Function at 0x1000d6a0
Capabilities:
Check os version
Get system information on windows

Disassembly:
sub esp, 0x3f4
mov eax, dword [0x100b7bd0]
xor eax, esp
mov dword [esp + 0x3f0], eax
xor eax, eax
push ebp
push edi
push 0x11c
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x58]
mov edi, ecx
push eax
mov dword [esp + 0x14], edi
call fcn.1007aac0
add esp, 0xc
lea ecx, [esp + 0x50]
push ecx
mov dword [esp + 0x54], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.GetNativeSystemInfo
push str.kernel32.dll
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1000d72e
lea edx, [esp + 0x10]
push edx
call eax
jmp 0x1000d739
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x1ea
lea ecx, [esp + 0x172]
push 0
push ecx
mov word [esp + 0x178], 0
call fcn.1007aac0
mov eax, dword [esp + 0x6c]
add esp, 0xc
cmp eax, 1
je 0x1000d788
cmp eax, 2
jne 0x1000d76f
cmp dword [esp + 0x54], 4
ja 0x1000d788
pop edi
xor al, al
pop ebp
mov ecx, dword [esp + 0x3f0]
xor ecx, esp
call fcn.1007a1bc
add esp, 0x3f4
ret
push 0xf6
lea edx, [esp + 0x170]
push str.Microsoft
push edx
call fcn.1007c537
add esp, 0xc
cmp dword [esp + 0x60], 1
jne 0x1000d8d3
mov eax, dword [esp + 0x58]
cmp eax, 0x5a
mov byte [edi + 0x12c], 1
jne 0x1000d810
lea eax, [esp + 0x16c]
add eax, 0xfffffffe
jmp 0x1000d7d0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000d7d0
mov ecx, dword [str.Windows_Me]
mov edx, dword [0x100a6580]
mov dword [eax], ecx
mov ecx, dword [0x100a6584]
mov dword [eax + 4], edx
mov edx, dword [0x100a6588]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a658c]
mov dword [eax + 0xc], edx
mov edx, dword [0x100a6590]
jmp 0x1000d89b
cmp eax, 0xa
lea eax, [esp + 0x16c]
jne 0x1000d85d
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000d820
mov ecx, dword [str.Windows_98]
mov edx, dword [0x100a6598]
mov dword [eax], ecx
mov ecx, dword [0x100a659c]
mov dword [eax + 4], edx
mov edx, dword [0x100a65a0]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a65a4]
mov dword [eax + 0xc], edx
mov edx, dword [0x100a65a8]
jmp 0x1000d89b
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000d860
mov ecx, dword [str.Windows_95]
mov edx, dword [0x100a65b0]
mov dword [eax], ecx
mov ecx, dword [0x100a65b4]
mov dword [eax + 4], edx
mov edx, dword [0x100a65b8]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a65bc]
mov dword [eax + 0xc], edx
mov edx, dword [0x100a65c0]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
lea eax, [esp + 0x16c]
lea edx, [eax + 2]
jmp 0x1000d8b0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000d8b0
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x170]
push eax
lea ecx, [edi + 0x110]
jmp 0x1000f392
mov eax, dword [esp + 0x54]
cmp eax, 6
push ebx
push esi
mov esi, 8
jb 0x1000ed62
mov bl, 0x40
jne 0x1000da8e
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x1000d950
mov byte [edi + 0x12c], 0x10
lea edi, [esp + 0x174]
add edi, 0xfffffffe
cmp byte [esp + 0x172], 1
jne 0x1000d931
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000d912
mov ecx, 7
mov esi, str.Windows_Vista
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000db05
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000d931
mov ecx, 0xa
mov esi, str.Windows_Server_2008
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000db05
cmp eax, 1
jne 0x1000d9ae
lea eax, [esp + 0x174]
mov byte [edi + 0x12c], 0x20
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000d966
mov ecx, dword [str.Windows_7]
mov edx, dword [0x100a6614]
mov dword [eax], ecx
mov ecx, dword [0x100a6618]
mov dword [eax + 4], edx
mov edx, dword [0x100a661c]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a6620]
mov dword [eax + 0xc], edx
mov dx, word [0x100a6624]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
jmp 0x1000db05
cmp eax, 2
jne 0x1000da0b
lea eax, [esp + 0x174]
mov byte [edi + 0x12c], bl
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000d9c3
mov ecx, dword [str.Windows_8]
mov edx, dword [0x100a662c]
mov dword [eax], ecx
mov ecx, dword [0x100a6630]
mov dword [eax + 4], edx
mov edx, dword [0x100a6634]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a6638]
mov dword [eax + 0xc], edx
mov dx, word [0x100a663c]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
jmp 0x1000db05
cmp eax, 3
jne 0x1000da3f
mov byte [edi + 0x12c], bl
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000da20
mov ecx, 6
mov esi, str.Windows_8.1
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000db05
push 6
lea eax, [esp + 0x40]
push str.Windows__d
push eax
call fcn.10003ea0
add esp, 0xc
cmp dword [eax + 0x18], esi
jb 0x1000da5d
mov eax, dword [eax + 4]
jmp 0x1000da60
add eax, 4
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000da62
lea edi, [esp + 0x174]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x1000da80
jmp 0x1000daec
cmp eax, 0xa
jne 0x1000da9a
mov byte [edi + 0x12c], 0x80
push eax
lea ecx, [esp + 0x40]
push str.Windows__d
push ecx
call fcn.10003ea0
add esp, 0xc
cmp dword [eax + 0x18], esi
jb 0x1000dab7
mov eax, dword [eax + 4]
jmp 0x1000daba
add eax, 4
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000dac0
lea edi, [esp + 0x174]
sub eax, edx
add edi, 0xfffffffe
jmp 0x1000dae0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x1000dae0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x3c]
call fcn.10008190
push str.GetProductInfo
push str.kernel32.dll
mov dword [esp + 0x1c], 0
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1000db3b
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x14]
push edx
mov edx, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x68]
push ecx
push ecx
push edx
call eax
mov eax, dword [esp + 0x14]
cmp eax, 0xb3
ja case.0x1000db51.57
movzx eax, byte [eax + 0x1000f51c]
jmp dword [eax*4 + 0x1000f3b0]
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000db62
mov ecx, 8
mov esi, str.Ultimate_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000db90
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000db90
mov ecx, 0xa
mov esi, str.Home_Premium_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dbc0
mov ecx, 9
mov esi, str.Home_Basic_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dbf0
mov ecx, 9
mov esi, str.Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dc20
mov ecx, 8
mov esi, str.Business_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dc50
mov ecx, 9
mov esi, str.Business_N_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dc80
mov ecx, 8
mov esi, str.Starter_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000dcb0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dcb0
mov ecx, 0xb
mov esi, str.Cluster_Server_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dce0
mov ecx, 0x12
mov esi, str.Cluster_Server_Hyper_Core_V_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000dd10
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dd10
mov ecx, 9
mov esi, str.Datacenter_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dd40
mov ecx, 0x13
mov esi, str.Datacenter_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dd70
mov ecx, 0x1b
mov esi, str.Datacenter_Edition_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dda0
mov ecx, 0x1b
mov esi, str.Datacenter_Edition_without_Hyper_V__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ddd0
mov ecx, 9
mov esi, str.Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000de00
mov ecx, 0x13
mov esi, str.Enterprise_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000de30
mov ecx, 0x16
mov esi, str.Enterprise_Edition_for_Itanium_based_Systems
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000de60
mov ecx, 0xb
mov esi, str.Small_Business_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000de90
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000de90
mov ecx, 0x13
mov esi, str.Small_Business_Server_Premium_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000dec0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dec0
mov ecx, 8
mov esi, str.Standard_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000def0
mov ecx, 0x12
mov esi, str.Standard_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000df20
mov ecx, 0x1a
mov esi, str.Server_Standard_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000df50
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000df50
mov ecx, 9
mov esi, str.Web_Server_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000df80
mov ecx, 0xa
mov esi, str.Professional_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dfb0
mov ecx, 6
mov esi, str.Home_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000dfe0
mov ecx, 9
mov esi, str.Home_China_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e010
mov ecx, 7
mov esi, str.Home_N_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e040
mov ecx, 0xe
mov esi, str.Home_Single_Language_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e070
mov ecx, 6
mov esi, str.B2_S_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e0a0
mov ecx, 7
mov esi, str.B3_S_N_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e0d0
mov ecx, 0x16
mov esi, str.Server_Datacenter__evaluation_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e100
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e100
mov ecx, 9
mov esi, str.Education_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e130
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e130
mov ecx, 0xb
mov esi, str.A_Education_N_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e160
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e160
mov ecx, 0xa
mov esi, str.Enterprise_E_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e190
mov ecx, 0xf
mov esi, str.Enterprise_Evaluation_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e1c0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e1c0
mov ecx, 0xb
mov esi, str.B_Enterprise_N_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e1f0
mov ecx, 0xc
mov esi, str.Enterprise_N_Evaluation
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e220
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e220
mov ecx, 0xb
mov esi, str.D_Enterprise_2015_LTSB
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e250
mov ecx, 0x10
mov esi, str.Enterprise_2015_LTSB_Evaluation
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e280
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e280
mov ecx, 0xc
mov esi, str.E_Enterprise_2015_LTSB_N
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e2b0
mov ecx, 0x11
mov esi, str.Enterprise_2015_LTSB_N_Evaluation
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e2e0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e2e0
mov ecx, 0x1b
mov esi, str.Server_Enterprise_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e310
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e310
mov ecx, 0x1b
mov esi, str.Server_Enterprise_without_Hyper_V__full_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e340
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e340
mov ecx, 0x17
mov esi, str.C_Windows_Essential_Server_Solution_Additional
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e370
mov ecx, 0x19
mov esi, str.E_Windows_Essential_Server_Solution_Additional_SVC
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e3a0
mov ecx, 0x17
mov esi, str.B_Windows_Essential_Server_Solution_Management
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e3d0
mov ecx, 0x19
mov esi, str.D_Windows_Essential_Server_Solution_Management_SVC
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e400
mov ecx, 0xa
mov esi, str.Home_Premium_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e430
mov ecx, 0xc
mov esi, str.Windows_Home_Server_2011
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e460
mov ecx, 0x15
mov esi, str.Windows_Storage_Server_2008_R2_Essentials
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e490
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e490
mov ecx, 0xd
mov esi, str.A_Microsoft_Hyper_V_Server
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea eax, [esp + 0x174]
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000e4c0
mov ecx, dword [str.B_IoT_Core]
mov edx, dword [0x100a7228]
mov dword [eax], ecx
mov ecx, dword [0x100a722c]
mov dword [eax + 4], edx
mov edx, dword [0x100a7230]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a7234]
mov dword [eax + 0xc], edx
mov dx, word [0x100a7238]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e512
mov ecx, 0xa
mov esi, str.IoT_Core_Commercial
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e540
mov ecx, 0x1b
mov esi, str.E_Windows_Essential_Business_Server_Management_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e570
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e570
mov ecx, 0x19
mov esi, str.Windows_Essential_Business_Server_Messaging_Server
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e5a0
mov ecx, 0x1a
mov esi, str.F_Windows_Essential_Business_Server_Security_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea eax, [esp + 0x174]
add eax, 0xfffffffe
jmp 0x1000e5d0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000e5d0
mov ecx, dword [str.Mobile]
mov edx, dword [0x100a73ac]
mov dword [eax], ecx
mov ecx, dword [0x100a73b0]
mov dword [eax + 4], edx
mov dx, word [0x100a73b4]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e610
mov ecx, 9
mov esi, str.Mobile_Enterprise
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e640
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e640
mov ecx, 0x1c
mov esi, str.D_Windows_MultiPoint_Server_Premium__full_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e670
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e670
mov ecx, 0x1c
mov esi, str.C_Windows_MultiPoint_Server_Standard__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e6a0
mov ecx, 0xc
mov esi, str.A1_Pro_for_Workstations
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e6d0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e6d0
mov ecx, 0xd
mov esi, str.A2_Pro_for_Workstations_N
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e700
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e700
mov ecx, 0xf
mov esi, str.Professional_with_Media_Center
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e730
mov ecx, 0x17
mov esi, str.Windows_Small_Business_Server_2011_Essentials
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e760
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e760
mov ecx, 0xd
mov esi, str.Server_For_SB_Solutions_EM
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e790
mov ecx, 0xc
mov esi, str.Server_For_SB_Solutions
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e7c0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e7c0
mov ecx, 0xd
mov esi, str.Server_For_SB_Solutions_EM
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e7f0
mov ecx, 0x1d
mov esi, str.Windows_Server_2008_for_Windows_Essential_Server_Solutions
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e820
mov ecx, 0x25
mov esi, str.Windows_Server_2008_without_Hyper_V_for_Windows_Essential_Server_Solutions
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e850
mov ecx, 9
mov esi, str.Server_Foundation
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e880
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e880
mov ecx, 0x1a
mov esi, str.F_Small_Business_Server_Premium__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e8b0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e8b0
mov ecx, 0xd
mov esi, str.Windows_MultiPoint_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e8e0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e8e0
mov ecx, 0x16
mov esi, str.F_Server_Standard__evaluation_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e910
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e910
mov ecx, 0x10
mov esi, str.Server_Standard_without_Hyper_V
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e940
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e940
mov ecx, 0x10
mov esi, str.Server_Solutions_Premium_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e970
mov ecx, 0x1a
mov esi, str.Server_Solutions_Premium_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e9a0
mov ecx, 7
mov esi, str.Not_supported
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000e9d0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000e9d0
mov ecx, 0xd
mov esi, str.Storage_Server_Enterprise
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000ea00
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ea00
mov ecx, 0x18
mov esi, str.E_Storage_Server_Enterprise__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000ea30
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ea30
mov ecx, 0xb
mov esi, str.Storage_Server_Express
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ea60
mov ecx, 0x16
mov esi, str.B_Storage_Server_Express__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ea90
mov ecx, 0x19
mov esi, str.Storage_Server_Standard__evaluation_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000eac0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eac0
mov ecx, 0xc
mov esi, str.Storage_Server_Standard
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000eaf0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eaf0
mov ecx, 0x17
mov esi, str.C_Storage_Server_Standard__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000eb20
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eb20
mov ecx, 0x1a
mov esi, str.F_Storage_Server_Workgroup__evaluation_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eb50
mov ecx, 0xc
mov esi, str.Storage_Server_Workgroup
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eb80
mov ecx, 0x17
mov esi, str.D_Storage_Server_Workgroup__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ebb0
mov ecx, 7
mov esi, str.Not_supported
rep movsd dword es:[edi], dword [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000ebe0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ebe0
mov ecx, 6
mov esi, str.C_Ultimate_N
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ec10
mov ecx, 9
mov esi, str.An_unknown_product
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ec40
mov ecx, 0x10
mov esi, str.D_Web_Server__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ecaf
mov eax, dword [esp + 0x10]
cmp byte [eax + 0x12c], bl
je 0x1000ecaf
lea eax, [esp + 0x174]
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000ec80
mov ecx, dword [str.Unknown]
mov edx, dword [0x100a7d20]
mov dword [eax], ecx
mov ecx, dword [0x100a7d24]
mov dword [eax + 4], edx
mov edx, dword [0x100a7d28]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x18]
cmp ax, 9
jne 0x1000ed11
mov eax, dword [esp + 0x10]
mov byte [eax + 0x12d], 1
lea eax, [esp + 0x174]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000ecd2
mov ecx, dword [str.__64_bit]
mov edx, dword [0x100a7d30]
mov dword [eax], ecx
mov ecx, dword [0x100a7d34]
mov dword [eax + 4], edx
mov edx, dword [0x100a7d38]
mov dword [eax + 8], ecx
mov cx, word [0x100a7d3c]
mov dword [eax + 0xc], edx
mov word [eax + 0x10], cx
jmp 0x1000ed5e
test ax, ax
jne 0x1000ed5e
lea eax, [esp + 0x174]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000ed24
mov edx, dword [str.__32_bit]
mov ecx, dword [0x100a7d44]
mov dword [eax], edx
mov edx, dword [0x100a7d48]
mov dword [eax + 4], ecx
mov ecx, dword [0x100a7d4c]
mov dword [eax + 8], edx
mov dx, word [0x100a7d50]
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], dx
mov eax, dword [esp + 0x5c]
cmp eax, 5
jne 0x1000f271
mov eax, dword [esp + 0x60]
cmp eax, 2
jne 0x1000f12f
mov eax, dword [esp + 0x10]
push 0x59
mov byte [eax + 0x12c], 8
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x170]
je 0x1000edcf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000edb0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000edb0
mov ecx, 0xc
mov esi, str.Windows_Server_2003_R2_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000ee68
cmp bx, 0x2000
jne 0x1000edff
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ede4
mov ecx, 0xe
mov esi, str.Windows_Storage_Server_2003
jmp 0x1000ee66
cmp byte [esp + 0x172], 1
jne 0x1000ee3e
cmp dx, 9
jne 0x1000ee3e
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ee21
mov ecx, 0x12
mov esi, str.Windows_XP_Professional_x64_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000f07b
lea edi, [esp + 0x174]
add edi, 0xfffffffe
jmp 0x1000ee50
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ee50
mov ecx, 0xb
mov esi, str.Windows_Server_2003_
rep movsd dword es:[edi], dword [esi]
cmp byte [esp + 0x172], 1
je 0x1000f07b
cmp dx, 6
jne 0x1000eeeb
test bl, bl
mov ecx, dword [esp + 0x10]
mov byte [ecx + 0x12d], 1
jns 0x1000eebb
lea edi, [esp + 0x174]
add edi, 0xfffffffe
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eea0
mov ecx, 0x16
mov esi, str.Datacenter_Edition_for_Itanium_based_Systems
jmp 0x1000f077
test bl, 2
je 0x1000f07b
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov edi, edi
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000eed0
mov ecx, 0x16
mov esi, str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x1000f077
cmp dx, 9
jne 0x1000ef6c
mov edx, dword [esp + 0x10]
lea edi, [esp + 0x174]
add edi, 0xfffffffe
test bl, bl
mov byte [edx + 0x12d], 1
jns 0x1000ef2d
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ef12
mov ecx, 0xb
mov esi, str.Datacenter_x64_Edition
jmp 0x1000f077
test bl, 2
je 0x1000ef51
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ef36
mov ecx, 0xb
mov esi, str.Enterprise_x64_Edition
jmp 0x1000f077
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ef51
mov ecx, 0xa
mov esi, str.Standard_x64_Edition
jmp 0x1000f077
test ebx, 0x4000
je 0x1000ef9f
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ef82
mov ecx, 0xc
mov esi, str.Compute_Cluster_Edition
rep movsd dword es:[edi], dword [esi]
jmp 0x1000f07b
test bl, bl
jns 0x1000efcc
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000efb1
mov ecx, 9
mov esi, str.Datacenter_Edition
jmp 0x1000f077
test bl, 2
je 0x1000effb
lea edi, [esp + 0x174]
add edi, 0xfffffffe
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000efe0
mov ecx, 9
mov esi, str.Enterprise_Edition
jmp 0x1000f077
test ebx, 0x400
je 0x1000f057
lea eax, [esp + 0x174]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000f011
mov ecx, dword [str.Web_Edition]
mov edx, dword [0x100a7f54]
mov dword [eax], ecx
mov ecx, dword [0x100a7f58]
mov dword [eax + 4], edx
mov edx, dword [0x100a7f5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a7f60]
mov dword [eax + 0xc], edx
mov edx, dword [0x100a7f64]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
jmp 0x1000f07b
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f061
mov ecx, 8
mov esi, str.Standard_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp dword [esp + 0x5c], 5
jne 0x1000f271
mov eax, dword [esp + 0x60]
cmp eax, 1
jne 0x1000f15f
mov eax, dword [esp + 0x10]
mov byte [eax + 0x12c], 4
lea eax, [esp + 0x174]
add eax, 0xfffffffe
jmp 0x1000f0b0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000f0b0
mov ecx, dword [str.Windows_XP]
mov edx, dword [0x100a7f6c]
mov dword [eax], ecx
mov ecx, dword [0x100a7f70]
mov dword [eax + 4], edx
mov edx, dword [0x100a7f74]
mov dword [eax + 8], ecx
mov ecx, dword [0x100a7f78]
mov dword [eax + 0xc], edx
mov edx, dword [0x100a7f7c]
lea edi, [esp + 0x174]
add edi, 0xfffffffe
test ebx, 0x200
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
je 0x1000f140
jmp 0x1000f110
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f110
mov ecx, 6
mov esi, str.Home_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000f271
mov ebx, dword [esp + 0x170]
jmp 0x1000f08a
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f140
mov ecx, 6
mov esi, str.Professional
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000f271
test eax, eax
jne 0x1000f271
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x174]
mov byte [eax + 0x12c], 2
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f180
cmp byte [esp + 0x172], 1
mov ecx, 7
mov esi, str.Windows_2000
rep movsd dword es:[edi], dword [esi]
jne 0x1000f1cf
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f1b0
mov ecx, 6
mov esi, str.Professional
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1000f271
test bl, bl
jns 0x1000f1fe
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f1e1
mov ecx, 9
mov esi, str.Datacenter_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000f271
test bl, 2
je 0x1000f22e
lea edi, [esp + 0x174]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f211
mov ecx, 8
mov esi, str.Advanced_Server
rep movsd dword es:[edi], dword [esi]
jmp 0x1000f271
lea eax, [esp + 0x174]
add eax, 0xfffffffe
jmp 0x1000f240
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000f240
mov ecx, dword [str.Server]
mov edx, dword [0x100a8000]
mov dword [eax], ecx
mov ecx, dword [0x100a8004]
mov dword [eax + 4], edx
mov dx, word [0x100a8008]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0x6c]
lea edx, [eax + 2]
jmp 0x1000f280
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000f280
sub eax, edx
sar eax, 1
je 0x1000f2fc
lea edi, [esp + 0x174]
add edi, 0xfffffffe
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000f2a0
mov eax, dword [0x100a800c]
mov dword [edi], eax
lea eax, [esp + 0x6c]
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000f2c0
lea edi, [esp + 0x174]
sub eax, edx
add edi, 0xfffffffe
jmp 0x1000f2e0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x1000f2e0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x64]
push ecx
push 0x100a8010
lea edx, [esp + 0x368]
call fcn.1000fc20
lea eax, [esp + 0x368]
add esp, 8
mov edx, eax
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000f320
lea edi, [esp + 0x174]
sub eax, edx
add edi, 0xfffffffe
jmp 0x1000f340
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x1000f340
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [esp + 0x174]
pop esi
lea edx, [eax + 2]
pop ebx
jmp 0x1000f370
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1000f370
mov ecx, dword [esp + 8]
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x170]
push edx
add ecx, 0x110
call fcn.10004560
mov ecx, dword [esp + 0x3f8]
pop edi
pop ebp
xor ecx, esp
mov al, 1
call fcn.1007a1bc
add esp, 0x3f4
ret