Function at 0x415442
Capabilities:
Reference sql statements

Disassembly:
push ebp
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.0048d6d0
mov edx, dword [esp + 0x20]
lea ecx, [esp]
call fcn.0042e000
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.SELECT_Description_FROM_keys_WHERE_key
push edx
call fcn.0048d570
mov edx, dword [esp + 4]
push edx
call fcn.0048d570
mov edx, 0x5cf830
push edx
call fcn.0048d570
lea eax, [esp + 8]
push eax
call fcn.0048d5d0
push dword [esp + 4]
push dword [0x8f9c3c]
call fcn.0047f11d
mov ebx, eax
and ebx, ebx
je 0x415a3c
push dword [0x8f9c3c]
call fcn.0047f12f
and eax, eax
je 0x4154e4
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0xc]
push eax
call fcn.0048d5d0
jmp 0x4154e4
push dword [0x8f9c3c]
call fcn.0047f184
mov eax, str.Office
push eax
push dword [esp + 0xc]
call fcn.0048ad20
mov ebx, eax
and ebx, ebx
jle 0x415709
push edx
call fcn.0048d530
pop edx
push eax
call fcn.0041cc24
lea eax, [esp + 0x10]
push eax
call fcn.0048d5d0
push dword [esp + 0xc]
call fcn.0047dba6
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x41553c
jl 0x415538
cmp ebx, 0
ja 0x41553c
xor eax, eax
jmp 0x415541
mov eax, 1
or eax, eax
je 0x415704
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x41562f
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push dword [esp + 0x18]
call fcn.0047db27
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5cf224
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__inpkey:
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__ECHO__Activating_...__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__act
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415704
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push dword [esp + 0x18]
call fcn.0047db27
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5cf224
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__inpkey:
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__dinstid
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415a3c
push dword [0x8f9ca8]
mov edx, 0x5d6884
pop ecx
call fcn.0042e590
je 0x4158c9
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9c8c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, 0x5de320
push edx
call fcn.0048d570
call fcn.0048d660
push 7
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0046f570
call fcn.0042e610
mov ebp, 0x5ea34b
mov ebx, ebp
mov ebp, str._c:changevlkeysp1.vbs_ab123_123ab_ab123_123ab_ab123_r_n
sub ebx, ebp
push ebx
mov ebp, str._c:changevlkeysp1.vbs_ab123_123ab_ab123_123ab_ab123_r_n
push ebp
push 7
call fcn.0046f7e0
push 7
call fcn.0046f280
push edx
call fcn.0048d530
pop edx
push eax
push 1
push dword [0x8f9c8c]
push dword [esp + 0xc]
mov edx, dword [0x8f9c8c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, 0x5de320
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0044d0de
call fcn.0042e610
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9c8c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, 0x5de320
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.00411717
call fcn.0042e610
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x4158c4
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0047e38b
call fcn.0042e610
push edx
call fcn.0048d530
pop edx
push eax
push 1
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobe
push edx
call fcn.0048d570
call fcn.0048d660
mov eax, 0x5de26a
push eax
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobemsoobe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0de
call fcn.0042e610
jmp 0x415a3c
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x41598b
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f99c8]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.System32
push edx
call fcn.0048d570
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.__K_ECHO__Install_Windows_Key
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__ipk
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__ECHO__Activating_...__cscript.exe_slmgr.vbs___NoLogo__ato
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415a3c
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f99c8]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.System32
push edx
call fcn.0048d570
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.__K_ECHO__Install_Windows_Key
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__ipk
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__dti
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9c9c]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
xor eax, eax
push dword [esp + 0xc]
call fcn.0048d760
push dword [esp + 4]
call fcn.0048d760
push dword [esp]
call fcn.0048d760
push dword [esp + 8]
call fcn.0048d760
add esp, 0x10
pop edi
pop ebx
pop ebp
ret 8