Function at 0x432230
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a733b
mov eax, dword fs:[0]
push eax
sub esp, 0xd24
mov eax, dword [0x4db06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xd30], edi
movzx eax, word [ebp + 0xc]
cmp eax, 0xd6e
ja 0x43240a
je 0x43230a
cmp eax, 0xbd2
ja 0x4322e5
je 0x4322be
sub eax, 2
je 0x4322af
sub eax, 0xbc1
jne case.0x43241f.3441
cmp dword [edi + 0x7c], eax
push 0xbc3
sete al
mov dword [edi + 0x7c], eax
mov eax, dword [edi]
call dword [eax + 0x20c]
jmp case.0x43241f.3441
mov eax, dword [edi]
push 2
call dword [eax + 0x20c]
jmp case.0x43241f.3441
push str.license_manager
mov ecx, 0x37
call fcn.0045fe50
mov esi, eax
call fcn.00461c00
mov edx, esi
mov ecx, eax
call fcn.0045d410
add esp, 4
jmp case.0x43241f.3441
cmp eax, 0xbd3
je 0x432303
cmp eax, 0xd69
jne case.0x43241f.3441
push 0
call fcn.00432880
jmp case.0x43241f.3441
push str.license_newformat
jmp 0x4322c3
mov edx, dword [edi + 0x74]
mov ecx, dword [edi + 0x78]
lea eax, [edx + 0x2e4]
add edx, 0x2d8
push eax
call fcn.0042dcf0
mov eax, dword [edi + 0x78]
add esp, 4
cmp byte [eax + 0xc], 0
jne case.0x43241f.3441
mov eax, dword [eax + 0x74]
cmp eax, 1
je 0x432343
cmp eax, 2
jne case.0x43241f.3441
mov esi, dword [edi]
mov ecx, 0xb7
push 1
push 0x4c9d64
call fcn.0045fe50
push eax
mov ecx, edi
call dword [esi + 0x128]
cmp eax, 2
je case.0x43241f.3441
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xc94], 0
lea eax, [ebp - 0xc9c]
mov dword [ebp - 4], 0
mov ecx, dword [edi + 0x74]
push eax
call fcn.00430d50
add esp, 4
test eax, eax
jne 0x4323dc
mov esi, dword [ebp - 0xc9c]
test esi, esi
je 0x4323b7
mov ecx, esi
cmp dword [ebp - 0xc98], eax
jne 0x4323bc
mov ecx, 0x4b88fd
mov eax, dword [edi]
push 0
push 0x4c9ba4
push ecx
mov ecx, edi
call dword [eax + 0x12c]
push esi
call fcn.00491111
add esp, 4
jmp case.0x43241f.3441
mov eax, dword [edi]
mov ecx, edi
push 0x4b88fd
push 0xd6d
call dword [eax + 0xf4]
mov ecx, edi
call fcn.00432ab0
push dword [ebp - 0xc9c]
call fcn.00491111
add esp, 4
jmp case.0x43241f.3441
sub eax, 0xd6f
cmp eax, 0x12
ja case.0x43241f.3441
movzx eax, byte [eax + 0x432868]
jmp dword [eax*4 + 0x43284c]
mov edx, dword [edi + 0x74]
mov ecx, dword [edi + 0x78]
lea eax, [edx + 0x2e4]
add edx, 0x2d8
push eax
call fcn.0042dcf0
mov ecx, dword [edi + 0x78]
add esp, 4
cmp byte [ecx + 0xc], 0
jne case.0x43241f.3441
cmp dword [ecx + 0x74], 1
jne 0x432462
call fcn.0042f6d0
cmp eax, 5
ja case.0x43241f.3441
push 0x400
lea eax, [ebp - 0x490]
push 0
push eax
call fcn.0048b570
mov eax, dword [edi]
lea ecx, [ebp - 0x490]
add esp, 0xc
push 0x400
push ecx
push 0xd67
mov ecx, edi
call dword [eax + 0xe8]
push 0x400
lea eax, [ebp - 0x890]
push 0
push eax
call fcn.0048b570
add esp, 8
lea edx, [ebp - 0x890]
lea ecx, [ebp - 0x490]
call fcn.00432000
add esp, 4
mov dword [ebp - 0xd24], 0
lea eax, [ebp - 0xd24]
mov dl, 0x3d
lea ecx, [ebp - 0x890]
push eax
call fcn.00463140
mov esi, eax
add esp, 4
test esi, esi
je 0x43258c
lea eax, [ebp - 0xd24]
xor dl, dl
push eax
xor ecx, ecx
call fcn.00463140
add esp, 4
test eax, eax
je 0x43258c
push dword [edi + 0x78]
mov ecx, dword [edi + 0x74]
mov edx, esi
push eax
add ecx, 0x2e4
call fcn.0042ff10
add esp, 8
mov ecx, edi
test eax, eax
mov eax, dword [edi]
jne 0x432540
push 0
push 0x4c9ba4
push str.Failed_to_activate
call dword [eax + 0x124]
mov ecx, edi
call fcn.00432ab0
jmp case.0x43241f.3441
push 0x4b88fd
push 0xd67
call dword [eax + 0xf4]
mov ecx, dword [edi + 0x74]
mov eax, dword [ecx + 0x190]
and eax, dword [ecx + 0x194]
cmp eax, 0xffffffff
jne 0x432580
mov dword [ecx + 0x190], 0
mov dword [ecx + 0x194], 0
mov ecx, dword [edi + 0x74]
call fcn.00410930
mov ecx, edi
call fcn.00432ab0
jmp case.0x43241f.3441
mov eax, dword [edi]
mov ecx, edi
push 0
push 0x4c9ba4
push str.Invalid_format
call dword [eax + 0x124]
jmp case.0x43241f.3441
push 1
call fcn.00432880
jmp case.0x43241f.3441
movaps xmm0, xmmword [0x4d0db0]
lea edi, [ebp - 0xca4]
movups xmmword [ebp - 0xca4], xmm0
mov dword [ebp - 0xc94], 4
mov dword [ebp - 0xd2c], edi
nop word [eax + eax]
mov eax, dword [edi]
lea ecx, [ebp - 0x298]
mov edx, eax
mov dword [ebp - 0xd28], eax
call fcn.0042e6a0
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.KERNEL30.dll_DeleteFileW]
mov edi, dword [ebp - 0xd28]
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x4e042c]
mov dword [ebp - 0xd28], 0
cmp eax, 5
jne 0x43263e
cmp dword [0x4e0430], 2
jne 0x43263e
mov dword [ebp - 0xd24], 1
mov ebx, str.Microsoft_Enhanced_Cryptographic_Provider_v1.0
jmp 0x432658
cmp eax, 6
mov dword [ebp - 0xd24], 0x18
mov ebx, str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider
mov eax, str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider__Prototype_
cmovb ebx, eax
push 0x80
lea eax, [ebp - 0x90]
push 0
push eax
call fcn.0048b570
add esp, 0xc
lea ecx, [ebp - 0x90]
push edi
push esi
call fcn.0042e7e0
add esp, 8
lea eax, [ebp - 0x90]
push 0x30
push dword [ebp - 0xd24]
push ebx
push eax
lea eax, [ebp - 0xd28]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
mov eax, dword [ebp - 0xd28]
test eax, eax
je 0x4326ae
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
inc esi
cmp esi, 5
jl 0x432610
mov edi, dword [ebp - 0xd2c]
lea eax, [ebp - 0xc90]
add edi, 4
mov dword [ebp - 0xd2c], edi
cmp edi, eax
jne 0x4325e0
mov ecx, dword [ebp - 0xd30]
call fcn.00432ab0
jmp case.0x43241f.3441
mov edx, dword [edi + 0x74]
mov ecx, dword [edi + 0x78]
lea eax, [edx + 0x2e4]
add edx, 0x2d8
push eax
call fcn.0042dcf0
mov eax, dword [edi + 0x78]
add esp, 4
cmp byte [eax + 0xc], 0
jne case.0x43241f.3441
mov eax, dword [eax + 0x74]
cmp eax, 1
je 0x43271e
cmp eax, 2
jne case.0x43241f.3441
mov esi, dword [edi]
mov ecx, 0xb7
push 1
push 0x4c9d64
call fcn.0045fe50
push eax
mov ecx, edi
call dword [esi + 0x128]
cmp eax, 2
je case.0x43241f.3441
push 0
mov edx, 0x400
lea ecx, [ebp - 0xc90]
call fcn.00430740
add esp, 4
mov ecx, edi
test eax, eax
jne 0x432777
mov eax, dword [edi]
push 0
push 0x4c9ba4
push str.Failed_to_deactivate
call dword [eax + 0x124]
jmp case.0x43241f.3441
call fcn.00432ab0
push edi
push 0x94f
lea ecx, [ebp - 0xd20]
call fcn.0046e6e0
lea eax, [ebp - 0xc90]
mov dword [ebp - method.TFilterDlg.virtual_0], 0x4c9e64
push 0
lea ecx, [ebp - 0xd20]
mov dword [ebp - 0xcac], eax
call fcn.0046e8a0
lea ecx, [ebp - 0xd20]
call fcn.0046e720
jmp case.0x43241f.3441
mov eax, dword [edi]
push 0xd77
call dword [eax + 0x118]
mov ecx, dword [edi + 0x74]
neg eax
sbb eax, eax
neg eax
dec eax
cdq
mov dword [ecx + 0x190], eax
mov dword [ecx + 0x194], edx
mov ecx, dword [edi + 0x74]
call fcn.00410930
jmp case.0x43241f.3441
mov edx, dword [edi + 0x78]
mov ecx, dword [edi + 0x74]
call fcn.00431160
mov ecx, edi
call fcn.00432ab0
mov eax, dword [edi + 0x78]
mov ecx, 0xc8
mov esi, dword [edi]
push 0
push 0x4c9cf0
test byte [eax + 0x10], 2
jne 0x432819
mov ecx, 0xc9
call fcn.0045fe50
push eax
mov ecx, edi
call dword [esi + 0x128]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00487555
mov esp, ebp
pop ebp
ret 0xc