Function at 0x40efb6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x4a
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x40efbe
call fcn.00487690
mov edx, dword [esp + 0x138]
lea ecx, [esp]
call fcn.00442000
mov edx, dword [esp + 0x13c]
lea ecx, [esp + 4]
call fcn.00442000
mov edx, dword [esp + 0x140]
lea ecx, [esp + 8]
call fcn.00442000
mov edx, dword [esp + 0x144]
lea ecx, [esp + 0xc]
call fcn.00442000
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x10]
call fcn.00442000
push dword [esp]
mov edx, str.installkeywin
pop ecx
call fcn.00442660
je 0x40f5c1
mov dword [esp + 0x14], 0
mov eax, 0x55a098
push eax
call fcn.0043779c
push dword [0xa629c8]
call fcn.0043779c
mov eax, 0x55a098
push eax
call fcn.0043779c
call fcn.0046b263
mov ebx, eax
cmp ebx, 0x46
jne 0x40f08c
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows____get_Name__Description__ID__PartialProductKey__LicenseStatus__GracePeriodRemaining
push eax
call fcn.0041b5ba
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
jmp 0x40f0ae
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b5ba
lea eax, [esp + 0x20]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
mov dword [esp + 0x20], 1
jmp 0x40f0fc
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40f570
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x40f15b
jmp 0x40f566
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._edition
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.00484c40
lea eax, [esp + 0x30]
push eax
call fcn.00487590
mov dword [esp + 0x30], 0
jmp 0x40f1f2
push dword [0xa630b8]
call fcn.00472a97
cmp eax, dword [esp + 0x30]
jl 0x40f566
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40f55c
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x38]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x30]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x44]
call fcn.00484c40
call fcn.004426b2
add dword [esp], edx
call fcn.00484ee0
call fcn.004426d0
mov ebx, eax
and ebx, ebx
jle 0x40f55c
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x3c]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x44]
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ad4]
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 0xf
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_Version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 0x38]
mov edx, 0x55b452
pop ecx
call fcn.00442660
je 0x40f4a6
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ae4]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
jmp 0x40f547
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x48]
call fcn.00484cb0
push edx
push eax
call fcn.00485610
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.004222ac
call fcn.004426d0
mov eax, 0x55a098
push eax
call fcn.0043779c
mov dword [esp + 0x14], 1
jmp 0x40f566
inc dword [esp + 0x30]
jno 0x40f1f2
inc dword [esp + 0x20]
jno 0x40f0fc
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x40f5bc
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ad8]
push edx
call fcn.00487530
mov edx, str.GVLK_Key_Notfound.
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
jmp 0x416bac
push dword [esp]
mov edx, str.installkeyofs
pop ecx
call fcn.00442660
je 0x40ffb4
mov eax, 0x55a098
push eax
call fcn.0043779c
push dword [0xa6258c]
call fcn.0043779c
mov eax, 0x55a098
push eax
call fcn.0043779c
mov dword [esp + 0x3c], 1
push dword [0xa62b30]
mov edx, 0x5757d8
pop ecx
call fcn.00442660
je 0x40f63e
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x44]
push eax
call fcn.00487590
push dword [esp + 0x40]
call fcn.004235a6
jmp 0x40f669
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
push dword [esp + 0x44]
call fcn.004235a6
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40fb0a
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionService_get_Version__value
push eax
call fcn.0041b5ba
lea eax, [esp + 0x4c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x40f702
call fcn.0046bae6
and eax, eax
je 0x40f702
jmp 0x40f6f7
mov dword [esp + 0x20], 1
jmp 0x40f70c
mov eax, str.Description
push eax
push dword [esp + 0x48]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40fb0a
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x54]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x40f76b
jmp 0x40fb00
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40fb00
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
mov dword [esp + 0x30], 0
jmp 0x40f7d7
push dword [0xa630b8]
call fcn.00472a97
cmp eax, dword [esp + 0x30]
jl 0x40fb00
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40faf6
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x38]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x3c]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x44]
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ad4]
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 0xf
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_Version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 0x38]
mov edx, 0x55b452
pop ecx
call fcn.00442660
je 0x40fa4a
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ae4]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
jmp 0x40faeb
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x48]
call fcn.00484cb0
push edx
push eax
call fcn.00485610
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.004222ac
call fcn.004426d0
mov eax, 0x55a098
push eax
call fcn.0043779c
inc dword [esp + 0x30]
jno 0x40f7d7
inc dword [esp + 0x20]
jno 0x40f70c
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office____get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x44]
push eax
call fcn.00487590
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40ffaf
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b5ba
lea eax, [esp + 0x4c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
mov ebx, dword [esp + 0x3c]
and ebx, ebx
jne 0x40fba7
push dword [0xa6258c]
call fcn.0043779c
mov eax, 0x55a098
push eax
call fcn.0043779c
mov dword [esp + 0x20], 1
jmp 0x40fbb1
mov eax, str.Description
push eax
push dword [esp + 0x44]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x40ffaf
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x50]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x40fc10
jmp 0x40ffa5
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40ffa5
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
mov dword [esp + 0x30], 0
jmp 0x40fc7c
push dword [0xa630b8]
call fcn.00472a97
cmp eax, dword [esp + 0x30]
jl 0x40ffa5
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x30]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [esp + 0x2c]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x40ff9b
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x38]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x3c]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [esp + 0x44]
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ad4]
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 0xf
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
push dword [ebp]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_Version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_InstallProductKey_ProductKey_
push edx
call fcn.00487530
mov edx, dword [0xa630bc]
imul edx, dword [esp + 0x3c]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xa630b8]
mov edx, dword [ebp]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 0x38]
mov edx, 0x55b452
pop ecx
call fcn.00442660
je 0x40feef
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ae4]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
jmp 0x40ff90
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Error_0x
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x48]
call fcn.00484cb0
push edx
push eax
call fcn.00485610
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.004222ac
call fcn.004426d0
mov eax, 0x55a098
push eax
call fcn.0043779c
inc dword [esp + 0x30]
jno 0x40fc7c
inc dword [esp + 0x20]
jno 0x40fbb1
jmp 0x416bac
push dword [esp]
mov edx, str.infowin
pop ecx
call fcn.00442660
je 0x410956
call fcn.0046b263
mov ebx, eax
cmp ebx, 0x46
jne 0x40fff8
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__GracePeriodRemaining
push eax
call fcn.0041b5ba
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
jmp 0x41001a
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID__IsKeyManagementServiceMachine__KeyManagementServiceCurrentCount
push eax
call fcn.0041b5ba
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
mov dword [esp + 0x20], 1
jmp 0x410024
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x410951
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x410083
jmp 0x410947
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55f864
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
mov ebx, dword [0xa625a0]
cmp ebx, 0x55f0
jl 0x41013c
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Windows_11
push eax
mov eax, str.Windows_R_
push eax
mov ebp, dword [0xa630c4]
push dword [ebp]
call fcn.004859d0
lea eax, [ebp]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x50]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55aebe
push edx
call fcn.00487530
mov edx, dword [esp + 0x54]
push edx
call fcn.00487530
call fcn.00487620
push 1
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 2
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 3
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0046b263
mov ebx, eax
cmp ebx, 0x46
jne 0x41025e
mov edx, 0x55b452
lea ecx, [esp + 0x50]
call fcn.00442008
jmp 0x410280
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.IsKeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x54]
push eax
call fcn.00487590
mov eax, str.VOLUME_KMSCLIENT
push eax
push dword [esp + 0x50]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x4105a8
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x58]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str._nKeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x5c]
push eax
call fcn.00487590
push dword [esp + 0x58]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x410347
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____KMS_host_Machine:
push edx
call fcn.00487530
mov edx, dword [esp + 0x60]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x5c]
push edx
call fcn.00487530
call fcn.00487620
push 4
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
jmp 0x410357
mov eax, str._____KMS_host_Machine:
push eax
push 4
call fcn.0043b6ee
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______KMS_Server_PID:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceProductKeyID
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 5
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.GracePeriodRemaining
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x60]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x60]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x60]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Expiration_Date_Time:
push edx
call fcn.00487530
mov edx, dword [esp + 0x64]
push edx
call fcn.00487530
call fcn.00487620
push 6
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0046b263
mov ebx, eax
cmp ebx, 0x46
je 0x4105a3
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.VLActivationInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x70]
call fcn.00485290
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x64]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Activation_interval:
push edx
call fcn.00487530
mov edx, dword [esp + 0x68]
push edx
call fcn.00487530
call fcn.00487620
push 7
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.VLRenewalInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x74]
call fcn.00485290
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x68]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____Renewal_interval:
push edx
call fcn.00487530
mov edx, dword [esp + 0x6c]
push edx
call fcn.00487530
call fcn.00487620
push 8
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
jmp 0x41072b
push dword [esp + 0x50]
mov edx, 0x55b452
pop ecx
call fcn.00442660
jne 0x41072b
mov eax, str._r_n_Key_Management_Service_is_enabled_on_this_machine
push eax
push 4
call fcn.0043b6ee
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceCurrentCount
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x6c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.________Current_count:
push edx
call fcn.00487530
mov edx, dword [esp + 0x70]
push edx
call fcn.00487530
call fcn.00487620
push 5
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceListeningPort__KeyManagementServiceDnsPublishing
push eax
call fcn.0041b5ba
lea eax, [esp + 0x70]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceListeningPort
push eax
mov eax, dword [esp + 0x74]
push eax
call fcn.004288b9
lea eax, [esp + 0x74]
push eax
call fcn.00487590
push dword [esp + 0x70]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x410694
mov edx, 0x575b4a
lea ecx, [esp + 0x70]
call fcn.00442008
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.____Listening_on_Port:
push edx
call fcn.00487530
mov edx, dword [esp + 0x78]
push edx
call fcn.00487530
call fcn.00487620
push 6
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceDnsPublishing
push eax
mov eax, dword [esp + 0x74]
push eax
call fcn.004288b9
lea eax, [esp + 0x78]
push eax
call fcn.00487590
push dword [esp + 0x74]
mov edx, str.TRUE
pop ecx
call fcn.00442660
je 0x41071b
mov eax, str._______DNS_publishing:_Enabled
push eax
push 7
call fcn.0043b6ee
jmp 0x41072b
mov eax, str._______DNS_publishing:_Disabled
push eax
push 7
call fcn.0043b6ee
call fcn.0041763c
push edx
call fcn.004874f0
pop edx
push eax
push 0xa
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov edx, dword [esp + 0x64]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x64]
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push 0x190
call fcn.0046b1fb
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.LicenseStatus
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x74]
call fcn.00485290
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push dword [esp + 0x64]
call fcn.00484cb0
mov dword [esp + 0x78], eax
push dword [esp + 0x78]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x41081c
mov edx, 0x5757e0
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 1
cmp ebx, dword [esp]
jne 0x410839
mov edx, str.___LICENSED___
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 2
cmp ebx, dword [esp]
jne 0x410853
mov edx, str.OOBGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 3
cmp ebx, dword [esp]
jne 0x41086d
mov edx, str.OOTGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 4
cmp ebx, dword [esp]
jne 0x410887
mov edx, str.NonGenuineGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4108a1
mov edx, 0x56754e
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4108bb
mov edx, str.ExtendedGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x4108c9
mov edx, 0x5693ba
lea ecx, [esp + 0x68]
call fcn.00442008
pop eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______License_Status:
push edx
call fcn.00487530
mov edx, dword [esp + 0x6c]
push edx
call fcn.00487530
call fcn.00487620
push 9
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0041763c
push dword [0xa62874]
call fcn.0043779c
push 0x12
push 0
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str.___LICENSED___
push eax
push dword [0xa62ab4]
call fcn.00419caa
inc dword [esp + 0x20]
jno 0x410024
jmp 0x416bac
push dword [esp]
mov edx, str.infoofs
pop ecx
call fcn.00442660
je 0x411128
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55a55c
push eax
push dword [esp + 0x50]
call fcn.00485bf0
lea eax, [esp + 0x48]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__VLActivationInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x44]
push eax
call fcn.00487590
mov edx, dword [esp + 0x44]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, dword [esp + 0x44]
push edx
call fcn.00487530
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
mov dword [esp + 0x20], 1
jmp 0x410a07
mov eax, str.Description
push eax
push dword [esp + 0x1c]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x411123
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x410a66
jmp 0x411119
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x411119
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55f864
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55aebe
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 1
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 2
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 3
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
mov eax, str.VOLUME_KMSCLIENT
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x410efd
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x58]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x5c]
push eax
call fcn.00487590
push dword [esp + 0x58]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x410cb1
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____KMS_host_Machine:
push edx
call fcn.00487530
mov edx, dword [esp + 0x60]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x5c]
push edx
call fcn.00487530
call fcn.00487620
push 4
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
jmp 0x410cc1
mov eax, str._____KMS_host_Machine:
push eax
push 4
call fcn.0043b6ee
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______KMS_Server_PID:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceProductKeyID
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 5
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.GracePeriodRemaining
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x60]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x60]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x60]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Expiration_Date_Time:
push edx
call fcn.00487530
mov edx, dword [esp + 0x64]
push edx
call fcn.00487530
call fcn.00487620
push 6
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.VLActivationInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x70]
call fcn.00485290
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x64]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x64]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Activation_interval:
push edx
call fcn.00487530
mov edx, dword [esp + 0x68]
push edx
call fcn.00487530
call fcn.00487620
push 7
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.VLRenewalInterval
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x74]
call fcn.00485290
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [esp + 0x68]
call fcn.00484cb0
push eax
call fcn.0040a964
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____Renewal_interval:
push edx
call fcn.00487530
mov edx, dword [esp + 0x6c]
push edx
call fcn.00487530
call fcn.00487620
push 8
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0041763c
push edx
call fcn.004874f0
pop edx
push eax
push 0xa
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov edx, dword [esp + 0x64]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x64]
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push 0x190
call fcn.0046b1fb
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.LicenseStatus
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55af84
push eax
push 1
push dword [esp + 0x74]
call fcn.00485290
lea eax, [esp + 0x68]
push eax
call fcn.00487590
push dword [esp + 0x64]
call fcn.00484cb0
mov dword [esp + 0x78], eax
push dword [esp + 0x78]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x410fee
mov edx, 0x5757e0
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 1
cmp ebx, dword [esp]
jne 0x41100b
mov edx, str.___LICENSED___
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 2
cmp ebx, dword [esp]
jne 0x411025
mov edx, str.OOBGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 3
cmp ebx, dword [esp]
jne 0x41103f
mov edx, str.OOTGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 4
cmp ebx, dword [esp]
jne 0x411059
mov edx, str.NonGenuineGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 5
cmp ebx, dword [esp]
jne 0x411073
mov edx, 0x56754e
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov ebx, 6
cmp ebx, dword [esp]
jne 0x41108d
mov edx, str.ExtendedGrace
lea ecx, [esp + 0x68]
call fcn.00442008
jmp 0x41109b
mov edx, 0x5693ba
lea ecx, [esp + 0x68]
call fcn.00442008
pop eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______License_Status:
push edx
call fcn.00487530
mov edx, dword [esp + 0x6c]
push edx
call fcn.00487530
call fcn.00487620
push 9
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0041763c
push dword [0xa62874]
call fcn.0043779c
push 0x12
push 0
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str.___LICENSED___
push eax
push dword [0xa62ab4]
call fcn.00419caa
inc dword [esp + 0x20]
jno 0x410a07
jmp 0x416bac
push dword [esp]
mov edx, str.activatewin
pop ecx
call fcn.00442660
je 0x411bdf
mov eax, 0x55a098
push eax
call fcn.0043779c
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x4111d6
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceMachine__KeyManagementServicePort
push eax
call fcn.0041b5ba
lea eax, [esp + 0x80]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.004288b9
lea eax, [esp + 0x84]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.004288b9
lea eax, [esp + 0x88]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Setting_SPP_KMS_Server_Address
push edx
call fcn.00487530
mov edx, dword [esp + 0xc]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, str._...
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 6
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0xc]
push dword [0xa62ab4]
call fcn.00419caa
push 6
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x10]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push dword [0xa629d4]
mov edx, str.x64WDV
pop ecx
call fcn.00442660
je 0x411686
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___skms
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
mov dword [esp + 0x88], eax
mov eax, 0x55a098
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey
push eax
call fcn.0041b5ba
lea eax, [esp + 0x1c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.004288b9
lea eax, [esp + 0x38]
push eax
call fcn.00487590
mov ebx, dword [0xa625a0]
cmp ebx, 0x55f0
jl 0x4117c5
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Windows_11
push eax
mov eax, str.Windows_R_
push eax
push dword [esp + 0x44]
call fcn.004859d0
lea eax, [esp + 0x38]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.004288b9
lea eax, [esp + 0x50]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.004288b9
lea eax, [esp + 0x90]
push eax
call fcn.00487590
push dword [esp + 0x34]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x41189f
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55f864
push edx
call fcn.00487530
mov edx, dword [esp + 0x3c]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x3c]
push dword [0xa62ab4]
call fcn.00419caa
push dword [esp + 0x4c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x4118e7
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55aebe
push edx
call fcn.00487530
mov edx, dword [esp + 0x54]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push dword [esp + 0x28]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x41192f
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.00487530
mov edx, dword [esp + 0x30]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push dword [esp + 0x8c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x41197d
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.00487530
mov edx, dword [esp + 0x94]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___ato
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x411ab2
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___ckms
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x411b7e
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___skms
push edx
call fcn.00487530
mov edx, dword [esp + 0x90]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x94]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x411bda
mov eax, 0x55b904
push eax
push dword [esp + 0x1c]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x411bbe
mov eax, str.Ultimate
push eax
push dword [esp + 0x1c]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x411bbe
mov eax, 1
jmp 0x411bc0
xor eax, eax
and eax, eax
je 0x411bda
push 0x30
push dword [0xa6285c]
mov eax, 0x56b42c
push eax
call fcn.0043839c
jmp 0x416bac
push dword [esp]
mov edx, str.activateofs
pop ecx
call fcn.00442660
je 0x413c4c
mov eax, 0x55a098
push eax
call fcn.0043779c
mov edx, 0x55a098
lea ecx, [esp + 0x94]
call fcn.00442008
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, 0x56fc70
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
push dword [esp + 0x1c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x412b99
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x411cc8
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.004288b9
lea eax, [esp + 0x84]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.004288b9
lea eax, [esp + 0x88]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_OfficeSoftwareProtectionProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.00484ee0
and eax, eax
je 0x4129e7
mov eax, str.Office
push eax
push dword [esp + 0x48]
call fcn.00485200
mov dword [esp + 0x98], eax
mov ebx, dword [esp + 0x98]
and ebx, ebx
jle 0x41207d
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 4]
mov edx, dword [0xa627f8]
pop ecx
call fcn.00442660
je 0x411ec6
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Setting_OSPP_KMS_Server_Address_127.0.0.2:
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, str._...
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov eax, str.127.0.0.2
push eax
push dword [0xa62ab4]
call fcn.00419caa
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x10]
push dword [0xa62ab4]
call fcn.00419caa
mov eax, 0x55a098
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, 0x55b5d4
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
jmp 0x411fdb
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Setting_OSPP_KMS_Server_Address
push edx
call fcn.00487530
mov edx, dword [esp + 0xc]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, str._...
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0xc]
push dword [0xa62ab4]
call fcn.00419caa
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x10]
push dword [0xa62ab4]
call fcn.00419caa
mov eax, 0x55a098
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetVLActivationTypeEnabled_2
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov dword [esp + 0x20], 1
jmp 0x412087
mov eax, str.Description
push eax
push dword [esp + 0x48]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x4129e7
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x54]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x4120e6
jmp 0x4129dd
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x4129ad
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55f864
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55aebe
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 1
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.00487530
mov edx, dword [esp + 0x30]
push edx
call fcn.00487530
call fcn.00487620
push 2
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 3
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0041763c
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412327
push edx
call fcn.004874f0
pop edx
push eax
push 0
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._get_KeyManagementServiceMachine__KeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.004288b9
lea eax, [esp + 0xa0]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.004288b9
lea eax, [esp + 0xa4]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 4]
mov edx, dword [0xa627f8]
pop ecx
call fcn.00442660
je 0x41247c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, 0x55b5d4
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
jmp 0x412533
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_Activate
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 0x38]
mov edx, 0x55b452
pop ecx
call fcn.00442660
je 0x4125b2
mov ebx, dword [0xa626a8]
inc ebx
mov dword [0xa626a8], ebx
push dword [0xa6259c]
push 8
call fcn.0043b6ee
jmp 0x412720
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____Activation_Error:_0x
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push 8
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00484ee0
call fcn.004426d0
mov ebx, eax
and ebx, ebx
jne 0x412720
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.004222ac
call fcn.004426d0
mov edx, dword [esp + 0x94]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x48]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
lea eax, [esp + 0x98]
push eax
call fcn.00487590
call fcn.0041763c
push dword [0xa62874]
call fcn.0043779c
push 0x12
push 0
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str._ACTIVATION_SUCCESSFUL_
push eax
push dword [0xa62ab4]
call fcn.00419caa
mov eax, str.0x_0_9a_zA_Z_8
push eax
push 0
call fcn.004449e0
and eax, eax
je 0x41283a
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00444a90
call fcn.004426d0
and eax, eax
je 0x41283a
push 0
call fcn.00444b60
and eax, eax
je 0x41283a
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0
call fcn.00444be0
lea eax, [esp + 0xa8]
push eax
call fcn.00487590
push 0x12
push 0
push 0
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0xac]
push dword [0xa62ab4]
call fcn.00419caa
jmp 0x41283a
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4128e1
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x4129ad
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0xa8]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0xac]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x4129dd
call fcn.0046bae6
and eax, eax
je 0x4129c7
jmp 0x4129bc
call fcn.0046bae6
and eax, eax
je 0x4129d2
jmp 0x4129c7
call fcn.0046bae6
and eax, eax
je 0x4129dd
jmp 0x4129d2
inc dword [esp + 0x20]
jno 0x412087
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x412a0a
push dword [esp + 0x1c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x412a0a
mov eax, 1
jmp 0x412a0c
xor eax, eax
and eax, eax
je 0x412ac2
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov eax, str.Key_Management_Service_machine_name_cleared_successfully.
push eax
call fcn.0043779c
push dword [0xa62874]
call fcn.0043779c
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412b99
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x8c]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_OfficeSoftwareProtectionService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x90]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov edx, 0x55a098
lea ecx, [esp + 0x1c]
call fcn.00442008
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, 0x570af4
push eax
call fcn.0041b5ba
lea eax, [esp + 0x44]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x412c0e
push dword [esp + 0x1c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x412c0e
mov eax, 1
jmp 0x412c10
xor eax, eax
and eax, eax
je 0x412c69
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.004288b9
lea eax, [esp + 0x84]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.004288b9
lea eax, [esp + 0x88]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Office___And_PartialProductKey_is_Not_NULL__get_Name__Description__ID__PartialProductKey__LicenseStatus__KeyManagementServiceMachine__KeyManagementServicePort__VLRenewalInterval__GracePeriodRemaining__KeyManagementServicePort__KeyManagementServiceProductKeyID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x44]
push eax
call fcn.00487590
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.00484ee0
and eax, eax
je 0x413b89
mov eax, str.Office
push eax
push dword [esp + 0x44]
call fcn.00485200
mov dword [esp + 0x98], eax
mov ebx, dword [esp + 0x98]
and ebx, ebx
jle 0x412f16
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._Setting_SPP_KMS_Server_Address
push edx
call fcn.00487530
mov edx, dword [esp + 0xc]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, str._...
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0xc]
push dword [0xa62ab4]
call fcn.00419caa
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x10]
push dword [0xa62ab4]
call fcn.00419caa
mov eax, 0x55a098
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetVLActivationTypeEnabled_2
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov dword [esp + 0x20], 1
jmp 0x412f20
mov eax, str.Description
push eax
push dword [esp + 0x44]
call fcn.00485200
mov ebx, eax
inc ebx
cmp ebx, dword [esp + 0x20]
jl 0x4137c3
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
push dword [esp + 0x2c]
push dword [esp + 0x50]
call fcn.00485290
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push dword [esp + 0x24]
mov edx, 0x55a098
pop ecx
call fcn.00442660
je 0x412f7f
jmp 0x4137b9
mov eax, str.Office
push eax
push dword [esp + 0x28]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x413789
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Description
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55f864
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x56698e
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55aebe
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.Description
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 1
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._______________SKU_ID:
push edx
call fcn.00487530
mov edx, dword [esp + 0x30]
push edx
call fcn.00487530
call fcn.00487620
push 2
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__Partial_Product_Key:
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.PartialProductKey
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004288b9
pop eax
call fcn.00487620
push 3
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
call fcn.0041763c
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x4131c0
push edx
call fcn.004874f0
pop edx
push eax
push 0
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._get_KeyManagementServiceMachine__KeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.004288b9
lea eax, [esp + 0xa0]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.004288b9
lea eax, [esp + 0xa4]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x10]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_Activate
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [esp + 0x38]
mov edx, 0x55b452
pop ecx
call fcn.00442660
je 0x41338e
mov ebx, dword [0xa626a8]
inc ebx
mov dword [0xa626a8], ebx
push dword [0xa6259c]
push 8
call fcn.0043b6ee
jmp 0x4134fc
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._____Activation_Error:_0x
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push 8
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0043b6ee
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00484ee0
call fcn.004426d0
mov ebx, eax
and ebx, ebx
jne 0x4134fc
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.004426b2
add dword [esp], edx
call fcn.004222ac
call fcn.004426d0
mov edx, dword [esp + 0x94]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x48]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
lea eax, [esp + 0x98]
push eax
call fcn.00487590
call fcn.0041763c
push dword [0xa62874]
call fcn.0043779c
push 0x12
push 0
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str._ACTIVATION_SUCCESSFUL_
push eax
push dword [0xa62ab4]
call fcn.00419caa
mov eax, str.0x_0_9a_zA_Z_8
push eax
push 0
call fcn.004449e0
and eax, eax
je 0x413616
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55c022
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 5
push dword [esp + 0x4c]
call fcn.00484cb0
push edx
push eax
call fcn.00485530
pop eax
call fcn.00487620
push 0
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00444a90
call fcn.004426d0
and eax, eax
je 0x413616
push 0
call fcn.00444b60
and eax, eax
je 0x413616
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0
call fcn.00444be0
lea eax, [esp + 0xa8]
push eax
call fcn.00487590
push 0x12
push 0
push 0
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0xac]
push dword [0xa62ab4]
call fcn.00419caa
jmp 0x413616
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4136bd
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x413789
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0xa8]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0xac]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x4137b9
call fcn.0046bae6
and eax, eax
je 0x4137a3
jmp 0x413798
call fcn.0046bae6
and eax, eax
je 0x4137ae
jmp 0x4137a3
call fcn.0046bae6
and eax, eax
je 0x4137b9
jmp 0x4137ae
inc dword [esp + 0x20]
jno 0x412f20
mov ebx, dword [esp + 0x14c]
and ebx, ebx
jle 0x4137e6
push dword [esp + 0x1c]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x4137e6
mov eax, 1
jmp 0x4137e8
xor eax, eax
and eax, eax
je 0x4138a3
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServiceMachine
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ClearKeyManagementServicePort
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
mov eax, str.Key_Management_Service_machine_name_cleared_successfully.
push eax
call fcn.0043779c
push dword [0xa62874]
call fcn.0043779c
jmp 0x413ab2
push dword [0xa629d4]
mov edx, str.x64WDV
pop ecx
call fcn.00442660
je 0x413ab2
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:32
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServiceName__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x14]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESoftwareWOW6432NodeMicrosoftWindows_NTCurrentVersionSoftwareProtectionPlatform___f__v_KeyManagementServicePort__d
push edx
call fcn.00487530
mov edx, dword [esp + 0x18]
push edx
call fcn.00487530
mov edx, str.__t_REG_SZ__reg:64
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x413b89
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServiceMachine_MachineName_
push edx
call fcn.00487530
mov edx, dword [esp + 0x8c]
push edx
call fcn.00487530
mov edx, 0x55b094
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_SetKeyManagementServicePort
push edx
call fcn.00487530
mov edx, dword [esp + 0x90]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x413c47
push dword [esp + 0x94]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x413c47
push edx
call fcn.004874f0
pop edx
push eax
mov edx, dword [esp + 0x48]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, dword [esp + 0x48]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0040ca17
call fcn.004426d0
mov ebx, eax
and ebx, ebx
jle 0x413c47
push 0x34
push dword [0xa62ab8]
mov eax, 0x55a098
push eax
call fcn.0043839c
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0xa8]
cmp ebx, 6
jne 0x413c47
push 0
push 0
push 0x55a098
push 0x55a098
push 0x55a098
push 0x55a098
mov eax, str.installkeyofs
push eax
call fcn.0040efb6
jmp 0x411bfe
jmp 0x416bac
push dword [esp]
mov edx, str.activatewindigital
pop ecx
call fcn.00442660
je 0x416bac
lea eax, [esp + 0xac]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
push 0x100
push 1
call fcn.00441b54
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55b38e
push eax
mov eax, 0x573376
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043ccf2
lea eax, [esp + 0xc8]
push eax
call fcn.00487590
mov eax, str.2015
push eax
push dword [esp + 0xc8]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x413cdd
mov dword [esp + 0xbc], 1
jmp 0x413d00
mov eax, str.LTSC
push eax
push dword [esp + 0xc8]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x413d00
mov dword [esp + 0xc0], 1
mov dword [esp + 0xc8], 0
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55b38e
push eax
mov eax, str.EditionID
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043ccf2
lea eax, [esp + 0xd0]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55b38e
push eax
mov eax, str.CurrentBuild
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043ccf2
lea eax, [esp + 0xd4]
push eax
call fcn.00487590
mov ebx, dword [0xa62788]
and ebx, ebx
jle 0x413d7a
mov dword [esp + 0xd4], 0
jmp 0x413d85
mov dword [esp + 0xd4], 1
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.00442660
je 0x413dab
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jle 0x413dab
mov eax, 1
jmp 0x413dad
xor eax, eax
and eax, eax
je 0x413e07
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00442008
mov edx, str.M7XTQ_FN8P6_TTKYV_9D4CC_J462D
lea ecx, [ebp + 4]
call fcn.00442008
mov edx, 0x55b4f8
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd4], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.IoTEnterprise
pop ecx
call fcn.00442660
je 0x413e3a
mov eax, str.19041
push eax
push dword [esp + 0xd4]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x413e3a
mov eax, 1
jmp 0x413e3c
xor eax, eax
and eax, eax
je 0x413ed4
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413e79
lea ebp, [esp + 0xac]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x413e8d
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x567490
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55ec9c
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.IoTEnterpriseS
pop ecx
call fcn.00442660
je 0x413f07
mov eax, str.19044
push eax
push dword [esp + 0xd4]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x413f07
mov eax, 1
jmp 0x413f09
xor eax, eax
and eax, eax
je 0x413fa1
lea ebp, [esp + 0xac]
mov edx, str.IoTEnterpriseS
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413f46
lea ebp, [esp + 0xac]
mov edx, str.QPM6N_7J2WJ_P88HH_P3YRH_YY74H
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x413f5a
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x567490
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_99682
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.IoTEnterprise
pop ecx
call fcn.00442660
je 0x414049
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd8]
and ebx, ebx
jne 0x413fee
lea ebp, [esp + 0xac]
mov edx, str.XQQYW_NFFMW_XJPBH_K8732_CKFFD
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414002
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x565952
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55ec9c
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xc0], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00442660
je 0x41406f
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jle 0x41406f
mov eax, 1
jmp 0x414071
xor eax, eax
and eax, eax
je 0x4140cb
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00442008
mov edx, str.92NFX_8DJQP_P6BBQ_THF9C_7CG2H
lea ecx, [ebp + 4]
call fcn.00442008
mov edx, 0x55b532
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov dword [esp + 0xd4], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.00442660
je 0x4140f1
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x4140f1
mov eax, 1
jmp 0x4140f3
xor eax, eax
and eax, eax
je 0x414171
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41412c
lea ebp, [esp + 0xac]
mov edx, str.FWN7H_PF93Q_4GGP8_M8RF3_MDWWW
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414140
lea ebp, [esp + 0xac]
mov edx, str.WNMTR_4C88C_JK8YV_HQ7T2_76DF9
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b4f8
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_99617
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00442660
je 0x414197
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x414197
mov eax, 1
jmp 0x414199
xor eax, eax
and eax, eax
je 0x414217
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4141d2
lea ebp, [esp + 0xac]
mov edx, str.8V8WN_3GXBH_2TCMG_XHRX3_9766K
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x4141e6
lea ebp, [esp + 0xac]
mov edx, str.2F77B_TNFGY_69QQF_B8YKP_D69TJ
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b532
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98770
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ProfessionalWorkstation
pop ecx
call fcn.00442660
je 0x4142a5
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalWorkstation
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414260
lea ebp, [esp + 0xac]
mov edx, str.DXG7C_N36C4_C4HTG_X4T3X_2YV77
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414274
lea ebp, [esp + 0xac]
mov edx, str.NRG8B_VKK3Q_CXVCJ_9G2XF_6Q84J
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x561644
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_43626
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ProfessionalWorkstationN
pop ecx
call fcn.00442660
je 0x414333
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalWorkstationN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4142ee
lea ebp, [esp + 0xac]
mov edx, str.WYPNQ_8C467_V2W6J_TX4WX_WT2RQ
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414302
lea ebp, [esp + 0xac]
mov edx, str.9FNHH_K3HBT_3W4TD_6383H_6XYWF
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x561746
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_43644
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerRdsh
pop ecx
call fcn.00442660
je 0x4143c1
lea ebp, [esp + 0xac]
mov edx, str.ServerRdsh
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41437c
lea ebp, [esp + 0xac]
mov edx, str.NJCF7_PW8QT_3324D_688JX_2YV66
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414390
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x5638da
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_41295
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ProfessionalN
pop ecx
call fcn.00442660
je 0x41444f
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41440a
lea ebp, [esp + 0xac]
mov edx, str.2B87N_8KFHP_DKV6R_Y2C8J_PKCKT
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x41441e
lea ebp, [esp + 0xac]
mov edx, str.MH37W_N47XK_V7XM9_C7227_GCQG9
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x5604cc
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98859
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ProfessionalEducationN
pop ecx
call fcn.00442660
je 0x4144dd
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalEducationN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414498
lea ebp, [esp + 0xac]
mov edx, str.GJTYN_HDMQY_FRR76_HVGC7_QPF8P
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x4144ac
lea ebp, [esp + 0xac]
mov edx, str.YVWGF_BXNMC_HTQYQ_CPQ99_66QFC
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x561866
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_04956
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ProfessionalEducation
pop ecx
call fcn.00442660
je 0x41456b
lea ebp, [esp + 0xac]
mov edx, str.ProfessionalEducation
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414526
lea ebp, [esp + 0xac]
mov edx, str.8PTT6_RNW4C_6V7J2_C2D3X_MHBPB
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x41453a
lea ebp, [esp + 0xac]
mov edx, str.6TP4R_GNPTD_KYYHQ_7B7DP_J447Y
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x56180e
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_04955
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.Professional
pop ecx
call fcn.00442660
je 0x4145f9
lea ebp, [esp + 0xac]
mov edx, str.Professional
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4145b4
lea ebp, [esp + 0xac]
mov edx, str.VK7JG_NPHTM_C97JM_9MPGT_3V66T
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x4145c8
lea ebp, [esp + 0xac]
mov edx, str.W269N_WFGWX_YVC9B_4J6C9_T83GX
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x56046a
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98841
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseSN
pop ecx
call fcn.00442660
je 0x414687
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseSN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414642
lea ebp, [esp + 0xac]
mov edx, str.2DBW3_N2PJG_MVHW3_G7TDK_9HKR4
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414656
lea ebp, [esp + 0xac]
mov edx, str.QFFDN_GRT3P_VKWWX_X7T3R_8B639
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b532
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_04921
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseS
pop ecx
call fcn.00442660
je 0x414715
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseS
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4146d0
lea ebp, [esp + 0xac]
mov edx, str.NK96Y_D9CD8_W44CQ_R8YTK_DYJWX
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x4146e4
lea ebp, [esp + 0xac]
mov edx, str.DCPHK_NFMTC_H88MJ_PFHPY_QJ4BJ
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b4f8
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_05035
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EnterpriseN
pop ecx
call fcn.00442660
je 0x4147a3
lea ebp, [esp + 0xac]
mov edx, str.EnterpriseN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41475e
lea ebp, [esp + 0xac]
mov edx, str.3V6Q6_NQXCX_V8YXR_9QCYV_QPFCT
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414772
lea ebp, [esp + 0xac]
mov edx, str.DPH2V_TTNVB_4X9Q3_TJR4H_KHJW4
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55d57e
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98746
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.Enterprise
pop ecx
call fcn.00442660
je 0x414831
lea ebp, [esp + 0xac]
mov edx, str.Enterprise
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x4147ec
lea ebp, [esp + 0xac]
mov edx, str.XGVPP_NMH47_7TTHJ_W3FW7_8HV2C
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414800
lea ebp, [esp + 0xac]
mov edx, str.NPPR9_FWDCX_D2C8J_H872K_2YT43
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b4f4
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_99683
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.EducationN
pop ecx
call fcn.00442660
je 0x4148bf
lea ebp, [esp + 0xac]
mov edx, str.EducationN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41487a
lea ebp, [esp + 0xac]
mov edx, str.84NGF_MHBT6_FXBX8_QWJK7_DRR8H
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x41488e
lea ebp, [esp + 0xac]
mov edx, str.2WH4N_8QGBV_H22JP_CT43Q_MDWWJ
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b4b4
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98892
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.Education
pop ecx
call fcn.00442660
je 0x41494d
lea ebp, [esp + 0xac]
mov edx, str.Education
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414908
lea ebp, [esp + 0xac]
mov edx, str.YNMGQ_8RYV3_4PGQ3_C8XTP_7CFBY
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x41491c
lea ebp, [esp + 0xac]
mov edx, str.NW6C2_QMPVW_D7KKK_3GKT6_VCFB2
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b3dc
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98886
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.CoreSingleLanguage
pop ecx
call fcn.00442660
je 0x4149db
lea ebp, [esp + 0xac]
mov edx, str.CoreSingleLanguage
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414996
lea ebp, [esp + 0xac]
mov edx, str.BT79Q_G7N6G_PGBYW_4YWX6_6F4BT
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x4149aa
lea ebp, [esp + 0xac]
mov edx, str.7HNRX_D7KGG_3K4RQ_4WPJ4_YTDFH
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x575068
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_99661
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.CoreN
pop ecx
call fcn.00442660
je 0x414a69
lea ebp, [esp + 0xac]
mov edx, str.CoreN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414a24
lea ebp, [esp + 0xac]
mov edx, str.4CPRK_NM3K3_X6XXQ_RXX86_WXCHW
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414a38
lea ebp, [esp + 0xac]
mov edx, str.3KHY7_WNT83_DGQKR_F7HPR_844BM
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x569e5c
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98877
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.CoreCountrySpecific
pop ecx
call fcn.00442660
je 0x414af7
lea ebp, [esp + 0xac]
mov edx, str.CoreCountrySpecific
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414ab2
lea ebp, [esp + 0xac]
mov edx, 0x55a3dc
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414ac6
lea ebp, [esp + 0xac]
mov edx, str.PVMJN_6DFY6_9CCP6_7BKTT_D3WVR
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x569ea6
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_99652
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.Core
pop ecx
call fcn.00442660
je 0x414b85
lea ebp, [esp + 0xac]
mov edx, str.Core
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414b40
lea ebp, [esp + 0xac]
mov edx, str.YTMG3_N6DKC_DKB77_7M9GH_8HVX7
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414b54
lea ebp, [esp + 0xac]
mov edx, str.TX9XD_98N7V_6WMQ6_BX7FG_H8Q99
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x57509e
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X19_98868
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.CloudN
pop ecx
call fcn.00442660
je 0x414c13
lea ebp, [esp + 0xac]
mov edx, str.CloudN
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414bce
lea ebp, [esp + 0xac]
mov edx, str.NH9J3_68WK7_6FB93_4K3DF_DJ4F6
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414be2
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x563c5c
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_32987
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.Cloud
pop ecx
call fcn.00442660
je 0x414ca1
lea ebp, [esp + 0xac]
mov edx, str.Cloud
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414c5c
lea ebp, [esp + 0xac]
mov edx, str.V3WVW_N2PV2_CGWC3_34QGF_VMJ2C
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414c70
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x563bbe
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, str.X21_32983
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerStandard
pop ecx
call fcn.00442660
je 0x414d2f
lea ebp, [esp + 0xac]
mov edx, str.ServerStandard
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414cea
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414cfe
lea ebp, [esp + 0xac]
mov edx, str.N69G4_B89J2_4G8F4_WWYCC_J464C
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b904
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerStandardCore
pop ecx
call fcn.00442660
je 0x414dbd
lea ebp, [esp + 0xac]
mov edx, str.ServerStandardCore
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414d78
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414d8c
lea ebp, [esp + 0xac]
mov edx, str.N69G4_B89J2_4G8F4_WWYCC_J464C
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55be78
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerDatacenter
pop ecx
call fcn.00442660
je 0x414e4b
lea ebp, [esp + 0xac]
mov edx, str.ServerDatacenter
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414e06
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414e1a
lea ebp, [esp + 0xac]
mov edx, str.WMDGN_G9PQG_XVVXX_R3X43_63DFG
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55b9a2
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerDatacenterCore
pop ecx
call fcn.00442660
je 0x414ed9
lea ebp, [esp + 0xac]
mov edx, str.ServerDatacenterCore
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414e94
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414ea8
lea ebp, [esp + 0xac]
mov edx, str.WMDGN_G9PQG_XVVXX_R3X43_63DFG
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x55bdea
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerSolution
pop ecx
call fcn.00442660
je 0x414f67
lea ebp, [esp + 0xac]
mov edx, str.ServerSolution
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414f22
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414f36
lea ebp, [esp + 0xac]
mov edx, str.WVDHN_86M7X_466P6_VHXV7_YY726
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x561d3e
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
jmp 0x414ff0
push dword [esp + 0xcc]
mov edx, str.ServerSolutionCore
pop ecx
call fcn.00442660
je 0x414ff0
lea ebp, [esp + 0xac]
mov edx, str.ServerSolutionCore
lea ecx, [ebp]
call fcn.00442008
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x414fb0
lea ebp, [esp + 0xac]
mov edx, 0x55a098
lea ecx, [ebp + 4]
call fcn.00442008
jmp 0x414fc4
lea ebp, [esp + 0xac]
mov edx, str.WVDHN_86M7X_466P6_VHXV7_YY726
lea ecx, [ebp + 4]
call fcn.00442008
lea ebp, [esp + 0xac]
mov edx, 0x561d7a
lea ecx, [ebp + 8]
call fcn.00442008
mov edx, 0x55a098
lea ecx, [ebp + 0xc]
call fcn.00442008
mov dword [esp + 0xc8], 1
mov ebx, dword [esp + 0xc8]
and ebx, ebx
jne 0x41501d
mov edx, str.Not_found_the_appropriate_edition_____r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_IoT_Enterprise_r_nWindows_10_IoT_Enterprise_LTSC
lea ecx, [esp + 0xdc]
call fcn.00442008
push dword [esp + 0xdc]
call fcn.0043779c
jmp 0x416bac
mov dword [esp + 0xe0], 0
mov eax, 0x55a098
push eax
call fcn.0043779c
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41504b
mov eax, str._Activation_HWID_...
push eax
call fcn.0043779c
jmp 0x415056
mov eax, str._Activation_KMS38_...
push eax
call fcn.0043779c
lea ebp, [esp + 0xac]
push dword [ebp + 4]
mov edx, 0x55a098
pop ecx
call fcn.00442660
jne 0x416bac
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, 0x55af84
push edx
call fcn.00487530
mov edx, dword [0xa62ad4]
push edx
call fcn.00487530
lea ebp, [esp + 0xb4]
mov edx, dword [ebp + 4]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 5
push 0
push 0xff
push 0xff
call fcn.00472e7e
push eax
lea ebp, [esp + 0xb4]
push dword [ebp + 4]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___ipk
push edx
call fcn.00487530
lea ebp, [esp + 0xb0]
mov edx, dword [ebp + 4]
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push dword [ebp + 4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
push 0x3e8
call fcn.0046b1fb
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___xpr
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
xor eax, eax
push eax
push dword [esp + 0xe8]
push dword [esp + 0x98]
mov eax, 0x55a098
push eax
call fcn.0041815c
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41521d
mov eax, str.The_machine_is_permanently_activated.
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x41521b
jmp 0x4167db
jmp 0x415244
mov eax, str..2038
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x415244
mov dword [esp + 0xe0], 1
jmp 0x4167db
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x415320
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x415320
mov eax, str._Save_the_old_KMS_Service_address_...
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService__get_KeyManagementServiceMachine__KeyManagementServicePort
push eax
call fcn.0041b5ba
lea eax, [esp + 0x80]
push eax
call fcn.00487590
mov edx, str.KeyManagementServiceMachine
lea ecx, [esp + 0xe8]
call fcn.00442008
push dword [esp + 0xe8]
push dword [esp + 0x80]
call fcn.00484ee0
mov dword [esp + 0xec], eax
push dword [esp + 0xe8]
call fcn.00484df0
mov dword [esp + 0xf0], eax
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServiceMachine
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.004288b9
lea eax, [esp + 0x84]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, str.KeyManagementServicePort
push eax
mov eax, dword [esp + 0x84]
push eax
call fcn.004288b9
lea eax, [esp + 0x88]
push eax
call fcn.00487590
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x4154e5
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingProduct_where__Name_LIKE_Windows___And_PartialProductKey_is_Not_NULL__get_ID
push eax
call fcn.0041b5ba
lea eax, [esp + 0x28]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55ee5a
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004288b9
lea eax, [esp + 0x2c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str._________Rearm_SKU_ID:
push edx
call fcn.00487530
mov edx, dword [esp + 0x30]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x30]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingProduct_where_ID
push edx
call fcn.00487530
mov edx, dword [esp + 0x34]
push edx
call fcn.00487530
mov edx, 0x55ec60
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0
mov eax, str.path_SoftwareLicensingService_get_Version__value
push eax
call fcn.0041b5ba
lea eax, [esp + 0x48]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x5604d2
push eax
mov eax, dword [esp + 0x4c]
push eax
call fcn.004288b9
lea eax, [esp + 0x20]
push eax
call fcn.00487590
mov eax, str._________Rearm_APP_ID:_55c92734_d682_4d71_983e_d6ec3f16059f
push eax
call fcn.0043779c
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
mov eax, str.55c92734_d682_4d71_983e_d6ec3f16059f
push eax
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
push 1
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.path_SoftwareLicensingService_where_version
push edx
call fcn.00487530
mov edx, dword [esp + 0x28]
push edx
call fcn.00487530
mov edx, str._call_ReArmApp_ApplicationId55c92734_d682_4d71_983e_d6ec3f16059f
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041b5ba
lea eax, [esp + 0x3c]
push eax
call fcn.00487590
push dword [0xa62ab0]
call fcn.0046d4e4
push edx
call fcn.004874f0
pop edx
push eax
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BIN
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0046d506
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BIN
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0046d4e4
call fcn.004426d0
mov ebx, dword [esp + 0xbc]
and ebx, ebx
jle 0x415705
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00487530
lea eax, [esp + 0xf8]
push eax
call fcn.00487590
push dword [esp + 0xf4]
call fcn.0046cf58
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4155bd
jg 0x4155b9
cmp ebx, 0
jb 0x4155bd
xor eax, eax
jmp 0x4155c2
mov eax, 1
or eax, eax
je 0x415700
mov eax, 0x58523e
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0xa62730], 4
mov eax, 0x58523a
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0xa62730], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.00486310
mov dword [esp + 0x100], eax
mov ebp, 0x7b21fe
push ebp
push 0x100
mov ebp, 0x7b21de
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x585242
push ebp
call fcn.004710f0
push dword [esp + 0xfc]
call fcn.00486310
mov dword [esp + 0x104], eax
call fcn.004603fa
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.00460d9a
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x4156e8
push dword [esp + 0xf4]
push 0xffffffff
call fcn.0046dd90
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x4156e8
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.0046e000
push dword [esp + 0x10c]
call fcn.0046da90
push dword [esp + 0x104]
call fcn.00486330
push dword [esp + 0x100]
call fcn.00486330
jmp 0x415a51
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x41571d
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x41571d
jmp 0x415724
mov eax, 1
jmp 0x415726
xor eax, eax
and eax, eax
je 0x4158c2
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00487530
lea eax, [esp + 0xf8]
push eax
call fcn.00487590
push dword [esp + 0xf4]
call fcn.0046cf58
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x41577a
jg 0x415776
cmp ebx, 0
jb 0x41577a
xor eax, eax
jmp 0x41577f
mov eax, 1
or eax, eax
je 0x4158bd
mov eax, 0x6f7812
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0xa62730], 4
mov eax, 0x6f780e
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0xa62730], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.00486310
mov dword [esp + 0x100], eax
mov ebp, 0x7b21fe
push ebp
push 0x100
mov ebp, 0x7b21de
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x6f7816
push ebp
call fcn.004710f0
push dword [esp + 0xfc]
call fcn.00486310
mov dword [esp + 0x104], eax
call fcn.004603fa
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.00460d9a
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x4158a5
push dword [esp + 0xf4]
push 0xffffffff
call fcn.0046dd90
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x4158a5
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.0046e000
push dword [esp + 0x10c]
call fcn.0046da90
push dword [esp + 0x104]
call fcn.00486330
push dword [esp + 0x100]
call fcn.00486330
jmp 0x415a51
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00487530
lea eax, [esp + 0xf8]
push eax
call fcn.00487590
push dword [esp + 0xf4]
call fcn.0046cf58
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x41590e
jg 0x41590a
cmp ebx, 0
jb 0x41590e
xor eax, eax
jmp 0x415913
mov eax, 1
or eax, eax
je 0x415a51
mov eax, 0x63e596
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0xa62730], 4
mov eax, 0x63e592
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0xa62730], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.00486310
mov dword [esp + 0x100], eax
mov ebp, 0x7b21fe
push ebp
push 0x100
mov ebp, 0x7b21de
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x63e59a
push ebp
call fcn.004710f0
push dword [esp + 0xfc]
call fcn.00486310
mov dword [esp + 0x104], eax
call fcn.004603fa
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.00460d9a
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x415a39
push dword [esp + 0xf4]
push 0xffffffff
call fcn.0046dd90
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x415a39
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.0046e000
push dword [esp + 0x10c]
call fcn.0046da90
push dword [esp + 0x104]
call fcn.00486330
push dword [esp + 0x100]
call fcn.00486330
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BIN_slc.dll
push edx
call fcn.00487530
lea eax, [esp + 0xf8]
push eax
call fcn.00487590
push dword [esp + 0xf4]
call fcn.0046cf58
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x415a9d
jg 0x415a99
cmp ebx, 0
jb 0x415a9d
xor eax, eax
jmp 0x415aa2
mov eax, 1
or eax, eax
je 0x415be0
mov eax, 0x7b0a98
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
add dword [0xa62730], 4
mov eax, 0x7b0a94
mov dword [0xa62730], eax
mov eax, dword [0xa62730]
mov eax, dword [eax]
mov dword [esp + 0xfc], eax
add dword [0xa62730], 4
mov ebx, dword [esp + 0xfc]
add ebx, 0x20
mov dword [esp + 0xfc], ebx
push dword [esp + 0xf8]
call fcn.00486310
mov dword [esp + 0x100], eax
mov ebp, 0x7b21fe
push ebp
push 0x100
mov ebp, 0x7b21de
push ebp
push dword [esp + 0x104]
push dword [esp + 0x110]
mov ebp, 0x7b0a9c
push ebp
call fcn.004710f0
push dword [esp + 0xfc]
call fcn.00486310
mov dword [esp + 0x104], eax
call fcn.004603fa
push dword [esp + 0xfc]
push dword [esp + 0x108]
push dword [esp + 0x100]
push dword [esp + 0x10c]
call fcn.00460d9a
mov dword [esp + 0x108], eax
cmp dword [esp + 0x108], 0
je 0x415bc8
push dword [esp + 0xf4]
push 0xffffffff
call fcn.0046dd90
mov dword [esp + 0x10c], eax
cmp dword [esp + 0x10c], 0
je 0x415bc8
push dword [esp + 0x108]
push dword [esp + 0x108]
push dword [esp + 0x114]
call fcn.0046e000
push dword [esp + 0x10c]
call fcn.0046da90
push dword [esp + 0x104]
call fcn.00486330
push dword [esp + 0x100]
call fcn.00486330
push edx
call fcn.004874f0
pop edx
push eax
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0046cf58
call fcn.004426d0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x415c2d
jl 0x415c29
cmp ebx, 0
ja 0x415c2d
xor eax, eax
jmp 0x415c32
mov eax, 1
or eax, eax
je 0x415c38
jmp 0x415c5a
mov edx, str.Error__The_program_cannot_access_the_gatherosstate.exe_file.
lea ecx, [esp + 0x110]
call fcn.00442008
push dword [esp + 0x110]
call fcn.0043779c
jmp 0x416bac
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov edx, dword [0xa625d8]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.System32
push edx
call fcn.00487530
lea eax, [esp + 0xe8]
push eax
call fcn.00487590
mov edx, 0x55a098
lea ecx, [0xa62b54]
call fcn.00442008
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_licensemanager
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov eax, str.DISABLED
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x415d78
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_licensemanager_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov dword [esp + 0x11c], 1
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_wuauserv
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov eax, str.DISABLED
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x415e2e
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wuauserv_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov dword [esp + 0x120], 1
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_wlidsvc
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov eax, str.DISABLED
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x415fec
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wlidsvc_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov dword [esp + 0x118], 1
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.qc_RpcSs
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov eax, str.DISABLED
push eax
push dword [0xa62b54]
call fcn.00484ee0
mov ebx, eax
and ebx, ebx
jle 0x415fec
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_RpcSs_startdemand
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_RpcSs
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov dword [esp + 0x114], 1
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_licensemanager
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_wuauserv
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.start_wlidsvc
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x4160e2
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x4160e2
jmp 0x4160e9
mov eax, 1
jmp 0x4160eb
xor eax, eax
and eax, eax
je 0x4161c4
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___skms_12.34.56.78:1833
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
xor eax, eax
push eax
push dword [esp + 0xe8]
push dword [esp + 0x98]
mov eax, 0x55a098
push eax
call fcn.0041815c
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Volume:GVLK
push eax
mov eax, str.reg.exe
push eax
call fcn.0041815c
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___f__v__
push edx
call fcn.00487530
mov edx, dword [0xa62ab0]
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe___d___WIN7RTM_
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0041815c
call fcn.004426d0
jmp 0x4161df
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokens___f__v__Channel___t_REG_SZ__d_Retail
push eax
mov eax, str.reg.exe
push eax
call fcn.0041815c
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Kernel_ProductInfo___t_REG_DWORD__d
push edx
call fcn.00487530
lea ebp, [esp + 0xbc]
mov edx, dword [ebp + 8]
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0041815c
call fcn.004426d0
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.add__HKEY_LOCAL_MACHINESYSTEMTokensKernel___f__v__Security_SPP_GenuineLocalStatus___t_REG_DWORD__d_1
push eax
mov eax, str.reg.exe
push eax
call fcn.0041815c
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BIN
push edx
call fcn.00487530
call fcn.00487620
mov eax, 0x55a098
push eax
mov eax, str.gatherosstate.exe
push eax
call fcn.004426b2
add dword [esp + 8], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.__v__o__altto
push edx
call fcn.00487530
mov edx, dword [0xa62ab0]
push edx
call fcn.00487530
mov edx, str.BIN_
push edx
call fcn.00487530
call fcn.00487620
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.ClipUp.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jne 0x41646b
push 0x100
push 1
call fcn.00441b54
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55b38e
push eax
mov eax, 0x573376
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0043ccf2
lea eax, [esp + 0x128]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.Activating
push edx
call fcn.00487530
mov edx, dword [esp + 0x12c]
push edx
call fcn.00487530
mov edx, str._...
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0043779c
call fcn.004426d0
push 3
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
push dword [esp + 0x12c]
push dword [0xa62ab4]
call fcn.00419caa
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___ato
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
xor eax, eax
push eax
push dword [esp + 0xe8]
mov eax, str.delete__HKEY_LOCAL_MACHINESYSTEMTokens___f
push eax
mov eax, str.reg.exe
push eax
call fcn.0041815c
mov ebx, dword [esp + 0xc0]
and ebx, ebx
jg 0x41649e
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jg 0x41649e
jmp 0x4164a5
mov eax, 1
jmp 0x4164a7
xor eax, eax
and eax, eax
je 0x416505
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.delete__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___v__
push edx
call fcn.00487530
mov edx, dword [0xa62ab0]
push edx
call fcn.00487530
mov edx, str.BINgatherosstate.exe___f
push edx
call fcn.00487530
call fcn.00487620
mov eax, str.reg.exe
push eax
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0x118]
and ebx, ebx
jle 0x4165a8
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wlidsvc_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_wlidsvc__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._net.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0x114]
and ebx, ebx
jle 0x41664b
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_RpcSs_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_RpcSs__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._net.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0x11c]
and ebx, ebx
jle 0x4166ee
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_licensemanager_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_licensemanager__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._net.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
mov ebx, dword [esp + 0x120]
and ebx, ebx
jle 0x416791
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.config_wuauserv_startdisabled
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._sc.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
xor eax, eax
push eax
push dword [esp + 0xec]
mov eax, str.stop_wuauserv__y
push eax
mov edx, dword [esp + 0xf4]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._net.exe
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0041815c
call fcn.004426d0
push dword [0xa62ab0]
call fcn.0046d4e4
push edx
call fcn.004874f0
pop edx
push eax
mov eax, 0x55a098
push eax
mov edx, dword [0xa62ab0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str.BIN
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.0046d4d2
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___xpr
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
push edx
call fcn.004874f0
pop edx
push eax
push 5
push 0xff
push 0xff
push 0xff
call fcn.00472e7e
push eax
lea ebp, [esp + 0xb8]
mov edx, dword [ebp]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, str._edition
push edx
call fcn.00487530
call fcn.00487620
push dword [0xa62ab4]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.00419caa
call fcn.004426d0
push 5
push 0xff
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str._The_machine_is_permanently_activated_
push eax
push dword [0xa62ab4]
call fcn.00419caa
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x416923
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x416923
mov eax, 1
jmp 0x416925
xor eax, eax
and eax, eax
je 0x416ab9
push 5
push 0xff
push 0xff
push 0
call fcn.00472e7e
push eax
mov eax, str.Volume_activation_will_expire_19.01.2038
push eax
push dword [0xa62ab4]
call fcn.00419caa
mov ebx, eax
and ebx, ebx
jne 0x416a9b
push 0x14
push dword [0xa627c0]
mov eax, str.Activation_Error
push eax
call fcn.0043839c
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0xa8]
cmp ebx, 6
jne 0x416a99
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___rearm
push edx
call fcn.00487530
lea eax, [esp + 0x94]
push eax
call fcn.00487590
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
call fcn.0040d845
mov edx, str.shutdown.exe__r__f__t_0
lea ecx, [esp + 0x90]
call fcn.00442008
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push dword [esp + 0x9c]
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
jmp 0x416ab9
mov ebx, dword [0xa626a8]
inc ebx
mov dword [0xa626a8], ebx
push 0
lea eax, [0x40c96a]
push eax
call fcn.004432a1
mov ebx, dword [esp + 0xd4]
and ebx, ebx
jle 0x416bac
mov ebx, dword [esp + 0x150]
and ebx, ebx
jle 0x416ae5
mov ebx, dword [esp + 0xe0]
and ebx, ebx
jne 0x416ae5
mov eax, 1
jmp 0x416ae7
xor eax, eax
and eax, eax
je 0x416bac
mov eax, str._Restore_the_old_KMS_Service_address.
push eax
call fcn.0043779c
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
call fcn.004426b2
add dword [esp], edx
call fcn.0046d0af
call fcn.00487620
push edx
call fcn.004874f0
pop edx
push eax
mov edx, str.cscript___nologo__
push edx
call fcn.00487530
push edx
call fcn.004874f0
pop edx
push eax
push 0x55a098
call fcn.0041c4b6
pop eax
mov edx, str.___skms
push edx
call fcn.00487530
mov edx, dword [esp + 0x90]
push edx
call fcn.00487530
mov edx, 0x55bafc
push edx
call fcn.00487530
mov edx, dword [esp + 0x94]
push edx
call fcn.00487530
call fcn.004426b2
add dword [esp], edx
call fcn.004426b2
add dword [esp + 4], edx
call fcn.0042a968
call fcn.004426d0
push dword [0xa62a24]
call fcn.0046b5d3
and eax, eax
je 0x416bc6
push dword [0xa62ab4]
call fcn.0046a262
xor eax, eax
push dword [esp + 0x60]
call fcn.004876f0
push dword [esp + 0x4c]
call fcn.004876f0
push dword [esp + 0x9c]
call fcn.004876f0
push dword [esp + 0x68]
call fcn.004876f0
push dword [esp + 0x54]
call fcn.004876f0
push dword [esp + 0x84]
call fcn.004876f0
push dword [esp + 0x2c]
call fcn.004876f0
push dword [esp + 0x64]
call fcn.004876f0
push dword [esp + 0xa4]
call fcn.004876f0
push dword [esp + 0x90]
call fcn.004876f0
push dword [esp + 0x74]
call fcn.004876f0
push dword [esp + 0x1c]
call fcn.004876f0
push dword [esp + 0x10]
call fcn.004876f0
push dword [esp + 0x94]
call fcn.004876f0
push dword [esp + 0xdc]
call fcn.004876f0
push dword [esp + 0x18]
call fcn.004876f0
lea edx, [esp + 0xac]
push 0x577440
push edx
call fcn.004430df
push dword [esp + 4]
call fcn.004876f0
push dword [esp + 0x8c]
call fcn.004876f0
push dword [esp + 0x44]
call fcn.004876f0
push dword [esp + 0xe4]
call fcn.004876f0
push dword [esp + 0xc4]
call fcn.004876f0
push dword [esp + 0x40]
call fcn.004876f0
push dword [esp + 0x80]
call fcn.004876f0
push dword [esp + 0x5c]
call fcn.004876f0
push dword [esp + 0x70]
call fcn.004876f0
push dword [esp + 8]
call fcn.004876f0
push dword [esp + 0xd0]
call fcn.004876f0
push dword [esp + 0x48]
call fcn.004876f0
push dword [esp + 0x110]
call fcn.004876f0
push dword [esp + 0x34]
call fcn.004876f0
push dword [esp + 0x6c]
call fcn.004876f0
push dword [esp + 0x58]
call fcn.004876f0
push dword [esp + 0x38]
call fcn.004876f0
push dword [esp + 0x124]
call fcn.004876f0
push dword [esp + 0x50]
call fcn.004876f0
push dword [esp + 0xe8]
call fcn.004876f0
push dword [esp + 0xa0]
call fcn.004876f0
push dword [esp]
call fcn.004876f0
push dword [esp + 0xf4]
call fcn.004876f0
push dword [esp + 0x28]
call fcn.004876f0
push dword [esp + 0x24]
call fcn.004876f0
push dword [esp + 0x7c]
call fcn.004876f0
push dword [esp + 0xc]
call fcn.004876f0
push dword [esp + 0xcc]
call fcn.004876f0
add esp, 0x128
pop edi
pop ebx
pop ebp
ret 0x1c