Function at 0x409670
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x424008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x238]
mov dword [ebp - 0x248], edx
push eax
mov ebx, ecx
mov dword [ebp - 0x238], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov eax, dword [ebp - 0x228]
mov esi, dword [ebp - 0x234]
mov edi, dword [ebp - 0x230]
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
sub eax, 0
je 0x40a4c8
sub eax, 1
je 0x40a2d3
sub eax, 1
jne 0x409931
cmp esi, 4
jg 0x40973c
movq xmm0, qword [str.WindowsNT]
movq qword [ebx], xmm0
mov ax, word [0x421d40]
mov word [ebx + 8], ax
mov al, byte [0x421d42]
push esi
mov byte [ebx + 0xa], al
lea eax, [ebp - 0x108]
push 0x421d44
push eax
call edx
lea edx, [ebp - 0x108]
add esp, 0xc
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x409715
sub edx, esi
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409721
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x23c], 0
push eax
mov dword [ebp - 0x1a4], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
sub esi, 5
je 0x40a0f6
sub esi, 1
jne case.0x4098e3.16
mov eax, dword [ebp - 0x19c]
cmp eax, 2
jne 0x4097c2
cmp byte [ebp - 0x10a], 1
jne 0x4097a6
movq xmm0, qword [str.Windows_8]
movq qword [ebx], xmm0
mov ax, word [0x421dc8]
mov word [ebx + 8], ax
mov al, byte [0x421dca]
mov byte [ebx + 0xa], al
jmp 0x409853
movups xmm0, xmmword [str.Windows_Server_2012]
movups xmmword [ebx], xmm0
mov eax, dword [0x421ddc]
mov dword [ebx + 0x10], eax
mov al, byte [0x421de0]
jmp 0x409850
cmp eax, 1
jne 0x409808
cmp byte [ebp - 0x10a], al
jne 0x4097ef
movq xmm0, qword [str.Windows_7]
movq qword [ebx], xmm0
mov ax, word [0x421dec]
mov word [ebx + 8], ax
mov al, byte [0x421dee]
mov byte [ebx + 0xa], al
jmp 0x409853
movups xmm0, xmmword [str.Windows_Server_2008_R2]
movups xmmword [ebx], xmm0
movq xmm0, qword [0x421e00]
movq qword [ebx + 0x10], xmm0
jmp 0x409853
cmp byte [ebp - 0x10a], 1
jne 0x409839
movq xmm0, qword [str.Windows_Vista]
movq qword [ebx], xmm0
mov eax, dword [0x421e10]
mov dword [ebx + 8], eax
mov ax, word [0x421e14]
mov word [ebx + 0xc], ax
mov al, byte [0x421e16]
mov byte [ebx + 0xe], al
jmp 0x409853
movups xmm0, xmmword [str.Windows_Server_2008]
movups xmmword [ebx], xmm0
mov eax, dword [0x421e28]
mov dword [ebx + 0x10], eax
mov al, byte [0x421e2c]
mov byte [ebx + 0x14], al
call fcn.00409620
test eax, eax
je 0x409879
lea ecx, [ebx - 1]
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409860
mov eax, dword [str.x64]
mov dword [ecx], eax
mov al, byte [0x421e34]
mov byte [ecx + 4], al
mov eax, dword [ebp - 0x19c]
movzx esi, word [ebp - 0x10e]
movzx edi, word [ebp - 0x110]
push str.GetProductInfo
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x1a0]
push str.Kernel32.dll
mov dword [ebp - 0x244], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4098d1
lea ecx, [ebp - 0x23c]
push ecx
push esi
push edi
push dword [ebp - 0x240]
push dword [ebp - 0x244]
call eax
mov eax, dword [ebp - 0x23c]
cmp eax, 0x47
ja case.0x4098e3.16
movzx eax, byte [eax + 0x40a5a0]
jmp dword [eax*4 + 0x40a4e4]
lea ecx, [ebx - 1]
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x4098f0
mov eax, dword [str.Home_Basic_Edition]
mov dword [ecx], eax
mov eax, dword [0x421e4c]
mov dword [ecx + 4], eax
mov eax, dword [0x421e50]
mov dword [ecx + 8], eax
mov eax, dword [0x421e54]
mov dword [ecx + 0xc], eax
mov ax, word [0x421e58]
mov word [ecx + 0x10], ax
mov al, byte [0x421e5a]
mov byte [ecx + 0x12], al
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409934
mov ax, word [0x4224f0]
mov word [ecx], ax
mov al, byte [0x4224f2]
mov byte [ecx + 2], al
movzx eax, word [ebp - 0x22c]
push eax
push dword [ebp - 0x230]
lea eax, [ebp - 0x108]
push dword [ebp - 0x234]
push str.__d._02d._d
push eax
call edx
lea edx, [ebp - 0x108]
add esp, 0x14
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x409980
sub edx, esi
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409990
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x224]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, edx
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x4099b0
sub edx, esi
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4099c0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
dec ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [ebx + 1]
lea ebx, [ebx + 1]
test al, al
jne 0x4099d7
mov ax, word [0x422504]
mov ecx, dword [ebp - 0x248]
mov word [ebx], ax
mov al, byte [0x422506]
mov byte [ebx + 2], al
pop edi
pop esi
pop ebx
test ecx, ecx
je 0x409a07
mov eax, dword [ebp - 0x234]
mov dword [ecx], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040aa0f
mov esp, ebp
pop ebp
ret
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409a18
mov eax, dword [str.Business_Edition]
mov dword [ecx], eax
mov eax, dword [0x421ea0]
mov dword [ecx + 4], eax
mov eax, dword [0x421ea4]
mov dword [ecx + 8], eax
mov eax, dword [0x421ea8]
mov dword [ecx + 0xc], eax
mov al, byte [0x421eac]
mov byte [ecx + 0x10], al
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409a51
mov ecx, 5
mov esi, str.Cluster_Server_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409a70
mov ecx, 0xb
mov esi, str.Server_Datacenter_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409a90
mov ecx, 0xb
mov esi, str.Server_Datacenter_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409ab0
mov ecx, 0xb
mov esi, str.Server_Enterprise_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409ad0
mov ecx, 0xb
mov esi, str.Server_Enterprise_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409af0
mov ecx, 0xd
mov esi, str.Server_Enterprise_Edition_for_Itanium_based_Systems
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409b10
mov eax, dword [str.Home_Server_Edition]
mov dword [ecx], eax
mov eax, dword [0x421fc0]
mov dword [ecx + 4], eax
mov eax, dword [0x421fc4]
mov dword [ecx + 8], eax
mov eax, dword [0x421fc8]
mov dword [ecx + 0xc], eax
mov eax, dword [0x421fcc]
mov dword [ecx + 0x10], eax
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409b50
mov ecx, 8
mov esi, str.Server_for_Small_Business_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409b70
mov eax, dword [str.Small_Business_Server]
mov dword [ecx], eax
mov eax, dword [0x421ff8]
mov dword [ecx + 4], eax
mov eax, dword [0x421ffc]
mov dword [ecx + 8], eax
mov eax, dword [0x422000]
mov dword [ecx + 0xc], eax
mov eax, dword [0x422004]
mov dword [ecx + 0x10], eax
mov ax, word [0x422008]
mov word [ecx + 0x14], ax
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409bb3
mov ecx, 9
mov esi, str.Small_Business_Server_Premium_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409bd1
mov ecx, 0xb
mov esi, str.Server_Standard_Edition__full_installation_
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409bf0
mov ecx, 0xb
mov esi, str.Server_Standard_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409c10
mov ecx, 8
mov esi, str.Storage_Server_Enterprise_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409c30
mov ecx, 7
mov esi, str.Storage_Server_Express_Edition
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409c50
mov ecx, 8
mov esi, str.Storage_Server_Standard_Edition
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409c70
mov ecx, 8
mov esi, str.Storage_Server_Workgroup_Edition
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409c90
mov eax, dword [str.An_unknown_product]
mov dword [ecx], eax
mov eax, dword [0x422118]
mov dword [ecx + 4], eax
mov eax, dword [0x42211c]
mov dword [ecx + 8], eax
mov eax, dword [0x422120]
mov dword [ecx + 0xc], eax
mov ax, word [0x422124]
mov word [ecx + 0x10], ax
mov al, byte [0x422126]
jmp 0x409928
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409cd0
mov eax, dword [str.Web_Server_Edition]
mov dword [ecx], eax
mov eax, dword [0x42212c]
mov dword [ecx + 4], eax
mov eax, dword [0x422130]
mov dword [ecx + 8], eax
mov eax, dword [0x422134]
mov dword [ecx + 0xc], eax
mov ax, word [0x422138]
mov word [ecx + 0x10], ax
mov al, byte [0x42213a]
jmp 0x409928
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409d10
mov eax, dword [str.Starter_Edition]
mov dword [ecx], eax
mov eax, dword [0x421e3c]
mov dword [ecx + 4], eax
mov eax, dword [0x421e40]
mov dword [ecx + 8], eax
mov eax, dword [0x421e44]
mov dword [ecx + 0xc], eax
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409d41
mov eax, dword [str.Home_Premium_Edition]
mov dword [ecx], eax
mov eax, dword [0x421e60]
mov dword [ecx + 4], eax
mov eax, dword [0x421e64]
mov dword [ecx + 8], eax
mov eax, dword [0x421e68]
mov dword [ecx + 0xc], eax
mov eax, dword [0x421e6c]
mov dword [ecx + 0x10], eax
mov al, byte [0x421e70]
mov byte [ecx + 0x14], al
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409d82
mov eax, dword [str.Enterprise_Edition]
mov dword [ecx], eax
mov eax, dword [0x421e78]
mov dword [ecx + 4], eax
mov eax, dword [0x421e7c]
mov dword [ecx + 8], eax
mov eax, dword [0x421e80]
mov dword [ecx + 0xc], eax
mov ax, word [0x421e84]
mov word [ecx + 0x10], ax
mov al, byte [0x421e86]
jmp 0x409928
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409dc2
mov eax, dword [str.Ultimate_Edition]
mov dword [ecx], eax
mov eax, dword [0x421e8c]
mov dword [ecx + 4], eax
mov eax, dword [0x421e90]
mov dword [ecx + 8], eax
mov eax, dword [0x421e94]
mov dword [ecx + 0xc], eax
mov al, byte [0x421e98]
mov byte [ecx + 0x10], al
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
nop dword [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409e00
mov eax, dword [str.Professional_Edition]
mov dword [ecx], eax
mov eax, dword [0x422140]
mov dword [ecx + 4], eax
mov eax, dword [0x422144]
mov dword [ecx + 8], eax
mov eax, dword [0x422148]
mov dword [ecx + 0xc], eax
mov eax, dword [0x42214c]
mov dword [ecx + 0x10], eax
mov al, byte [0x422150]
mov byte [ecx + 0x14], al
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409e41
mov ecx, 9
mov esi, str.Web_Server_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409e60
mov ecx, 0xd
mov esi, str.Windows_Essential_Business_Server_Management_Server
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409e80
mov ecx, 0xc
mov esi, str.Windows_Essential_Business_Server_Security_Server
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409ea0
mov ecx, 0xc
mov esi, str.Windows_Essential_Business_Server_Messaging_Server
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea ecx, [ebx - 1]
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409ec0
mov eax, dword [str.Server_Foundation]
mov dword [ecx], eax
mov eax, dword [0x42221c]
mov dword [ecx + 4], eax
mov eax, dword [0x422220]
mov dword [ecx + 8], eax
mov eax, dword [0x422224]
mov dword [ecx + 0xc], eax
mov ax, word [0x422228]
mov word [ecx + 0x10], ax
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax + eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409f00
mov ecx, 7
mov esi, str.Home_Premium_Server_Edition
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409f20
mov ecx, 0x10
mov esi, str.Server_2008_without_Hyper_V_for_Windows_Essential_Server_Solutions
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409f40
mov ecx, 0xa
mov esi, str.Server_Standard_Edition_without_Hyper_V
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409f60
mov ecx, 0xa
mov esi, str.Server_Datacenter_Edition_without_Hyper_V
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409f80
mov ecx, 0xa
mov esi, str.Server_Enterprise_Edition_without_Hyper_V
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409fa0
mov ecx, 0xf
mov esi, str.Server_Datacenter_Edition_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409fc0
mov ecx, 0xf
mov esi, str.Server_Standard_Edition_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409fe0
mov ecx, 0xf
mov esi, str.Server_Enterprise_Edition_without_Hyper_V__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a000
mov ecx, 6
mov esi, str.Microsoft_Hyper_V_Server
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a020
mov ecx, 0xc
mov esi, str.Storage_Server_Express_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a040
mov ecx, 0xd
mov esi, str.Storage_Server_Standard_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a060
mov ecx, 0xd
mov esi, str.Storage_Server_Workgroup_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a080
mov ecx, 0xd
mov esi, str.Storage_Server_Enterprise_Edition__core_installation_
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40a0a0
mov ecx, 9
mov esi, str.Cluster_Server_Edition_without_Hyper_V
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x40a0c0
mov al, byte [0x420862]
mov byte [edi], al
jmp case.0x4098e3.16
lea edi, [ebx - 1]
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x40a0e0
mov al, byte [0x420862]
mov byte [edi], al
jmp case.0x4098e3.16
cmp edi, 1
jne 0x40a220
mov al, byte [ebp - 0x10a]
cmp al, 1
jne 0x40a194
test dword [ebp - 0x10c], 0x200
lea ecx, [ebx - 1]
movq xmm0, qword [str.WindowsXP]
movq qword [ebx], xmm0
mov ax, word [0x421d50]
mov word [ebx + 8], ax
mov al, byte [0x421d52]
mov byte [ebx + 0xa], al
je 0x40a166
nop word [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a140
mov eax, dword [str.HomeEdition]
mov dword [ecx], eax
mov eax, dword [0x421d58]
mov dword [ecx + 4], eax
mov eax, dword [0x421d5c]
mov dword [ecx + 8], eax
jmp case.0x4098e3.16
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a166
mov eax, dword [str.Professional]
mov dword [ecx], eax
mov eax, dword [0x421d64]
mov dword [ecx + 4], eax
mov eax, dword [0x421d68]
mov dword [ecx + 8], eax
mov al, byte [0x421d6c]
mov byte [ecx + 0xc], al
jmp case.0x4098e3.16
cmp al, 3
jne case.0x4098e3.16
test byte [ebp - 0x10c], 2
lea ecx, [ebx - 1]
movups xmm0, xmmword [str.Windows2002_.NET]
movups xmmword [ebx], xmm0
mov ax, word [0x421d80]
mov word [ebx + 0x10], ax
je 0x40a1f8
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a1c0
mov eax, dword [str.Enterprise_Server]
mov dword [ecx], eax
mov eax, dword [0x421d88]
mov dword [ecx + 4], eax
mov eax, dword [0x421d8c]
mov dword [ecx + 8], eax
mov eax, dword [0x421d90]
mov dword [ecx + 0xc], eax
mov ax, word [0x421d94]
mov word [ecx + 0x10], ax
jmp case.0x4098e3.16
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a1f8
mov eax, dword [str.Server]
mov dword [ecx], eax
mov ax, word [0x421d9c]
mov word [ecx + 4], ax
mov al, byte [0x421d9e]
mov byte [ecx + 6], al
jmp case.0x4098e3.16
movq xmm0, qword [str.Windows2000]
movq qword [ebx], xmm0
mov eax, dword [0x421da8]
mov dword [ebx + 8], eax
movzx eax, byte [0x421dac]
mov byte [ebx + 0xc], al
mov al, byte [ebp - 0x10a]
cmp al, 1
jne 0x40a27e
lea ecx, [ebx - 1]
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a250
mov eax, dword [str.Professional]
mov dword [ecx], eax
mov eax, dword [0x421d64]
mov dword [ecx + 4], eax
mov eax, dword [0x421d68]
mov dword [ecx + 8], eax
mov al, byte [0x421d6c]
mov byte [ecx + 0xc], al
jmp case.0x4098e3.16
cmp al, 3
jne case.0x4098e3.16
test byte [ebp - 0x10c], 2
lea ecx, [ebx - 1]
je 0x40a2c4
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a296
mov eax, dword [str.Advanced_Server]
mov dword [ecx], eax
mov eax, dword [0x421db4]
mov dword [ecx + 4], eax
mov eax, dword [0x421db8]
mov dword [ecx + 8], eax
mov eax, dword [0x421dbc]
mov dword [ecx + 0xc], eax
jmp case.0x4098e3.16
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a2c4
jmp 0x40a202
test edi, edi
je 0x40a3a3
cmp edi, 0xa
je 0x40a31f
cmp edi, 0x5a
je 0x40a304
movq xmm0, qword [str.Windows9x]
movq qword [ebx], xmm0
mov ax, word [0x421d34]
mov word [ebx + 8], ax
jmp 0x409931
movq xmm0, qword [str.WindowsMe]
movq qword [ebx], xmm0
mov ax, word [0x421d28]
mov word [ebx + 8], ax
jmp 0x409931
lea ecx, [ebp - 0x224]
mov eax, 0x421cdc
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40a350
test dl, dl
je 0x40a34c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40a350
add eax, 2
add ecx, 2
test dl, dl
jne 0x40a330
xor eax, eax
jmp 0x40a355
sbb eax, eax
or eax, 1
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
jne 0x40a388
movups xmm0, xmmword [str.Windows98SecondEdision]
movups xmmword [ebx], xmm0
mov eax, dword [0x421d0c]
mov dword [ebx + 0x10], eax
mov ax, word [0x421d10]
mov word [ebx + 0x14], ax
mov al, byte [0x421d12]
mov byte [ebx + 0x16], al
jmp 0x409931
movq xmm0, qword [str.Windows98]
movq qword [ebx], xmm0
mov ax, word [0x421d1c]
mov word [ebx + 8], ax
jmp 0x409931
movq xmm0, qword [str.Windows95]
lea ecx, [ebp - 0x224]
movq qword [ebx], xmm0
mov ax, word [0x421cd8]
mov word [ebx + 8], ax
mov eax, 0x421cdc
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40a3e4
test dl, dl
je 0x40a3e0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40a3e4
add eax, 2
add ecx, 2
test dl, dl
jne 0x40a3c4
xor eax, eax
jmp 0x40a3e9
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40a406
lea edi, [ebx - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x40a3f0
mov eax, dword [0x421ce0]
mov dword [edi], eax
jmp case.0x4098e3.16
lea ecx, [ebp - 0x224]
mov eax, 0x421ce4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40a431
test dl, dl
je 0x40a42d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40a431
add eax, 2
add ecx, 2
test dl, dl
jne 0x40a411
xor eax, eax
jmp 0x40a436
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40a45e
lea ecx, [ebx - 1]
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a440
mov eax, dword [str.OSR2]
mov dword [ecx], eax
mov al, byte [0x421cec]
mov byte [ecx + 4], al
jmp case.0x4098e3.16
lea ecx, [ebp - 0x224]
mov eax, 0x421cf0
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40a490
test dl, dl
je 0x40a48c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40a490
add eax, 2
add ecx, 2
test dl, dl
jne 0x40a470
xor eax, eax
jmp 0x40a495
sbb eax, eax
or eax, 1
test eax, eax
jne case.0x4098e3.16
lea ecx, [ebx - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x40a4a0
mov eax, dword [str.OSR2.5]
mov dword [ecx], eax
mov ax, word [0x421cf8]
mov word [ecx + 4], ax
mov al, byte [0x421cfa]
mov byte [ecx + 6], al
jmp case.0x4098e3.16
movq xmm0, qword [str.Windows_3.1]
movq qword [ebx], xmm0
mov eax, dword [0x4224ec]
mov dword [ebx + 8], eax
jmp 0x409931