Potential bad news: the huge wim file is the only thing changed, in the ones I have compared. Somebody with expertise needs to extract the wim from the two comparable ISOs and determine what is changed in there. Even at that level it could be meaningless text files, or some patch to the system files. Finding these files and determining their destination, would provide information for a "make your WZT leaked install into an official one" project.
Or is it the other way round? That the Wzor one has the additional signature? Because if we zeroise 32 bytes of data (can't post link here as my post count is less than 20) in the Wzor image we get the MSDN image.
If the following 32 bytes from offset BDE2094 to BDE20B3 (for x86 enterprise - for others one can search for the same sequence of bytes) in the Wzor image are zeroised we get the MSDN image. This is verified. However it may somehow still be that this zeroising in the whole file may actually lead to some non zero bytes appearing in a component file, though it seems unlikely to me. 52 51 2E AA 0C CE 27 D5 A5 AF 9D 96 CD 53 82 13 84 B8 D9 22 B6 94 58 F1 68 5B 4E A9 20 4A A7 AA
Please Win version 8 "Pro" x64 & x86 Portuguese Brazil forgive me for my bad English thanks for everything now pt_windows_8_pro_vl_x64_dvd_922087.iso