Function at 0x40efa8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x4a
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x40efb0
call fcn.0047f360
mov edx, dword [esp + 0x138]
lea ecx, [esp]
call fcn.0043d000
mov edx, dword [esp + 0x13c]
lea ecx, [esp + 4]
call fcn.0043d000
mov edx, dword [esp + 0x140]
lea ecx, [esp + 8]
call fcn.0043d000
mov edx, dword [esp + 0x144]
lea ecx, [esp + 0xc]
call fcn.0043d000
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x10]
call fcn.0043d000
push dword [esp]
mov edx, str.installkeywin
pop ecx
call fcn.0043d2c0
je 0x40f5b3
mov dword [esp + 0x14], 0
mov eax, 0x53c098
push eax
call fcn.00437261
push dword [0x9d7d20]
call fcn.00437261
mov eax, 0x53c098
push eax
call fcn.00437261
call fcn.004656ce
mov ebx, eax
cmp ebx, 0x46
jne 0x40f07e
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows____get_Name__Description__ID__PartialProductKey__LicenseStatus__GracePeriodRemaining
push eax
call fcn.0041b4e8
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
jmp 0x40f0a0
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b4e8
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
mov dword [esp + 0x20], 1
jmp 0x40f0ee
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40f562
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x40f14d
jmp 0x40f558
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._edition
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0047ccf0
lea eax, [esp + 0x30]
push eax
call fcn.0047f260
mov dword [esp + 0x30], 0
jmp 0x40f1e4
push dword [0x9d7fb8]
call fcn.0046b900
cmp eax, dword [esp + 0x30]
jl 0x40f558
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40f54e
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x38]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x30]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x44]
call fcn.0047ccf0
call fcn.0043d312
add dword [esp], edx
call fcn.0047cf90
call fcn.0043d330
mov ebx, eax
and ebx, ebx
jle 0x40f54e
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x44]
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e30]
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 0xf
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_Version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 0x38]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
je 0x40f498
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e40]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
jmp 0x40f539
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x48]
call fcn.0047cd60
push edx
push eax
call fcn.0047d6b0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00422271
call fcn.0043d330
mov eax, 0x53c098
push eax
call fcn.00437261
mov dword [esp + 0x14], 1
jmp 0x40f558
inc dword [esp + 0x30]
jno 0x40f1e4
inc dword [esp + 0x20]
jno 0x40f0ee
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x40f5ae
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e34]
push edx
call fcn.0047f200
mov edx, str.GVLK_Key_Notfound.
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
jmp 0x416c55
push dword [esp]
mov edx, str.installkeyofs
pop ecx
call fcn.0043d2c0
je 0x40ffa6
mov eax, 0x53c098
push eax
call fcn.00437261
push dword [0x9d78d4]
call fcn.00437261
mov eax, 0x53c098
push eax
call fcn.00437261
mov dword [esp + 0x3c], 1
push dword [0x9d7e90]
mov edx, 0x555246
pop ecx
call fcn.0043d2c0
je 0x40f630
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x44]
push eax
call fcn.0047f260
push dword [esp + 0x40]
call fcn.0042356b
jmp 0x40f65b
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
push dword [esp + 0x44]
call fcn.0042356b
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40fafc
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionService_get_Version__value
push eax
call fcn.0041b4e8
lea eax, [esp + 0x4c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x40f6f4
call fcn.00465ed2
and eax, eax
je 0x40f6f4
jmp 0x40f6e9
mov dword [esp + 0x20], 1
jmp 0x40f6fe
mov eax, str.Description
push eax
push dword [esp + 0x48]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40fafc
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x54]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x40f75d
jmp 0x40faf2
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40faf2
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
mov dword [esp + 0x30], 0
jmp 0x40f7c9
push dword [0x9d7fb8]
call fcn.0046b900
cmp eax, dword [esp + 0x30]
jl 0x40faf2
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40fae8
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x38]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x44]
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e30]
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 0xf
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_Version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 0x38]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
je 0x40fa3c
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e40]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
jmp 0x40fadd
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x48]
call fcn.0047cd60
push edx
push eax
call fcn.0047d6b0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00422271
call fcn.0043d330
mov eax, 0x53c098
push eax
call fcn.00437261
inc dword [esp + 0x30]
jno 0x40f7c9
inc dword [esp + 0x20]
jno 0x40f6fe
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x44]
push eax
call fcn.0047f260
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40ffa1
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b4e8
lea eax, [esp + 0x4c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
mov ebx, dword [esp + 0x3c]
and ebx, ebx
jne 0x40fb99
push dword [0x9d78d4]
call fcn.00437261
mov eax, 0x53c098
push eax
call fcn.00437261
mov dword [esp + 0x20], 1
jmp 0x40fba3
mov eax, str.Description
push eax
push dword [esp + 0x44]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40ffa1
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x50]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x40fc02
jmp 0x40ff97
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40ff97
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
mov dword [esp + 0x30], 0
jmp 0x40fc6e
push dword [0x9d7fb8]
call fcn.0046b900
cmp eax, dword [esp + 0x30]
jl 0x40ff97
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x40ff8d
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x38]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [esp + 0x44]
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e30]
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 0xf
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
push dword [ebp]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_Version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.0047f200
mov edx, dword [0x9d7fbc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x9d7fb8]
mov edx, dword [ebp]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 0x38]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
je 0x40fee1
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e40]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
jmp 0x40ff82
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x48]
call fcn.0047cd60
push edx
push eax
call fcn.0047d6b0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00422271
call fcn.0043d330
mov eax, 0x53c098
push eax
call fcn.00437261
inc dword [esp + 0x30]
jno 0x40fc6e
inc dword [esp + 0x20]
jno 0x40fba3
jmp 0x416c55
push dword [esp]
mov edx, str.infowin
pop ecx
call fcn.0043d2c0
je 0x410948
call fcn.004656ce
mov ebx, eax
cmp ebx, 0x46
jne 0x40ffea
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__GracePeriodRemaining
push eax
call fcn.0041b4e8
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
jmp 0x41000c
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID__IsKeyManagementServiceMachine__KeyManagementServiceCurrentCount
push eax
call fcn.0041b4e8
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
mov dword [esp + 0x20], 1
jmp 0x410016
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x410943
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x410075
jmp 0x410939
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x540f3a
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
mov ebx, dword [0x9d78e8]
cmp ebx, 0x55f0
jl 0x41012e
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Windows_11
push eax
mov eax, str.Windows_R_
push eax
mov ebp, dword [0x9d7fc4]
push dword [ebp]
call fcn.0047da70
lea eax, [ebp]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x50]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd3e
push edx
call fcn.0047f200
mov edx, dword [esp + 0x54]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 1
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 2
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 3
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004656ce
mov ebx, eax
cmp ebx, 0x46
jne 0x410250
mov edx, 0x53d254
lea ecx, [esp + 0x50]
call fcn.0043d008
jmp 0x410272
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.IsKeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x54]
push eax
call fcn.0047f260
mov eax, str.VOLUME_KMSCLIENT
push eax
push dword [esp + 0x50]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x41059a
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x58]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str._nKeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x5c]
push eax
call fcn.0047f260
push dword [esp + 0x58]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x410339
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____KMS_host_Machine:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x60]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x5c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 4
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
jmp 0x410349
mov eax, str._____KMS_host_Machine:
push eax
push 4
call fcn.0043b1d3
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______KMS_Server_PID:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceProductKeyID
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 5
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.GracePeriodRemaining
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x60]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x60]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x60]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Expiration_Date_Time:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 6
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004656ce
mov ebx, eax
cmp ebx, 0x46
je 0x410595
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.VLActivationInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x70]
call fcn.0047d330
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x64]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Activation_interval:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x68]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 7
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.VLRenewalInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x74]
call fcn.0047d330
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x68]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____Renewal_interval:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x6c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 8
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
jmp 0x41071d
push dword [esp + 0x50]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
jne 0x41071d
mov eax, str._r_n_Key_Management_Service_is_enabled_on_this_machine
push eax
push 4
call fcn.0043b1d3
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceCurrentCount
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x6c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.________Current_count:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x70]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 5
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceListeningPort__KeyManagementServiceDnsPublishing
push eax
call fcn.0041b4e8
lea eax, [esp + 0x70]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceListeningPort
push eax
mov eax, dword [esp + 0x74]
push eax
call fcn.00428723
lea eax, [esp + 0x74]
push eax
call fcn.0047f260
push dword [esp + 0x70]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x410686
mov edx, 0x5554f2
lea ecx, [esp + 0x70]
call fcn.0043d008
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.____Listening_on_Port:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x78]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 6
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceDnsPublishing
push eax
mov eax, dword [esp + 0x74]
push eax
call fcn.00428723
lea eax, [esp + 0x78]
push eax
call fcn.0047f260
push dword [esp + 0x74]
mov edx, str.TRUE
pop ecx
call fcn.0043d2c0
je 0x41070d
mov eax, str._______DNS_publishing:_Enabled
push eax
push 7
call fcn.0043b1d3
jmp 0x41071d
mov eax, str._______DNS_publishing:_Disabled
push eax
push 7
call fcn.0043b1d3
call fcn.004176e5
push edx
call fcn.0047f1c0
pop edx
push eax
push 0xa
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push 0x190
call fcn.00465666
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.LicenseStatus
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x74]
call fcn.0047d330
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push dword [esp + 0x64]
call fcn.0047cd60
mov dword [esp + 0x78], eax
push dword [esp + 0x78]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x41080e
mov edx, 0x55524e
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 1
cmp ebx, dword [esp]
jne 0x41082b
mov edx, str.___LICENSED___
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 2
cmp ebx, dword [esp]
jne 0x410845
mov edx, str.OOBGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 3
cmp ebx, dword [esp]
jne 0x41085f
mov edx, str.OOTGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 4
cmp ebx, dword [esp]
jne 0x410879
mov edx, str.NonGenuineGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 5
cmp ebx, dword [esp]
jne 0x410893
mov edx, 0x5481f0
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4108ad
mov edx, str.ExtendedGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x4108bb
mov edx, 0x549d6c
lea ecx, [esp + 0x68]
call fcn.0043d008
pop eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______License_Status:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x6c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 9
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004176e5
push dword [0x9d7bcc]
call fcn.00437261
push 0x12
push 0
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str.___LICENSED___
push eax
push dword [0x9d7e10]
call fcn.00419bbb
inc dword [esp + 0x20]
jno 0x410016
jmp 0x416c55
push dword [esp]
mov edx, str.infoofs
pop ecx
call fcn.0043d2c0
je 0x41111a
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53c4dc
push eax
push dword [esp + 0x50]
call fcn.0047dc90
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x44]
push eax
call fcn.0047f260
mov edx, dword [esp + 0x44]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, dword [esp + 0x44]
push edx
call fcn.0047f200
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
mov dword [esp + 0x20], 1
jmp 0x4109f9
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x411115
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x410a58
jmp 0x41110b
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x41110b
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x540f3a
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd3e
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 1
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 2
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 3
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
mov eax, str.VOLUME_KMSCLIENT
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x410eef
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x58]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x5c]
push eax
call fcn.0047f260
push dword [esp + 0x58]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x410ca3
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____KMS_host_Machine:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x60]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x5c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 4
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
jmp 0x410cb3
mov eax, str._____KMS_host_Machine:
push eax
push 4
call fcn.0043b1d3
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______KMS_Server_PID:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceProductKeyID
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 5
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.GracePeriodRemaining
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x60]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x60]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x60]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Expiration_Date_Time:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 6
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.VLActivationInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x70]
call fcn.0047d330
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x64]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x64]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Activation_interval:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x68]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 7
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.VLRenewalInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x74]
call fcn.0047d330
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [esp + 0x68]
call fcn.0047cd60
push eax
call fcn.0040a956
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____Renewal_interval:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x6c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 8
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004176e5
push edx
call fcn.0047f1c0
pop edx
push eax
push 0xa
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x64]
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push 0x190
call fcn.00465666
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.LicenseStatus
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53cd46
push eax
push 1
push dword [esp + 0x74]
call fcn.0047d330
lea eax, [esp + 0x68]
push eax
call fcn.0047f260
push dword [esp + 0x64]
call fcn.0047cd60
mov dword [esp + 0x78], eax
push dword [esp + 0x78]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x410fe0
mov edx, 0x55524e
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 1
cmp ebx, dword [esp]
jne 0x410ffd
mov edx, str.___LICENSED___
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 2
cmp ebx, dword [esp]
jne 0x411017
mov edx, str.OOBGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 3
cmp ebx, dword [esp]
jne 0x411031
mov edx, str.OOTGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 4
cmp ebx, dword [esp]
jne 0x41104b
mov edx, str.NonGenuineGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 5
cmp ebx, dword [esp]
jne 0x411065
mov edx, 0x5481f0
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov ebx, 6
cmp ebx, dword [esp]
jne 0x41107f
mov edx, str.ExtendedGrace
lea ecx, [esp + 0x68]
call fcn.0043d008
jmp 0x41108d
mov edx, 0x549d6c
lea ecx, [esp + 0x68]
call fcn.0043d008
pop eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______License_Status:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x6c]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 9
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004176e5
push dword [0x9d7bcc]
call fcn.00437261
push 0x12
push 0
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str.___LICENSED___
push eax
push dword [0x9d7e10]
call fcn.00419bbb
inc dword [esp + 0x20]
jno 0x4109f9
jmp 0x416c55
push dword [esp]
mov edx, str.activatewin
pop ecx
call fcn.0043d2c0
je 0x411bd1
mov eax, 0x53c098
push eax
call fcn.00437261
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x4111c8
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceMachine__KeyManagementServicePort
push eax
call fcn.0041b4e8
lea eax, [esp + 0x80]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.00428723
lea eax, [esp + 0x84]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.00428723
lea eax, [esp + 0x88]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Setting_SPP_KMS_Server_Address
push edx
call fcn.0047f200
mov edx, dword [esp + 0xc]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, str._...
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 6
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0xc]
push dword [0x9d7e10]
call fcn.00419bbb
push 6
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x10]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push dword [0x9d7d2c]
mov edx, str.x64WDV
pop ecx
call fcn.0043d2c0
je 0x411678
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___skms
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
mov dword [esp + 0x88], eax
mov eax, 0x53c098
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey
push eax
call fcn.0041b4e8
lea eax, [esp + 0x1c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00428723
lea eax, [esp + 0x38]
push eax
call fcn.0047f260
mov ebx, dword [0x9d78e8]
cmp ebx, 0x55f0
jl 0x4117b7
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Windows_11
push eax
mov eax, str.Windows_R_
push eax
push dword [esp + 0x44]
call fcn.0047da70
lea eax, [esp + 0x38]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00428723
lea eax, [esp + 0x50]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00428723
lea eax, [esp + 0x90]
push eax
call fcn.0047f260
push dword [esp + 0x34]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x411891
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x540f3a
push edx
call fcn.0047f200
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x3c]
push dword [0x9d7e10]
call fcn.00419bbb
push dword [esp + 0x4c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x4118d9
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd3e
push edx
call fcn.0047f200
mov edx, dword [esp + 0x54]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push dword [esp + 0x28]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x411921
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x30]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push dword [esp + 0x8c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x41196f
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x94]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___ato
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x411aa4
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___ckms
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x411b70
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___skms
push edx
call fcn.0047f200
mov edx, dword [esp + 0x90]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x94]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x411bcc
mov eax, 0x53d6d4
push eax
push dword [esp + 0x1c]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x411bb0
mov eax, str.Ultimate
push eax
push dword [esp + 0x1c]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x411bb0
mov eax, 1
jmp 0x411bb2
xor eax, eax
and eax, eax
je 0x411bcc
push 0x30
push dword [0x9d7bb4]
mov eax, 0x54b990
push eax
call fcn.00437e61
jmp 0x416c55
push dword [esp]
mov edx, str.activateofs
pop ecx
call fcn.0043d2c0
je 0x413c3e
mov eax, 0x53c098
push eax
call fcn.00437261
mov edx, 0x53c098
lea ecx, [esp + 0x94]
call fcn.0043d008
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, 0x54fd64
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
push dword [esp + 0x1c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x412b8b
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x411cba
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.00428723
lea eax, [esp + 0x84]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.00428723
lea eax, [esp + 0x88]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.0047cf90
and eax, eax
je 0x4129d9
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.0047d2a0
mov dword [esp + 0x98], eax
mov ebx, dword [esp + 0x98]
and ebx, ebx
jle 0x41206f
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 4]
mov edx, dword [0x9d7b44]
pop ecx
call fcn.0043d2c0
je 0x411eb8
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Setting_OSPP_KMS_Server_Address_127.0.0.2:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, str._...
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov eax, str.127.0.0.2
push eax
push dword [0x9d7e10]
call fcn.00419bbb
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x10]
push dword [0x9d7e10]
call fcn.00419bbb
mov eax, 0x53c098
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, 0x53d3a4
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
jmp 0x411fcd
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Setting_OSPP_KMS_Server_Address
push edx
call fcn.0047f200
mov edx, dword [esp + 0xc]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, str._...
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0xc]
push dword [0x9d7e10]
call fcn.00419bbb
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x10]
push dword [0x9d7e10]
call fcn.00419bbb
mov eax, 0x53c098
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetVLActivationTypeEnabled_2
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov dword [esp + 0x20], 1
jmp 0x412079
mov eax, str.Description
push eax
push dword [esp + 0x48]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x4129d9
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x54]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x4120d8
jmp 0x4129cf
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x41299f
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x540f3a
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd3e
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 1
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x30]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 2
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 3
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004176e5
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412319
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._get_KeyManagementServiceMachine__KeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.00428723
lea eax, [esp + 0xa0]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.00428723
lea eax, [esp + 0xa4]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 4]
mov edx, dword [0x9d7b44]
pop ecx
call fcn.0043d2c0
je 0x41246e
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, 0x53d3a4
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
jmp 0x412525
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_Activate
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 0x38]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
je 0x4125a4
mov ebx, dword [0x9d79f4]
inc ebx
mov dword [0x9d79f4], ebx
push dword [0x9d78e4]
push 8
call fcn.0043b1d3
jmp 0x412712
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____Activation_Error:_0x
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push 8
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0047cf90
call fcn.0043d330
mov ebx, eax
and ebx, ebx
jne 0x412712
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00422271
call fcn.0043d330
mov edx, dword [esp + 0x94]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x48]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
lea eax, [esp + 0x98]
push eax
call fcn.0047f260
call fcn.004176e5
push dword [0x9d7bcc]
call fcn.00437261
push 0x12
push 0
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str._ACTIVATION_SUCCESSFUL_
push eax
push dword [0x9d7e10]
call fcn.00419bbb
mov eax, str.0x_0_9a_zA_Z_8
push eax
push 0
call fcn.0043f510
and eax, eax
je 0x41282c
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043f5c0
call fcn.0043d330
and eax, eax
je 0x41282c
push 0
call fcn.0043f690
and eax, eax
je 0x41282c
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
call fcn.0043f710
lea eax, [esp + 0xa8]
push eax
call fcn.0047f260
push 0x12
push 0
push 0
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0xac]
push dword [0x9d7e10]
call fcn.00419bbb
jmp 0x41282c
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4128d3
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x41299f
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0xa8]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0xac]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x4129cf
call fcn.00465ed2
and eax, eax
je 0x4129b9
jmp 0x4129ae
call fcn.00465ed2
and eax, eax
je 0x4129c4
jmp 0x4129b9
call fcn.00465ed2
and eax, eax
je 0x4129cf
jmp 0x4129c4
inc dword [esp + 0x20]
jno 0x412079
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4129fc
push dword [esp + 0x1c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x4129fc
mov eax, 1
jmp 0x4129fe
xor eax, eax
and eax, eax
je 0x412ab4
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov eax, str.Key_Management_Service_machine_name_cleared_successfully.
push eax
call fcn.00437261
push dword [0x9d7bcc]
call fcn.00437261
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412b8b
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x8c]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x90]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov edx, 0x53c098
lea ecx, [esp + 0x1c]
call fcn.0043d008
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, 0x550b10
push eax
call fcn.0041b4e8
lea eax, [esp + 0x44]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412c00
push dword [esp + 0x1c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x412c00
mov eax, 1
jmp 0x412c02
xor eax, eax
and eax, eax
je 0x412c5b
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.00428723
lea eax, [esp + 0x84]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.00428723
lea eax, [esp + 0x88]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x44]
push eax
call fcn.0047f260
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.0047cf90
and eax, eax
je 0x413b7b
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.0047d2a0
mov dword [esp + 0x98], eax
mov ebx, dword [esp + 0x98]
and ebx, ebx
jle 0x412f08
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._Setting_SPP_KMS_Server_Address
push edx
call fcn.0047f200
mov edx, dword [esp + 0xc]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, str._...
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0xc]
push dword [0x9d7e10]
call fcn.00419bbb
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x10]
push dword [0x9d7e10]
call fcn.00419bbb
mov eax, 0x53c098
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetVLActivationTypeEnabled_2
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov dword [esp + 0x20], 1
jmp 0x412f12
mov eax, str.Description
push eax
push dword [esp + 0x44]
call fcn.0047d2a0
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x4137b5
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x50]
call fcn.0047d330
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push dword [esp + 0x24]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
je 0x412f71
jmp 0x4137ab
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x41377b
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x540f3a
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5476fe
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd3e
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 1
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x30]
push edx
call fcn.0047f200
call fcn.0047f2f0
push 2
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00428723
pop eax
call fcn.0047f2f0
push 3
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
call fcn.004176e5
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x4131b2
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._get_KeyManagementServiceMachine__KeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.00428723
lea eax, [esp + 0xa0]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.00428723
lea eax, [esp + 0xa4]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x10]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_Activate
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [esp + 0x38]
mov edx, 0x53d254
pop ecx
call fcn.0043d2c0
je 0x413380
mov ebx, dword [0x9d79f4]
inc ebx
mov dword [0x9d79f4], ebx
push dword [0x9d78e4]
push 8
call fcn.0043b1d3
jmp 0x4134ee
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._____Activation_Error:_0x
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push 8
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043b1d3
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0047cf90
call fcn.0043d330
mov ebx, eax
and ebx, ebx
jne 0x4134ee
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0043d312
add dword [esp], edx
call fcn.00422271
call fcn.0043d330
mov edx, dword [esp + 0x94]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x48]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
lea eax, [esp + 0x98]
push eax
call fcn.0047f260
call fcn.004176e5
push dword [0x9d7bcc]
call fcn.00437261
push 0x12
push 0
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str._ACTIVATION_SUCCESSFUL_
push eax
push dword [0x9d7e10]
call fcn.00419bbb
mov eax, str.0x_0_9a_zA_Z_8
push eax
push 0
call fcn.0043f510
and eax, eax
je 0x413608
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53de18
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.0047cd60
push edx
push eax
call fcn.0047d5d0
pop eax
call fcn.0047f2f0
push 0
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043f5c0
call fcn.0043d330
and eax, eax
je 0x413608
push 0
call fcn.0043f690
and eax, eax
je 0x413608
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
call fcn.0043f710
lea eax, [esp + 0xa8]
push eax
call fcn.0047f260
push 0x12
push 0
push 0
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0xac]
push dword [0x9d7e10]
call fcn.00419bbb
jmp 0x413608
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4136af
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x41377b
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0xa8]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0xac]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x4137ab
call fcn.00465ed2
and eax, eax
je 0x413795
jmp 0x41378a
call fcn.00465ed2
and eax, eax
je 0x4137a0
jmp 0x413795
call fcn.00465ed2
and eax, eax
je 0x4137ab
jmp 0x4137a0
inc dword [esp + 0x20]
jno 0x412f12
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4137d8
push dword [esp + 0x1c]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x4137d8
mov eax, 1
jmp 0x4137da
xor eax, eax
and eax, eax
je 0x413895
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
mov eax, str.Key_Management_Service_machine_name_cleared_successfully.
push eax
call fcn.00437261
push dword [0x9d7bcc]
call fcn.00437261
jmp 0x413aa4
push dword [0x9d7d2c]
mov edx, str.x64WDV
pop ecx
call fcn.0043d2c0
je 0x413aa4
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x14]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.0047f200
mov edx, dword [esp + 0x18]
push edx
call fcn.0047f200
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x413b7b
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.0047f200
mov edx, dword [esp + 0x8c]
push edx
call fcn.0047f200
mov edx, 0x53cef0
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.0047f200
mov edx, dword [esp + 0x90]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x413c39
push dword [esp + 0x94]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x413c39
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [esp + 0x48]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, dword [esp + 0x48]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0040ca09
call fcn.0043d330
mov ebx, eax
and ebx, ebx
jle 0x413c39
push 0x34
push dword [0x9d7e14]
mov eax, 0x53c098
push eax
call fcn.00437e61
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0xa8]
cmp ebx, 6
jne 0x413c39
push 0
push 0
push 0x53c098
push 0x53c098
push 0x53c098
push 0x53c098
mov eax, str.installkeyofs
push eax
call fcn.0040efa8
jmp 0x411bf0
jmp 0x416c55
push dword [esp]
mov edx, str.activatewindigital
pop ecx
call fcn.0043d2c0
je 0x416c55
lea eax, [esp + 0xac]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
push 0x100
push 1
call fcn.0043c21a
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53d1c6
push eax
mov eax, 0x55316c
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043b532
lea eax, [esp + 0xc8]
push eax
call fcn.0047f260
mov eax, str.2015
push eax
push dword [esp + 0xc8]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x413ccf
mov dword [esp + 0xbc], 1
jmp 0x413cf2
mov eax, str.LTSC
push eax
push dword [esp + 0xc8]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x413cf2
mov dword [esp + 0xc0], 1
mov dword [esp + 0xc8], 0
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53d1c6
push eax
mov eax, str.EditionID
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043b532
lea eax, [esp + 0xd0]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53d1c6
push eax
mov eax, str.CurrentBuild
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043b532
lea eax, [esp + 0xd4]
push eax
call fcn.0047f260
mov ebx, dword [0x9d7ad4]
and ebx, ebx
jle 0x413d6c
mov dword [esp + 0xd4], 0
jmp 0x413d77
mov dword [esp + 0xd4], 1
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.0043d2c0
je 0x413d9d
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jle 0x413d9d
mov eax, 1
jmp 0x413d9f
xor eax, eax
and eax, eax
je 0x413df9
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.0043d008
mov edx, str.M7XTQ_FN8P6_TTKYV_9D4CC_J462D
lea ecx, [ebp + 4]
call fcn.0043d008
mov edx, 0x53d2d8
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd4], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.IoTEnterprise
pop ecx
call fcn.0043d2c0
je 0x413e2c
mov eax, str.19041
push eax
push dword [esp + 0xd4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x413e2c
mov eax, 1
jmp 0x413e2e
xor eax, eax
and eax, eax
je 0x413ec6
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413e6b
lea ebp, [esp + 0xac]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x413e7f
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x548132
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_99378
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.IoTEnterpriseS
pop ecx
call fcn.0043d2c0
je 0x413ef9
mov eax, str.19044
push eax
push dword [esp + 0xd4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x413ef9
mov eax, 1
jmp 0x413efb
xor eax, eax
and eax, eax
je 0x413f93
lea ebp, [esp + 0xac]
mov edx, str.IoTEnterpriseS
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413f38
lea ebp, [esp + 0xac]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x413f4c
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x548132
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_99682
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.IoTEnterprise
pop ecx
call fcn.0043d2c0
je 0x41403b
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413fe0
lea ebp, [esp + 0xac]
mov edx, str.XQQYW_NFFMW_XJPBH_K8732_CKFFD
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x413ff4
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x5467ea
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_99378
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.0043d2c0
je 0x414061
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jle 0x414061
mov eax, 1
jmp 0x414063
xor eax, eax
and eax, eax
je 0x4140bd
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.0043d008
mov edx, str.92NFX_8DJQP_P6BBQ_THF9C_7CG2H
lea ecx, [ebp + 4]
call fcn.0043d008
mov edx, 0x53d312
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd4], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.0043d2c0
je 0x4140e3
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x4140e3
mov eax, 1
jmp 0x4140e5
xor eax, eax
and eax, eax
je 0x414163
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41411e
lea ebp, [esp + 0xac]
mov edx, str.FWN7H_PF93Q_4GGP8_M8RF3_MDWWW
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414132
lea ebp, [esp + 0xac]
mov edx, str.WNMTR_4C88C_JK8YV_HQ7T2_76DF9
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d2d8
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.0043d2c0
je 0x414189
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x414189
mov eax, 1
jmp 0x41418b
xor eax, eax
and eax, eax
je 0x414209
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4141c4
lea ebp, [esp + 0xac]
mov edx, str.8V8WN_3GXBH_2TCMG_XHRX3_9766K
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x4141d8
lea ebp, [esp + 0xac]
mov edx, str.2F77B_TNFGY_69QQF_B8YKP_D69TJ
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d312
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ProfessionalWorkstation
pop ecx
call fcn.0043d2c0
je 0x414297
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalWorkstation
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414252
lea ebp, [esp + 0xac]
mov edx, str.DXG7C_N36C4_C4HTG_X4T3X_2YV77
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414266
lea ebp, [esp + 0xac]
mov edx, str.NRG8B_VKK3Q_CXVCJ_9G2XF_6Q84J
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x542a54
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_43626
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ProfessionalWorkstationN
pop ecx
call fcn.0043d2c0
je 0x414325
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalWorkstationN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4142e0
lea ebp, [esp + 0xac]
mov edx, str.WYPNQ_8C467_V2W6J_TX4WX_WT2RQ
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x4142f4
lea ebp, [esp + 0xac]
mov edx, str.9FNHH_K3HBT_3W4TD_6383H_6XYWF
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x542b56
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_43644
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerRdsh
pop ecx
call fcn.0043d2c0
je 0x4143b3
lea ebp, [esp + 0xac]
mov edx, str.ServerRdsh
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41436e
lea ebp, [esp + 0xac]
mov edx, str.NJCF7_PW8QT_3324D_688JX_2YV66
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414382
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x544ac8
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_41295
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ProfessionalN
pop ecx
call fcn.0043d2c0
je 0x414441
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4143fc
lea ebp, [esp + 0xac]
mov edx, str.2B87N_8KFHP_DKV6R_Y2C8J_PKCKT
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414410
lea ebp, [esp + 0xac]
mov edx, str.MH37W_N47XK_V7XM9_C7227_GCQG9
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x541aa6
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98859
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ProfessionalEducationN
pop ecx
call fcn.0043d2c0
je 0x4144cf
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalEducationN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41448a
lea ebp, [esp + 0xac]
mov edx, str.GJTYN_HDMQY_FRR76_HVGC7_QPF8P
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x41449e
lea ebp, [esp + 0xac]
mov edx, str.YVWGF_BXNMC_HTQYQ_CPQ99_66QFC
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x542c52
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_04956
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ProfessionalEducation
pop ecx
call fcn.0043d2c0
je 0x41455d
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalEducation
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414518
lea ebp, [esp + 0xac]
mov edx, str.8PTT6_RNW4C_6V7J2_C2D3X_MHBPB
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x41452c
lea ebp, [esp + 0xac]
mov edx, str.6TP4R_GNPTD_KYYHQ_7B7DP_J447Y
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x542bfa
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_04955
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.Professional
pop ecx
call fcn.0043d2c0
je 0x4145eb
lea ebp, [esp + 0xac]
mov edx, str.Professional
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4145a6
lea ebp, [esp + 0xac]
mov edx, str.VK7JG_NPHTM_C97JM_9MPGT_3V66T
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x4145ba
lea ebp, [esp + 0xac]
mov edx, str.W269N_WFGWX_YVC9B_4J6C9_T83GX
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x541a44
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98841
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.0043d2c0
je 0x414679
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414634
lea ebp, [esp + 0xac]
mov edx, str.2DBW3_N2PJG_MVHW3_G7TDK_9HKR4
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414648
lea ebp, [esp + 0xac]
mov edx, str.QFFDN_GRT3P_VKWWX_X7T3R_8B639
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d312
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_04921
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.0043d2c0
je 0x414707
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4146c2
lea ebp, [esp + 0xac]
mov edx, str.NK96Y_D9CD8_W44CQ_R8YTK_DYJWX
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x4146d6
lea ebp, [esp + 0xac]
mov edx, str.DCPHK_NFMTC_H88MJ_PFHPY_QJ4BJ
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d2d8
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_05035
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EnterpriseN
pop ecx
call fcn.0043d2c0
je 0x414795
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414750
lea ebp, [esp + 0xac]
mov edx, str.3V6Q6_NQXCX_V8YXR_9QCYV_QPFCT
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414764
lea ebp, [esp + 0xac]
mov edx, str.DPH2V_TTNVB_4X9Q3_TJR4H_KHJW4
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53f01a
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98746
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.Enterprise
pop ecx
call fcn.0043d2c0
je 0x414823
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4147de
lea ebp, [esp + 0xac]
mov edx, str.XGVPP_NMH47_7TTHJ_W3FW7_8HV2C
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x4147f2
lea ebp, [esp + 0xac]
mov edx, str.NPPR9_FWDCX_D2C8J_H872K_2YT43
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d2d4
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_99683
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.EducationN
pop ecx
call fcn.0043d2c0
je 0x4148b1
lea ebp, [esp + 0xac]
mov edx, str.EducationN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41486c
lea ebp, [esp + 0xac]
mov edx, str.84NGF_MHBT6_FXBX8_QWJK7_DRR8H
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414880
lea ebp, [esp + 0xac]
mov edx, str.2WH4N_8QGBV_H22JP_CT43Q_MDWWJ
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d2b6
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98892
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.Education
pop ecx
call fcn.0043d2c0
je 0x41493f
lea ebp, [esp + 0xac]
mov edx, str.Education
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4148fa
lea ebp, [esp + 0xac]
mov edx, str.YNMGQ_8RYV3_4PGQ3_C8XTP_7CFBY
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x41490e
lea ebp, [esp + 0xac]
mov edx, str.NW6C2_QMPVW_D7KKK_3GKT6_VCFB2
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d210
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98886
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.CoreSingleLanguage
pop ecx
call fcn.0043d2c0
je 0x4149cd
lea ebp, [esp + 0xac]
mov edx, str.CoreSingleLanguage
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414988
lea ebp, [esp + 0xac]
mov edx, str.BT79Q_G7N6G_PGBYW_4YWX6_6F4BT
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x41499c
lea ebp, [esp + 0xac]
mov edx, str.7HNRX_D7KGG_3K4RQ_4WPJ4_YTDFH
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x554b1e
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_99661
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.CoreN
pop ecx
call fcn.0043d2c0
je 0x414a5b
lea ebp, [esp + 0xac]
mov edx, str.CoreN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414a16
lea ebp, [esp + 0xac]
mov edx, str.4CPRK_NM3K3_X6XXQ_RXX86_WXCHW
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414a2a
lea ebp, [esp + 0xac]
mov edx, str.3KHY7_WNT83_DGQKR_F7HPR_844BM
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x54a660
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98877
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.CoreCountrySpecific
pop ecx
call fcn.0043d2c0
je 0x414ae9
lea ebp, [esp + 0xac]
mov edx, str.CoreCountrySpecific
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414aa4
lea ebp, [esp + 0xac]
mov edx, str.N2434_X9D7W_8PF6X_8DV9T_8TYMD
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414ab8
lea ebp, [esp + 0xac]
mov edx, str.PVMJN_6DFY6_9CCP6_7BKTT_D3WVR
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x54a69c
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_99652
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.Core
pop ecx
call fcn.0043d2c0
je 0x414b77
lea ebp, [esp + 0xac]
mov edx, str.Core
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414b32
lea ebp, [esp + 0xac]
mov edx, str.YTMG3_N6DKC_DKB77_7M9GH_8HVX7
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414b46
lea ebp, [esp + 0xac]
mov edx, str.TX9XD_98N7V_6WMQ6_BX7FG_H8Q99
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x554b54
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X19_98868
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.CloudN
pop ecx
call fcn.0043d2c0
je 0x414c05
lea ebp, [esp + 0xac]
mov edx, str.CloudN
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414bc0
lea ebp, [esp + 0xac]
mov edx, str.NH9J3_68WK7_6FB93_4K3DF_DJ4F6
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414bd4
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x544e4a
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_32987
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.Cloud
pop ecx
call fcn.0043d2c0
je 0x414c93
lea ebp, [esp + 0xac]
mov edx, str.Cloud
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414c4e
lea ebp, [esp + 0xac]
mov edx, str.V3WVW_N2PV2_CGWC3_34QGF_VMJ2C
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414c62
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x544dac
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, str.X21_32983
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerStandard
pop ecx
call fcn.0043d2c0
je 0x414d21
lea ebp, [esp + 0xac]
mov edx, str.ServerStandard
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414cdc
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414cf0
lea ebp, [esp + 0xac]
mov edx, str.N69G4_B89J2_4G8F4_WWYCC_J464C
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d6d4
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerStandardCore
pop ecx
call fcn.0043d2c0
je 0x414daf
lea ebp, [esp + 0xac]
mov edx, str.ServerStandardCore
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414d6a
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414d7e
lea ebp, [esp + 0xac]
mov edx, str.N69G4_B89J2_4G8F4_WWYCC_J464C
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53dbe6
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerDatacenter
pop ecx
call fcn.0043d2c0
je 0x414e3d
lea ebp, [esp + 0xac]
mov edx, str.ServerDatacenter
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414df8
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414e0c
lea ebp, [esp + 0xac]
mov edx, str.WMDGN_G9PQG_XVVXX_R3X43_63DFG
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53d772
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerDatacenterCore
pop ecx
call fcn.0043d2c0
je 0x414ecb
lea ebp, [esp + 0xac]
mov edx, str.ServerDatacenterCore
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414e86
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414e9a
lea ebp, [esp + 0xac]
mov edx, str.WMDGN_G9PQG_XVVXX_R3X43_63DFG
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x53db58
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerSolution
pop ecx
call fcn.0043d2c0
je 0x414f59
lea ebp, [esp + 0xac]
mov edx, str.ServerSolution
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414f14
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414f28
lea ebp, [esp + 0xac]
mov edx, str.WVDHN_86M7X_466P6_VHXV7_YY726
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x5430a2
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
jmp 0x414fe2
push dword [esp + 0xcc]
mov edx, str.ServerSolutionCore
pop ecx
call fcn.0043d2c0
je 0x414fe2
lea ebp, [esp + 0xac]
mov edx, str.ServerSolutionCore
lea ecx, [ebp]
call fcn.0043d008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414fa2
lea ebp, [esp + 0xac]
mov edx, 0x53c098
lea ecx, [ebp + 4]
call fcn.0043d008
jmp 0x414fb6
lea ebp, [esp + 0xac]
mov edx, str.WVDHN_86M7X_466P6_VHXV7_YY726
lea ecx, [ebp + 4]
call fcn.0043d008
lea ebp, [esp + 0xac]
mov edx, 0x5430ca
lea ecx, [ebp + 8]
call fcn.0043d008
mov edx, 0x53c098
lea ecx, [ebp + 0xc]
call fcn.0043d008
mov dword [esp + 0xc8], 1
mov ebx, dword [esp + 0xc8]
and ebx, ebx
jne 0x41500f
mov edx, str.Not_found_the_appropriate_edition_____r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_IoT_Enterprise_r_nWindows_10_IoT_Enterprise_LTSC
lea ecx, [esp + 0xdc]
call fcn.0043d008
push dword [esp + 0xdc]
call fcn.00437261
jmp 0x416c55
mov dword [esp + 0xe0], 0
mov eax, 0x53c098
push eax
call fcn.00437261
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41503d
mov eax, str._Activation_HWID_...
push eax
call fcn.00437261
jmp 0x415048
mov eax, str._Activation_KMS38_...
push eax
call fcn.00437261
lea ebp, [esp + 0xac]
push dword [ebp + 4]
mov edx, 0x53c098
pop ecx
call fcn.0043d2c0
jne 0x416c55
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, 0x53cd46
push edx
call fcn.0047f200
mov edx, dword [0x9d7e30]
push edx
call fcn.0047f200
lea ebp, [esp + 0xb4]
mov edx, dword [ebp + 4]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 5
push 0
push 0xff
push 0xff
call fcn.0046bce7
push eax
lea ebp, [esp + 0xb4]
push dword [ebp + 4]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___ipk
push edx
call fcn.0047f200
lea ebp, [esp + 0xb0]
mov edx, dword [ebp + 4]
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push dword [ebp + 4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
push 0x3e8
call fcn.00465666
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___xpr
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
xor eax, eax
push eax
push dword [esp + 0xe8]
push dword [esp + 0x98]
mov eax, 0x53c098
push eax
call fcn.0041820a
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41520f
mov eax, str.The_machine_is_permanently_activated.
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x41520d
jmp 0x416884
jmp 0x415236
mov eax, str..2038
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x415236
mov dword [esp + 0xe0], 1
jmp 0x416884
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x415312
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x415312
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceMachine__KeyManagementServicePort
push eax
call fcn.0041b4e8
lea eax, [esp + 0x80]
push eax
call fcn.0047f260
mov edx, str.KeyManagementServiceMachine
lea ecx, [esp + 0xe8]
call fcn.0043d008
push dword [esp + 0xe8]
push dword [esp + 0x80]
call fcn.0047cf90
mov dword [esp + 0xec], eax
push dword [esp + 0xe8]
call fcn.0047cea0
mov dword [esp + 0xf0], eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.00428723
lea eax, [esp + 0x84]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.00428723
lea eax, [esp + 0x88]
push eax
call fcn.0047f260
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x4154d7
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_ID
push eax
call fcn.0041b4e8
lea eax, [esp + 0x28]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x5406fa
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00428723
lea eax, [esp + 0x2c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str._________Rearm_SKU_ID:
push edx
call fcn.0047f200
mov edx, dword [esp + 0x30]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x30]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.0047f200
mov edx, dword [esp + 0x34]
push edx
call fcn.0047f200
mov edx, str._call_ReArmSku
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b4e8
lea eax, [esp + 0x48]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x541aac
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.00428723
lea eax, [esp + 0x20]
push eax
call fcn.0047f260
mov eax, str._________Rearm_APP_ID:_55c92734_d682_4d71_983e_d6ec3f16059f
push eax
call fcn.00437261
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
mov eax, str.55c92734_d682_4d71_983e_d6ec3f16059f
push eax
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
push 1
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.0047f200
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f200
mov edx, str._call_ReArmApp_ApplicationId55c92734_d682_4d71_983e_d6ec3f16059f
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041b4e8
lea eax, [esp + 0x3c]
push eax
call fcn.0047f260
push dword [0x9d7e0c]
call fcn.00467900
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BIN
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00467922
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BIN
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00467900
call fcn.0043d330
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x4156f7
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe
push edx
call fcn.0047f200
lea eax, [esp + 0xf8]
push eax
call fcn.0047f260
push dword [esp + 0xf4]
call fcn.00467374
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4155af
jg 0x4155ab
cmp ebx, 0
jb 0x4155af
xor eax, eax
jmp 0x4155b4
mov eax, 1
or eax, eax
je 0x4156f2
mov eax, 0x56e633
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0x9d7a7c], 4
mov eax, 0x56e62f
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0x9d7a7c], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.0047e080
mov dword [esp + 0x100], eax
mov ebp, 0x79b5f3
push ebp
push 0x100
mov ebp, 0x79b5d3
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x56e637
push ebp
call fcn.0046a0c0
push dword [esp + 0xfc]
call fcn.0047e080
mov dword [esp + 0x104], eax
call fcn.0045aeef
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.0045b88f
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x4156da
push dword [esp + 0xf4]
push 0xffffffff
call fcn.00467fb0
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x4156da
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.00468160
push dword [esp + 0x10c]
call fcn.00467cc0
push dword [esp + 0x104]
call fcn.0047e0a0
push dword [esp + 0x100]
call fcn.0047e0a0
jmp 0x415a43
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x41570f
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x41570f
jmp 0x415716
mov eax, 1
jmp 0x415718
xor eax, eax
and eax, eax
je 0x4158b4
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe
push edx
call fcn.0047f200
lea eax, [esp + 0xf8]
push eax
call fcn.0047f260
push dword [esp + 0xf4]
call fcn.00467374
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x41576c
jg 0x415768
cmp ebx, 0
jb 0x41576c
xor eax, eax
jmp 0x415771
mov eax, 1
or eax, eax
je 0x4158af
mov eax, 0x6e0c07
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0x9d7a7c], 4
mov eax, 0x6e0c03
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0x9d7a7c], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.0047e080
mov dword [esp + 0x100], eax
mov ebp, 0x79b5f3
push ebp
push 0x100
mov ebp, 0x79b5d3
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x6e0c0b
push ebp
call fcn.0046a0c0
push dword [esp + 0xfc]
call fcn.0047e080
mov dword [esp + 0x104], eax
call fcn.0045aeef
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.0045b88f
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x415897
push dword [esp + 0xf4]
push 0xffffffff
call fcn.00467fb0
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x415897
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.00468160
push dword [esp + 0x10c]
call fcn.00467cc0
push dword [esp + 0x104]
call fcn.0047e0a0
push dword [esp + 0x100]
call fcn.0047e0a0
jmp 0x415a43
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe
push edx
call fcn.0047f200
lea eax, [esp + 0xf8]
push eax
call fcn.0047f260
push dword [esp + 0xf4]
call fcn.00467374
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x415900
jg 0x4158fc
cmp ebx, 0
jb 0x415900
xor eax, eax
jmp 0x415905
mov eax, 1
or eax, eax
je 0x415a43
mov eax, 0x62798b
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0x9d7a7c], 4
mov eax, 0x627987
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0x9d7a7c], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.0047e080
mov dword [esp + 0x100], eax
mov ebp, 0x79b5f3
push ebp
push 0x100
mov ebp, 0x79b5d3
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x62798f
push ebp
call fcn.0046a0c0
push dword [esp + 0xfc]
call fcn.0047e080
mov dword [esp + 0x104], eax
call fcn.0045aeef
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.0045b88f
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x415a2b
push dword [esp + 0xf4]
push 0xffffffff
call fcn.00467fb0
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x415a2b
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.00468160
push dword [esp + 0x10c]
call fcn.00467cc0
push dword [esp + 0x104]
call fcn.0047e0a0
push dword [esp + 0x100]
call fcn.0047e0a0
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BIN_slc.dll
push edx
call fcn.0047f200
lea eax, [esp + 0xf8]
push eax
call fcn.0047f260
push dword [esp + 0xf4]
call fcn.00467374
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x415a8f
jg 0x415a8b
cmp ebx, 0
jb 0x415a8f
xor eax, eax
jmp 0x415a94
mov eax, 1
or eax, eax
je 0x415bd2
mov eax, 0x799e8d
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0x9d7a7c], 4
mov eax, 0x799e89
mov dword [0x9d7a7c], eax
mov eax, dword [0x9d7a7c]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0x9d7a7c], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.0047e080
mov dword [esp + 0x100], eax
mov ebp, 0x79b5f3
push ebp
push 0x100
mov ebp, 0x79b5d3
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x799e91
push ebp
call fcn.0046a0c0
push dword [esp + 0xfc]
call fcn.0047e080
mov dword [esp + 0x104], eax
call fcn.0045aeef
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.0045b88f
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x415bba
push dword [esp + 0xf4]
push 0xffffffff
call fcn.00467fb0
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x415bba
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.00468160
push dword [esp + 0x10c]
call fcn.00467cc0
push dword [esp + 0x104]
call fcn.0047e0a0
push dword [esp + 0x100]
call fcn.0047e0a0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00467374
call fcn.0043d330
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x415c1f
jl 0x415c1b
cmp ebx, 0
ja 0x415c1f
xor eax, eax
jmp 0x415c24
mov eax, 1
or eax, eax
je 0x415c2a
jmp 0x415c4c
mov edx, str.Error__The_program_cannot_access_the_gatherosstate.exe_file.
lea ecx, [esp + 0x110]
call fcn.0043d008
push dword [esp + 0x110]
call fcn.00437261
jmp 0x416c55
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov edx, dword [0x9d7924]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, 0x5481dc
push edx
call fcn.0047f200
lea eax, [esp + 0xe8]
push eax
call fcn.0047f260
mov edx, 0x53c098
lea ecx, [0x9d7eb4]
call fcn.0043d008
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_licensemanager
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov eax, str.DISABLED
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x415d6a
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_licensemanager_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov dword [esp + 0x11c], 1
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_wuauserv
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov eax, str.DISABLED
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x415e20
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wuauserv_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov dword [esp + 0x120], 1
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_wlidsvc
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov eax, str.DISABLED
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x415fde
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wlidsvc_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov dword [esp + 0x118], 1
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_RpcSs
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov eax, str.DISABLED
push eax
push dword [0x9d7eb4]
call fcn.0047cf90
mov ebx, eax
and ebx, ebx
jle 0x415fde
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_RpcSs_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_RpcSs
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov dword [esp + 0x114], 1
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_licensemanager
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_wuauserv
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_wlidsvc
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x4160d4
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x4160d4
jmp 0x4160db
mov eax, 1
jmp 0x4160dd
xor eax, eax
and eax, eax
je 0x4161b6
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___skms_12.34.56.78:1833
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
xor eax, eax
push eax
push dword [esp + 0xe8]
push dword [esp + 0x98]
mov eax, 0x53c098
push eax
call fcn.0041820a
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Volume:GVLK
push eax
mov eax, str.reg.exe
push eax
call fcn.0041820a
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___f__v__
push edx
call fcn.0047f200
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe___d___WIN7RTM_
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0041820a
call fcn.0043d330
jmp 0x4161d1
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Retail
push eax
mov eax, str.reg.exe
push eax
call fcn.0041820a
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Kernel_ProductInfo___t_REG_DWORD__d
push edx
call fcn.0047f200
lea ebp, [esp + 0xbc]
mov edx, dword [ebp + 8]
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0041820a
call fcn.0043d330
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Security_SPP_GenuineLocalStatus___t_REG_DWORD__d_1
push eax
mov eax, str.reg.exe
push eax
call fcn.0041820a
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x416318
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BIN
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, 0x53c098
push eax
mov eax, str.gatherosstate.exe
push eax
call fcn.0043d312
add dword [esp + 8], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.__v__o__altto
push edx
call fcn.0047f200
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f200
mov edx, str.BIN_
push edx
call fcn.0047f200
call fcn.0047f2f0
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.ClipUp.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0041820a
call fcn.0043d330
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.delete__HKEY_LOCAL_MACHINESYSTEMTokens___f
push eax
mov eax, str.reg.exe
push eax
call fcn.0041820a
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x41634b
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x41634b
jmp 0x416352
mov eax, 1
jmp 0x416354
xor eax, eax
and eax, eax
je 0x4163b2
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.delete__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___v__
push edx
call fcn.0047f200
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f200
mov edx, str.BINgatherosstate.exe___f
push edx
call fcn.0047f200
call fcn.0047f2f0
mov eax, str.reg.exe
push eax
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4165ae
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BINh.cmd
push edx
call fcn.0047f200
call fcn.0047f2f0
push 0x6f
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00467fb0
call fcn.0043d330
mov ebp, str.__xml_version_1.0__encoding_UTF_16____r_n_Task_version_1.2__xmlns_http:__schemas.microsoft.com_windows_2004_02_mit_task___r_n___RegistrationInfo__r_n_____Date_2014_10_15T18:54:19.4648216__Date__r_n_____Author_RATIBORUS__Author__r_n_____URI_KMSAutoStart__URI__r_n____RegistrationInfo__r_n___Triggers__r_n_____LogonTrigger__r_n_______Enabled_true__Enabled__r_n_______Delay_PT15S__Delay__r_n______LogonTrigger__r_n____Triggers__r_n___Principals__r_n_____Principal_id_Author___r_n_______GroupId_S_1_5_32_544__GroupId__r_n_______RunLevel_HighestAvailable__RunLevel__r_n______Principal__r_n____Principals__r_n___Settings__r_n_____MultipleInstancesPolicy_IgnoreNew__MultipleInstancesPolicy__r_n_____DisallowStartIfOnBatteries_false__DisallowStartIfOnBatteries__r_n_____StopIfGoingOnBatteries_true__StopIfGoingOnBatteries__r_n_____AllowHardTerminate_false__AllowHardTerminate__r_n_____StartWhenAvailable_true__StartWhenAvailable__r_n_____RunOnlyIfNetworkAvailable_false__RunOnlyIfNetworkAvailable__r_n_____IdleSettings__r_n_______StopOnIdleEnd_true__StopOnIdleEnd__r_n_______RestartOnIdle_false__RestartOnIdle__r_n______IdleSettings__r_n_____AllowStartOnDemand_true__AllowStartOnDemand__r_n_____Enabled_true__Enabled__r_n_____Hidden_true__Hidden__r_n_____RunOnlyIfIdle_false__RunOnlyIfIdle__r_n_____WakeToRun_false__WakeToRun__r_n_____ExecutionTimeLimit_PT0S__ExecutionTimeLimit__r_n_____Priority_7__Priority__r_n_____RestartOnFailure__r_n_______Interval_PT1M__Interval__r_n_______Count_3__Count__r_n______RestartOnFailure__r_n____Settings__r_n___Actions_Context_Author___r_n_____Exec__r_n_______Command__XXXXXXXXXX___Command__r_n_______Arguments__WINACTDIGITALLGUI__Arguments__r_n_______WorkingDirectory_YYYYYYYYYY__WorkingDirectory__r_n______Exec__r_n____Actions__r_n__Task_
mov ebx, ebp
mov ebp, str._setlocal_DisableDelayedExpansion_r_n_echo_off_r_nset_PATH_SystemRoot_System32__SystemRoot_System32wbem__SystemRoot_System32WindowsPowerShell_v1.0_r_nIf_exist__SystemRoot_Sysnative_reg.exe___r_nset_PATH_SystemRoot_Sysnative__SystemRoot_Sysnativewbem__SystemRoot_SysnativeWindowsPowerShell_v1.0__PATH__r_n__r_nset__unattended0_r_nset__nul11_nul__r_nset__nul22_nul__r_nset__nul62_nul__r_nset__nul_nul_2_1__r_nset_pscpowershell.exe_r_nset___work_dp0__r_nif____work:_1_____set___work__work:0__1___r_nset___batf_f0__r_nset___batp__batf:___r_nset__PSarg____f0_____el___args__r_nset___ttemp_userprofile_AppDataLocalTemp__r_nset_winbuild1_r_nsetlocal_EnableDelayedExpansion_r_nfor__f__tokens6_delims__._____G_in__ver__do_set_winbuild__G_r_n_r_n_psc___ExecutionContext.SessionState.LanguageMode__nul2___find__i__Full___nul1_____r_n_eline__r_n_psc___ExecutionContext.SessionState.LanguageMode_r_necho_PowerShell_is_not_working._Aborting..._r_necho_If_you_have_applied_restrictions_on_Powershell_then_undo_those_changes._r_ngoto_dk_done_r_n__r_n_r_ncall_:dk_product_r_ncall_:dk_ckeckwmic_r_n_r_nsc_start_sppsvc__nul__r_nif__errorlevel__NEQ_1056_if__errorlevel__NEQ_0___r_necho_Error_code:__errorlevel__r_necho__Failed_to_start__sppsvc__service__rest_of_the_process_may_take_a_long_time...__r_n__r_n_r_ncall_:dk_checkperm_r_nif_defined__perm___r_necho_____________________________________________________________________________________________r_necho___________Checking:__winos__is_Permanently_Activated.__r_necho___________Activation_is_not_required.__r_necho_____________________________________________________________________________________________r_nif___unattended_1_goto_dk_done_r_nexit__b_r_n__r_n_r_n_r_nif_exist___SystemRoot_ServicingPackagesMicrosoft_Windows_EvalEdition.mum____r_nreg_query__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion___v_EditionID__nul2___find__i__Eval___nul1_____r_n_eline__r_necho___winos____winbuild___r_necho_Evaluation_Editions_cannot_be_activated.__r_necho_You_need_to_install_full_version_of__winos__r_n_r_ngoto_dk_done_r_n__r_n__r_n_r_ncall_:dk_checksku_r_nif_not_defined_osSKU___r_n_eline__r_ngoto_dk_done_r_n__r_n_r_nset_error_r_n_r_nfor__f__skip2_tokens2____a_in__reg_query__HKLMSYSTEMCurrentControlSetControlSession_ManagerEnvironment___v_PROCESSOR_ARCHITECTURE__do_set_arch__b_r_nfor__f__tokens6_7_delims__._____i_in__ver__do_if____j_____set_fullbuild__i__else__set_fullbuild__i.__j__r_necho_Checking_OS_Info__________________________winos____fullbuild____arch___r_n_r_nset__int_r_nfor___a_in__l.root_servers.net_resolver1.opendns.com_download.windowsupdate.com_google.com__do_if_not_defined__int___r_nfor__f__delims___tokens2_____in__ping__n_1___a__do__if_not________set__int1__r_n__r_nif_not_defined__int___r_n_psc___If__Activator_::CreateInstance__Type_::GetTypeFromCLSID__Guid_DCB00C01_570F_4A9B_8D69_199FDBA5723B__.IsConnectedToInternet_Exit_0ElseExit_1__r_nif__errorlevel_0__set__int1set_ping_f_But_Ping_Failed__r_n__r_nif_defined__int___r_necho_Checking_Internet_Connection_____________Connected_ping_f___r_n__else___r_nset_error1_r_necho__Checking_Internet_Connection_____________Not_Connected___r_n__r_n_r_nset__WSH1_r_nreg_query__HKCUSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nreg_query__HKLMSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nif___WSH__EQU_0___r_nreg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nreg_add__HKCUSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nif_not___arch___x86__reg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__reg:32__nul__r_necho_Enabling_Windows_Script_Host_____________Successful__r_n__r_n_r_necho_Initiating_Diagnostic_Tests..._r_nset___servClipSVC_wlidsvc_sppsvc_KeyI
sub ebx, ebp
push ebx
mov ebp, str._setlocal_DisableDelayedExpansion_r_n_echo_off_r_nset_PATH_SystemRoot_System32__SystemRoot_System32wbem__SystemRoot_System32WindowsPowerShell_v1.0_r_nIf_exist__SystemRoot_Sysnative_reg.exe___r_nset_PATH_SystemRoot_Sysnative__SystemRoot_Sysnativewbem__SystemRoot_SysnativeWindowsPowerShell_v1.0__PATH__r_n__r_nset__unattended0_r_nset__nul11_nul__r_nset__nul22_nul__r_nset__nul62_nul__r_nset__nul_nul_2_1__r_nset_pscpowershell.exe_r_nset___work_dp0__r_nif____work:_1_____set___work__work:0__1___r_nset___batf_f0__r_nset___batp__batf:___r_nset__PSarg____f0_____el___args__r_nset___ttemp_userprofile_AppDataLocalTemp__r_nset_winbuild1_r_nsetlocal_EnableDelayedExpansion_r_nfor__f__tokens6_delims__._____G_in__ver__do_set_winbuild__G_r_n_r_n_psc___ExecutionContext.SessionState.LanguageMode__nul2___find__i__Full___nul1_____r_n_eline__r_n_psc___ExecutionContext.SessionState.LanguageMode_r_necho_PowerShell_is_not_working._Aborting..._r_necho_If_you_have_applied_restrictions_on_Powershell_then_undo_those_changes._r_ngoto_dk_done_r_n__r_n_r_ncall_:dk_product_r_ncall_:dk_ckeckwmic_r_n_r_nsc_start_sppsvc__nul__r_nif__errorlevel__NEQ_1056_if__errorlevel__NEQ_0___r_necho_Error_code:__errorlevel__r_necho__Failed_to_start__sppsvc__service__rest_of_the_process_may_take_a_long_time...__r_n__r_n_r_ncall_:dk_checkperm_r_nif_defined__perm___r_necho_____________________________________________________________________________________________r_necho___________Checking:__winos__is_Permanently_Activated.__r_necho___________Activation_is_not_required.__r_necho_____________________________________________________________________________________________r_nif___unattended_1_goto_dk_done_r_nexit__b_r_n__r_n_r_n_r_nif_exist___SystemRoot_ServicingPackagesMicrosoft_Windows_EvalEdition.mum____r_nreg_query__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion___v_EditionID__nul2___find__i__Eval___nul1_____r_n_eline__r_necho___winos____winbuild___r_necho_Evaluation_Editions_cannot_be_activated.__r_necho_You_need_to_install_full_version_of__winos__r_n_r_ngoto_dk_done_r_n__r_n__r_n_r_ncall_:dk_checksku_r_nif_not_defined_osSKU___r_n_eline__r_ngoto_dk_done_r_n__r_n_r_nset_error_r_n_r_nfor__f__skip2_tokens2____a_in__reg_query__HKLMSYSTEMCurrentControlSetControlSession_ManagerEnvironment___v_PROCESSOR_ARCHITECTURE__do_set_arch__b_r_nfor__f__tokens6_7_delims__._____i_in__ver__do_if____j_____set_fullbuild__i__else__set_fullbuild__i.__j__r_necho_Checking_OS_Info__________________________winos____fullbuild____arch___r_n_r_nset__int_r_nfor___a_in__l.root_servers.net_resolver1.opendns.com_download.windowsupdate.com_google.com__do_if_not_defined__int___r_nfor__f__delims___tokens2_____in__ping__n_1___a__do__if_not________set__int1__r_n__r_nif_not_defined__int___r_n_psc___If__Activator_::CreateInstance__Type_::GetTypeFromCLSID__Guid_DCB00C01_570F_4A9B_8D69_199FDBA5723B__.IsConnectedToInternet_Exit_0ElseExit_1__r_nif__errorlevel_0__set__int1set_ping_f_But_Ping_Failed__r_n__r_nif_defined__int___r_necho_Checking_Internet_Connection_____________Connected_ping_f___r_n__else___r_nset_error1_r_necho__Checking_Internet_Connection_____________Not_Connected___r_n__r_n_r_nset__WSH1_r_nreg_query__HKCUSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nreg_query__HKLMSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__nul2___find__i__0x0___nul1____set__WSH0__r_nif___WSH__EQU_0___r_nreg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nreg_add__HKCUSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__nul__r_nif_not___arch___x86__reg_add__HKLMSoftwareMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f__reg:32__nul__r_necho_Enabling_Windows_Script_Host_____________Successful__r_n__r_n_r_necho_Initiating_Diagnostic_Tests..._r_nset___servClipSVC_wlidsvc_sppsvc_KeyI
push ebp
push 0x6f
call fcn.00468160
push 0x6f
call fcn.00467cc0
push 1
lea eax, [0x4296b4]
push eax
call fcn.0043dde3
mov dword [0x9d7c54], eax
push dword [0x9d7c54]
call fcn.0043dd74
and eax, eax
je 0x416469
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x416467
call fcn.0042be6f
jmp 0x416444
push 0x100
push 1
call fcn.0043c21a
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53d1c6
push eax
mov eax, 0x55316c
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043b532
lea eax, [esp + 0x128]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.Activating
push edx
call fcn.0047f200
mov edx, dword [esp + 0x12c]
push edx
call fcn.0047f200
mov edx, str._...
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.00437261
call fcn.0043d330
push 3
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
push dword [esp + 0x12c]
push dword [0x9d7e10]
call fcn.00419bbb
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___ato
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
mov ebx, dword [esp + 0x118]
and ebx, ebx
jle 0x416651
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wlidsvc_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_wlidsvc__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._net.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0x114]
and ebx, ebx
jle 0x4166f4
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_RpcSs_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_RpcSs__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._net.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0x11c]
and ebx, ebx
jle 0x416797
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_licensemanager_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_licensemanager__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._net.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
mov ebx, dword [esp + 0x120]
and ebx, ebx
jle 0x41683a
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wuauserv_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._sc.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_wuauserv__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._net.exe
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0041820a
call fcn.0043d330
push dword [0x9d7e0c]
call fcn.00467900
push edx
call fcn.0047f1c0
pop edx
push eax
mov eax, 0x53c098
push eax
mov edx, dword [0x9d7e0c]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str.BIN
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.004678ee
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___xpr
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
push edx
call fcn.0047f1c0
pop edx
push eax
push 5
push 0xff
push 0xff
push 0xff
call fcn.0046bce7
push eax
lea ebp, [esp + 0xb8]
mov edx, dword [ebp]
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f200
mov edx, str._edition
push edx
call fcn.0047f200
call fcn.0047f2f0
push dword [0x9d7e10]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.00419bbb
call fcn.0043d330
push 5
push 0xff
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str._The_machine_is_permanently_activated_
push eax
push dword [0x9d7e10]
call fcn.00419bbb
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x4169cc
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x4169cc
mov eax, 1
jmp 0x4169ce
xor eax, eax
and eax, eax
je 0x416b62
push 5
push 0xff
push 0xff
push 0
call fcn.0046bce7
push eax
mov eax, str.Volume_activation_will_expire_19.01.2038
push eax
push dword [0x9d7e10]
call fcn.00419bbb
mov ebx, eax
and ebx, ebx
jne 0x416b44
push 0x14
push dword [0x9d7b0c]
mov eax, str.Activation_Error
push eax
call fcn.00437e61
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0xa8]
cmp ebx, 6
jne 0x416b42
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___rearm
push edx
call fcn.0047f200
lea eax, [esp + 0x94]
push eax
call fcn.0047f260
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
call fcn.0040d837
mov edx, str.shutdown.exe__r__f__t_0
lea ecx, [esp + 0x90]
call fcn.0043d008
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push dword [esp + 0x9c]
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
jmp 0x416b62
mov ebx, dword [0x9d79f4]
inc ebx
mov dword [0x9d79f4], ebx
push 0
lea eax, [0x40c95c]
push eax
call fcn.0043dde3
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x416c55
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x416b8e
mov ebx, dword [esp + 0xe0]
and ebx, ebx
jne 0x416b8e
mov eax, 1
jmp 0x416b90
xor eax, eax
and eax, eax
je 0x416c55
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.00437261
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
call fcn.0043d312
add dword [esp], edx
call fcn.004674cb
call fcn.0047f2f0
push edx
call fcn.0047f1c0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.0047f200
push edx
call fcn.0047f1c0
pop edx
push eax
push 0x53c098
call fcn.0041c3e4
pop eax
mov edx, str.___skms
push edx
call fcn.0047f200
mov edx, dword [esp + 0x90]
push edx
call fcn.0047f200
mov edx, 0x53d868
push edx
call fcn.0047f200
mov edx, dword [esp + 0x94]
push edx
call fcn.0047f200
call fcn.0043d312
add dword [esp], edx
call fcn.0043d312
add dword [esp + 4], edx
call fcn.0042a483
call fcn.0043d330
push dword [0x9d7d80]
call fcn.004659bf
and eax, eax
je 0x416c6f
push dword [0x9d7e10]
call fcn.00464612
xor eax, eax
push dword [esp + 0x60]
call fcn.0047f3c0
push dword [esp + 0x4c]
call fcn.0047f3c0
push dword [esp + 0x9c]
call fcn.0047f3c0
push dword [esp + 0x68]
call fcn.0047f3c0
push dword [esp + 0x54]
call fcn.0047f3c0
push dword [esp + 0x84]
call fcn.0047f3c0
push dword [esp + 0x2c]
call fcn.0047f3c0
push dword [esp + 0x64]
call fcn.0047f3c0
push dword [esp + 0xa4]
call fcn.0047f3c0
push dword [esp + 0x90]
call fcn.0047f3c0
push dword [esp + 0x74]
call fcn.0047f3c0
push dword [esp + 0x1c]
call fcn.0047f3c0
push dword [esp + 0x10]
call fcn.0047f3c0
push dword [esp + 0x94]
call fcn.0047f3c0
push dword [esp + 0xdc]
call fcn.0047f3c0
push dword [esp + 0x18]
call fcn.0047f3c0
lea edx, [esp + 0xac]
push 0x556c3c
push edx
call fcn.0043dc21
push dword [esp + 4]
call fcn.0047f3c0
push dword [esp + 0x8c]
call fcn.0047f3c0
push dword [esp + 0x44]
call fcn.0047f3c0
push dword [esp + 0xe4]
call fcn.0047f3c0
push dword [esp + 0xc4]
call fcn.0047f3c0
push dword [esp + 0x40]
call fcn.0047f3c0
push dword [esp + 0x80]
call fcn.0047f3c0
push dword [esp + 0x5c]
call fcn.0047f3c0
push dword [esp + 0x70]
call fcn.0047f3c0
push dword [esp + 8]
call fcn.0047f3c0
push dword [esp + 0xd0]
call fcn.0047f3c0
push dword [esp + 0x48]
call fcn.0047f3c0
push dword [esp + 0x110]
call fcn.0047f3c0
push dword [esp + 0x34]
call fcn.0047f3c0
push dword [esp + 0x6c]
call fcn.0047f3c0
push dword [esp + 0x58]
call fcn.0047f3c0
push dword [esp + 0x38]
call fcn.0047f3c0
push dword [esp + 0x124]
call fcn.0047f3c0
push dword [esp + 0x50]
call fcn.0047f3c0
push dword [esp + 0xe8]
call fcn.0047f3c0
push dword [esp + 0xa0]
call fcn.0047f3c0
push dword [esp]
call fcn.0047f3c0
push dword [esp + 0xf4]
call fcn.0047f3c0
push dword [esp + 0x28]
call fcn.0047f3c0
push dword [esp + 0x24]
call fcn.0047f3c0
push dword [esp + 0x7c]
call fcn.0047f3c0
push dword [esp + 0xc]
call fcn.0047f3c0
push dword [esp + 0xcc]
call fcn.0047f3c0
add esp, 0x128
pop edi
pop ebx
pop ebp
ret 0x1c