Function at 0x406bc0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x456073
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x248
push ebx
mov ebx, ecx
push ebp
mov dword [esp + 0x20], ebx
mov ebp, dword [ebx + 0xc]
cmp ebp, 1
mov dword [esp + 0x1c], ebp
jge 0x406c15
push str.Restore_information_not_find.
call fcn.00404400
add esp, 4
xor eax, eax
pop ebp
pop ebx
mov ecx, dword [esp + 0x248]
mov dword fs:[0], ecx
add esp, 0x254
ret
push esi
push edi
xor edi, edi
mov ecx, ebx
push edi
mov dword [esp + 0x24], 1
call fcn.00406110
xor esi, esi
cmp ebp, edi
jle 0x406f58
lea ebp, [ebx + 4]
mov dword [esp + 0x1c], 0x64
lea eax, [esp + 0x50]
push esi
push eax
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
push edi
push eax
call fcn.0041ffcf
add esp, 8
lea ecx, [esp + 0x50]
test eax, eax
sete byte [esp + 0x13]
call fcn.0043f295
mov al, byte [esp + 0x13]
test al, al
je 0x406f00
lea edx, [esp + 0x2c]
push esi
lea ecx, [ebx + 0x18]
push edx
call fcn.00405fe0
mov dword [esp + 0x260], edi
mov edi, dword [eax]
lea eax, [esp + 0x34]
push esi
push eax
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
push edi
push eax
mov byte [esp + 0x268], 1
call fcn.00403cd0
add esp, 8
lea ecx, [esp + 0x34]
mov edi, eax
mov byte [esp + 0x260], 0
call fcn.0043f295
lea ecx, [esp + 0x2c]
mov dword [esp + 0x260], 0xffffffff
call fcn.0043f295
test edi, edi
je 0x406ea7
mov ecx, dword [0x470a10]
mov dword [esp + 0x14], ecx
lea edx, [esp + 0x14]
push 0x6e
push edx
mov dword [esp + 0x268], 2
call fcn.00436220
mov eax, dword [esp + 0x1c]
add esp, 8
mov ecx, ebx
push eax
call fcn.00406150
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x154]
push esi
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x58]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x40]
push ecx
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
lea edx, [esp + 0x54]
lea ecx, [esp + 0x154]
push edx
push ecx
push 0
push 0
push eax
call fcn.004205df
add esp, 0x14
lea ecx, [esp + 0x3c]
call fcn.0043f295
mov edx, dword [0x470a10]
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x260], 3
call fcn.0043f220
lea eax, [esp + 0x54]
lea ecx, [esp + 0x154]
push eax
push ecx
lea edx, [esp + 0x20]
push 0x46e098
push edx
call fcn.0043620d
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
add esp, 0x10
lea edx, [esi + 1]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push 0x79
push eax
call fcn.00436220
mov ecx, dword [esp + 0x28]
add esp, 0x14
push ecx
mov ecx, ebx
call fcn.00406170
lea edx, [esp + 0x4c]
push esi
push edx
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
lea ecx, [esp + 0x4c]
sete bl
call fcn.0043f295
test bl, bl
je 0x406e18
lea eax, [esp + 0x44]
push esi
push eax
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
mov byte [esp + 0x260], 4
push eax
push str.File_delete_file.___s_
call fcn.00404400
add esp, 8
lea ecx, [esp + 0x44]
mov byte [esp + 0x260], 3
call fcn.0043f295
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x38]
push esi
push ecx
lea ecx, [edx + 0x18]
call fcn.00405fe0
mov edi, dword [eax]
lea eax, [esp + 0x30]
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x268], 5
call fcn.00405fe0
mov eax, dword [eax]
push edi
push eax
push str.File_Restore_:__s____s
mov byte [esp + 0x26c], 6
call fcn.00404400
add esp, 0xc
lea ecx, [esp + 0x30]
mov byte [esp + 0x260], 5
call fcn.0043f295
lea ecx, [esp + 0x38]
mov byte [esp + 0x260], 3
call fcn.0043f295
lea ecx, [esp + 0x18]
mov byte [esp + 0x260], 2
call fcn.0043f295
lea ecx, [esp + 0x14]
mov dword [esp + 0x260], 0xffffffff
call fcn.0043f295
mov ebx, dword [esp + 0x28]
jmp 0x406eeb
lea ecx, [esp + 0x40]
push esi
push ecx
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
mov dword [esp + 0x260], 7
push eax
push str.File_restore_fail.___s__Program_Exit.
call fcn.00404400
add esp, 8
lea ecx, [esp + 0x40]
mov dword [esp + 0x260], 0xffffffff
call fcn.0043f295
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x1c]
mov ecx, ebx
cdq
idiv dword [esp + 0x24]
push eax
call fcn.00406110
xor edi, edi
jmp 0x406f40
lea edx, [esp + 0x48]
push esi
push edx
mov ecx, ebp
call fcn.00405fe0
mov eax, dword [eax]
mov dword [esp + 0x260], 8
push eax
push str.Update_file_not_find.___s__Program_Exit.
call fcn.00404400
add esp, 8
lea ecx, [esp + 0x48]
mov dword [esp + 0x260], 0xffffffff
call fcn.0043f295
mov dword [esp + 0x20], edi
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
inc esi
add ecx, 0x64
cmp esi, eax
mov dword [esp + 0x1c], ecx
jl 0x406c3e
push 0x64
mov ecx, ebx
call fcn.00406110
mov ecx, dword [esp + 0x258]
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x254
ret