server_Standard_
jmp 0x14001e3c7
test byte [rbp + 0x64], 0x10
je 0x14001e3aa
lea r8, str.___Storage_Server_Workgroup_
jmp 0x14001e3c7
test dword [rbp + 0x64], 0x1000
je 0x14001e3bc
lea r8, str.___Storage_Server_Essentials_
jmp 0x14001e3c7
test eax, eax
je 0x14001e3d8
lea r8, str.___Storage_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x800
je 0x14001e3ea
lea r8, str.___Home_Server_Premium_Edition_
jmp 0x14001e3fa
test dword [rbp + 0x60], 0x10000000
je 0x14001e40b
lea r8, str.___Home_Server_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x60], 0x10
je 0x14001e429
lea r8, str.___Terminal_Services_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x100
je 0x14001e44a
lea r8, str.___Embedded_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x200
je 0x14001e46b
lea r8, str.___Terminal_Services_in_Remote_Admin_Mode_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
lea r8, str.___64_Bit_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x4000
je 0x14001e4a4
lea r8, str.___Media_Center_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x8000
je 0x14001e4c5
lea r8, str.___Tablet_PC_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x40000
je 0x14001e4e6
lea r8, str.___Compute_Cluster_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x100
je 0x14001e507
lea r8, str.___Foundation_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x10000
je 0x14001e519
lea r8, str.___MultiPoint_Premium_Edition_
jmp 0x14001e529
test dword [rbp + 0x64], 0x200
je 0x14001e53a
lea r8, str.___MultiPoint_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x100000
je 0x14001e55b
lea r8, str.___Security_Appliance_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x200000
je 0x14001e57c
lea r8, str.___BackOffice_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x800000
je 0x14001e59d
lea r8, str.___N_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x64], 0x40
je 0x14001e5bb
lea r8, str.___E_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x4000000
je 0x14001e5dc
lea r8, str.___Hyper_V_Tools_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x400
je 0x14001e5fd
lea r8, str.___Hyper_V_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x20000000
je 0x14001e61e
lea r8, str.___Server_Core_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x400
je 0x14001e63f
lea r8, str.___Uniprocessor_Free_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x800
je 0x14001e660
lea r8, str.___Uniprocessor_Checked_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x1000
je 0x14001e681
lea r8, str.___Multiprocessor_Free_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x2000
je 0x14001e6a2
lea r8, str.___Multiprocessor_Checked_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x40000000
je 0x14001e6c3
lea r8, str.___Windows_Essential_Business_Server_Manangement_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x60], 0x80000000
je 0x14001e6e4
lea r8, str.___Windows_Essential_Business_Server_Messaging_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x64], 1
je 0x14001e702
lea r8, str.___Windows_Essential_Business_Server_Security_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x64], 2
je 0x14001e720
lea r8, str.___Cluster_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x60], 1
je 0x14001e73e
lea r8, str.___Small_Business_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test byte [rbp + 0x64], 4
je 0x14001e75c
lea r8, str.___Small_Business_Server_Premium_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x2000
je 0x14001e77d
lea r8, str.___Prerelease_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x4000
je 0x14001e79e
lea r8, str.___Evaluation_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x40000
je 0x14001e7bf
lea r8, str.___Automotive_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x80000
je 0x14001e7e0
lea r8, str.___China_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x100000
je 0x14001e801
lea r8, str.___Single_Language_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x200000
je 0x14001e822
lea r8, str.___Win32s_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x1000000
je 0x14001e843
lea r8, str.___Education_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x2000000
je 0x14001e864
lea r8, str.___Industry_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x8000000
je 0x14001e885
lea r8, str.___Student_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
test dword [rbp + 0x64], 0x10000000
je 0x14001e8a6
lea r8, str.___Mobile_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
bt eax, 0x15
jae 0x14001e8ca
lea r8, str.___IoT_Core_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
test al, 0x20
je 0x14001e8e9
lea r8, str.___Cloud_Host_Infrastructure_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
bt eax, 0xd
jae 0x14001e90a
lea r8, str.___S_Edition_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
test al, 1
je 0x14001e929
lea r8, str.___Cloud_Storage_Server_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
test al, 4
je 0x14001e948
lea r8, str.___PPI_Pro_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
test al, 8
je 0x14001e967
lea r8, str.___Connected_Car_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
mov eax, dword [rbp + 0x68]
test al, 0x10
je 0x14001e983
lea r8, str.___Handheld_
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
lea r8, [0x1401f067c]
mov edx, 0x800
lea rcx, [rbp + 0x100]
call fcn.140150860
jmp 0x14001e9a9
lea rdx, str.Failed_in_call_to_GetOSVersion_n
call fcn.14001eb00
lea r8, [0x1401e9c5c]
mov dword [rsp + 0x24], 0x101
mov edx, 0x400
mov rcx, rdi
call fcn.140150800
xor edx, edx
lea rcx, [rbp + 0x900]
mov r8d, 0x101
call fcn.14014a5c0
lea rdx, [rsp + 0x24]
lea rcx, [rbp + 0x900]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x14001ea17
lea r8, str._nComputerName_:
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
lea r8, [rbp + 0x900]
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
mov edx, 0xff
lea rcx, [rbp + 0xa10]
call qword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
jne 0x14001ea8a
lea rcx, [rbp + 0xa10]
call qword [sym.imp.WS2_32.dll_gethostbyname]
test rax, rax
je 0x14001ea8a
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xc38], rbx
mov rcx, qword [rax]
mov ecx, dword [rcx]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rbx, rax
test rax, rax
je 0x14001ea82
lea r8, str._nIP_:
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
mov r8, rbx
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
mov rbx, qword [rsp + 0xc38]
lea r8, [0x1401f067c]
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
lea r8, [rbp + 0x100]
mov edx, 0x400
mov rcx, rdi
call fcn.140150860
xor eax, eax
mov rcx, qword [rbp + 0xb10]
xor rcx, rsp
call fcn.140147af0
mov rdi, qword [rsp + 0xc40]
add rsp, 0xc20
pop rbp
ret