Function at 0x423a60
Capabilities:
Delete file

Disassembly:
push 8
mov eax, 0x59dcef
call fcn.00569393
mov ebx, ecx
mov dword [ebp - 0x10], ebx
and dword [ebp - 4], 0
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 8
cmovae eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add bl, byte [edx]
mov dword [ebp - 0x14], eax
call fcn.0042aea7
test al, al
je 0x423ab2
popfd
loop 0x423b11
scasd eax, dword es:[edi]
jle 0x423ad8
jmp 0xd887d37a
cmp dword [ebp - 0x14], 0
jne 0x423af3
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
mov ecx, ebx
cmovae eax, dword [ebp + 8]
push eax
call fcn.00423526
call fcn.0042ab6b
test al, al
je 0x423af3
and dword [esi - 0x44], edx
adc ebx, ebx
mov al, byte [0x210639ea]
nop
adc ebp, ebx
fidiv dword [eax]
jecxz 0x423a78
invalid
jae 0x423a84
mov dword [ecx], esi
or ebx, ecx
push cs
xor dl, byte [edx]
and edx, dword [edi + 0x6a707e]
push 0
push 1
lea ecx, [ebp + 8]
call fcn.00403628
xor eax, eax
inc eax
call fcn.0056936d
ret 0x18
call fcn.00569393
mov ebx, ecx
mov dword [ebp - 0x18], ebx
lea esi, [ebx + 4]
xor edx, edx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edx
cmp dword [esi + 0x14], 8
jb 0x423b34
mov eax, dword [esi]
jmp 0x423b36
mov eax, esi
xor ecx, ecx
mov word [eax], cx
lea edi, [ebx + 0x1c]
mov dword [ebp - 4], edx
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], edx
cmp dword [edi + 0x14], 8
jb 0x423b55
mov eax, dword [edi]
jmp 0x423b57
mov eax, edi
xor ecx, ecx
mov word [eax], cx
lea eax, [ebx + 0x34]
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
jb 0x423b71
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebx + 0x4c]
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
jb 0x423b8b
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebx + 0x64]
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x10], eax
jb 0x423ba8
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebx + 0x7c]
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x14], eax
jb 0x423bc5
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebx + 0x94]
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
jb 0x423be2
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebx + 0xac]
mov byte [ebp - 4], 6
call fcn.0040aabe
and dword [ebx], 0
push str.WanNengWBIME
mov byte [ebp - 4], 7
call fcn.00578706
pop ecx
push eax
push str.WanNengWBIME
mov ecx, esi
call fcn.00403772
mov esi, 0x5a4a94
push esi
call fcn.00578706
invalid
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00403772
mov esi, str.WHostService
push esi
call fcn.00578706
pop ecx
push eax
push esi
lea ecx, [ebx + 0x34]
call fcn.00403772
push 0
push 0x5a06d8
lea ecx, [ebx + 0x4c]
call fcn.00403772
call fcn.0042ae62
test al, al
je 0x423c69
int1
sti
sbb byte [esi], al
ficom dword [edx + 0x23]
not byte [esi - 0x60]
push 0xffffffffffffff99
mov cl, 0xbd
insd dword es:[edi], dx
lodsb al, byte [esi]
mov eax, dword [0x6efde8]
add byte [eax + eax*8 - 0x7239e08c], al
lahf
jle 0x423c14
call fcn.0042ab6b
test al, al
je 0x423c91
invalid
aaa
iretd
call fcn.0042a988
test al, al
je 0x423cb0
jg 0x423c20
dec ecx
test al, 0x8a
hlt
mov esi, str.0_100
push esi
call fcn.00578706
pop ecx
mov ecx, dword [ebp - 0x10]
push eax
push esi
call fcn.00403772
mov ecx, dword [ebp - 0x14]
push 0
push 0x5a06d8
call fcn.00403772
call fcn.0042af76
test al, al
je 0x423cf1
push ebx
fiadd dword [edi]
retf
call fcn.0042aeec
test al, al
je 0x423d15
std
les ecx, [ebp + 0x5c]
xchg edx, eax
test eax, 0x3ed789a8
das
invalid
call fcn.0042aea7
test al, al
je 0x423d37
lds edi, [ebx + 0x3079ce5e]
scasb al, byte es:[edi]
aad 0x7a
add esi, edi
add eax, 0x52cec1d
mov dword [0x9a265692], eax
adc dl, byte [eax]
xlatb
xor byte [ebx - 0x5f7c17bb], cl
inc esp
add dword [eax], eax
add byte [eax], al
mov eax, dword [ebp - 0x18]
and dword [eax + 0x144], 0
call fcn.0056936d
ret