Function at 0x4ab500
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4f3db1
mov eax, dword fs:[0]
push eax
mov eax, 0xa81c
call fcn.004e03c0
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0xa818], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0xa830]
mov dword fs:[0], eax
mov eax, dword [esp + 0xa844]
mov esi, ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0xa838], 0
mov ebp, 0x77
cmp dword [0x103a97c], ebp
jne 0x4ab57c
push eax
mov eax, dword [esp + 0xa844]
push eax
push str.WriteSendLog__s___s_
push 8
call fcn.0043d500
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [esi + 0x324f4]
push 0
mov dword [esp + 0x24], ecx
call sub.mfc90.dll_Ordinal_6494
push 0x53ff
lea ecx, [esp + 0x5431]
push 0
push ecx
mov byte [esp + 0x5438], 0
call sub.MSVCR90.dll_memset
mov edx, dword [esp + 0xa84c]
push 0x502a9c
push edx
mov byte [esp + 0x2f], 0
call dword [sym.imp.MSVCR90.dll_fopen]
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x4ab5eb
mov dword [esp + 0xa838], 0xffffffff
lea ecx, [esp + 0xa840]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor eax, eax
jmp 0x4abaf6
mov edi, dword [sym.imp.MSVCR90.dll_fgets]
push esi
lea eax, [esp + 0x5430]
push 0x5400
push eax
call edi
add esp, 0xc
test eax, eax
jbe 0x4ab6f4
mov bl, 2
mov edi, edi
cmp byte [0x103a972], 0
jne 0x4ab622
test byte [0x1043104], 8
je 0x4ab683
push ecx
lea edx, [esp + 0x5430]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0xa83c], 1
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0xa840], 0
call fcn.0048eab0
add esp, 8
mov byte [esp + 0xa838], bl
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x542c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4ab668
mov byte [esp + 0xa838], cl
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp byte [esp + 0x542e], 0x2d
jne 0x4ab6c5
mov al, byte [esp + 0x543d]
cmp al, 0x2c
je 0x4ab69c
cmp al, 0x7c
jne 0x4ab6c5
cmp byte [esp + 0x5443], 0x2d
jne 0x4ab6c5
cmp byte [esp + 0x544c], 0x3a
jne 0x4ab6c5
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x542c]
push edx
push eax
call sub.mfc90.dll_Ordinal_6154
push 0x5400
lea eax, [esp + 0x5430]
push 0
push eax
call sub.MSVCR90.dll_memset
push esi
lea ecx, [esp + 0x543c]
push 0x5400
push ecx
call edi
add esp, 0x18
test eax, eax
ja 0x4ab610
push esi
call dword [sym.imp.MSVCR90.dll_fclose]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x324fc]
add esp, 4
xor esi, esi
test eax, eax
jle 0x4ababa
mov bl, 3
mov edi, 0x1000
lea esp, [esp]
test esi, esi
jl 0x4ab8f4
mov eax, dword [esp + 0x1c]
cmp esi, dword [eax + 8]
jge 0x4ab8f4
mov ecx, eax
mov edx, dword [ecx + 4]
lea eax, [edx + esi*4]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0xa838], bl
cmp dword [0x103a97c], ebp
jne 0x4ab76b
mov eax, dword [esp + 0x14]
push eax
push str.WriteSendLog_Info__s_
push 8
call fcn.0043d500
add esp, 0xc
cmp dword [0x104307c], 0
je 0x4ab7cc
test dword [0x1042d84], edi
jne 0x4ab7cc
push 0
push 0x51a830
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
jne 0x4ab7be
push 0
push str.DDoS_cut_s_
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
jne 0x4ab7be
push 0
push str.DDoS_detection_s_
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
je 0x4ab7cc
mov ecx, dword [esp + 0x1c]
push 1
push esi
call sub.mfc90.dll_Ordinal_5878
jmp 0x4ab814
cmp dword [0x103a97c], ebp
jne 0x4ab7e3
push str.WriteSendLog_Info_end
push 8
call fcn.0043d500
add esp, 8
push 0
push str.____
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
jne 0x4ab894
cmp dword [0x103a97c], ebp
jne 0x4ab814
push str.WriteSendLog_Info_end2
push 8
call fcn.0043d500
add esp, 8
mov byte [esp + 0xa838], 0
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x20]
inc esi
cmp esi, dword [ecx + 0x324fc]
jl 0x4ab720
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
nop
mov ecx, dword [esp + 0xa840]
push ecx
mov ecx, 0x10dd360
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
jne 0x4ab861
push 0x64
call edi
inc esi
cmp esi, 0x14
jl 0x4ab840
lea edx, [esp + 0xa840]
push edx
mov ecx, 0x10dd278
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov ebp, dword [esp + 0x20]
cmp dword [ebp + 0x324fc], 0
jne 0x4ab8f9
mov eax, dword [esp + 0xa840]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x4ababa
push str._s__
push str.____
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
mov ebx, dword [esp + 0x1c]
cmp esi, dword [ebx + 8]
jge 0x4ab8f4
mov eax, dword [ebx + 4]
lea edx, [esp + 0x14]
push edx
lea ecx, [eax + esi*4]
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [0x104307c], 0
je 0x4ab8dd
test dword [0x1042d84], edi
jne 0x4ab8dd
push 1
push esi
mov ecx, ebx
call sub.mfc90.dll_Ordinal_5878
mov byte [esp + 0xa838], 0
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4ab837
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esp + 0xa840]
push 0x5059c0
push ecx
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.MSVCR90.dll_fopen_s]
add esp, 0xc
test eax, eax
jne 0x4ababa
push 0x53ff
push eax
mov byte [esp + 0x34], al
lea eax, [esp + 0x35]
push eax
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x4ababa
push 0
push 0
push eax
call dword [sym.imp.MSVCR90.dll_fseek]
xor esi, esi
add esp, 0xc
cmp dword [ebp + 0x324fc], esi
jle 0x4abaa1
mov edi, dword [sym.imp.MSVCR90.dll_fputs]
mov bl, 4
test esi, esi
jl 0x4ab8f4
mov ecx, dword [esp + 0x1c]
cmp esi, dword [ecx + 8]
jge 0x4ab8f4
mov edx, ecx
mov eax, dword [edx + 4]
lea eax, [eax + esi*4]
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0xa838], bl
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
cmp ecx, 0xa
jl 0x4aba82
cmp ecx, 0x5400
jae 0x4ab9b2
lea edx, [esp + 0x2c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4ab9a8
cmp byte [0x103a972], 0
jne 0x4ab9c4
test byte [0x1043104], 8
je 0x4aba1f
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0xa83c], 5
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0xa840], bl
call fcn.0048ecd0
add esp, 8
mov byte [esp + 0xa838], 6
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4aba04
mov byte [esp + 0xa838], bl
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4aba26
sub eax, edx
cmp byte [esp + eax + 0x2a], 0xd
je 0x4aba6e
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4aba40
sub eax, edx
cmp byte [esp + eax + 0x2b], 0xa
je 0x4aba6e
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4aba57
sub eax, edx
mov byte [esp + eax + 0x2c], 0xd
mov byte [esp + eax + 0x2d], 0xa
mov byte [esp + eax + 0x2e], cl
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x30]
push edx
call edi
add esp, 8
mov byte [esp + 0x1b], 1
mov byte [esp + 0xa838], 0
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
inc esi
cmp esi, dword [ebp + 0x324fc]
jl 0x4ab963
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.MSVCR90.dll_fflush]
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.MSVCR90.dll_fclose]
add esp, 8
mov ecx, dword [esp + 0x1c]
push 0xffffffffffffffff
push 0
call sub.mfc90.dll_Ordinal_6494
push 0x5116d8
mov ecx, 0x10dd278
call dword [sym.imp.mfc90.dll_Ordinal_820]
movzx esi, byte [esp + 0x1b]
mov dword [esp + 0xa838], 0xffffffff
lea ecx, [esp + 0xa840]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, esi
mov ecx, dword [esp + 0xa830]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa818]
xor ecx, esp
call fcn.004e0148
add esp, 0xa828
ret 8