Function at 0x10003f54
Capabilities:
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x2a0]
sub esp, 0x320
mov eax, dword [0x10020550]
xor eax, ebp
mov dword [ebp + 0x29c], eax
push ebx
push esi
mov esi, ecx
push edi
lea eax, [esi + 0x11c90]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
and dword [ebp - 0x74], 0
lea eax, [esi + 0x1480]
mov ebx, 0x104
mov edi, eax
mov dword [ebp - 0x78], ebx
push edi
call fcn.1000ada0
test eax, eax
pop ecx
jbe 0x10003fa3
inc dword [ebp - 0x74]
add edi, ebx
dec dword [ebp - 0x78]
jne 0x10003f95
mov edi, 0x103
push edi
lea eax, [ebp - 0x6f]
push 0
push eax
mov byte [ebp - 0x70], 0
call fcn.1000b680
push 0xa
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x74]
call fcn.10019cd6
add esp, 0x18
lea eax, [ebp - 0x70]
push eax
push str.total
push str.AutoUsers
mov ecx, esi
call fcn.10003ea1
mov eax, dword [ebp - 0x74]
test eax, eax
jg 0x10003ff3
xor eax, eax
jmp 0x100041aa
mov dword [ebp - 0x7c], eax
and dword [ebp - 0x78], 0
lea eax, [esi + 0x1480]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], ebx
push dword [ebp - 0x74]
call fcn.1000ada0
test eax, eax
pop ecx
jbe 0x10004087
push edi
lea eax, [ebp + 0x199]
push 0
push eax
mov byte [ebp + 0x198], 0
call fcn.1000b680
push edi
lea eax, [ebp + 0x95]
push 0
push eax
mov byte [ebp + 0x94], 0
call fcn.1000b680
push dword [ebp - 0x74]
lea eax, [ebp + 0x94]
push eax
call fcn.1000d1c0
push dword [ebp - 0x78]
lea eax, [ebp + 0x198]
push str.DTCPERF_OBJ_00
push str._s_d
push eax
call fcn.1000d142
add esp, 0x30
inc dword [ebp - 0x78]
lea eax, [ebp + 0x94]
push eax
lea eax, [ebp + 0x198]
push eax
push str.objects
mov ecx, esi
call fcn.10003ea1
add dword [ebp - 0x74], ebx
dec dword [ebp - 0x80]
jne 0x10004006
dec dword [ebp - 0x7c]
jne 0x10003ff6
mov eax, dword [esi + 0x11d98]
cmp eax, 0xffffffff
je 0x100041aa
mov ecx, eax
imul ecx, ecx, 0x14
cmp dword [ecx + esi + 0x30], 0
jne 0x100041aa
imul eax, eax, 0x104
lea eax, [eax + esi + 0x1480]
push eax
call fcn.1000ada0
push edi
mov ebx, eax
lea eax, [ebp + 0x199]
push 0
push eax
mov byte [ebp + 0x198], 0
call fcn.1000b680
mov eax, dword [esi + 0x11d98]
imul eax, eax, 0x104
dec ebx
lea eax, [eax + esi + 0x1481]
push ebx
push eax
lea eax, [ebp + 0x198]
push eax
call fcn.1000a7e0
add esp, 0x1c
lea eax, [ebp + 0x198]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov ecx, dword [esi + 0x11d98]
imul ecx, ecx, 0x14
mov dword [ecx + esi + 0x40], eax
mov eax, dword [esi + 0x11d98]
imul eax, eax, 0x14
mov eax, dword [eax + esi + 0x40]
test eax, eax
je 0x100041a3
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push str.OnInitPlus
push eax
call edi
mov ecx, dword [esi + 0x11d98]
imul ecx, ecx, 0x14
mov dword [ecx + esi + 0x30], eax
mov eax, dword [esi + 0x11d98]
imul eax, eax, 0x14
push str.OnRecvData
push dword [eax + esi + 0x40]
call edi
mov ecx, dword [esi + 0x11d98]
imul ecx, ecx, 0x14
mov dword [ecx + esi + 0x38], eax
mov eax, dword [esi + 0x11d98]
imul eax, eax, 0x14
push str.OnClosePlus
push dword [eax + esi + 0x40]
call edi
mov ecx, dword [esi + 0x11d98]
imul ecx, ecx, 0x14
mov dword [ecx + esi + 0x34], eax
mov eax, dword [esi + 0x11d98]
add eax, 3
imul eax, eax, 0x14
and dword [eax + esi], 0
or dword [esi + 0x11d98], 0xffffffff
mov ecx, dword [ebp + 0x29c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000b561
add ebp, 0x2a0
leave
ret