Function at 0x40e7ac
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x2e
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x40e7b4
call fcn.00486110
mov edx, dword [esp + 0xc8]
lea ecx, [esp]
call fcn.00441000
mov edx, dword [esp + 0xcc]
lea ecx, [esp + 4]
call fcn.00441000
mov edx, dword [esp + 0xd0]
lea ecx, [esp + 8]
call fcn.00441000
mov edx, dword [esp + 0xd4]
lea ecx, [esp + 0xc]
call fcn.00441000
mov edx, dword [esp + 0xd8]
lea ecx, [esp + 0x10]
call fcn.00441000
push dword [esp]
mov edx, str.installkeywin
pop ecx
call fcn.00441660
je 0x40ed11
mov dword [esp + 0x18], 0
mov eax, 0x55d09e
push eax
call fcn.004359d6
push dword [0xb2cab8]
call fcn.004359d6
mov eax, 0x55d09e
push eax
call fcn.004359d6
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___dlv_all
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 1
mov eax, 0x55d09e
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov edx, dword [0xb2cc3c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
lea eax, [esp + 0x24]
push eax
call fcn.00486010
mov dword [esp + 0x24], 1
jmp 0x40e913
mov eax, str.Name:
push eax
push dword [esp + 0x24]
call fcn.00483bb0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x24]
jl 0x40ecc0
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov eax, str.Name:
push eax
push dword [esp + 0x30]
push dword [esp + 0x30]
call fcn.00483c40
lea eax, [esp + 0x2c]
push eax
call fcn.00486010
push dword [esp + 0x28]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
je 0x40e972
jmp 0x40ecb6
push edx
call fcn.00485f70
pop edx
push eax
mov eax, str.Activation_ID:
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.004263b9
lea eax, [esp + 0x30]
push eax
call fcn.00486010
mov edx, dword [esp + 0x10]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._edition
push edx
call fcn.00485fb0
lea eax, [esp + 0x34]
push eax
call fcn.00486010
mov dword [esp + 0x34], 0
jmp 0x40e9c5
push dword [0xb2d198]
call fcn.00471db7
cmp eax, dword [esp + 0x34]
jl 0x40ecb6
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x34]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
push dword [ebp]
push dword [esp + 0x30]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40ecac
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [esp + 0x3c]
call fcn.00483600
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [esp + 0x38]
call fcn.00483600
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004838a0
call fcn.004416d0
mov ebx, eax
and ebx, ebx
jle 0x40ecac
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x562964
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x38]
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x562964
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x40]
push edx
call fcn.00485fb0
call fcn.004860a0
push dword [0xb2cb98]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004157b1
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [0xb2cbb8]
push edx
call fcn.00485fb0
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
mov edx, dword [ebp]
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 0xf
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
push dword [ebp]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___ipk
push edx
call fcn.00485fb0
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
mov edx, dword [ebp]
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov eax, 0x55d09e
push eax
call fcn.004359d6
push 4
push 0
push 0xff
push 0
call fcn.0047219e
push eax
mov eax, str.Product_key_installation_successful.
push eax
push dword [0xb2cb98]
call fcn.004157b1
mov dword [esp + 0x18], 1
jmp 0x40ecb6
inc dword [esp + 0x34]
jno 0x40e9c5
inc dword [esp + 0x24]
jno 0x40e913
mov ebx, dword [esp + 0x18]
and ebx, ebx
jne 0x40ed0c
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [0xb2cbbc]
push edx
call fcn.00485fb0
mov edx, str.GVLK_Key_Notfound.
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
jmp 0x41287f
push dword [esp]
mov edx, str.installkeyofs
pop ecx
call fcn.00441660
je 0x40f232
push edx
call fcn.00485f70
pop edx
push eax
call fcn.0042f37e
lea eax, [0xb2cb44]
push eax
call fcn.00486010
push dword [0xb2cb44]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x40f22d
mov eax, 0x55d09e
push eax
call fcn.004359d6
push dword [0xb2c65c]
call fcn.004359d6
mov eax, 0x55d09e
push eax
call fcn.004359d6
push dword [0xb2cc18]
mov edx, 0x56abe8
pop ecx
call fcn.00441660
je 0x40ee00
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___osppsvcrestart
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___dstatusall
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 1
mov eax, 0x55d09e
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov edx, dword [0xb2cc3c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
lea eax, [esp + 0x24]
push eax
call fcn.00486010
mov dword [esp + 0x24], 1
jmp 0x40eea6
mov eax, 0x5683f8
push eax
push dword [esp + 0x24]
call fcn.00483bb0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x24]
jl 0x40f1e1
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x5683f8
push eax
push dword [esp + 0x30]
push dword [esp + 0x30]
call fcn.00483c40
lea eax, [esp + 0x2c]
push eax
call fcn.00486010
push dword [esp + 0x28]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
je 0x40ef05
jmp 0x40f1d7
push edx
call fcn.00485f70
pop edx
push eax
mov eax, str.ID:
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.004263b9
lea eax, [esp + 0x30]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
mov eax, str.LICENSE_NAME:
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.004263b9
lea eax, [esp + 0x3c]
push eax
call fcn.00486010
mov eax, str.Preview
push eax
push dword [esp + 0x3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40ef63
jmp 0x40f1d7
push dword [esp + 0x2c]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
je 0x40ef79
jmp 0x40f1d7
mov dword [esp + 0x34], 0
jmp 0x40ef83
push dword [0xb2d198]
call fcn.00471db7
cmp eax, dword [esp + 0x34]
jl 0x40f1d7
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x34]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
push dword [ebp]
push dword [esp + 0x30]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40f1cd
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x40]
push edx
call fcn.00485fb0
mov edx, 0x57418a
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 5
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x40]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [0xb2cbb8]
push edx
call fcn.00485fb0
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
mov edx, dword [ebp]
push edx
call fcn.00485fb0
mov edx, 0x57418a
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 5
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
push dword [ebp]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___inpkey:
push edx
call fcn.00485fb0
mov edx, dword [0xb2d19c]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xb2d198]
mov edx, dword [ebp]
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov eax, 0x55d09e
push eax
call fcn.004359d6
push 4
push 0
push 0xff
push 0
call fcn.0047219e
push eax
mov eax, str.Product_key_installation_successful.
push eax
push dword [0xb2cb98]
call fcn.004157b1
mov dword [esp + 0x18], 1
jmp 0x40f1d7
inc dword [esp + 0x34]
jno 0x40ef83
inc dword [esp + 0x24]
jno 0x40eea6
mov ebx, dword [esp + 0x18]
and ebx, ebx
jne 0x40f22d
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [0xb2cbbc]
push edx
call fcn.00485fb0
mov edx, str.GVLK_Key_Notfound.
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
jmp 0x41287f
push dword [esp]
mov edx, str.infowin
pop ecx
call fcn.00441660
je 0x40f2e3
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___dlv
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
jmp 0x41287f
push dword [esp]
mov edx, str.infoofs
pop ecx
call fcn.00441660
je 0x40f433
push edx
call fcn.00485f70
pop edx
push eax
call fcn.0042f37e
lea eax, [0xb2cb44]
push eax
call fcn.00486010
push dword [0xb2cb44]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x40f42e
push dword [0xb2cc18]
mov edx, 0x56abe8
pop ecx
call fcn.00441660
je 0x40f3b1
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___osppsvcrestart
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___dstatus
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
jmp 0x41287f
push dword [esp]
mov edx, str.activatewin
pop ecx
call fcn.00441660
je 0x40f913
mov edx, 0x55d09e
lea ecx, [0xb2c8b0]
call fcn.00441008
mov eax, 0x55d09e
push eax
call fcn.004359d6
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.Setting_SPP_KMS_Server_Address
push edx
call fcn.00485fb0
mov edx, dword [esp + 0xc]
push edx
call fcn.00485fb0
mov edx, 0x55e958
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x10]
push edx
call fcn.00485fb0
mov edx, 0x560604
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xb2c6b0]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x56a4c2
push edx
call fcn.00485fb0
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x14]
push edx
call fcn.00485fb0
mov edx, 0x56ea40
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004416b2
add dword [esp + 8], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xb2c6b0]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x56a4c2
push edx
call fcn.00485fb0
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x18]
push edx
call fcn.00485fb0
mov edx, 0x56ea40
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004416b2
add dword [esp + 8], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xb2c6b0]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x56a4c2
push edx
call fcn.00485fb0
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x14]
push edx
call fcn.00485fb0
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004416b2
add dword [esp + 8], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xb2c6b0]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x56a4c2
push edx
call fcn.00485fb0
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x18]
push edx
call fcn.00485fb0
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004416b2
add dword [esp + 8], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___skms
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x18]
push edx
call fcn.00485fb0
mov edx, 0x55e958
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x1c]
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
lea eax, [esp + 0x18]
push eax
call fcn.00486010
push 6
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0xc]
push dword [0xb2cb98]
call fcn.004157b1
push 6
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x10]
push dword [0xb2cb98]
call fcn.004157b1
mov eax, 0x55d09e
push eax
call fcn.004359d6
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55e3e6
push eax
mov eax, 0x57583e
push eax
mov eax, 0x5610ea
push eax
call fcn.0043b8a2
lea eax, [esp + 0x40]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.Activating
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x44]
push edx
call fcn.00485fb0
mov edx, 0x560604
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x44]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___ato
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push dword [0xb2c8b0]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x40f90e
push dword [0xb2c8b0]
call fcn.0041dfb8
jmp 0x41287f
push dword [esp]
mov edx, str.activateofs
pop ecx
call fcn.00441660
je 0x40fd7b
push edx
call fcn.00485f70
pop edx
push eax
call fcn.0042f37e
lea eax, [0xb2cb44]
push eax
call fcn.00486010
push dword [0xb2cb44]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x40fd76
mov edx, 0x55d09e
lea ecx, [0xb2c8b0]
call fcn.00441008
mov eax, 0x55d09e
push eax
call fcn.004359d6
push dword [0xb2cc18]
mov edx, 0x56abe8
pop ecx
call fcn.00441660
je 0x40f9fc
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___osppsvcrestart
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.Setting_SPP_KMS_Server_Address
push edx
call fcn.00485fb0
mov edx, dword [esp + 0xc]
push edx
call fcn.00485fb0
mov edx, 0x55e958
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x10]
push edx
call fcn.00485fb0
mov edx, 0x560604
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 5
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0xc]
push dword [0xb2cb98]
call fcn.004157b1
push 5
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x10]
push dword [0xb2cb98]
call fcn.004157b1
mov eax, 0x55d09e
push eax
call fcn.004359d6
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___sethst:
push edx
call fcn.00485fb0
mov edx, dword [esp + 8]
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___setprt:
push edx
call fcn.00485fb0
mov edx, dword [esp + 0xc]
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___act
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push dword [0xb2c8b0]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x40fd76
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb44]
push edx
call fcn.00485fb0
mov edx, str.___dstatusall
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 1
mov eax, 0x55d09e
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [0xb2cb44]
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov edx, dword [0xb2cc3c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
lea eax, [esp + 0x24]
push eax
call fcn.00486010
push 1
push dword [esp + 0x24]
call fcn.0041f2b2
mov ebx, eax
and ebx, ebx
jle 0x40fd6b
push 0x34
push dword [0xb2cba0]
mov eax, 0x55d09e
push eax
call fcn.00436510
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x40]
cmp ebx, 6
jne 0x40fd6b
push 0x7d0
call fcn.0046a5ab
push 0
push dword [esp + 0x24]
call fcn.0041f2b2
push 0x7d0
call fcn.0046a5ab
push 0x55d09e
push 0x55d09e
push 0x55d09e
push 0x55d09e
mov eax, str.installkeyofs
push eax
call fcn.0040e7ac
jmp 0x40f927
push dword [0xb2c8b0]
call fcn.0041dfb8
jmp 0x41287f
push dword [esp]
mov edx, str.activatewindigital
pop ecx
call fcn.00441660
je 0x41287f
lea eax, [esp + 0x44]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
push 0x100
push 1
call fcn.004406ae
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55e3e6
push eax
mov eax, 0x57583e
push eax
mov eax, 0x5610ea
push eax
call fcn.0043b8a2
lea eax, [esp + 0x60]
push eax
call fcn.00486010
mov eax, str.2015
push eax
push dword [esp + 0x60]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40fdfa
mov dword [esp + 0x54], 1
jmp 0x40fe17
mov eax, str.LTSC
push eax
push dword [esp + 0x60]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40fe17
mov dword [esp + 0x58], 1
mov dword [esp + 0x60], 0
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55e3e6
push eax
mov eax, str.EditionID
push eax
mov eax, 0x5610ea
push eax
call fcn.0043b8a2
lea eax, [esp + 0x68]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55e3e6
push eax
mov eax, str.CurrentBuild
push eax
mov eax, 0x5610ea
push eax
call fcn.0043b8a2
lea eax, [esp + 0x6c]
push eax
call fcn.00486010
mov ebx, dword [0xb2c860]
and ebx, ebx
jle 0x40fe85
mov dword [esp + 0x6c], 0
jmp 0x40fe8d
mov dword [esp + 0x6c], 1
push dword [esp + 0x64]
mov edx, str.EnterpriseS
pop ecx
call fcn.00441660
je 0x40fead
mov ebx, dword [esp + 0x58]
and ebx, ebx
jle 0x40fead
mov eax, 1
jmp 0x40feaf
xor eax, eax
and eax, eax
je 0x40ff00
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00441008
mov edx, 0x564d1a
lea ecx, [ebp + 4]
call fcn.00441008
mov edx, 0x55e550
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov dword [esp + 0x6c], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.IoTEnterprise
pop ecx
call fcn.00441660
je 0x40ff2d
mov eax, str.19041
push eax
push dword [esp + 0x6c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40ff2d
mov eax, 1
jmp 0x40ff2f
xor eax, eax
and eax, eax
je 0x40ffab
lea ebp, [esp + 0x44]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x70]
and ebx, ebx
jne 0x40ff5f
lea ebp, [esp + 0x44]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x40ff70
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56a418
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x561bf0
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov dword [esp + 0x70], 0
mov dword [esp + 0x58], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.IoTEnterpriseS
pop ecx
call fcn.00441660
je 0x40ffd8
mov eax, str.19044
push eax
push dword [esp + 0x6c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x40ffd8
mov eax, 1
jmp 0x40ffda
xor eax, eax
and eax, eax
je 0x410056
lea ebp, [esp + 0x44]
mov edx, str.IoTEnterpriseS
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x70]
and ebx, ebx
jne 0x41000a
lea ebp, [esp + 0x44]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x41001b
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56a418
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_99682
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov dword [esp + 0x70], 0
mov dword [esp + 0x58], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.IoTEnterprise
pop ecx
call fcn.00441660
je 0x4100df
lea ebp, [esp + 0x44]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x70]
and ebx, ebx
jne 0x410093
lea ebp, [esp + 0x44]
mov edx, str.XQQYW_NFFMW_XJPBH_K8732_CKFFD
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4100a4
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x5688da
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x561bf0
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov dword [esp + 0x70], 0
mov dword [esp + 0x58], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00441660
je 0x4100ff
mov ebx, dword [esp + 0x58]
and ebx, ebx
jle 0x4100ff
mov eax, 1
jmp 0x410101
xor eax, eax
and eax, eax
je 0x410152
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00441008
mov edx, 0x572b4c
lea ecx, [ebp + 4]
call fcn.00441008
mov edx, 0x55e58a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov dword [esp + 0x6c], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseS
pop ecx
call fcn.00441660
je 0x410172
mov ebx, dword [esp + 0x54]
and ebx, ebx
jle 0x410172
mov eax, 1
jmp 0x410174
xor eax, eax
and eax, eax
je 0x4101e0
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4101a4
lea ebp, [esp + 0x44]
mov edx, str.FWN7H_PF93Q_4GGP8_M8RF3_MDWWW
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4101b5
lea ebp, [esp + 0x44]
mov edx, 0x55f10c
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e550
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00441660
je 0x410200
mov ebx, dword [esp + 0x54]
and ebx, ebx
jle 0x410200
mov eax, 1
jmp 0x410202
xor eax, eax
and eax, eax
je 0x41026e
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410232
lea ebp, [esp + 0x44]
mov edx, str.8V8WN_3GXBH_2TCMG_XHRX3_9766K
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410243
lea ebp, [esp + 0x44]
mov edx, 0x563f4e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e58a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ProfessionalWorkstation
pop ecx
call fcn.00441660
je 0x4102e7
lea ebp, [esp + 0x44]
mov edx, str.ProfessionalWorkstation
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4102ab
lea ebp, [esp + 0x44]
mov edx, str.DXG7C_N36C4_C4HTG_X4T3X_2YV77
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4102bc
lea ebp, [esp + 0x44]
mov edx, 0x565fd8
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x564682
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_43626
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ProfessionalWorkstationN
pop ecx
call fcn.00441660
je 0x410360
lea ebp, [esp + 0x44]
mov edx, str.ProfessionalWorkstationN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410324
lea ebp, [esp + 0x44]
mov edx, str.WYPNQ_8C467_V2W6J_TX4WX_WT2RQ
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410335
lea ebp, [esp + 0x44]
mov edx, 0x566d1c
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x564784
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_43644
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerRdsh
pop ecx
call fcn.00441660
je 0x4103d9
lea ebp, [esp + 0x44]
mov edx, str.ServerRdsh
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x41039d
lea ebp, [esp + 0x44]
mov edx, str.NJCF7_PW8QT_3324D_688JX_2YV66
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4103ae
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56686e
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_41295
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ProfessionalN
pop ecx
call fcn.00441660
je 0x410452
lea ebp, [esp + 0x44]
mov edx, str.ProfessionalN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410416
lea ebp, [esp + 0x44]
mov edx, str.2B87N_8KFHP_DKV6R_Y2C8J_PKCKT
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410427
lea ebp, [esp + 0x44]
mov edx, 0x56585a
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x5634aa
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98859
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ProfessionalEducationN
pop ecx
call fcn.00441660
je 0x4104cb
lea ebp, [esp + 0x44]
mov edx, str.ProfessionalEducationN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x41048f
lea ebp, [esp + 0x44]
mov edx, str.GJTYN_HDMQY_FRR76_HVGC7_QPF8P
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4104a0
lea ebp, [esp + 0x44]
mov edx, str.YVWGF_BXNMC_HTQYQ_CPQ99_66QFC
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x5648a4
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_04956
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ProfessionalEducation
pop ecx
call fcn.00441660
je 0x410544
lea ebp, [esp + 0x44]
mov edx, str.ProfessionalEducation
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410508
lea ebp, [esp + 0x44]
mov edx, str.8PTT6_RNW4C_6V7J2_C2D3X_MHBPB
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410519
lea ebp, [esp + 0x44]
mov edx, 0x574714
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56484c
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_04955
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.Professional
pop ecx
call fcn.00441660
je 0x4105bd
lea ebp, [esp + 0x44]
mov edx, str.Professional
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410581
lea ebp, [esp + 0x44]
mov edx, str.VK7JG_NPHTM_C97JM_9MPGT_3V66T
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410592
lea ebp, [esp + 0x44]
mov edx, 0x56b8a6
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x563436
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98841
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00441660
je 0x410636
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4105fa
lea ebp, [esp + 0x44]
mov edx, str.2DBW3_N2PJG_MVHW3_G7TDK_9HKR4
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x41060b
lea ebp, [esp + 0x44]
mov edx, str.QFFDN_GRT3P_VKWWX_X7T3R_8B639
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e58a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_04921
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseS
pop ecx
call fcn.00441660
je 0x4106af
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410673
lea ebp, [esp + 0x44]
mov edx, str.NK96Y_D9CD8_W44CQ_R8YTK_DYJWX
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410684
lea ebp, [esp + 0x44]
mov edx, 0x5693a4
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e550
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_05035
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EnterpriseN
pop ecx
call fcn.00441660
je 0x410728
lea ebp, [esp + 0x44]
mov edx, str.EnterpriseN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4106ec
lea ebp, [esp + 0x44]
mov edx, str.3V6Q6_NQXCX_V8YXR_9QCYV_QPFCT
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4106fd
lea ebp, [esp + 0x44]
mov edx, 0x57851c
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x560448
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98746
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.Enterprise
pop ecx
call fcn.00441660
je 0x4107a1
lea ebp, [esp + 0x44]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410765
lea ebp, [esp + 0x44]
mov edx, str.XGVPP_NMH47_7TTHJ_W3FW7_8HV2C
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410776
lea ebp, [esp + 0x44]
mov edx, 0x568df4
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e54c
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_99683
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.EducationN
pop ecx
call fcn.00441660
je 0x41081a
lea ebp, [esp + 0x44]
mov edx, str.EducationN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4107de
lea ebp, [esp + 0x44]
mov edx, str.84NGF_MHBT6_FXBX8_QWJK7_DRR8H
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4107ef
lea ebp, [esp + 0x44]
mov edx, 0x56136c
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e50c
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98892
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.Education
pop ecx
call fcn.00441660
je 0x410893
lea ebp, [esp + 0x44]
mov edx, str.Education
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410857
lea ebp, [esp + 0x44]
mov edx, str.YNMGQ_8RYV3_4PGQ3_C8XTP_7CFBY
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410868
lea ebp, [esp + 0x44]
mov edx, 0x578558
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e434
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98886
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, 0x56caac
pop ecx
call fcn.00441660
je 0x41090c
lea ebp, [esp + 0x44]
mov edx, 0x56caac
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4108d0
lea ebp, [esp + 0x44]
mov edx, str.BT79Q_G7N6G_PGBYW_4YWX6_6F4BT
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4108e1
lea ebp, [esp + 0x44]
mov edx, 0x55d1b8
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x577554
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_99661
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.CoreN
pop ecx
call fcn.00441660
je 0x410985
lea ebp, [esp + 0x44]
mov edx, str.CoreN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410949
lea ebp, [esp + 0x44]
mov edx, str.4CPRK_NM3K3_X6XXQ_RXX86_WXCHW
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x41095a
lea ebp, [esp + 0x44]
mov edx, 0x5691a8
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56caa6
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98877
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.CoreCountrySpecific
pop ecx
call fcn.00441660
je 0x4109fe
lea ebp, [esp + 0x44]
mov edx, str.CoreCountrySpecific
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4109c2
lea ebp, [esp + 0x44]
mov edx, 0x55d3cc
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x4109d3
lea ebp, [esp + 0x44]
mov edx, 0x578074
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x56cae0
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_99652
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.Core
pop ecx
call fcn.00441660
je 0x410a77
lea ebp, [esp + 0x44]
mov edx, str.Core
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410a3b
lea ebp, [esp + 0x44]
mov edx, str.YTMG3_N6DKC_DKB77_7M9GH_8HVX7
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410a4c
lea ebp, [esp + 0x44]
mov edx, 0x5698d0
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x57758a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X19_98868
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.CloudN
pop ecx
call fcn.00441660
je 0x410af0
lea ebp, [esp + 0x44]
mov edx, str.CloudN
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410ab4
lea ebp, [esp + 0x44]
mov edx, str.NH9J3_68WK7_6FB93_4K3DF_DJ4F6
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410ac5
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x566c3a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_32987
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.Cloud
pop ecx
call fcn.00441660
je 0x410b69
lea ebp, [esp + 0x44]
mov edx, str.Cloud
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410b2d
lea ebp, [esp + 0x44]
mov edx, str.V3WVW_N2PV2_CGWC3_34QGF_VMJ2C
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410b3e
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x566b52
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, str.X21_32983
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerStandard
pop ecx
call fcn.00441660
je 0x410be2
lea ebp, [esp + 0x44]
mov edx, str.ServerStandard
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410ba6
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410bb7
lea ebp, [esp + 0x44]
mov edx, 0x560bc0
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e852
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerStandardCore
pop ecx
call fcn.00441660
je 0x410c5b
lea ebp, [esp + 0x44]
mov edx, str.ServerStandardCore
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410c1f
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410c30
lea ebp, [esp + 0x44]
mov edx, 0x560bc0
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55ecd8
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerDatacenter
pop ecx
call fcn.00441660
je 0x410cd4
lea ebp, [esp + 0x44]
mov edx, str.ServerDatacenter
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410c98
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410ca9
lea ebp, [esp + 0x44]
mov edx, 0x56a51e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55e8f0
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerDatacenterCore
pop ecx
call fcn.00441660
je 0x410d4d
lea ebp, [esp + 0x44]
mov edx, str.ServerDatacenterCore
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410d11
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410d22
lea ebp, [esp + 0x44]
mov edx, 0x56a51e
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x55ec4a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerSolution
pop ecx
call fcn.00441660
je 0x410dc3
lea ebp, [esp + 0x44]
mov edx, str.ServerSolution
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410d8a
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410d9b
lea ebp, [esp + 0x44]
mov edx, 0x574edc
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x564d9a
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
jmp 0x410e37
push dword [esp + 0x64]
mov edx, str.ServerSolutionCore
pop ecx
call fcn.00441660
je 0x410e37
lea ebp, [esp + 0x44]
mov edx, str.ServerSolutionCore
lea ecx, [ebp]
call fcn.00441008
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410e00
lea ebp, [esp + 0x44]
mov edx, 0x55d09e
lea ecx, [ebp + 4]
call fcn.00441008
jmp 0x410e11
lea ebp, [esp + 0x44]
mov edx, 0x574edc
lea ecx, [ebp + 4]
call fcn.00441008
lea ebp, [esp + 0x44]
mov edx, 0x564dd6
lea ecx, [ebp + 8]
call fcn.00441008
mov edx, 0x55d09e
lea ecx, [ebp + 0xc]
call fcn.00441008
mov dword [esp + 0x60], 1
mov ebx, dword [esp + 0x60]
and ebx, ebx
jne 0x410e5b
mov edx, str.Not_found_the_appropriate_edition_____r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_IoT_Enterprise_r_nWindows_10_IoT_Enterprise_LTSC
lea ecx, [esp + 0x74]
call fcn.00441008
push dword [esp + 0x74]
call fcn.004359d6
jmp 0x41287f
mov dword [esp + 0x78], 0
mov eax, 0x55d09e
push eax
call fcn.004359d6
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x410e83
mov eax, str._Activation_HWID_...
push eax
call fcn.004359d6
jmp 0x410e8e
mov eax, str._Activation_KMS38_...
push eax
call fcn.004359d6
lea ebp, [esp + 0x44]
push dword [ebp + 4]
mov edx, 0x55d09e
pop ecx
call fcn.00441660
jne 0x41287f
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, 0x55df7a
push edx
call fcn.00485fb0
mov edx, dword [0xb2cbb8]
push edx
call fcn.00485fb0
lea ebp, [esp + 0x4c]
mov edx, dword [ebp + 4]
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 5
push 0
push 0xff
push 0xff
call fcn.0047219e
push eax
lea ebp, [esp + 0x4c]
push dword [ebp + 4]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___ipk
push edx
call fcn.00485fb0
lea ebp, [esp + 0x48]
mov edx, dword [ebp + 4]
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push dword [ebp + 4]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push 0x3e8
call fcn.0046a5ab
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___xpr
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
xor eax, eax
push eax
push dword [esp + 0x80]
push dword [esp + 0x24]
mov eax, 0x55d09e
push eax
call fcn.00413d3a
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x41103f
mov eax, str.The_machine_is_permanently_activated.
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x41103d
jmp 0x4125b0
jmp 0x411063
mov eax, str..2038
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x411063
mov dword [esp + 0x78], 1
jmp 0x4125b0
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jle 0x411231
push edx
call fcn.00485f70
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_ID
push eax
call fcn.004170c0
lea eax, [esp + 0x2c]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x561da0
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.004263b9
lea eax, [esp + 0x30]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str._________Rearm_SKU_ID:
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x34]
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x34]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
push 1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x38]
push edx
call fcn.00485fb0
mov edx, 0x561bb4
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004170c0
lea eax, [esp + 0x18]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.004170c0
lea eax, [esp + 0x84]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x563498
push eax
mov eax, dword [esp + 0x88]
push eax
call fcn.004263b9
lea eax, [esp + 0x88]
push eax
call fcn.00486010
mov eax, str._________Rearm_APP_ID:_55c92734_d682_4d71_983e_d6ec3f16059f
push eax
call fcn.004359d6
push 3
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
mov eax, str.55c92734_d682_4d71_983e_d6ec3f16059f
push eax
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
push 1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x90]
push edx
call fcn.00485fb0
mov edx, str._call_ReArmApp_ApplicationId55c92734_d682_4d71_983e_d6ec3f16059f
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004170c0
lea eax, [esp + 0x18]
push eax
call fcn.00486010
push dword [0xb2cb9c]
call fcn.0046c8e6
push edx
call fcn.00485f70
pop edx
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BIN
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.0046c908
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BIN
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.0046c8e6
call fcn.004416d0
mov ebx, dword [esp + 0x54]
and ebx, ebx
jle 0x41144e
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00485fb0
lea eax, [esp + 0x8c]
push eax
call fcn.00486010
push dword [esp + 0x88]
call fcn.0046c35a
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x411306
jg 0x411302
cmp ebx, 0
jb 0x411306
xor eax, eax
jmp 0x41130b
mov eax, 1
or eax, eax
je 0x411449
mov eax, 0x59731d
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
add dword [0xb2c808], 4
mov eax, 0x597319
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x90], eax
add dword [0xb2c808], 4
mov ebx, dword [esp + 0x90]
add ebx, 0x20
mov dword [esp + 0x90], ebx
push dword [esp + 0x8c]
call fcn.00484d90
mov dword [esp + 0x94], eax
mov ebp, 0x7c42dd
push ebp
push 0x100
mov ebp, 0x7c42bd
push ebp
push dword [esp + 0x98]
push dword [esp + 0xa4]
mov ebp, 0x597321
push ebp
call fcn.00470410
push dword [esp + 0x90]
call fcn.00484d90
mov dword [esp + 0x98], eax
call fcn.0045f48a
push dword [esp + 0x90]
push dword [esp + 0x9c]
push dword [esp + 0x94]
push dword [esp + 0xa0]
call fcn.0045fe2a
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x9c], 0
je 0x411431
push dword [esp + 0x88]
push 0xffffffff
call fcn.0046d150
mov dword [esp + 0xa0], eax
cmp dword [esp + 0xa0], 0
je 0x411431
push dword [esp + 0x9c]
push dword [esp + 0x9c]
push dword [esp + 0xa8]
call fcn.0046d3c0
push dword [esp + 0xa0]
call fcn.0046ce80
push dword [esp + 0x98]
call fcn.00484db0
push dword [esp + 0x94]
call fcn.00484db0
jmp 0x411794
mov ebx, dword [esp + 0x58]
and ebx, ebx
jg 0x411460
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jg 0x411460
jmp 0x411467
mov eax, 1
jmp 0x411469
xor eax, eax
and eax, eax
je 0x411605
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00485fb0
lea eax, [esp + 0x8c]
push eax
call fcn.00486010
push dword [esp + 0x88]
call fcn.0046c35a
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4114bd
jg 0x4114b9
cmp ebx, 0
jb 0x4114bd
xor eax, eax
jmp 0x4114c2
mov eax, 1
or eax, eax
je 0x411600
mov eax, 0x7098f1
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
add dword [0xb2c808], 4
mov eax, 0x7098ed
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x90], eax
add dword [0xb2c808], 4
mov ebx, dword [esp + 0x90]
add ebx, 0x20
mov dword [esp + 0x90], ebx
push dword [esp + 0x8c]
call fcn.00484d90
mov dword [esp + 0x94], eax
mov ebp, 0x7c42dd
push ebp
push 0x100
mov ebp, 0x7c42bd
push ebp
push dword [esp + 0x98]
push dword [esp + 0xa4]
mov ebp, 0x7098f5
push ebp
call fcn.00470410
push dword [esp + 0x90]
call fcn.00484d90
mov dword [esp + 0x98], eax
call fcn.0045f48a
push dword [esp + 0x90]
push dword [esp + 0x9c]
push dword [esp + 0x94]
push dword [esp + 0xa0]
call fcn.0045fe2a
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x9c], 0
je 0x4115e8
push dword [esp + 0x88]
push 0xffffffff
call fcn.0046d150
mov dword [esp + 0xa0], eax
cmp dword [esp + 0xa0], 0
je 0x4115e8
push dword [esp + 0x9c]
push dword [esp + 0x9c]
push dword [esp + 0xa8]
call fcn.0046d3c0
push dword [esp + 0xa0]
call fcn.0046ce80
push dword [esp + 0x98]
call fcn.00484db0
push dword [esp + 0x94]
call fcn.00484db0
jmp 0x411794
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00485fb0
lea eax, [esp + 0x8c]
push eax
call fcn.00486010
push dword [esp + 0x88]
call fcn.0046c35a
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x411651
jg 0x41164d
cmp ebx, 0
jb 0x411651
xor eax, eax
jmp 0x411656
mov eax, 1
or eax, eax
je 0x411794
mov eax, 0x650675
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
add dword [0xb2c808], 4
mov eax, 0x650671
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x90], eax
add dword [0xb2c808], 4
mov ebx, dword [esp + 0x90]
add ebx, 0x20
mov dword [esp + 0x90], ebx
push dword [esp + 0x8c]
call fcn.00484d90
mov dword [esp + 0x94], eax
mov ebp, 0x7c42dd
push ebp
push 0x100
mov ebp, 0x7c42bd
push ebp
push dword [esp + 0x98]
push dword [esp + 0xa4]
mov ebp, 0x650679
push ebp
call fcn.00470410
push dword [esp + 0x90]
call fcn.00484d90
mov dword [esp + 0x98], eax
call fcn.0045f48a
push dword [esp + 0x90]
push dword [esp + 0x9c]
push dword [esp + 0x94]
push dword [esp + 0xa0]
call fcn.0045fe2a
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x9c], 0
je 0x41177c
push dword [esp + 0x88]
push 0xffffffff
call fcn.0046d150
mov dword [esp + 0xa0], eax
cmp dword [esp + 0xa0], 0
je 0x41177c
push dword [esp + 0x9c]
push dword [esp + 0x9c]
push dword [esp + 0xa8]
call fcn.0046d3c0
push dword [esp + 0xa0]
call fcn.0046ce80
push dword [esp + 0x98]
call fcn.00484db0
push dword [esp + 0x94]
call fcn.00484db0
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BIN_slc.dll
push edx
call fcn.00485fb0
lea eax, [esp + 0x8c]
push eax
call fcn.00486010
push dword [esp + 0x88]
call fcn.0046c35a
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4117e0
jg 0x4117dc
cmp ebx, 0
jb 0x4117e0
xor eax, eax
jmp 0x4117e5
mov eax, 1
or eax, eax
je 0x411923
mov eax, 0x7c2b77
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
add dword [0xb2c808], 4
mov eax, 0x7c2b73
mov dword [0xb2c808], eax
mov eax, dword [0xb2c808]
mov eax, dword [eax]
mov dword [esp + 0x90], eax
add dword [0xb2c808], 4
mov ebx, dword [esp + 0x90]
add ebx, 0x20
mov dword [esp + 0x90], ebx
push dword [esp + 0x8c]
call fcn.00484d90
mov dword [esp + 0x94], eax
mov ebp, 0x7c42dd
push ebp
push 0x100
mov ebp, 0x7c42bd
push ebp
push dword [esp + 0x98]
push dword [esp + 0xa4]
mov ebp, 0x7c2b7b
push ebp
call fcn.00470410
push dword [esp + 0x90]
call fcn.00484d90
mov dword [esp + 0x98], eax
call fcn.0045f48a
push dword [esp + 0x90]
push dword [esp + 0x9c]
push dword [esp + 0x94]
push dword [esp + 0xa0]
call fcn.0045fe2a
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x9c], 0
je 0x41190b
push dword [esp + 0x88]
push 0xffffffff
call fcn.0046d150
mov dword [esp + 0xa0], eax
cmp dword [esp + 0xa0], 0
je 0x41190b
push dword [esp + 0x9c]
push dword [esp + 0x9c]
push dword [esp + 0xa8]
call fcn.0046d3c0
push dword [esp + 0xa0]
call fcn.0046ce80
push dword [esp + 0x98]
call fcn.00484db0
push dword [esp + 0x94]
call fcn.00484db0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.0046c35a
call fcn.004416d0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x411970
jl 0x41196c
cmp ebx, 0
ja 0x411970
xor eax, eax
jmp 0x411975
mov eax, 1
or eax, eax
je 0x41197b
jmp 0x41199d
mov edx, str.Error__The_program_cannot_access_the_gatherosstate.exe_file.
lea ecx, [esp + 0xa4]
call fcn.00441008
push dword [esp + 0xa4]
call fcn.004359d6
jmp 0x41287f
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov edx, dword [0xb2c6b0]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x56a4c2
push edx
call fcn.00485fb0
lea eax, [esp + 0x80]
push eax
call fcn.00486010
mov edx, 0x55d09e
lea ecx, [0xb2cc3c]
call fcn.00441008
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.qc_licensemanager
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov eax, str.DISABLED
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x411abb
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_licensemanager_startdemand
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov dword [esp + 0xb0], 1
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.qc_wuauserv
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov eax, str.DISABLED
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x411b71
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_wuauserv_startdemand
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov dword [esp + 0xb4], 1
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.qc_wlidsvc
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov eax, str.DISABLED
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x411d2f
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_wlidsvc_startdemand
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov dword [esp + 0xac], 1
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.qc_RpcSs
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov eax, str.DISABLED
push eax
push dword [0xb2cc3c]
call fcn.004838a0
mov ebx, eax
and ebx, ebx
jle 0x411d2f
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_RpcSs_startdemand
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.start_RpcSs
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov dword [esp + 0xa8], 1
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.start_licensemanager
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.start_wuauserv
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.start_wlidsvc
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov ebx, dword [esp + 0x58]
and ebx, ebx
jg 0x411e1f
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jg 0x411e1f
jmp 0x411e26
mov eax, 1
jmp 0x411e28
xor eax, eax
and eax, eax
je 0x411efb
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___skms_12.34.56.78:1833
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
xor eax, eax
push eax
push dword [esp + 0x80]
push dword [esp + 0x24]
mov eax, 0x55d09e
push eax
call fcn.00413d3a
xor eax, eax
push eax
push dword [esp + 0x80]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Volume:GVLK
push eax
mov eax, str.reg.exe
push eax
call fcn.00413d3a
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___f__v__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe___d___WIN7RTM_
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.00413d3a
call fcn.004416d0
jmp 0x411f16
xor eax, eax
push eax
push dword [esp + 0x80]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Retail
push eax
mov eax, str.reg.exe
push eax
call fcn.00413d3a
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Kernel_ProductInfo___t_REG_DWORD__d
push edx
call fcn.00485fb0
lea ebp, [esp + 0x54]
mov edx, dword [ebp + 8]
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.00413d3a
call fcn.004416d0
xor eax, eax
push eax
push dword [esp + 0x80]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Security_SPP_GenuineLocalStatus___t_REG_DWORD__d_1
push eax
mov eax, str.reg.exe
push eax
call fcn.00413d3a
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jle 0x412057
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BIN
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, 0x55d09e
push eax
mov eax, str.gatherosstate.exe
push eax
call fcn.004416b2
add dword [esp + 8], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.__v__o__altto
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485fb0
mov edx, str.BIN_
push edx
call fcn.00485fb0
call fcn.004860a0
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.ClipUp.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004416b2
add dword [esp + 4], edx
call fcn.00413d3a
call fcn.004416d0
xor eax, eax
push eax
push dword [esp + 0x80]
mov eax, str.delete__HKEY_LOCAL_MACHINESYSTEMTokens___f
push eax
mov eax, str.reg.exe
push eax
call fcn.00413d3a
mov ebx, dword [esp + 0x58]
and ebx, ebx
jg 0x412084
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jg 0x412084
jmp 0x41208b
mov eax, 1
jmp 0x41208d
xor eax, eax
and eax, eax
je 0x4120eb
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.delete__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___v__
push edx
call fcn.00485fb0
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485fb0
mov edx, str.BINgatherosstate.exe___f
push edx
call fcn.00485fb0
call fcn.004860a0
mov eax, str.reg.exe
push eax
call fcn.004416b2
add dword [esp + 4], edx
call fcn.00413d3a
call fcn.004416d0
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jne 0x4122da
push edx
call fcn.00485f70
pop edx
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BINh.cmd
push edx
call fcn.00485fb0
call fcn.004860a0
push 0x6f
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0046d150
call fcn.004416d0
mov ebp, str.__xml_version_1.0__encoding_UTF_16____r_n_Task_version_1.2__xmlns_http:__schemas.microsoft.com_windows_2004_02_mit_task___r_n___RegistrationInfo__r_n_____Date_2014_10_15T18:54:19.4648216__Date__r_n_____Author_RATIBORUS__Author__r_n_____URI_KMSAutoStart__URI__r_n____RegistrationInfo__r_n___Triggers__r_n_____LogonTrigger__r_n_______Enabled_true__Enabled__r_n_______Delay_PT15S__Delay__r_n______LogonTrigger__r_n____Triggers__r_n___Principals__r_n_____Principal_id_Author___r_n_______GroupId_S_1_5_32_544__GroupId__r_n_______RunLevel_HighestAvailable__RunLevel__r_n______Principal__r_n____Principals__r_n___Settings__r_n_____MultipleInstancesPolicy_IgnoreNew__MultipleInstancesPolicy__r_n_____DisallowStartIfOnBatteries_false__DisallowStartIfOnBatteries__r_n_____StopIfGoingOnBatteries_true__StopIfGoingOnBatteries__r_n_____AllowHardTerminate_false__AllowHardTerminate__r_n_____StartWhenAvailable_true__StartWhenAvailable__r_n_____RunOnlyIfNetworkAvailable_false__RunOnlyIfNetworkAvailable__r_n_____IdleSettings__r_n_______StopOnIdleEnd_true__StopOnIdleEnd__r_n_______RestartOnIdle_false__RestartOnIdle__r_n______IdleSettings__r_n_____AllowStartOnDemand_true__AllowStartOnDemand__r_n_____Enabled_true__Enabled__r_n_____Hidden_true__Hidden__r_n_____RunOnlyIfIdle_false__RunOnlyIfIdle__r_n_____WakeToRun_false__WakeToRun__r_n_____ExecutionTimeLimit_PT0S__ExecutionTimeLimit__r_n_____Priority_7__Priority__r_n_____RestartOnFailure__r_n_______Interval_PT1M__Interval__r_n_______Count_3__Count__r_n______RestartOnFailure__r_n____Settings__r_n___Actions_Context_Author___r_n_____Exec__r_n_______Command__XXXXXXXXXX___Command__r_n_______Arguments__WINACTDIGITALLGUI__Arguments__r_n_______WorkingDirectory_YYYYYYYYYY__WorkingDirectory__r_n______Exec__r_n____Actions__r_n__Task_
mov ebx, ebp
mov ebp, str._setlocal_DisableDelayedExpansion_r_n_echo_off_r_nset_PATH_SystemRoot_System32__SystemRoot_System32wbem__SystemRoot_System32WindowsPowerShell_v1.0_r_nIf_exist__SystemRoot_Sysnative_reg.exe___r_nset_PATH_SystemRoot_Sysnative__SystemRoot_Sysnativewbem__SystemRoot_SysnativeWindowsPowerShell_v1.0__PATH__r_n__r_nset__unattended0_r_nset__nul11_nul__r_nset__nul22_nul__r_nset__nul62_nul__r_nset__nul_nul_2_1__r_nset_pscpowershell.exe_r_nset___work_dp0__r_nif____work:_1_____set___work__work:0__1___r_nset___batf_f0__r_nset___batp__batf:___r_nset__PSarg____f0_____el___args__r_nset___ttemp_userprofile_AppDataLocalTemp__r_nset_winbuild1_r_nsetlocal_EnableDelayedExpansion_r_nfor__f__tokens6_delims__._____G_in__ver__do_set_winbuild__G_r_n_r_n_psc___ExecutionContext.SessionState.LanguageMode__nul2___find__i__Full___nul1_____r_n_eline__r_n_psc___ExecutionContext.SessionState.LanguageMode_r_necho_PowerShell_is_not_working._Aborting..._r_necho_If_you_have_applied_restrictions_on_Powershell_then_undo_those_changes._r_ngoto_dk_done_r_n__r_n_r_ncall_:dk_product_r_ncall_:dk_ckeckwmic_r_n_r_nsc_start_sppsvc__nul__r_nif__errorlevel__NEQ_1056_if__errorlevel__NEQ_0___r_necho_Error_code:__errorlevel__r_necho__Failed_to_start__sppsvc__service__rest_of_the_process_may_take_a_long_time...__r_n__r_n_r_ncall_:dk_checkperm_r_nif_defined__perm___r_necho_____________________________________________________________________________________________r_necho___________Checking:__winos__is_Permanently_Activated.__r_necho___________Activation_is_not_required.__r_necho_____________________________________________________________________________________________r_nif___unattended_1_goto_dk_done_r_nexit__b_r_n__r_n_r_n_r_nif_exist___SystemRoot_ServicingPackagesMicrosoft_Windows_EvalEdition.mum____r_nreg_query__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion___v_EditionID__nul2___find__i__Eval___nul1_____r_n_eline__r_necho___winos____winbuild___r_necho_Evaluation_Editions_cannot_be_activated.__r_necho_You_need_to_install_full_version_of__winos__r_n_r_ngoto_dk_done_r_n__r_n__r_n_r_ncall_:dk_checksku_r_nif_not_defined_osSKU___r_n_eline__r_ngoto_dk_done_r_n__r_n_r_nset_error_r_n_r_nfor__f__skip2_tokens2____a_in__reg_query__HKLMSYSTEMCurrentControlSetControlSession_ManagerEnvironment___v_PROCESSOR_ARCHITECTURE__do_set_arch__b_r_nfor__f__tokens6_7_delims__._____i_in__ver__do_if____j_____set_fullbuild__i__else__set_fullbuild__i.__j__r_necho_Checking_OS_Info__________________________winos____fullbuild____arch___r_n_r_nset__int_r_nfor___a_in__l.root_servers.net_resolver1.opendns.com_download.windowsupdate.com_google.com__do_if_not_defined__int___r_nfor__f__delims___tokens2_____in__ping__n_1___a__do__if_not________set__int1__r_n__r_nif_not_defined__int___r_n_psc___If__Activator_::CreateInstance__Type_::GetTypeFromCLSID__Guid_DCB00C01_570F_4A9B_8D69_199FDBA5723B__.IsConnectedToInternet_Exit_0ElseExit_1__r_nif__errorlevel_0__set__int1set_ping_f_But_Ping_Failed__r_n__r_nif_defined__int___r_necho_Checking_Internet_Connection_____________Connected_ping_f___r_n__else___r_nset_error1_r_necho__Checking_Internet_Connection_____________Not_Connected___r_n__r_n_r_nset__WSH1_r_nreg_query__HKCUSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nreg_query__HKLMSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nif___WSH__EQU_0___r_nreg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nreg_add__HKCUSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nif_not___arch___x86__reg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__reg:32__nul__r_necho_Enabling_Windows_Script_Host_____________Successful__r_n__r_n_r_necho_Initiating_Diagnostic_Tests..._r_nset___servClipSVC_wlidsvc_sppsvc_KeyI
sub ebx, ebp
push ebx
mov ebp, str._setlocal_DisableDelayedExpansion_r_n_echo_off_r_nset_PATH_SystemRoot_System32__SystemRoot_System32wbem__SystemRoot_System32WindowsPowerShell_v1.0_r_nIf_exist__SystemRoot_Sysnative_reg.exe___r_nset_PATH_SystemRoot_Sysnative__SystemRoot_Sysnativewbem__SystemRoot_SysnativeWindowsPowerShell_v1.0__PATH__r_n__r_nset__unattended0_r_nset__nul11_nul__r_nset__nul22_nul__r_nset__nul62_nul__r_nset__nul_nul_2_1__r_nset_pscpowershell.exe_r_nset___work_dp0__r_nif____work:_1_____set___work__work:0__1___r_nset___batf_f0__r_nset___batp__batf:___r_nset__PSarg____f0_____el___args__r_nset___ttemp_userprofile_AppDataLocalTemp__r_nset_winbuild1_r_nsetlocal_EnableDelayedExpansion_r_nfor__f__tokens6_delims__._____G_in__ver__do_set_winbuild__G_r_n_r_n_psc___ExecutionContext.SessionState.LanguageMode__nul2___find__i__Full___nul1_____r_n_eline__r_n_psc___ExecutionContext.SessionState.LanguageMode_r_necho_PowerShell_is_not_working._Aborting..._r_necho_If_you_have_applied_restrictions_on_Powershell_then_undo_those_changes._r_ngoto_dk_done_r_n__r_n_r_ncall_:dk_product_r_ncall_:dk_ckeckwmic_r_n_r_nsc_start_sppsvc__nul__r_nif__errorlevel__NEQ_1056_if__errorlevel__NEQ_0___r_necho_Error_code:__errorlevel__r_necho__Failed_to_start__sppsvc__service__rest_of_the_process_may_take_a_long_time...__r_n__r_n_r_ncall_:dk_checkperm_r_nif_defined__perm___r_necho_____________________________________________________________________________________________r_necho___________Checking:__winos__is_Permanently_Activated.__r_necho___________Activation_is_not_required.__r_necho_____________________________________________________________________________________________r_nif___unattended_1_goto_dk_done_r_nexit__b_r_n__r_n_r_n_r_nif_exist___SystemRoot_ServicingPackagesMicrosoft_Windows_EvalEdition.mum____r_nreg_query__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion___v_EditionID__nul2___find__i__Eval___nul1_____r_n_eline__r_necho___winos____winbuild___r_necho_Evaluation_Editions_cannot_be_activated.__r_necho_You_need_to_install_full_version_of__winos__r_n_r_ngoto_dk_done_r_n__r_n__r_n_r_ncall_:dk_checksku_r_nif_not_defined_osSKU___r_n_eline__r_ngoto_dk_done_r_n__r_n_r_nset_error_r_n_r_nfor__f__skip2_tokens2____a_in__reg_query__HKLMSYSTEMCurrentControlSetControlSession_ManagerEnvironment___v_PROCESSOR_ARCHITECTURE__do_set_arch__b_r_nfor__f__tokens6_7_delims__._____i_in__ver__do_if____j_____set_fullbuild__i__else__set_fullbuild__i.__j__r_necho_Checking_OS_Info__________________________winos____fullbuild____arch___r_n_r_nset__int_r_nfor___a_in__l.root_servers.net_resolver1.opendns.com_download.windowsupdate.com_google.com__do_if_not_defined__int___r_nfor__f__delims___tokens2_____in__ping__n_1___a__do__if_not________set__int1__r_n__r_nif_not_defined__int___r_n_psc___If__Activator_::CreateInstance__Type_::GetTypeFromCLSID__Guid_DCB00C01_570F_4A9B_8D69_199FDBA5723B__.IsConnectedToInternet_Exit_0ElseExit_1__r_nif__errorlevel_0__set__int1set_ping_f_But_Ping_Failed__r_n__r_nif_defined__int___r_necho_Checking_Internet_Connection_____________Connected_ping_f___r_n__else___r_nset_error1_r_necho__Checking_Internet_Connection_____________Not_Connected___r_n__r_n_r_nset__WSH1_r_nreg_query__HKCUSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nreg_query__HKLMSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nif___WSH__EQU_0___r_nreg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nreg_add__HKCUSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nif_not___arch___x86__reg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__reg:32__nul__r_necho_Enabling_Windows_Script_Host_____________Successful__r_n__r_n_r_necho_Initiating_Diagnostic_Tests..._r_nset___servClipSVC_wlidsvc_sppsvc_KeyI
push ebp
push 0x6f
call fcn.0046d3c0
push 0x6f
call fcn.0046ce80
push 1
lea eax, [0x427260]
push eax
call fcn.004422b3
mov dword [0xb2c9e4], eax
push dword [0xb2c9e4]
call fcn.00442244
and eax, eax
je 0x41219f
push dword [0xb2cb18]
call fcn.0046a9a5
and eax, eax
je 0x41219d
call fcn.00429bef
jmp 0x41217a
push 0x100
push 1
call fcn.004406ae
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55e3e6
push eax
mov eax, 0x57583e
push eax
mov eax, 0x5610ea
push eax
call fcn.0043b8a2
lea eax, [esp + 0x40]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.Activating
push edx
call fcn.00485fb0
mov edx, dword [esp + 0x44]
push edx
call fcn.00485fb0
mov edx, 0x560604
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.004359d6
call fcn.004416d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
push dword [esp + 0x44]
push dword [0xb2cb98]
call fcn.004157b1
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___ato
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
mov ebx, dword [esp + 0xac]
and ebx, ebx
jle 0x41237d
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_wlidsvc_startdisabled
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.stop_wlidsvc__y
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._net.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov ebx, dword [esp + 0xa8]
and ebx, ebx
jle 0x412420
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_RpcSs_startdisabled
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.stop_RpcSs__y
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._net.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov ebx, dword [esp + 0xb0]
and ebx, ebx
jle 0x4124c3
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_licensemanager_startdisabled
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.stop_licensemanager__y
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._net.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
mov ebx, dword [esp + 0xb4]
and ebx, ebx
jle 0x412566
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.config_wuauserv_startdisabled
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._sc.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0x84]
mov eax, str.stop_wuauserv__y
push eax
mov edx, dword [esp + 0x8c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._net.exe
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.00413d3a
call fcn.004416d0
push dword [0xb2cb9c]
call fcn.0046c8e6
push edx
call fcn.00485f70
pop edx
push eax
mov eax, 0x55d09e
push eax
mov edx, dword [0xb2cb9c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str.BIN
push edx
call fcn.00485fb0
call fcn.004416b2
add dword [esp], edx
call fcn.0046c8d4
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___xpr
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
push edx
call fcn.00485f70
pop edx
push eax
push 5
push 0xff
push 0xff
push 0xff
call fcn.0047219e
push eax
lea ebp, [esp + 0x50]
mov edx, dword [ebp]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, str._edition
push edx
call fcn.00485fb0
call fcn.004860a0
push dword [0xb2cb98]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.004157b1
call fcn.004416d0
push 5
push 0xff
push 0xff
push 0
call fcn.0047219e
push eax
mov eax, str._The_machine_is_permanently_activated_
push eax
push dword [0xb2cb98]
call fcn.004157b1
mov ebx, dword [esp + 0x6c]
and ebx, ebx
jle 0x4126f1
push dword [0xb2cb18]
call fcn.0046a9a5
and eax, eax
je 0x4126f1
mov eax, 1
jmp 0x4126f3
xor eax, eax
and eax, eax
je 0x41287f
push 5
push 0xff
push 0xff
push 0
call fcn.0047219e
push eax
mov eax, str.Volume_activation_will_expire_19.01.2038
push eax
push dword [0xb2cb98]
call fcn.004157b1
mov ebx, eax
and ebx, ebx
jne 0x412861
push 0x14
push dword [0xb2c898]
mov eax, str.Activation_Error
push eax
call fcn.00436510
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x40]
cmp ebx, 6
jne 0x41285f
push edx
call fcn.00485f70
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
pop eax
mov edx, str.___rearm
push edx
call fcn.00485fb0
lea eax, [esp + 0x20]
push eax
call fcn.00486010
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
call fcn.0040d1a9
mov edx, str.shutdown.exe__r__f__t_0
lea ecx, [esp + 0x1c]
call fcn.00441008
push edx
call fcn.00485f70
pop edx
push eax
push 0
push 0x55d09e
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push 0x55d09e
call fcn.00417dda
call fcn.004416b2
add dword [esp], edx
call fcn.0046c4b1
call fcn.004860a0
push dword [esp + 0x2c]
call fcn.004416b2
add dword [esp + 4], edx
call fcn.0042802f
call fcn.004416d0
jmp 0x41287f
mov ebx, dword [0xb2c780]
inc ebx
mov dword [0xb2c780], ebx
push 0
lea eax, [0x40ce11]
push eax
call fcn.004422b3
push dword [0xb2cb18]
call fcn.0046a9a5
and eax, eax
je 0x412899
push dword [0xb2cb98]
call fcn.00469557
xor eax, eax
push dword [esp + 0x30]
call fcn.00486170
push dword [esp + 0x1c]
call fcn.00486170
push dword [esp + 0x84]
call fcn.00486170
push dword [esp + 0x10]
call fcn.00486170
push dword [esp + 0x74]
call fcn.00486170
push dword [esp + 0x20]
call fcn.00486170
lea edx, [esp + 0x44]
push 0x5792c4
push edx
call fcn.004420f1
push dword [esp + 4]
call fcn.00486170
push dword [esp + 0x80]
call fcn.00486170
push dword [esp + 0x7c]
call fcn.00486170
push dword [esp + 0x5c]
call fcn.00486170
push dword [esp + 8]
call fcn.00486170
push dword [esp + 0x68]
call fcn.00486170
push dword [esp + 0xa4]
call fcn.00486170
push dword [esp + 0x38]
call fcn.00486170
push dword [esp + 0x14]
call fcn.00486170
push dword [esp + 0x3c]
call fcn.00486170
push dword [esp]
call fcn.00486170
push dword [esp + 0x88]
call fcn.00486170
push dword [esp + 0x2c]
call fcn.00486170
push dword [esp + 0x28]
call fcn.00486170
push dword [esp + 0xc]
call fcn.00486170
push dword [esp + 0x64]
call fcn.00486170
add esp, 0xb8
pop edi
pop ebx
pop ebp
ret 0x14