Function at 0x4154b1
Capabilities:
Reference sql statements

Disassembly:
push ebp
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.0048d6d0
mov edx, dword [esp + 0x20]
lea ecx, [esp]
call fcn.0042e000
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.SELECT_Description_FROM_keys_WHERE_key
push edx
call fcn.0048d570
mov edx, dword [esp + 4]
push edx
call fcn.0048d570
mov edx, 0x5cf830
push edx
call fcn.0048d570
lea eax, [esp + 8]
push eax
call fcn.0048d5d0
push dword [esp + 4]
push dword [0x8f9c5c]
call fcn.0047f11d
mov ebx, eax
and ebx, ebx
je 0x415aab
push dword [0x8f9c5c]
call fcn.0047f12f
and eax, eax
je 0x415553
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [0x8f9c5c]
call fcn.0047f157
lea eax, [esp + 0xc]
push eax
call fcn.0048d5d0
jmp 0x415553
push dword [0x8f9c5c]
call fcn.0047f184
mov eax, str.Office
push eax
push dword [esp + 0xc]
call fcn.0048ad20
mov ebx, eax
and ebx, ebx
jle 0x415778
push edx
call fcn.0048d530
pop edx
push eax
call fcn.0041cc93
lea eax, [esp + 0x10]
push eax
call fcn.0048d5d0
push dword [esp + 0xc]
call fcn.0047dba6
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4155ab
jl 0x4155a7
cmp ebx, 0
ja 0x4155ab
xor eax, eax
jmp 0x4155b0
mov eax, 1
or eax, eax
je 0x415773
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x41569e
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push dword [esp + 0x18]
call fcn.0047db27
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5cf224
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__inpkey:
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__ECHO__Activating_...__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__act
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415773
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push dword [esp + 0x18]
call fcn.0047db27
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5cf224
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__inpkey:
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe__
push edx
call fcn.0048d570
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d570
mov edx, str.____NoLogo__dinstid
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415aab
push dword [0x8f9cc8]
mov edx, 0x5d6884
pop ecx
call fcn.0042e590
je 0x415938
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9cac]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.ChangeVLKey.vbs
push edx
call fcn.0048d570
call fcn.0048d660
push 7
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0046f570
call fcn.0042e610
mov ebp, 0x5ea367
mov ebx, ebp
mov ebp, str._c:changevlkeysp1.vbs_ab123_123ab_ab123_123ab_ab123_r_n
sub ebx, ebp
push ebx
mov ebp, str._c:changevlkeysp1.vbs_ab123_123ab_ab123_123ab_ab123_r_n
push ebp
push 7
call fcn.0046f7e0
push 7
call fcn.0046f280
push edx
call fcn.0048d530
pop edx
push eax
push 1
push dword [0x8f9cac]
push dword [esp + 0xc]
mov edx, dword [0x8f9cac]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.ChangeVLKey.vbs
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0044d0de
call fcn.0042e610
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9cac]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.ChangeVLKey.vbs
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.00411717
call fcn.0042e610
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x415933
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0047e38b
call fcn.0042e610
push edx
call fcn.0048d530
pop edx
push eax
push 1
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobe
push edx
call fcn.0048d570
call fcn.0048d660
mov eax, 0x5de288
push eax
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.oobemsoobe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0de
call fcn.0042e610
jmp 0x415aab
mov ebx, dword [esp + 0x24]
and ebx, ebx
jle 0x4159fa
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f99e8]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.System32
push edx
call fcn.0048d570
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.__K_ECHO__Install_Windows_Key
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__ipk
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__ECHO__Activating_...__cscript.exe_slmgr.vbs___NoLogo__ato
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
jmp 0x415aab
push edx
call fcn.0048d530
pop edx
push eax
mov edx, dword [0x8f99e8]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.System32
push edx
call fcn.0048d570
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.__K_ECHO__Install_Windows_Key
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__ipk
push edx
call fcn.0048d570
mov edx, dword [esp + 0xc]
push edx
call fcn.0048d570
mov edx, str.__cscript.exe_slmgr.vbs___NoLogo__dti
push edx
call fcn.0048d570
call fcn.0048d660
mov edx, dword [0x8f9cbc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov edx, str.cmd.exe
push edx
call fcn.0048d570
call fcn.0042e5e2
add dword [esp], edx
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.0042e5e2
add dword [esp + 8], edx
call fcn.0044d0c6
call fcn.0042e610
xor eax, eax
push dword [esp + 0xc]
call fcn.0048d760
push dword [esp + 4]
call fcn.0048d760
push dword [esp]
call fcn.0048d760
push dword [esp + 8]
call fcn.0048d760
add esp, 0x10
pop edi
pop ebx
pop ebp
ret 8