Function at 0x47af20
Capabilities:
Check if file exists
Get graphical window text

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f078e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2d0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x23c], esi
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
push 0
lea ecx, [esi + 0x1460]
movq qword [ebp - 0x44], xmm0
call fcn.005dc3e0
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
lea ecx, [ebp - 0x54]
movq qword [ebp - 0x54], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
lea ecx, [ebp - 0xf8]
movq qword [ebp - 0xf8], xmm0
call fcn.005dc5e0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.005dbeb0
test al, al
je 0x47afff
mov byte [ebp - 0x23d], 0
jmp 0x47cff4
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
call fcn.0047abe0
xorps xmm1, xmm1
movsd qword [ebp - 0x2d0], xmm0
lea ecx, [ebp - 0x84]
movq qword [ebp - 0x84], xmm1
mov dword [ebp - 0x7c], 0
call fcn.005dc5e0
push 7
push 1
push 1
lea eax, [esi + 0x1290]
mov byte [ebp - 4], 4
push 0
push ecx
mov ecx, eax
mov dword [ebp - 0x26c], eax
call fcn.0057c4e0
push eax
lea ecx, [ebp - 0x44]
call fcn.005daa70
push 0
push str.Restore_from...
mov ecx, esi
mov dword [ebp - 0x288], eax
call fcn.0045f680
mov ecx, esi
mov dword [ebp - 0x278], eax
call fcn.0043e530
test al, al
jne 0x47b08b
mov byte [ebp - 0x23d], al
jmp 0x47cfe9
push str.Backup_And_Recovery
lea ecx, [esi + 0x1448]
call fcn.005dc510
mov edi, dword [esi + 0x14e4]
mov ecx, dword [esi + 0x100]
mov dword [ebp - 0x250], edi
call fcn.005d2f10
push ecx
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xc3
mov esi, eax
mov edx, 5
push 0x190
push 5
mov ecx, esi
call fcn.005d22b0
push ecx
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xc3
push 0x14f
push 5
mov edx, 0x19a
mov ecx, esi
call fcn.005d22b0
push ecx
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xc3
push 0x2e4
push 0xcd
mov edx, 5
mov ecx, esi
call fcn.005d22b0
push ecx
push 4
push 0xffffffffffffffff
push 0xff000000
push 0x8c
push 0x2e4
push 0x195
mov edx, 5
mov ecx, esi
call fcn.005d22b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
mov ecx, edi
call fcn.005c44c0
test esi, esi
je 0x47b15a
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov esi, dword [ebp - 0x23c]
push 1
push str.https:__www.carifred.com_uvk_help_backup_and_recovery.phprestore_from
lea eax, [esi + 0x119c]
mov ecx, eax
mov dword [ebp - 0x2c0], eax
call fcn.005dc260
push 0x203040
mov ecx, edi
call fcn.005c44a0
push 0xffffff
call fcn.005c44b0
movsd xmm1, qword [0x6edaf8]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0
mov ecx, edi
call fcn.005c4340
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xdc
push 0xf
push 0xf
push str.Select_the_user_accounts_to_restore:
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
push 0x78
push 0xf
push 0x10e
push str._Check_all_none
mov ecx, esi
call fcn.0045fc60
push 0x10024
push 0x1080000d
push 0x7d
push 0x17c
push 0x23
push 0xf
push 0x627824
push str.Original_user_account_nRestore_to_account
mov ecx, edi
mov dword [ebp - 0x28c], eax
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x25c], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x96
push 0xad
push 0xf
push str.Set_destination_account:
mov ecx, edi
call fcn.005c0890
sub esp, 8
mov ecx, edi
push 0x10000043
push 0x19
push 0xe1
push 0xa7
push 0xaa
push 0
call fcn.005c1650
movsd xmm0, qword [esi + 8]
comisd xmm0, xmmword [0x6edb10]
mov dword [ebp - 0x260], eax
jbe 0x47b2a8
push 0x800
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bda80
mov ecx, 3
call fcn.0059e240
mov esi, eax
mov dword [ebp - 0x170], esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xbe
push 0xf
push 0x1a4
push str.User_folders_to_restore:
mov ecx, edi
mov byte [ebp - 4], 5
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
mov ecx, dword [ebp - 0x23c]
push 0x78
push 0xf
push 0x267
push str._Check_all_none
call fcn.0045fc60
push 0x24
push 0x10804008
push 0x9e
push 0x13b
push 0x23
push 0x1a4
push 0
push 0
mov ecx, edi
mov dword [ebp - 0x2d4], eax
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x254], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push dword [ebp - 0x254]
mov ecx, edi
call fcn.005c5730
movaps xmm0, xmmword [0x6edca0]
push 0
push 4
push 0x108e
push eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x15c], 0x28
mov dword [ebp - 0x158], 7
mov dword [ebp - 0x154], 3
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 2
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x15c]
push eax
push 0
push 0x10a2
push dword [ebp - 0x48]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x23c]
movsd xmm0, qword [0x6edab0]
comisd xmm0, xmmword [eax + 8]
jbe 0x47b3fd
push ecx
push dword [ebp - 0x48]
mov ecx, edi
push 1
push 0x590010
call fcn.005b8c90
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.Application_data
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x62e520
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c04
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.Downloads
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c2c
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c38
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x6cdcc4
call fcn.005bbb80
push 0
push dword [ebp - 0x254]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.All_other_folders
call fcn.005bbb80
push ecx
push 0xffffffffffffffff
push 0
push 1
push dword [ebp - 0x254]
mov ecx, edi
call fcn.005bba40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xb4
push 0xdf
push 0xf
push str.Additional_folders_to_restore:
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
mov ecx, dword [ebp - 0x23c]
push 0x73
push 0xdf
push 0xc3
push str._Check_all_none
call fcn.0045fc60
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Add_a_folder_to_restore_to_the_list.
push 0x1c
push 0x6e
push 0xd7
push 0x13b
push 0x7a
push str.Add_folder
mov dword [ebp - 0x2dc], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Change_the_path_where_the_selected_folder_will_be_restored_to.
push 0x1c
push 0x96
push 0xd7
push 0x1bb
push 0x8b
push str.Edit_destination
mov dword [ebp - 0x298], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Move_the_highlighted_folder_UP_in_the_list__CtrlU_.
push 0x1c
push 0x20
push 0xd7
push 0x260
push 0x88
push 0
mov dword [ebp - 0x284], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Move_the_highlighted_folder_DOWN_in_the_list__CtrlD_.
push 0x1c
push 0x20
push 0xd7
push 0x28a
push 0x87
push 0
mov dword [ebp - 0x280], eax
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
push str.Show_the_lists_context_menu.
push 0x1c
push 0x20
push 0xd7
mov dword [ebp - 0x270], eax
push 0x2be
mov ecx, dword [ebp - 0x23c]
push 0x86
push 0
call fcn.0045fd50
push 0x10024
push 0x1080000d
push 0x8f
push 0x2d0
push 0xfa
push 0xf
push 0x627824
push str.Source_location_nRestore_to_location
mov ecx, edi
mov dword [ebp - 0x274], eax
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x244], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push dword [ebp - 0x244]
mov ecx, edi
call fcn.005c5730
push 0x47
mov dword [ebp - 0x27c], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [ebp - 0x23c]
mov edi, eax
push 0
push edi
push edi
push 0x9a
call fcn.00436420
push eax
lea ecx, [ebp - 0x17c]
call fcn.005c6520
mov ecx, dword [ebp - 0x250]
mov byte [ebp - 4], 6
push dword [ebp - 0x17c]
push str.Open_source_folder
push dword [ebp - 0x244]
call fcn.005c1450
mov ecx, dword [ebp - 0x250]
push 0
push eax
push eax
mov dword [ebp - 0x264], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
mov ecx, dword [ebp - 0x250]
push 0
push dword [ebp - 0x17c]
push 0
push 0x32
push str.Open_restore_location
push dword [ebp - 0x264]
call fcn.005c0400
mov ecx, dword [ebp - 0x250]
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x264]
mov dword [ebp - 0x294], eax
call fcn.005c0400
mov ecx, dword [ebp - 0x23c]
push 0
push edi
push edi
push 0x72
call fcn.00436420
push eax
lea ecx, [ebp - 0x180]
call fcn.005c6520
mov edi, dword [ebp - 0x250]
mov ecx, edi
push 0
mov byte [ebp - 4], 7
push dword [ebp - 0x180]
push 0
push 0x32
push str.Remove_from_the_list
push dword [ebp - 0x264]
call fcn.005c0400
push 0xffffffffffffffff
push 0x10000101
push 0x14
push 0x28a
push 0x19d
push 0x32
push 0
mov ecx, edi
mov dword [ebp - 0x290], eax
call fcn.005c0890
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
mov dword [ebp - 0x29c], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x320
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push 0x102030
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bec70
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push str.Whether_to_skip_copying_files_if_they_already_exist_in_the_destination._r_nThis_setting_is_ignored_for_application_data_files.
push 1
push ecx
mov ecx, dword [ebp - 0x23c]
push 0x15e
push 0x1bd
push 0x64
push str._Restore_only_missing_files_in_the_destination__faster_
call fcn.0045fc60
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push str.Whether_to_skip_copying_files_with_SYSTEM_attributes._r_nThis_setting_is_ignored_for_application_data_files.
push 1
push ecx
mov ecx, dword [ebp - 0x23c]
push 0xbe
push 0x1bd
push 0x1cc
push str._Skip_copying_system_files
mov dword [ebp - 0x2ac], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push str.If_the_source_and_destination_drive_letters_are_the_same__move_the_files_instead_of_copying_them.
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
push 0x15e
push 0x1d6
push 0x64
push str._Move_files_instead_of_copying_them
mov dword [ebp - 0x2b0], eax
call fcn.0045fc60
cmp dword [ebp - 0x288], 0
mov dword [ebp - 0x2b8], eax
jne 0x47b8c9
push 0x40
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push str.Whether_to_skip_copying_files_with_HIDDEN_attributes._r_nThis_setting_is_ignored_for_application_data_files.
push 1
push ecx
mov ecx, dword [ebp - 0x23c]
push 0xbe
push 0x1d6
push 0x1cc
push str._Skip_copying_hidden_files
call fcn.0045fc60
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41600000
push str.Start_restoring_the_selected_items_now.
push 0x22
push 0x96
push 0x1f5
push 0xc8
push 0xcc
push str.Restore_now
mov dword [ebp - 0x2b4], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Select_a_different_root_directory_to_restore_data_from.
push 0x1e
push 0x90
push 0x1f9
push 0x172
push 0x78
push str.Change_source
mov dword [ebp - 0x2a8], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Show_online_help__F1_
push 0x1e
push 0x5a
push 0x1f9
push 0x216
push 0x7d
push str.Help
mov dword [ebp - 0x2a0], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x23c]
mov dword [esp], 0x41500000
push str.Go_back_to_the_Home_page__Esc_
push 0x1e
push 0x5a
push 0x1f9
push 0x284
push 0xb3
push str.Home
mov dword [ebp - 0x2bc], eax
call fcn.0045fd50
mov ecx, dword [ebp - 0x23c]
mov edx, 0x55
mov word [ebp - 0x2a], dx
mov edx, dword [ebp - 0x280]
mov word [ebp - 0x28], dx
mov edx, 0x44
mov word [ebp - 0x24], dx
mov edx, dword [ebp - 0x270]
mov word [ebp - 0x22], dx
mov edx, 0x1b
mov dword [ecx + 0x11c0], eax
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 1
mov word [ebp - 0x1e], dx
mov word [ebp - 0x1c], ax
mov eax, 0x70
mov byte [ebp - 0x1a], 1
mov word [ebp - 0x18], ax
mov ax, word [ecx + 0x11bc]
mov ecx, edi
mov word [ebp - 0x16], ax
lea eax, [ebp - 0x2c]
push 4
push eax
call fcn.005c47a0
movsd xmm0, qword [ebp - 0x2d0]
lea ecx, [ebp - 0x44]
sub esp, 8
movsd qword [esp], xmm0
push dword [ebp - 0x29c]
push dword [ebp - 0x244]
push dword [ebp - 0x254]
push dword [ebp - 0x25c]
push esi
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0047d090
push eax
lea ecx, [ebp - 0x84]
call fcn.005dc1c0
push 0x40
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bd3f0
mov ecx, dword [ebp - 0x23c]
call fcn.0045f300
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x23d], 0
call fcn.005d9bd0
push 0
push 0xffffffffffffffff
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerBackupAndRecovery
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
call fcn.005d6a80
mov ecx, dword [ebp - 0x23c]
push 0
mov byte [ebp - 4], 8
call fcn.004771c0
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x14a8]
mov dword [ebp - 0x24c], eax
cmp eax, 0xfffffffa
je 0x47cfa8
cmp dword [edx + 0x14d8], edi
jne 0x47cf80
mov ecx, dword [ebp - 0x28c]
cmp eax, ecx
jne 0x47bb46
push 4
push ecx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2d8]
push dword [ebp - 0x2d8]
push dword [ebp - 0x25c]
call fcn.005bba40
jmp 0x47cf80
mov ecx, dword [ebp - 0x2d4]
cmp eax, ecx
jne 0x47bb80
push 4
push ecx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2c4]
push dword [ebp - 0x2c4]
push dword [ebp - 0x254]
call fcn.005bba40
jmp 0x47cf80
mov ecx, dword [ebp - 0x2dc]
cmp eax, ecx
jne 0x47bbba
push 4
push ecx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2a4]
push dword [ebp - 0x2a4]
push dword [ebp - 0x244]
call fcn.005bba40
jmp 0x47cf80
cmp eax, 0xffffffd3
jne 0x47bc58
mov ecx, dword [edx + 0x14b4]
cmp ecx, dword [ebp - 0x254]
jne 0x47bc6d
push ecx
mov ecx, edi
call fcn.005c5730
mov ecx, eax
mov dword [ebp - 0x24c], ecx
test ecx, ecx
je 0x47cf80
mov eax, dword [ebp - 0x23c]
mov eax, dword [eax + 0x14b8]
mov dword [ebp - 0x248], eax
test eax, eax
js 0x47cf80
push 0xf000
push eax
push 0x102c
push ecx
mov dword [ebp - 0x124], 0xf003
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
not eax
and eax, 1
inc eax
shl eax, 0xc
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x248]
push 0x102b
push dword [ebp - 0x24c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x47cf80
mov ecx, dword [ebp - 0x244]
cmp eax, 0xffffffea
jne 0x47bc73
cmp dword [edx + 0x14b4], ecx
je 0x47bc7f
jmp 0x47bc73
mov ecx, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x274]
jne 0x47bd2a
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
mov ecx, dword [ebp - 0x250]
mov edi, eax
sar edi, 0x1f
and edi, 0x20
add edi, 0x20
push edi
push dword [ebp - 0x264]
call fcn.005bd3f0
mov ecx, dword [ebp - 0x250]
push edi
push dword [ebp - 0x294]
call fcn.005bd3f0
push edi
push dword [ebp - 0x290]
mov edi, dword [ebp - 0x250]
mov ecx, edi
call fcn.005bd3f0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x24c], eax
jne 0x47bd12
lea ecx, [ebp - 0x16c]
push ecx
push eax
mov ecx, edi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 0x160]
mov ecx, edi
push dword [ebp - 0x164]
push 8
push dword [ebp - 0x264]
call fcn.005bbfd0
jmp 0x47cf80
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x264]
mov ecx, edi
call fcn.005bbfd0
jmp 0x47cf80
cmp eax, 0xffffffd3
je 0x47bd38
cmp eax, 0xffffffd2
jne 0x47bf4a
mov esi, dword [ebp - 0x25c]
cmp dword [edx + 0x14b4], esi
mov esi, dword [ebp - 0x170]
jne 0x47bf4a
push 2
push 0xffffffffffffffff
push dword [ebp - 0x25c]
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x24c], eax
test eax, eax
jns 0x47bd93
push 0x40
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bd3f0
push 0
push 0x62439c
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bcd30
jmp 0x47cf80
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa8]
movq qword [ebp - 0xa8], xmm0
call fcn.005dc5e0
push 0
push 0
push dword [ebp - 0x24c]
mov byte [ebp - 4], 9
xorps xmm0, xmm0
push dword [ebp - 0x25c]
mov ecx, edi
movq qword [ebp - 0x90], xmm0
mov dword [ebp - 0x88], 0
call fcn.005bb510
push eax
lea ecx, [ebp - 0x90]
call fcn.005dc570
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xa
call fcn.005dc190
lea edx, [ebp - 0xa8]
mov ecx, eax
call fcn.0059ce20
push 0
push 1
push dword [ebp - 0x24c]
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
push dword [ebp - 0x25c]
mov ecx, edi
movq qword [ebp - 0xc0], xmm0
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc0]
call fcn.005dc570
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
push 1
movq qword [ebp - 0xb4], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0xb4]
call fcn.005dc570
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xc
call fcn.005dc190
push eax
lea ecx, [ebp - 0x90]
call fcn.005dc190
mov edx, esi
mov ecx, eax
call fcn.0059de70
test eax, eax
jns 0x47bed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__create_
lea ecx, [ebp - 0x90]
call fcn.005dc190
push eax
push 0x627824
lea ecx, [ebp - 0xb4]
call fcn.005da780
push 0
lea ecx, [ebp - 0xb4]
call fcn.005dc190
push eax
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bcd30
push 2
lea ecx, [ebp - 0xc0]
call fcn.005dc190
push eax
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bcd30
push 0x20
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bd3f0
lea ecx, [ebp - 0xb4]
call fcn.005dc430
lea ecx, [ebp - 0xc0]
call fcn.005dc430
lea ecx, [ebp - 0x90]
call fcn.005dc430
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
cmp eax, 0xffffffbf
jne 0x47bfd4
mov esi, dword [ebp - 0x260]
cmp dword [edx + 0x14b4], esi
mov esi, dword [ebp - 0x170]
jne 0x47c0b7
push 2
push 0xffffffffffffffff
push dword [ebp - 0x25c]
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x248], eax
cmp eax, 0xffffffff
je 0x47cf80
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc3a0
test eax, eax
je 0x47cf80
push 1
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push dword [ebp - 0x248]
mov ecx, edi
push dword [ebp - 0x25c]
call fcn.005ba4f0
jmp 0x47cf80
cmp eax, 0xffffffd3
je 0x47bfe2
cmp eax, 0xffffffd2
jne 0x47c0b7
cmp dword [edx + 0x14b4], ecx
jne 0x47c0b7
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x24c], eax
test eax, eax
jns 0x47c03e
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x248], eax
cmp eax, dword [ebp - 0x274]
jge 0x47cf80
mov esi, eax
nop
push 0x40
push esi
mov ecx, edi
call fcn.005bd3f0
inc esi
cmp esi, dword [ebp - 0x274]
jl 0x47c020
mov esi, dword [ebp - 0x170]
jmp 0x47cf80
push 0x20
push dword [ebp - 0x284]
mov ecx, edi
call fcn.005bd3f0
mov ecx, dword [ebp - 0x24c]
mov eax, 0x20
test ecx, ecx
mov edx, edi
mov ecx, 0x40
cmovle eax, ecx
mov ecx, edx
push eax
mov eax, dword [ebp - 0x280]
push eax
call fcn.005bd3f0
push 0
push 0
push 0x1004
push dword [ebp - 0x27c]
call dword [sym.imp.USER32.dll_SendMessageW]
dec eax
mov ecx, edi
cmp dword [ebp - 0x24c], eax
jge 0x47c0a5
push 0x20
push dword [ebp - 0x270]
call fcn.005bd3f0
jmp 0x47cf80
push 0x40
push dword [ebp - 0x270]
call fcn.005bd3f0
jmp 0x47cf80
cmp eax, 0xfffffffb
jne 0x47c0c4
cmp dword [edx + 0x14b4], ecx
je 0x47c0d0
cmp eax, dword [ebp - 0x298]
jne 0x47c4b6
sub esp, 8
mov dword [ebp - 0x58], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x60], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624284
call fcn.005dc190
push eax
lea ecx, [ebp - 0x60]
call fcn.005dc520
mov eax, dword [ebp - 0x298]
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x24c], eax
jne 0x47c2a7
push dword [ebp - 0x278]
lea ecx, [ebp - 0x60]
call fcn.005dc190
push eax
push 1
push ecx
lea ecx, [ebp - 0x38]
call fcn.005dc400
mov edx, str.Select_additional_folder_to_backup
mov ecx, eax
call fcn.005e1b00
lea ecx, [ebp - 0x60]
test al, al
jne 0x47c159
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
call fcn.005dc3a0
push eax
push 1
push 1
push 0
lea ecx, [ebp - 0x60]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005daa70
test eax, eax
jne 0x47c1ac
mov ecx, dword [ebp - 0x23c]
sub esp, 8
push 0x8c
push 0x190
push eax
push eax
push 4
push str.You_need_to_select_a_sub_directory_of_the_of_the_sources_root._Please_select_a_sub_folder.
call fcn.0043e2e0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
push dword [ebp - 0x244]
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0047aa70
test al, al
je 0x47c1fe
mov ecx, dword [ebp - 0x23c]
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
push 4
push str.The_folder_you_selected_is_already_marked_for_backup.
call fcn.0043e2e0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
push 0
push dword [ebp - 0x244]
lea ecx, [ebp - 0x38]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.005dc190
push eax
mov ecx, edi
call fcn.005bbb80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x60]
mov edi, eax
call fcn.005dc3a0
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc160
mov ecx, dword [ebp - 0x26c]
push eax
sub esp, 8
call fcn.0057c4e0
add esp, 4
lea ecx, [ebp - 0x54]
push eax
call fcn.005dc200
push 1
lea ecx, [ebp - 0x54]
call fcn.005dc190
mov ecx, dword [ebp - 0x250]
push eax
push edi
push dword [ebp - 0x244]
call fcn.005ba4f0
push ecx
push 0
push edi
mov edi, dword [ebp - 0x250]
mov ecx, edi
push 1
push dword [ebp - 0x244]
call fcn.005bba40
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
mov ecx, edi
call fcn.005c57d0
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
xorps xmm0, xmm0
lea ecx, [ebp - 0x38]
push 1
push 0x62781c
movups xmmword [ebp - 0xe4], xmm0
movq qword [ebp - 0xd4], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0xe4]
call fcn.005d92a0
sub esp, 8
mov byte [ebp - 4], 0xe
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0x60]
movq qword [ebp - 0xcc], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6cee3c
call fcn.005dc190
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc520
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x248], 0
call fcn.005d9210
test eax, eax
je 0x47c48f
mov esi, dword [ebp - 0x248]
push esi
lea ecx, [ebp - 0xe4]
call fcn.005d9220
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc510
lea ecx, [ebp - 0x60]
call fcn.005dc3a0
push eax
push 1
push 1
push 0
lea ecx, [ebp - 0x60]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005daa70
test eax, eax
je 0x47c475
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, eax
call fcn.005e1200
test al, al
je 0x47c475
push dword [ebp - 0x244]
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0047aa70
test al, al
jne 0x47c475
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc4a0
test al, al
jne 0x47c475
push 0
push dword [ebp - 0x244]
lea ecx, [ebp - 0x38]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.005dc190
push eax
mov ecx, edi
call fcn.005bbb80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x60]
mov edi, eax
call fcn.005dc3a0
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc160
mov ecx, dword [ebp - 0x26c]
push eax
sub esp, 8
call fcn.0057c4e0
add esp, 4
lea ecx, [ebp - 0x54]
push eax
call fcn.005dc200
push 1
lea ecx, [ebp - 0x54]
call fcn.005dc190
mov ecx, dword [ebp - 0x250]
push eax
push edi
push dword [ebp - 0x244]
call fcn.005ba4f0
push ecx
push 0
push edi
mov edi, dword [ebp - 0x250]
mov ecx, edi
push 1
push dword [ebp - 0x244]
call fcn.005bba40
lea ecx, [ebp - 0xe4]
inc esi
call fcn.005d9210
cmp esi, eax
jb 0x47c350
mov esi, dword [ebp - 0x170]
lea ecx, [ebp - 0xcc]
call fcn.005dc430
lea ecx, [ebp - 0xe4]
call fcn.005d9280
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
cmp eax, dword [ebp - 0x284]
jne 0x47c59d
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x248], eax
test eax, eax
js 0x47cf80
sub esp, 8
mov ecx, dword [ebp - 0x26c]
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
movq qword [ebp - 0x9c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624284
sub esp, 8
call fcn.0057c4e0
add esp, 4
lea ecx, [ebp - 0x9c]
push eax
call fcn.005dc520
push dword [ebp - 0x278]
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x10
call fcn.005dc190
push eax
push 1
push ecx
lea ecx, [ebp - 0x38]
call fcn.005dc400
mov edx, str.Select_the_new_destination_folder
mov ecx, eax
call fcn.005e1b00
test al, al
jne 0x47c56b
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
push 1
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push dword [ebp - 0x248]
mov ecx, edi
push dword [ebp - 0x244]
call fcn.005ba4f0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
cmp eax, dword [ebp - 0x280]
jne 0x47c5d0
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
mov edx, eax
cmp edx, 1
jl 0x47cf80
mov ecx, dword [ebp - 0x27c]
lea eax, [edx - 1]
push eax
call fcn.005c8fe0
jmp 0x47cf80
cmp eax, dword [ebp - 0x270]
jne 0x47c634
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
push 0
push 0
push 0x1004
push dword [ebp - 0x244]
mov ecx, edi
mov dword [ebp - 0x248], eax
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x248]
test ecx, ecx
js 0x47cf80
dec eax
cmp ecx, eax
jge 0x47cf80
lea eax, [ecx + 1]
mov edx, ecx
mov ecx, dword [ebp - 0x27c]
push eax
call fcn.005c8fe0
jmp 0x47cf80
cmp eax, dword [ebp - 0x264]
je 0x47cf33
cmp eax, dword [ebp - 0x294]
je 0x47cf33
cmp eax, dword [ebp - 0x290]
jne 0x47c753
push 2
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x248], eax
cmp eax, 0xffffffff
je 0x47cf80
push 0
push eax
push dword [ebp - 0x244]
mov ecx, edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
sub esp, 8
mov dword [ebp - 0x70], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x78], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.BackupInfo.uvkbk
call fcn.005dc190
push eax
lea ecx, [ebp - 0x78]
call fcn.005dc520
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47c6fb
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.BackupInfo.pcdbk
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x78]
call fcn.005dc200
lea ecx, [ebp - 0x78]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47c72d
lea ecx, [ebp - 0x78]
call fcn.005dc190
push eax
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTExtraFolders2
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0
push dword [ebp - 0x248]
mov ecx, edi
push dword [ebp - 0x244]
call fcn.005bb970
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 8
call fcn.005dc430
jmp 0x47cf80
cmp eax, dword [ebp - 0x2a8]
jne 0x47cd8f
mov eax, dword [ebp - 0x28c]
lea ecx, [ebp - 0xec]
push 0xd
push 0
push dword [ebp - 0x2a0]
xorps xmm0, xmm0
push eax
push edi
movups xmmword [ebp - 0xec], xmm0
movups xmmword [ebp - 0xdc], xmm0
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x6c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.BackupInfo.pcdbk
call fcn.005dc190
push eax
lea ecx, [ebp - 0x6c]
call fcn.005dc520
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x13
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47c800
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.BackupInfo.uvkbk
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x6c]
call fcn.005dc200
push dword [ebp - 0x25c]
xorps xmm0, xmm0
mov ecx, edi
movlpd qword [ebp - 0x178], xmm0
call fcn.005bb7f0
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], 0
push 0x38
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x14
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x6c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x130]
call fcn.005dd680
push str.RTBackupUsers
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x15
call fcn.005dcb70
mov eax, dword [ebp - 0x178]
test eax, eax
je 0x47c926
cmp dword [eax], 1
mov dword [ebp - 0x24c], 1
jl 0x47c926
mov esi, dword [ebp - 0x178]
mov eax, 4
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x258], eax
nop
push 0
push dword [eax + esi]
mov ecx, edi
push dword [ebp - 0x25c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
mov eax, dword [ebp - 0x258]
mov ecx, edi
push 1
push dword [eax + esi]
push dword [ebp - 0x25c]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x54]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTBackupUsers
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x54]
call fcn.005db130
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x248]
inc ecx
add dword [ebp - 0x258], 4
add eax, 4
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x248], eax
cmp ecx, dword [esi]
jle 0x47c8a0
mov esi, dword [ebp - 0x170]
push dword [ebp - 0x254]
mov ecx, edi
call fcn.005bb7f0
mov ecx, eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x24c], ecx
test eax, eax
je 0x47c954
push eax
call fcn.0041e1c3
mov ecx, dword [ebp - 0x24c]
add esp, 4
mov edx, dword [ecx]
xor eax, eax
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x248], 1
cmp edx, 1
jl 0x47c9cb
mov esi, dword [ebp - 0x248]
mov edi, eax
nop word [eax + eax]
mov edx, dword [ecx + esi*4]
mov ecx, 2
call fcn.00404860
call fcn.005e9c20
mov ecx, dword [ebp - 0x24c]
inc esi
or edi, eax
cmp esi, dword [ebp - 0x268]
jle 0x47c990
mov esi, dword [ebp - 0x170]
mov dword [ebp - 0x258], edi
mov edi, dword [ebp - 0x250]
mov eax, dword [ebp - 0x258]
push str.RTUserFolders
push str.Settings
lea ecx, [ebp - 0x130]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.005db290
mov ecx, eax
call fcn.005db130
push 4
push dword [ebp - 0x2ac]
mov ecx, edi
call fcn.005bc500
test eax, eax
mov ecx, 0x62fdc4
mov eax, 0x62796c
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x54]
call fcn.005dc510
push str.RTBackupOptions
push str.Settings
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x54]
call fcn.005db130
push str.RTExtraFolders2
lea ecx, [ebp - 0x130]
call fcn.005dcb70
push dword [ebp - 0x244]
mov ecx, edi
call fcn.005bb7f0
push dword [ebp - 0x24c]
mov dword [ebp - 0x258], eax
call fcn.0041e1c3
mov eax, dword [ebp - 0x258]
add esp, 4
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], 0xffffffff
test eax, eax
je 0x47cb45
cmp dword [eax], 1
mov dword [ebp - 0x268], 1
jl 0x47cb45
mov esi, dword [ebp - 0x268]
push 0
push dword [eax + esi*4]
mov ecx, edi
push dword [ebp - 0x244]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
lea ecx, [ebp - 0x44]
call fcn.005dc3a0
push eax
push 1
push 1
push 0
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005daa70
test eax, eax
je 0x47cb30
lea ecx, [ebp - 0x44]
call fcn.005dc3a0
inc eax
lea ecx, [ebp - 0x38]
push eax
call fcn.005dad50
lea ecx, [ebp - 0x38]
call fcn.005dc3a0
cmp eax, 1
jl 0x47cb30
mov eax, dword [ebp - 0x258]
mov ecx, edi
push 1
push dword [eax + esi*4]
push dword [ebp - 0x244]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x54]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTExtraFolders2
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x54]
call fcn.005db130
mov eax, dword [ebp - 0x258]
inc esi
cmp esi, dword [eax]
jle 0x47ca94
mov esi, dword [ebp - 0x170]
lea ecx, [ebp - 0x238]
call fcn.00402c20
movsd xmm0, qword [ebp - 0x2d0]
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x224], 2
movsd qword [ebp - 0x220], xmm0
test eax, eax
je 0x47cb99
push eax
call fcn.0041e1c3
add esp, 4
push 0x200000
call fcn.0041e7cf
add esp, 4
mov dword [ebp - 0x1cc], eax
mov ecx, edi
mov dword [ebp - 0x1c8], 0x200000
push 4
push dword [ebp - 0x2b0]
call fcn.005bc500
mov ecx, dword [ebp - 0x250]
neg eax
push 4
push dword [ebp - 0x2b4]
sbb edi, edi
and edi, 4
call fcn.005bc500
neg eax
lea ecx, [ebp - 0x54]
push str.SkipAttributes
sbb eax, eax
and eax, 2
or edi, eax
lea eax, [ebp - 0x130]
push str.Settings
push eax
push edi
call fcn.005db290
mov ecx, eax
call fcn.005db130
cmp dword [ebp - 0x288], 0
mov dword [ebp - 0x22c], edi
mov edi, dword [ebp - 0x250]
jle 0x47cc38
push 4
push dword [ebp - 0x2b8]
mov ecx, edi
call fcn.005bc500
mov byte [ebp - 0x184], 1
test eax, eax
jne 0x47cc3f
mov byte [ebp - 0x184], 0
push ecx
push 0
push 0
lea ecx, [ebp - 0x130]
call fcn.005dca80
mov ecx, dword [ebp - 0x23c]
lea eax, [ebp - 0x238]
push 1
push eax
call fcn.00481fd0
mov dword [ebp - 0x248], eax
cmp eax, 0xffffffff
je 0x47cd00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x44]
call fcn.005dc190
cmp dword [ebp - 0x248], 0
mov ecx, str.Successfully_restored
push eax
mov eax, str.Failed_to_restore
cmovne eax, ecx
lea ecx, [ebp - 0x38]
push str._user_data_from__
push eax
call fcn.005dc200
push 0
push 0
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0045a700
sub esp, 8
lea ecx, [ebp - 0x38]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0043e2e0
cmp dword [ebp - 0x248], 2
je 0x47d03b
lea ecx, [ebp - 0x19c]
call fcn.005d9280
mov eax, dword [ebp - 0x1a4]
cmp eax, 0xffffffff
je 0x47cd21
test eax, eax
je 0x47cd21
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1bc]
call fcn.005d9280
mov eax, dword [ebp - 0x1c4]
cmp eax, 0xffffffff
je 0x47cd42
test eax, eax
je 0x47cd42
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1cc]
test eax, eax
je 0x47cd55
push eax
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x130]
call fcn.005dd5d0
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x47cd73
push eax
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x6c]
call fcn.005dc430
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 8
call fcn.005b8790
jmp 0x47cf80
cmp eax, dword [ebp - 0x2a0]
jne 0x47cf00
push dword [ebp - 0x278]
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
push 1
push ecx
lea ecx, [ebp - 0x38]
call fcn.005dc400
mov edx, str.Select_root_directory_to_restore_from
mov ecx, eax
call fcn.005e1b00
test al, al
je 0x47cf80
push ecx
mov ecx, dword [ebp - 0x26c]
call fcn.0057c4e0
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc4c0
test al, al
je 0x47ce40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Please_select_a_valid_source_such_as_D:_or_C:Windows.old.
push str.._The_source_and_destination_locations_are_the_same._r_n_r_n
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.Error:_You_can_not_restore_from
lea ecx, [ebp - 0x38]
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0x38]
push 0x8c
push 0x190
push 0xc8
push edi
push 0
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0043e2e0
jmp 0x47cf80
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc4e0
push 0
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
push 1
push str.LastSourceRoot
lea ecx, [ebp - 0x48]
call fcn.005d5f20
mov ecx, 3
call fcn.0059e240
mov dword [ebp - 0x248], eax
test esi, esi
je 0x47ce88
push ecx
mov ecx, esi
call fcn.00402a20
mov eax, dword [ebp - 0x248]
mov esi, eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x170], esi
call fcn.005dc190
push eax
call fcn.0047abe0
sub esp, 8
movsd qword [ebp - 0x2d0], xmm0
lea ecx, [ebp - 0x44]
movsd qword [esp], xmm0
push dword [ebp - 0x29c]
push dword [ebp - 0x244]
push dword [ebp - 0x254]
push dword [ebp - 0x25c]
push dword [ebp - 0x248]
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0047d090
push eax
lea ecx, [ebp - 0x84]
call fcn.005dc1c0
push 0x40
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bd3f0
jmp 0x47cf80
cmp eax, dword [ebp - 0x2bc]
jne 0x47cf21
mov ecx, dword [ebp - 0x2c0]
call fcn.005dc190
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.0045f100
jmp 0x47cf80
cmp eax, dword [edx + 0x11c0]
jne 0x47cf80
mov al, 1
mov byte [ebp - 0x23d], al
jmp 0x47cfae
xor edx, edx
cmp eax, dword [ebp - 0x264]
push 2
push 0xffffffffffffffff
setne dl
push ecx
mov ecx, edi
mov dword [ebp - 0x268], edx
call fcn.005bb4c0
cmp eax, 0xffffffff
je 0x47cf80
push dword [ebp - 0x268]
mov ecx, edi
push eax
push dword [ebp - 0x244]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
call fcn.0043bf00
mov ecx, dword [ebp - 0x23c]
push 0
call fcn.004771c0
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x14a8]
mov dword [ebp - 0x24c], eax
cmp eax, 0xfffffffa
jne 0x47bb00
mov al, byte [ebp - 0x23d]
mov ecx, dword [ebp - 0x23c]
xor al, 1
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0x48]
call fcn.005d69e0
lea ecx, [ebp - 0x180]
call fcn.005c6500
lea ecx, [ebp - 0x17c]
call fcn.005c6500
test esi, esi
je 0x47cfe9
push ecx
mov ecx, esi
call fcn.00402a20
lea ecx, [ebp - 0x84]
call fcn.005dc430
lea ecx, [ebp - 0xf8]
call fcn.005dc430
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
mov al, byte [ebp - 0x23d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x238]
mov byte [ebp - 0x23d], 0
call fcn.00402d30
lea ecx, [ebp - 0x130]
call fcn.005dd5d0
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x47d06b
push eax
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x6c]
call fcn.005dc430
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 8
call fcn.005b8790
jmp 0x47cfa8