Function at 0x47da00
Capabilities:
Check if file exists
Get graphical window text

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f0956
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2c0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x24c], eax
lea esi, [eax + 0x1460]
mov dword [ebp - 0x58], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x60]
push esi
movq qword [ebp - 0x60], xmm0
call fcn.005dc5b0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x90]
movq qword [ebp - 0x90], xmm0
call fcn.005dc5e0
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.005dc400
lea ecx, [ebp - 0x60]
call fcn.005dbeb0
test al, al
je 0x47dadf
mov byte [ebp - 0x24d], 0
jmp 0x47f680
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
push 1
lea ecx, [ebp - 0x60]
movq qword [ebp - 0x6c], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x6c]
call fcn.005dc570
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0xcc]
movq qword [ebp - 0xcc], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x78]
movq qword [ebp - 0x78], xmm0
call fcn.005dc5e0
push 0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 6
call fcn.005dbed0
push 1
push 1
lea ecx, [ebp - 0x6c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc260
mov ecx, eax
call fcn.005dbf40
push 0x38
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x60]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x104]
call fcn.005dd680
push ecx
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 7
call fcn.005dd5c0
mov esi, dword [ebp - 0x24c]
mov ecx, esi
push 0
push str.Restore_a_Backup
call fcn.0045f680
mov ecx, esi
mov dword [ebp - 0x298], eax
call fcn.0043e530
test al, al
jne 0x47dbcc
mov byte [ebp - 0x24d], al
jmp 0x47f65a
push str.Backup_And_Recovery
lea ecx, [esi + 0x1448]
call fcn.005dc510
mov edi, dword [esi + 0x14e4]
mov ecx, dword [esi + 0x100]
mov dword [ebp - 0x278], edi
call fcn.005d2f10
push ecx
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xd2
push 0x190
push 5
mov edx, 5
mov dword [ebp - 0x258], eax
mov ecx, eax
call fcn.005d22b0
push ecx
mov ecx, dword [ebp - 0x258]
mov edx, 0x19a
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xd2
push 0x14f
push 5
call fcn.005d22b0
push ecx
mov ecx, dword [ebp - 0x258]
mov edx, 5
push 4
push 0xffffffffffffffff
push 0xff000000
push 0xb4
push 0x2e4
push 0xdc
call fcn.005d22b0
push ecx
mov ecx, dword [ebp - 0x258]
mov edx, 5
push 4
push 0xffffffffffffffff
push 0xff000000
push 0x8c
push 0x2e4
push 0x195
call fcn.005d22b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x258]
mov ecx, edi
call fcn.005c44c0
mov ecx, dword [ebp - 0x258]
test ecx, ecx
je 0x47dcb4
mov eax, dword [ecx]
push 1
call dword [eax]
push 1
push str.https:__www.carifred.com_uvk_help_backup_and_recovery.phprestore
lea ecx, [esi + 0x119c]
call fcn.005dc260
push 0x203040
mov ecx, edi
call fcn.005c44a0
push 0xffffff
call fcn.005c44b0
movsd xmm1, qword [0x6edaf8]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xdc
push 0xf
push 0xf
push str.Select_the_user_accounts_to_restore:
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
push 0x78
push 0xf
push 0x10e
push str._Check_all_none
mov ecx, esi
call fcn.0045fc60
push 0x10024
push 0x1080000d
push 0x8c
push 0x17c
push 0x23
push 0xf
push 0x627824
push str.Original_user_account_nRestore_to_account
mov ecx, edi
mov dword [ebp - 0x2a0], eax
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x260], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x96
push 0xbc
push 0xf
push str.Set_destination_account:
mov ecx, edi
call fcn.005c0890
sub esp, 8
mov ecx, edi
push 0x10000043
push 0x19
push 0xe1
push 0xb6
push 0xaa
push 0
call fcn.005c1650
movsd xmm0, qword [esi + 8]
comisd xmm0, xmmword [0x6edb10]
mov dword [ebp - 0x26c], eax
jbe 0x47ddf6
push 0x800
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bda80
mov eax, dword [ebp - 0x26c]
push 0x40
push eax
mov ecx, edi
call fcn.005bd3f0
push 0x47
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [ebp - 0x24c]
mov esi, eax
push 0
push esi
push esi
push 0x9a
call fcn.00436420
push eax
lea ecx, [ebp - 0x188]
call fcn.005c6520
mov byte [ebp - 4], 8
mov ecx, edi
push dword [ebp - 0x188]
push str.Open_backup_folder
push dword [ebp - 0x260]
call fcn.005c1450
push 0
push eax
push eax
mov ecx, edi
mov dword [ebp - 0x290], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
mov ecx, dword [ebp - 0x24c]
push 0
push esi
push esi
push 0x72
call fcn.00436420
push eax
lea ecx, [ebp - 0x18c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 9
mov ecx, edi
push dword [ebp - 0x18c]
push 0
push 0x32
push str.Delete_from_backup
push dword [ebp - 0x290]
call fcn.005c0400
mov ecx, 3
mov dword [ebp - 0x2a8], eax
call fcn.0059e240
mov esi, eax
mov dword [ebp - 0x17c], esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xbe
push 0xf
push 0x1a4
push str.User_folders_to_restore:
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
mov ecx, dword [ebp - 0x24c]
push 0x78
push 0xf
push 0x267
push str._Check_all_none
call fcn.0045fc60
mov dword [ebp - 0x2bc], eax
push 0x24
push 0x10804008
push 0xad
push 0x13b
push 0x23
push 0x1a4
push 0
push 0
mov ecx, edi
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x268], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push dword [ebp - 0x268]
mov ecx, edi
call fcn.005c5730
movaps xmm0, xmmword [0x6edca0]
push 0
push 4
push 0x108e
push eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x12c], 0x28
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x124], 3
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 2
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x12c]
push eax
push 0
push 0x10a2
push dword [ebp - 0x25c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x24c]
movsd xmm0, qword [0x6edab0]
comisd xmm0, xmmword [eax + 8]
jbe 0x47e001
push ecx
push dword [ebp - 0x25c]
mov ecx, edi
push 1
push 0x590010
call fcn.005b8c90
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.Application_data
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x62e520
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c04
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.Downloads
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c2c
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x699c38
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push 0x6cdcc4
call fcn.005bbb80
push 0
push dword [ebp - 0x268]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3e8
push 0
push str.All_other_folders
call fcn.005bbb80
push ecx
push 0xffffffffffffffff
push 0
push 1
push dword [ebp - 0x268]
mov ecx, edi
call fcn.005bba40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xb4
push 0xee
push 0xf
push str.Additional_folders_to_restore:
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push 0
push 1
push ecx
mov ecx, dword [ebp - 0x24c]
push 0x78
push 0xee
push 0x10e
push str._Check_all_none
call fcn.0045fc60
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Change_the_path_where_the_selected_folder_will_be_restored_to.
push 0x1c
push 0x96
push 0xe6
push 0x1b6
push 0x8b
push str.Edit_destination
mov dword [ebp - 0x2c4], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Move_the_highlighted_folder_UP_in_the_list__CtrlU_.
push 0x1c
push 0x20
push 0xe6
push 0x260
push 0x88
push 0
mov dword [ebp - 0x28c], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Move_the_highlighted_folder_DOWN_in_the_list__CtrlD_.
push 0x1c
push 0x20
push 0xe6
push 0x28a
push 0x87
push 0
mov dword [ebp - 0x288], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Show_the_lists_context_menu.
push 0x1c
push 0x20
push 0xe6
push 0x2be
push 0x86
push 0
mov dword [ebp - 0x27c], eax
call fcn.0045fd50
push 0x10024
push 0x1080000d
push 0x80
push 0x2d0
push 0x109
push 0xf
push 0x627824
mov dword [ebp - 0x280], eax
push str.Original_location__before_backup__nRestore_to_location
mov ecx, edi
call fcn.005c0620
movsd xmm0, qword [0x6edaf8]
sub esp, 0xc
mov dword [ebp - 0x264], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push dword [ebp - 0x264]
mov ecx, edi
call fcn.005c5730
push dword [ebp - 0x188]
mov ecx, edi
mov dword [ebp - 0x284], eax
push str.Open_backup_folder
push dword [ebp - 0x264]
call fcn.005c1450
push 0
push eax
push eax
mov ecx, edi
mov dword [ebp - 0x274], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push 0
push dword [ebp - 0x188]
mov ecx, edi
push 0
push 0x32
push str.Open_restore_location
push dword [ebp - 0x274]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x274]
mov ecx, edi
mov dword [ebp - 0x2ac], eax
call fcn.005c0400
push 0
push dword [ebp - 0x18c]
mov ecx, edi
push 0
push 0x32
push str.Delete_from_backup
push dword [ebp - 0x274]
call fcn.005c0400
push 0xffffffffffffffff
push 0x10000101
push 0x14
push 0x28a
push 0x1a4
push 0x32
push 0
mov ecx, edi
mov dword [ebp - 0x2a4], eax
call fcn.005c0890
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
mov dword [ebp - 0x294], eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x320
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push 0x102030
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bec70
push 0xffffffffffffffff
push 0xff3020
push 0
push edi
push str.Whether_to_skip_copying_files_if_they_already_exist_in_the_destination._r_nThis_setting_is_ignored_for_application_data_files.
push 1
push ecx
mov ecx, dword [ebp - 0x24c]
push 0x15e
push 0x1d1
push 0xe6
push str._Restore_only_missing_files_in_the_destination__faster_
call fcn.0045fc60
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41600000
push str.Start_restoring_the_selected_items_now.
push 0x22
push 0x96
push 0x1f5
push 0xd6
push 0xcc
push str.Restore_now
mov dword [ebp - 0x2b4], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Load_backup_information_from_an_existing_backup_file.
push 0x1e
push 0x82
push 0x1f9
push 0x180
push 0x78
push str.Load_backup
mov dword [ebp - 0x2cc], eax
call fcn.0045fd50
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
mov dword [esp], 0x41500000
push str.Show_online_help__F1_
push 0x1e
push 0x5a
push 0x1f9
push 0x216
push 0x7d
push str.Help
mov dword [ebp - 0x29c], eax
call fcn.0045fd50
mov ecx, dword [ebp - 0x24c]
push 0
push ecx
mov dword [esp], 0x41500000
push str.Go_back_to_the_Home_page__Esc_
push 0x1e
push 0x5a
push 0x1f9
push 0x284
push 0xb3
push str.Home
mov dword [ecx + 0x11bc], eax
call fcn.0045fd50
mov ecx, dword [ebp - 0x24c]
mov edx, 0x55
mov word [ebp - 0x2a], dx
mov edx, dword [ebp - 0x288]
mov word [ebp - 0x28], dx
mov edx, 0x44
mov word [ebp - 0x24], dx
mov edx, dword [ebp - 0x27c]
mov dword [ecx + 0x11c0], eax
mov word [ebp - 0x22], dx
mov edx, 0x1b
mov word [ebp - 0x1c], ax
mov eax, 0x70
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 1
mov word [ebp - 0x1e], dx
mov byte [ebp - 0x1a], 1
mov word [ebp - 0x18], ax
mov ax, word [ecx + 0x11bc]
mov ecx, edi
mov word [ebp - 0x16], ax
lea eax, [ebp - 0x2c]
push 4
push eax
call fcn.005c47a0
push dword [ebp - 0x294]
mov ecx, dword [ebp - 0x24c]
lea eax, [ebp - 0x104]
push dword [ebp - 0x264]
push dword [ebp - 0x268]
push dword [ebp - 0x260]
push esi
push eax
call fcn.0047f950
push eax
lea ecx, [ebp - 0x78]
call fcn.005dc1c0
mov ecx, dword [ebp - 0x24c]
call fcn.0045f300
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x24d], 0
call fcn.005d9bd0
push 0
push 0xffffffffffffffff
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerBackupAndRecovery
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
call fcn.005d6a80
mov ecx, dword [ebp - 0x24c]
push 0
mov byte [ebp - 4], 0xb
call fcn.004771c0
mov eax, dword [ebp - 0x24c]
add eax, 0x14a8
mov dword [ebp - 0x2b0], eax
mov eax, dword [eax]
mov dword [ebp - 0x254], eax
cmp eax, 0xfffffffa
je 0x47f619
nop word [eax + eax]
mov ecx, dword [ebp - 0x24c]
cmp dword [ecx + 0x14d8], edi
jne 0x47f920
mov edx, dword [ebp - 0x2a0]
cmp eax, edx
jne 0x47e5ec
push 4
push edx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2b8]
push dword [ebp - 0x2b8]
push dword [ebp - 0x260]
call fcn.005bba40
jmp 0x47f91a
mov edx, dword [ebp - 0x2bc]
cmp eax, edx
jne 0x47e626
push 4
push edx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2c0]
push dword [ebp - 0x2c0]
push dword [ebp - 0x268]
call fcn.005bba40
jmp 0x47f91a
mov edx, dword [ebp - 0x2c4]
cmp eax, edx
jne 0x47e660
push 4
push edx
mov ecx, edi
call fcn.005bc500
push ecx
push 0xffffffffffffffff
test eax, eax
mov ecx, edi
push 0
setne byte [ebp - 0x2c8]
push dword [ebp - 0x2c8]
push dword [ebp - 0x264]
call fcn.005bba40
jmp 0x47f91a
cmp eax, 0xffffffea
jne 0x47e6d8
mov edx, dword [ebp - 0x260]
cmp dword [ecx + 0x14b4], edx
jne 0x47e6c8
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov ecx, dword [ebp - 0x278]
mov edi, eax
sar edi, 0x1f
and edi, 0x20
add edi, 0x20
push edi
push dword [ebp - 0x290]
call fcn.005bd3f0
push edi
push dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x278]
mov ecx, edi
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x290]
mov ecx, edi
call fcn.005bbfd0
jmp 0x47f91a
mov edx, dword [ebp - 0x264]
cmp dword [ecx + 0x14b4], edx
je 0x47e6ea
jmp 0x47e6de
mov edx, dword [ebp - 0x264]
cmp eax, dword [ebp - 0x280]
jne 0x47e795
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov ecx, dword [ebp - 0x278]
mov edi, eax
sar edi, 0x1f
and edi, 0x20
add edi, 0x20
push edi
push dword [ebp - 0x274]
call fcn.005bd3f0
mov ecx, dword [ebp - 0x278]
push edi
push dword [ebp - 0x2ac]
call fcn.005bd3f0
push edi
push dword [ebp - 0x2a4]
mov edi, dword [ebp - 0x278]
mov ecx, edi
call fcn.005bd3f0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x254], eax
jne 0x47e77d
lea ecx, [ebp - 0x13c]
push ecx
push eax
mov ecx, edi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 0x130]
mov ecx, edi
push dword [ebp - 0x134]
push 8
push dword [ebp - 0x274]
call fcn.005bbfd0
jmp 0x47f91a
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x274]
mov ecx, edi
call fcn.005bbfd0
jmp 0x47f91a
cmp eax, 0xffffffd3
jne 0x47e84a
mov esi, dword [ecx + 0x14b4]
mov dword [ebp - 0x254], esi
mov esi, dword [ebp - 0x268]
cmp dword [ecx + 0x14b4], esi
mov esi, dword [ebp - 0x17c]
jne 0x47e853
push dword [ebp - 0x254]
mov ecx, edi
call fcn.005c5730
mov edx, eax
mov dword [ebp - 0x25c], edx
test edx, edx
je 0x47f91a
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ecx + 0x14b8]
mov dword [ebp - 0x254], eax
test eax, eax
js 0x47f920
push 0xf000
push eax
push 0x102c
push edx
mov dword [ebp - 0x168], 0xf003
call dword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xd
not eax
and eax, 1
inc eax
shl eax, 0xc
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x178]
push eax
push dword [ebp - 0x254]
push 0x102b
push dword [ebp - 0x25c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x47f91a
cmp eax, 0xffffffd2
jne 0x47ea5f
mov esi, dword [ebp - 0x260]
cmp dword [ecx + 0x14b4], esi
mov esi, dword [ebp - 0x17c]
jne 0x47ea5f
push 2
push 0xffffffffffffffff
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x25c], eax
test eax, eax
jns 0x47e8ae
push 0x40
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bd3f0
push 0
push 0x62439c
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bcd30
jmp 0x47f91a
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa8]
movq qword [ebp - 0xa8], xmm0
call fcn.005dc5e0
push 0
push 0
push dword [ebp - 0x25c]
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
push dword [ebp - 0x260]
mov ecx, edi
movq qword [ebp - 0x84], xmm0
mov dword [ebp - 0x7c], 0
call fcn.005bb510
push eax
lea ecx, [ebp - 0x84]
call fcn.005dc570
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xd
call fcn.005dc190
lea edx, [ebp - 0xa8]
mov ecx, eax
call fcn.0059ce20
push 0
push 1
push dword [ebp - 0x25c]
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
push dword [ebp - 0x260]
mov ecx, edi
movq qword [ebp - 0xc0], xmm0
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc0]
call fcn.005dc570
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x78]
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
push 1
movq qword [ebp - 0xb4], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0xb4]
call fcn.005dc570
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xf
call fcn.005dc190
push eax
lea ecx, [ebp - 0x84]
call fcn.005dc190
mov edx, esi
mov ecx, eax
call fcn.0059de70
test eax, eax
jns 0x47e9e5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__create_
lea ecx, [ebp - 0x84]
call fcn.005dc190
push eax
push 0x627824
lea ecx, [ebp - 0xb4]
call fcn.005da780
push 0
lea ecx, [ebp - 0xb4]
call fcn.005dc190
push eax
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bcd30
push 2
lea ecx, [ebp - 0xc0]
call fcn.005dc190
push eax
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bcd30
push 0x20
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bd3f0
lea ecx, [ebp - 0xb4]
call fcn.005dc430
lea ecx, [ebp - 0xc0]
call fcn.005dc430
lea ecx, [ebp - 0x84]
call fcn.005dc430
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xb
call fcn.005dc430
jmp 0x47f91a
cmp eax, 0xffffffbf
jne 0x47eae9
mov esi, dword [ebp - 0x26c]
cmp dword [ecx + 0x14b4], esi
mov esi, dword [ebp - 0x17c]
jne 0x47ebca
push 2
push 0xffffffffffffffff
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x254], eax
cmp eax, 0xffffffff
je 0x47f91a
push dword [ebp - 0x26c]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc3a0
test eax, eax
je 0x47f91a
push 1
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push dword [ebp - 0x254]
mov ecx, edi
push dword [ebp - 0x260]
call fcn.005ba4f0
jmp 0x47f91a
cmp eax, 0xffffffd3
je 0x47eaf7
cmp eax, 0xffffffd2
jne 0x47ebca
cmp dword [ecx + 0x14b4], edx
jne 0x47ebca
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x25c], eax
test eax, eax
jns 0x47eb51
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x254], eax
cmp eax, dword [ebp - 0x280]
jge 0x47f91a
mov esi, eax
push 0x40
push esi
mov ecx, edi
call fcn.005bd3f0
inc esi
cmp esi, dword [ebp - 0x280]
jl 0x47eb33
mov esi, dword [ebp - 0x17c]
jmp 0x47f91a
push 0x20
push dword [ebp - 0x28c]
mov ecx, edi
call fcn.005bd3f0
mov ecx, dword [ebp - 0x25c]
mov eax, 0x20
test ecx, ecx
mov edx, edi
mov ecx, 0x40
cmovle eax, ecx
mov ecx, edx
push eax
mov eax, dword [ebp - 0x288]
push eax
call fcn.005bd3f0
push 0
push 0
push 0x1004
push dword [ebp - 0x284]
call dword [sym.imp.USER32.dll_SendMessageW]
dec eax
mov ecx, edi
cmp dword [ebp - 0x25c], eax
jge 0x47ebb8
push 0x20
push dword [ebp - 0x27c]
call fcn.005bd3f0
jmp 0x47f91a
push 0x40
push dword [ebp - 0x27c]
call fcn.005bd3f0
jmp 0x47f91a
cmp eax, 0xffffffcb
jne 0x47ec9c
cmp dword [ecx + 0x14b4], edx
jne 0x47ec9c
mov eax, ecx
mov ecx, edi
push 0
mov eax, dword [eax + 0x14b8]
push eax
push edx
mov dword [ebp - 0x254], eax
call fcn.005bb510
push eax
lea ecx, [ebp - 0x90]
call fcn.005dc1c0
mov ecx, edi
call fcn.005c56a0
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc510
lea ecx, [ebp - 0x38]
call fcn.005dbeb0
test al, al
jne 0x47f91a
lea ecx, [ebp - 0x90]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc4c0
test al, al
jne 0x47f91a
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x47ec79
mov ecx, dword [ebp - 0x24c]
sub esp, 8
push 0x8c
push 0x190
push eax
push edi
push 4
push str.Sorry__the_folder_you_indicated_does_not_exist.
call fcn.0043e2e0
jmp 0x47f91a
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push dword [ebp - 0x254]
mov ecx, edi
push dword [ebp - 0x264]
call fcn.005ba4f0
jmp 0x47f91a
cmp eax, dword [ebp - 0x2a8]
jne 0x47edf5
push 2
push 0xffffffffffffffff
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x254], eax
cmp eax, 0xffffffff
je 0x47f91a
push 0
push eax
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.Users_
lea ecx, [ebp - 0x6c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc200
mov ecx, dword [ebp - 0x24c]
sub esp, 8
push 0x8c
push 0x190
push 0xaa
push edi
push 1
push str.This_will_permanently_delete_the_user_folder_from_the_backup._r_n_r_nAre_you_sure_you_want_to_remove_the_selected_user_from_the_backup_
call fcn.0043e2e0
mov ecx, dword [ebp - 0x24c]
test eax, eax
je 0x47f920
sub esp, 8
push 0
push 0xffffffffffffffba
sub esp, 8
push 0x46
push 0x1c2
push edi
push str.Deleting_files__please_wait...
call fcn.0043da60
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b62b0
push 2
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
call fcn.005771e0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTBackupUsers
lea ecx, [ebp - 0x104]
call fcn.005dcff0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.BackupUsers
lea ecx, [ebp - 0x104]
call fcn.005dcff0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push 0x6cee3c
lea ecx, [ebp - 0x104]
call fcn.005dcff0
push 0
push dword [ebp - 0x254]
push dword [ebp - 0x260]
mov ecx, edi
call fcn.005bb970
mov ecx, dword [ebp - 0x24c]
lea ecx, [ecx + 0x14f0]
call fcn.005b6b30
jmp 0x47f91a
cmp eax, dword [ebp - 0x28c]
jne 0x47eed3
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x254], eax
test eax, eax
js 0x47f91a
mov eax, dword [ebp - 0x24c]
lea ecx, [ebp - 0x9c]
sub esp, 8
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
movq qword [ebp - 0x9c], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624284
push dword [eax + 0x1c]
call fcn.005dc520
push dword [ebp - 0x298]
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x10
call fcn.005dc190
push eax
push 1
push ecx
lea ecx, [ebp - 0x38]
call fcn.005dc400
mov edx, str.Select_the_new_destination_folder
mov ecx, eax
call fcn.005e1b00
test al, al
jne 0x47eea1
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xb
call fcn.005dc430
jmp 0x47f91a
push 1
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push dword [ebp - 0x254]
mov ecx, edi
push dword [ebp - 0x264]
call fcn.005ba4f0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xb
call fcn.005dc430
jmp 0x47f91a
cmp eax, dword [ebp - 0x288]
jne 0x47ef06
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov edx, eax
cmp edx, 1
jl 0x47f91a
mov ecx, dword [ebp - 0x284]
lea eax, [edx - 1]
push eax
call fcn.005c8fe0
jmp 0x47f91a
cmp eax, dword [ebp - 0x27c]
jne 0x47ef6a
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
push 0
push 0
push 0x1004
push dword [ebp - 0x264]
mov ecx, edi
mov dword [ebp - 0x254], eax
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x254]
test ecx, ecx
js 0x47f91a
dec eax
cmp ecx, eax
jge 0x47f91a
lea eax, [ecx + 1]
mov edx, ecx
mov ecx, dword [ebp - 0x284]
push eax
call fcn.005c8fe0
jmp 0x47f91a
cmp eax, dword [ebp - 0x274]
je 0x47f8e2
cmp eax, dword [ebp - 0x2ac]
je 0x47f8e2
cmp eax, dword [ebp - 0x2a4]
jne 0x47f0f0
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x254], eax
cmp eax, 0xffffffff
je 0x47f91a
push 0
push eax
push dword [ebp - 0x264]
mov ecx, edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.NewExtraFolders
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x44]
call fcn.005db160
lea ecx, [ebp - 0x44]
call fcn.005dbeb0
test al, al
je 0x47f017
mov eax, ecx
lea ecx, [ebp - 0x38]
push eax
call fcn.005dc3a0
lea ecx, [ebp - 0x38]
lea eax, [eax*2 + 2]
push eax
call fcn.005dc190
mov ecx, eax
call fcn.005e64d0
test eax, eax
je 0x47f91a
sub esp, 0xc
lea ecx, [ebp - 0x6c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.ExtraFolders_
call fcn.005dc190
push eax
lea ecx, [ebp - 0x44]
call fcn.005da510
mov ecx, dword [ebp - 0x24c]
sub esp, 8
push 0x8c
push 0x190
push 0xaa
push edi
push 1
push str.This_will_permanently_delete_this_folder_from_the_backup._It_will_not_be_deleted_from_the_original_location._r_n_r_nAre_you_sure_you_want_to_remove_the_selected_folder_from_this_backup_
call fcn.0043e2e0
mov ecx, dword [ebp - 0x24c]
test eax, eax
je 0x47f920
sub esp, 8
push 0
push 0xffffffffffffffba
sub esp, 8
push 0x46
push 0x1c2
push edi
push str.Deleting_files__please_wait...
call fcn.0043da60
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b62b0
push 2
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
call fcn.005771e0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push 0x6cea54
lea ecx, [ebp - 0x104]
call fcn.005dcff0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.NewExtraFolders
lea ecx, [ebp - 0x104]
call fcn.005dcff0
push 0
push dword [ebp - 0x254]
push dword [ebp - 0x264]
jmp 0x47edd8
cmp eax, dword [ebp - 0x2cc]
jne 0x47f6c7
mov eax, dword [ebp - 0x2a0]
lea ecx, [ebp - 0x15c]
push 0xd
push 0
push dword [ebp - 0x29c]
xorps xmm0, xmm0
push eax
push edi
movups xmmword [ebp - 0x15c], xmm0
movups xmmword [ebp - 0x14c], xmm0
call fcn.005b8800
push dword [ebp - 0x260]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x11
mov ecx, edi
movlpd qword [ebp - 0x184], xmm0
call fcn.005bb7f0
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], 0
push str.RTBackupUsers
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x12
call fcn.005dcb70
mov eax, dword [ebp - 0x184]
test eax, eax
je 0x47f228
cmp dword [eax], 1
mov dword [ebp - 0x25c], 1
jl 0x47f228
mov esi, dword [ebp - 0x184]
mov eax, 4
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x258], eax
push 0
push dword [eax + esi]
mov ecx, edi
push dword [ebp - 0x260]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
mov eax, dword [ebp - 0x258]
mov ecx, edi
push 1
push dword [esi + eax]
push dword [ebp - 0x260]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTBackupUsers
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x44]
call fcn.005db130
mov ecx, dword [ebp - 0x25c]
mov eax, dword [ebp - 0x254]
inc ecx
add dword [ebp - 0x258], 4
add eax, 4
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x254], eax
cmp ecx, dword [esi]
jle 0x47f1a2
mov esi, dword [ebp - 0x17c]
push dword [ebp - 0x268]
mov ecx, edi
call fcn.005bb7f0
mov ecx, eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x25c], ecx
test eax, eax
je 0x47f256
push eax
call fcn.0041e1c3
mov ecx, dword [ebp - 0x25c]
add esp, 4
mov edx, dword [ecx]
xor eax, eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x270], edx
mov dword [ebp - 0x254], 1
cmp edx, 1
jl 0x47f2cb
mov esi, dword [ebp - 0x254]
mov edi, eax
nop word [eax + eax]
mov edx, dword [ecx + esi*4]
mov ecx, 2
call fcn.00404860
call fcn.005e9c20
mov ecx, dword [ebp - 0x25c]
inc esi
or edi, eax
cmp esi, dword [ebp - 0x270]
jle 0x47f290
mov esi, dword [ebp - 0x17c]
mov dword [ebp - 0x258], edi
mov edi, dword [ebp - 0x278]
mov eax, dword [ebp - 0x258]
push str.RTUserFolders
push str.Settings
lea ecx, [ebp - 0x104]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.005db290
mov ecx, eax
call fcn.005db130
push 4
push dword [ebp - 0x2b4]
mov ecx, edi
call fcn.005bc500
test eax, eax
mov ecx, 0x62fdc4
mov eax, 0x62796c
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x44]
call fcn.005dc510
push str.RTBackupOptions
push str.Settings
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x44]
call fcn.005db130
push str.RTExtraFolders
lea ecx, [ebp - 0x104]
call fcn.005dcb70
push dword [ebp - 0x264]
mov ecx, edi
call fcn.005bb7f0
push dword [ebp - 0x25c]
mov dword [ebp - 0x258], eax
call fcn.0041e1c3
mov eax, dword [ebp - 0x258]
add esp, 4
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], 0xffffffff
test eax, eax
je 0x47f429
cmp dword [eax], 1
mov dword [ebp - 0x270], 1
jl 0x47f429
mov esi, dword [ebp - 0x270]
push 0
push dword [eax + esi*4]
mov ecx, edi
push dword [ebp - 0x264]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc1c0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc3a0
lea ecx, [ebp - 0x44]
lea eax, [eax*2 + 2]
push eax
call fcn.005dc190
mov ecx, eax
call fcn.005e64d0
test eax, eax
je 0x47f414
mov eax, dword [ebp - 0x258]
mov ecx, edi
push 1
push dword [eax + esi*4]
push dword [ebp - 0x264]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
push str.RTExtraFolders
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x44]
call fcn.005db130
mov eax, dword [ebp - 0x258]
inc esi
cmp esi, dword [eax]
jle 0x47f394
mov esi, dword [ebp - 0x17c]
push ecx
push 0
push 0
lea ecx, [ebp - 0x104]
call fcn.005dca80
lea ecx, [ebp - 0x248]
call fcn.00402c20
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x104]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x47f473
push eax
call fcn.0041e1c3
add esp, 4
push 0x200000
call fcn.0041e7cf
push 0
push 0
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], 0x200000
call fcn.005dca80
mov ecx, dword [ebp - 0x24c]
lea eax, [ebp - 0x248]
push 1
push eax
call fcn.00481fd0
mov dword [ebp - 0x254], eax
cmp eax, 0xffffffff
jne 0x47f53b
lea ecx, [ebp - 0x1ac]
call fcn.005d9280
mov eax, dword [ebp - 0x1b4]
cmp eax, 0xffffffff
je 0x47f4e0
test eax, eax
je 0x47f4e0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1cc]
call fcn.005d9280
mov eax, dword [ebp - 0x1d4]
cmp eax, 0xffffffff
je 0x47f501
test eax, eax
je 0x47f501
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x47f514
push eax
call fcn.0041e1c3
add esp, 4
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x47f527
push eax
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xb
call fcn.005b8790
jmp 0x47f91a
push 1
push 1
lea ecx, [ebp - 0x6c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc260
mov ecx, eax
call fcn.005dbf40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x44]
call fcn.005dc190
cmp dword [ebp - 0x254], 0
mov ecx, str.Successfully_restored
push eax
mov eax, str.Failed_to_restore
cmovne eax, ecx
lea ecx, [ebp - 0x38]
push str._a_backup_named__
push eax
call fcn.005dc200
push 0
push 0
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x24c]
push eax
call fcn.0045a700
sub esp, 8
lea ecx, [ebp - 0x38]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005dc190
mov ecx, dword [ebp - 0x24c]
push eax
call fcn.0043e2e0
cmp dword [ebp - 0x254], 2
jne 0x47f4bf
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x24d], 0
call fcn.00402d30
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x47f60a
push eax
call fcn.0041e1c3
add esp, 4
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xb
call fcn.005b8790
mov al, byte [ebp - 0x24d]
mov ecx, dword [ebp - 0x24c]
xor al, 1
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0x48]
call fcn.005d69e0
test esi, esi
je 0x47f644
push ecx
mov ecx, esi
call fcn.00402a20
lea ecx, [ebp - 0x18c]
call fcn.005c6500
lea ecx, [ebp - 0x188]
call fcn.005c6500
lea ecx, [ebp - 0x104]
call fcn.005dd5d0
lea ecx, [ebp - 0x78]
call fcn.005dc430
lea ecx, [ebp - 0xcc]
call fcn.005dc430
lea ecx, [ebp - 0x6c]
call fcn.005dc430
lea ecx, [ebp - 0x90]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
lea ecx, [ebp - 0x60]
call fcn.005dc430
mov al, byte [ebp - 0x24d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp eax, dword [ebp - 0x29c]
jne 0x47f8cd
lea eax, [ebp - 0x44]
push eax
push str.LastBackupDir
lea ecx, [ebp - 0x48]
call fcn.005d6740
push 0
lea ecx, [ebp - 0x44]
call fcn.005dbed0
mov ecx, eax
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47f720
push eax
lea ecx, [ebp - 0x44]
call fcn.005dc400
mov ecx, eax
call fcn.005dc190
push eax
push 1
push str.LastBackupDir
lea ecx, [ebp - 0x48]
call fcn.005d5f20
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movq qword [ebp - 0x54], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov edi, dword [ebp - 0x2b0]
mov byte [ebp - 4], 0x14
nop
mov dl, 1
mov ecx, edi
call fcn.005c8820
test eax, eax
jne 0x47f750
push dword [ebp - 0x298]
mov edi, dword [ebp - 0x278]
lea ecx, [ebp - 0x44]
push eax
push str.uvkbk
push str.BackupInfo
push 0x1008
push str.Backup_files__.uvkbk_.pcdbk_
call fcn.005dc190
push eax
mov edx, str.Select_backup_file_to_open
lea ecx, [ebp - 0x54]
call fcn.005e1f20
test al, al
je 0x47f8b6
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x47f8b6
push dword [ebp - 0x4c]
mov ecx, 1
cmove eax, ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x54], eax
call fcn.005dc4e0
push 1
lea ecx, [ebp - 0x60]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x104]
call fcn.005dd360
push 0
push 0
lea ecx, [ebp - 0x60]
call fcn.005dbed0
mov ecx, eax
call fcn.005dc190
push eax
push 1
push str.LastBackupDir
lea ecx, [ebp - 0x48]
call fcn.005d5f20
mov ecx, 3
call fcn.0059e240
mov dword [ebp - 0x254], eax
test esi, esi
je 0x47f818
push ecx
mov ecx, esi
call fcn.00402a20
mov eax, dword [ebp - 0x254]
push 0x40
push dword [ebp - 0x26c]
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x17c], esi
call fcn.005bd3f0
push dword [ebp - 0x294]
mov ecx, dword [ebp - 0x24c]
lea eax, [ebp - 0x104]
push dword [ebp - 0x264]
push dword [ebp - 0x268]
push dword [ebp - 0x260]
push dword [ebp - 0x254]
push eax
call fcn.0047f950
push eax
lea ecx, [ebp - 0x78]
call fcn.005dc1c0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x270], eax
test eax, eax
je 0x47f91a
mov byte [ebp - 4], 0x16
push fcn.005dc430
push dword [eax - 4]
push 0xc
push eax
call fcn.0041e45b
mov ecx, dword [ebp - 0x270]
add ecx, 0xfffffffc
mov eax, dword [ecx]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push ecx
call fcn.0041e1c8
add esp, 8
mov byte [ebp - 4], 0xb
jmp 0x47f91a
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x270], eax
test eax, eax
je 0x47f91a
mov byte [ebp - 4], 0x15
jmp 0x47f881
cmp eax, dword [ecx + 0x11c0]
jne 0x47f920
mov al, 1
mov byte [ebp - 0x24d], al
jmp 0x47f61f
push 2
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.005bb4c0
cmp eax, 0xffffffff
je 0x47f91a
push 0
push eax
push dword [ebp - 0x264]
mov ecx, edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc1c0
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
call fcn.0043bf00
mov ecx, dword [ebp - 0x24c]
push 0
call fcn.004771c0
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ecx]
mov dword [ebp - 0x254], eax
cmp eax, 0xfffffffa
jne 0x47e5a0
jmp 0x47f619