Function at 0x402e2c
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82c
push ebx
push esi
push edi
mov esi, 0x103
xor ebx, ebx
push esi
lea eax, [ebp - 0x213]
push ebx
push eax
mov byte [ebp - 0x214], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x51f]
push ebx
push eax
mov byte [ebp - 0x520], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x317]
push ebx
push eax
mov byte [ebp - 0x318], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x727]
push ebx
push eax
mov byte [ebp - 0x728], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x10f]
push ebx
push eax
mov byte [ebp - 0x110], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x82b]
push ebx
push eax
mov byte [ebp - 0x82c], bl
call fcn.0040a870
add esp, 0x48
push esi
lea eax, [ebp - 0x41b]
push ebx
push eax
mov byte [ebp - 0x41c], bl
call fcn.0040a870
push esi
lea eax, [ebp - 0x623]
push ebx
push eax
mov byte [ebp - 0x624], bl
call fcn.0040a870
add esp, 0x18
lea eax, [ebp - 0x214]
push eax
push ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call fcn.0040321e
push str.FreeWorkzIE.dll
lea eax, [ebp - 0x214]
push eax
push 0x4112c0
lea edi, [esi + 1]
mov esi, dword [sym.imp.SHLWAPI.dll_wnsprintfA]
lea eax, [ebp - 0x110]
push edi
push eax
call esi
push str.Uninstaller.exe
lea eax, [ebp - 0x214]
push eax
push 0x4112c0
lea eax, [ebp - 0x82c]
push edi
push eax
call esi
push str.FreeWorkzPE.dll
lea eax, [ebp - 0x214]
push eax
push 0x4112c0
lea eax, [ebp - 0x41c]
push edi
push eax
call esi
push str.npFreeWorkzPE.dll
lea eax, [ebp - 0x214]
push eax
push 0x4112c0
lea eax, [ebp - 0x624]
push edi
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0x50
lea eax, [ebp - 0x520]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.DllUnregisterServer
push eax
mov dword [ebp - 0xc], eax
call edi
cmp eax, ebx
je 0x402f96
call eax
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [ebp - 0x110]
push eax
call esi
push str.DllUnregisterServer
push eax
mov dword [ebp - 0xc], eax
call edi
cmp eax, ebx
je 0x402fb9
call eax
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [ebp - 0x41c]
push eax
call esi
mov esi, eax
push str.DllUnregisterServer
push esi
call edi
cmp eax, ebx
je 0x402fdb
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x318]
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or ebx, 0xffffffff
test eax, eax
jne 0x403023
lea eax, [ebp - 0x318]
push eax
call esi
cmp eax, ebx
je 0x40304d
lea eax, [ebp - 0x318]
push eax
call edi
test eax, eax
je 0x40302c
mov dword [ebp - 4], 1
jmp 0x40304d
lea eax, [ebp - 0x318]
push eax
call esi
cmp eax, ebx
je 0x40304d
lea eax, [ebp - 0x318]
push eax
mov dword [ebp - 8], 1
call fcn.00405666
pop ecx
lea eax, [ebp - 0x520]
push eax
call edi
test eax, eax
je 0x40305f
inc dword [ebp - 4]
jmp 0x40307c
lea eax, [ebp - 0x520]
push eax
call esi
cmp eax, ebx
je 0x40307c
inc dword [ebp - 8]
lea eax, [ebp - 0x520]
push eax
call fcn.00405666
pop ecx
lea eax, [ebp - 0x728]
push eax
call edi
test eax, eax
je 0x40308e
inc dword [ebp - 4]
jmp 0x4030ab
lea eax, [ebp - 0x728]
push eax
call esi
cmp eax, ebx
je 0x4030ab
inc dword [ebp - 8]
lea eax, [ebp - 0x728]
push eax
call fcn.00405666
pop ecx
lea eax, [ebp - 0x110]
push eax
call edi
test eax, eax
je 0x4030bd
inc dword [ebp - 4]
jmp 0x4030da
lea eax, [ebp - 0x110]
push eax
call esi
cmp eax, ebx
je 0x4030da
inc dword [ebp - 8]
lea eax, [ebp - 0x110]
push eax
call fcn.00405666
pop ecx
lea eax, [ebp - 0x41c]
push eax
call edi
test eax, eax
je 0x4030ec
inc dword [ebp - 4]
jmp 0x403109
lea eax, [ebp - 0x41c]
push eax
call esi
cmp eax, ebx
je 0x403109
inc dword [ebp - 8]
lea eax, [ebp - 0x41c]
push eax
call fcn.00405666
pop ecx
lea eax, [ebp - 0x624]
push eax
call edi
test eax, eax
je 0x40311b
inc dword [ebp - 4]
jmp 0x403138
lea eax, [ebp - 0x624]
push eax
call esi
cmp eax, ebx
je 0x403138
inc dword [ebp - 8]
lea eax, [ebp - 0x624]
push eax
call fcn.00405666
pop ecx
lea eax, [ebp - 0x82c]
push eax
call edi
pop edi
pop esi
pop ebx
test eax, eax
je 0x40314b
inc dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
add eax, ecx
leave
ret