Function at 0x4a0df3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x7f4
mov eax, 0x75cd1d
call fcn.00736d13
mov esi, edx
mov dword [ebp - 0x7fc], esi
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
xor ecx, ecx
mov dword [ebp - 0x7f4], ebx
inc ecx
mov eax, dword [0x997ed8]
mov dword [ebp - 0x800], edi
test cl, al
jne 0x4a167d
or eax, ecx
mov dword [0x997ed8], eax
mov dword [ebp - 4], ecx
lea ecx, [ebp - 0x7e8]
push str.Business
mov dword [ebp - 0x7ec], 6
call fcn.004824e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x7cc]
push str.Business_N
mov dword [ebp - 0x7d0], 0x10
call fcn.004824e0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7b0]
push str.HPC_Edition
mov dword [ebp - 0x7b4], 0x12
call fcn.004824e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x794]
push str.Server_Hyper_Core_V
mov dword [ebp - 0x798], 0x40
call fcn.004824e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x778]
push str.Server_Datacenter__full_installation_
mov dword [ebp - 0x77c], 8
call fcn.004824e0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x75c]
push str.Server_Datacenter__core_installation_
mov dword [ebp - 0x760], 0xc
call fcn.004824e0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x740]
push str.Server_Datacenter_without_Hyper_V__core_installation_
mov dword [ebp - 0x744], 0x27
call fcn.004824e0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x724]
push str.Server_Datacenter_without_Hyper_V__full_installation_
mov dword [ebp - 0x728], 0x25
call fcn.004824e0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x708]
push str.Enterprise
mov dword [ebp - 0x70c], 4
call fcn.004824e0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x6ec]
push 0x81c7dc
mov dword [ebp - 0x6f0], 0x46
call fcn.004824e0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6d0]
push str.Enterprise_N
mov dword [ebp - 0x6d4], 0x1b
call fcn.004824e0
mov byte [ebp - 4], 0x17
push str.Server_Enterprise__full_installation_
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x6b8], 0xa
call fcn.004824e0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x698]
push str.Server_Enterprise__core_installation_
mov dword [ebp - 0x69c], 0xe
call fcn.004824e0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x67c]
push str.Server_Enterprise_without_Hyper_V__core_installation_
mov dword [ebp - 0x680], 0x29
call fcn.004824e0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x660]
push str.Server_Enterprise_for_Itanium_based_Systems
mov dword [ebp - 0x664], 0xf
call fcn.004824e0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x644]
push str.Server_Enterprise_without_Hyper_V__full_installation_
mov dword [ebp - 0x648], 0x26
call fcn.004824e0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x628]
push str.Windows_Essential_Server_Solution_Management
mov dword [ebp - 0x62c], 0x3b
call fcn.004824e0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x60c]
push str.Windows_Essential_Server_Solution_Additional
mov dword [ebp - 0x610], 0x3c
call fcn.004824e0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x5f0]
push str.Windows_Essential_Server_Solution_Management_SVC
mov dword [ebp - 0x5f4], 0x3d
call fcn.004824e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x5d4]
push str.Windows_Essential_Server_Solution_Additional_SVC
mov dword [ebp - 0x5d8], 0x3e
call fcn.004824e0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x5b8]
push str.Home_Basic
mov dword [ebp - 0x5bc], 2
call fcn.004824e0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x59c]
push 0x81ca6c
mov dword [ebp - 0x5a0], 0x43
call fcn.004824e0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x580]
push str.Home_Basic_N
mov dword [ebp - 0x584], 5
call fcn.004824e0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x564]
push str.Home_Premium
mov dword [ebp - 0x568], 3
call fcn.004824e0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x548]
push 0x81cbfc
mov dword [ebp - 0x54c], 0x44
call fcn.004824e0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x52c]
push str.Home_Premium_N
mov dword [ebp - 0x530], 0x1a
call fcn.004824e0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x510]
push str.Windows_Home_Server_2011
mov dword [ebp - 0x514], 0x22
call fcn.004824e0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x4f4]
push str.Windows_Storage_Server_2008_R2_Essentials
mov dword [ebp - 0x4f8], 0x13
call fcn.004824e0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x4d8]
push str.Microsoft_Hyper_V_Server
mov dword [ebp - 0x4dc], 0x2a
call fcn.004824e0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x4bc]
push str.Windows_Essential_Business_Server_Management_Server
mov dword [ebp - 0x4c0], 0x1e
call fcn.004824e0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x4a0]
push str.Windows_Essential_Business_Server_Messaging_Server
mov dword [ebp - 0x4a4], 0x20
call fcn.004824e0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x484]
push str.Windows_Essential_Business_Server_Security_Server
mov dword [ebp - 0x488], 0x1f
call fcn.004824e0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x468]
push str.Professional
mov dword [ebp - 0x46c], 0x30
call fcn.004824e0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x44c]
push 0x81cd84
mov dword [ebp - 0x450], 0x45
call fcn.004824e0
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x434], 0x31
push str.Professional_N
lea ecx, [ebp - 0x430]
call fcn.004824e0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x414]
push 0x81d310
mov dword [ebp - 0x418], 0x36
call fcn.004824e0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3f8]
push str.Server_For_SB_Solutions
mov dword [ebp - 0x3fc], 0x33
call fcn.004824e0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x3dc]
push str.Server_For_SB_Solutions_EM
mov dword [ebp - 0x3e0], 0x37
call fcn.004824e0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3c0]
push str.Windows_Server_2008_for_Windows_Essential_Server_Solutions
mov dword [ebp - 0x3c4], 0x18
call fcn.004824e0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x3a4]
push str.Windows_Server_2008_without_Hyper_V_for_Windows_Essential_Server_Solutions
mov dword [ebp - 0x3a8], 0x23
call fcn.004824e0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x388]
push str.Server_Foundation
mov dword [ebp - 0x38c], 0x21
call fcn.004824e0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x36c]
push str.Windows_Small_Business_Server_2011_Essentials
mov dword [ebp - 0x370], 0x32
call fcn.004824e0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x350]
push str.Windows_Small_Business_Server
mov dword [ebp - 0x354], 9
call fcn.004824e0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x334]
push str.Small_Business_Server_Premium
mov dword [ebp - 0x338], 0x19
call fcn.004824e0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x318]
push str.Small_Business_Server_Premium__core_installation_
mov dword [ebp - 0x31c], 0x3f
call fcn.004824e0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x2fc]
push str.Windows_MultiPoint_Server
mov dword [ebp - 0x300], 0x38
call fcn.004824e0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x2e0]
push str.Server_Standard
mov dword [ebp - 0x2e4], 7
call fcn.004824e0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x2c4]
push str.Server_Standard__core_installation_
mov dword [ebp - 0x2c8], 0xd
call fcn.004824e0
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x2a8]
push str.Server_Standard_without_Hyper_V
mov dword [ebp - 0x2ac], 0x24
call fcn.004824e0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x28c]
push str.Server_Standard_without_Hyper_V__core_installation_
mov dword [ebp - 0x290], 0x28
call fcn.004824e0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x270]
push str.Server_Solutions_Premium
mov dword [ebp - 0x274], 0x34
call fcn.004824e0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x254]
push str.Server_Solutions_Premium__core_installation_
mov dword [ebp - 0x258], 0x35
call fcn.004824e0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x238]
push str.Starter
mov dword [ebp - 0x23c], 0xb
call fcn.004824e0
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x21c]
push 0x81d28c
mov dword [ebp - 0x220], 0x42
call fcn.004824e0
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x200]
push str.Starter_N
mov dword [ebp - 0x204], 0x2f
call fcn.004824e0
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x1e4]
push str.Storage_Server_Enterprise
mov dword [ebp - 0x1e8], 0x17
call fcn.004824e0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1c8]
push str.Storage_Server_Enterprise__core_installation_
mov dword [ebp - 0x1cc], 0x2e
call fcn.004824e0
mov byte [ebp - 4], 0x73
mov dword [ebp - 0x1b0], 0x14
push str.Storage_Server_Express
lea ecx, [ebp - 0x1ac]
call fcn.004824e0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x190]
push str.Storage_Server_Express__core_installation_
mov dword [ebp - 0x194], 0x2b
call fcn.004824e0
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x174]
push str.Storage_Server_Standard
mov dword [ebp - 0x178], 0x15
call fcn.004824e0
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x158]
push str.Storage_Server_Standard__core_installation_
mov dword [ebp - 0x15c], 0x2c
call fcn.004824e0
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x13c]
push str.Storage_Server_Workgroup
mov dword [ebp - 0x140], 0x16
call fcn.004824e0
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x120]
push str.Storage_Server_Workgroup__core_installation_
mov dword [ebp - 0x124], 0x2d
call fcn.004824e0
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x104]
push str.An_unknown_product
mov dword [ebp - 0x108], ebx
call fcn.004824e0
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xe8]
push str.Ultimate
mov dword [ebp - 0xec], 1
call fcn.004824e0
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0xcc]
push str.Not_supported
mov dword [ebp - 0xd0], 0x47
call fcn.004824e0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xb0]
push 0x1c
pop ebx
push str.Ultimate_N
mov dword [ebp - 0xb4], ebx
call fcn.004824e0
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x94]
push str.Web_Server__full_installation_
mov dword [ebp - 0x98], 0x11
call fcn.004824e0
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x78]
push str.Web_Server__core_installation_
mov dword [ebp - 0x7c], 0x1d
call fcn.004824e0
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x7ec]
push eax
push ecx
call fcn.004a1e99
mov byte [ebp - 4], 1
lea eax, [ebp - 0x7ec]
push 0x4a19a5
push 0x45
push ebx
push eax
call fcn.00731eb4
push 0x7bdfbe
call fcn.007320ac
xor ebx, ebx
pop ecx
mov byte [ebp - 4], bl
xor ecx, ecx
inc ecx
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], ebx
mov word [edi], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x7f4], ecx
mov ecx, dword [0x997e80]
mov edx, ecx
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x4a16c9
cmp dword [eax + 0x10], esi
jge 0x4a16b0
mov eax, dword [eax + 8]
jmp 0x4a16b4
mov edx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x4a16a6
cmp edx, ecx
je 0x4a16c9
mov dword [ebp - 0x7f8], edx
cmp esi, dword [edx + 0x10]
jge 0x4a16cf
mov dword [ebp - 0x7f8], ecx
lea eax, [ebp - 0x7f8]
mov eax, dword [eax]
cmp eax, ecx
je 0x4a16f6
add eax, 0x14
cmp edi, eax
je 0x4a1820
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.004828c2
jmp 0x4a1820
lea eax, [ebp - 0x44]
push eax
call fcn.004a18f8
mov esi, eax
mov dword [ebp - 4], 0x8c
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x7f4], 3
call fcn.004a1828
mov dword [ebp - 4], 0x8d
mov edx, eax
push ebx
push edi
push esi
mov ecx, 0x80000002
mov dword [ebp - 0x7f4], 7
call fcn.004ab9f2
add esp, 0xc
test al, al
je 0x4a174d
mov byte [ebp - 0x7ed], bl
cmp dword [edi + 0x10], ebx
jne 0x4a1754
mov byte [ebp - 0x7ed], 1
mov dword [ebp - 4], 0x8c
lea ecx, [ebp - 0x2c]
push 7
pop ebx
mov dword [ebp - 0x7f4], ebx
and ebx, 0xfffffffb
push 0
push 1
mov dword [ebp - 0x7f4], ebx
call fcn.00482a51
and dword [ebp - 4], 0
test bl, 2
je 0x4a179a
and ebx, 0xfffffffd
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x7f4], ebx
xor ebx, ebx
push ebx
push 1
call fcn.00482a51
jmp 0x4a179c
xor ebx, ebx
cmp byte [ebp - 0x7ed], 0
je 0x4a1820
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0x8e
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x7fc]
lea ecx, [ebp - 0x5c]
call fcn.004a3c77
pop ecx
mov byte [ebp - 4], 0x8f
mov edx, str.An_unknown_product_:
push eax
lea ecx, [ebp - 0x44]
call fcn.0048c246
pop ecx
mov byte [ebp - 4], 0x90
mov ecx, edi
push eax
call fcn.0048fa55
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x44]
push ebx
push 1
call fcn.00482a51
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.00482a51
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
push ebx
push 1
call fcn.00482a51
mov eax, edi
call fcn.00736cc2
ret