Function at 0x4852e0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f0d31
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebx + 0x1460]
call fcn.005dc3a0
mov ecx, ebx
cmp eax, 7
jle 0x485329
call fcn.0047da00
jmp 0x485d71
push 0
push str.Backup_And_Recovery
call fcn.0045f680
mov ecx, ebx
mov dword [ebp - 0x4c], eax
call fcn.0043e530
test al, al
je 0x485d71
mov edi, dword [ebx + 0x14e4]
mov ecx, dword [ebx + 0x100]
mov dword [ebp - 0x50], edi
call fcn.005d2f10
push 6
push 0xf0ffffff
push 0x73
mov esi, eax
mov edx, 0xa
push 0x2da
push 0x46
mov ecx, esi
call fcn.005d32a0
push 6
push 0xf0ffffff
push 0x73
push 0x2da
push 0xbe
mov edx, 0xa
mov ecx, esi
call fcn.005d32a0
push 6
push 0xf0ffffff
push 0x73
push 0x2da
push 0x136
mov edx, 0xa
mov ecx, esi
call fcn.005d32a0
push 6
push 0xf0ffffff
push 0x73
push 0x2da
push 0x1ae
mov edx, 0xa
mov ecx, esi
call fcn.005d32a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
mov ecx, edi
call fcn.005c44c0
test esi, esi
je 0x4853ee
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push 1
push str.https:__www.carifred.com_uvk_help_backup_and_recovery.php
lea ecx, [ebx + 0x119c]
call fcn.005dc260
push 0x3c
push 0x78
push 5
push 5
mov ecx, ebx
call fcn.0045fec0
movsd xmm1, qword [0x6edb40]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push dword [ebx + 0x1438]
mov ecx, edi
call fcn.005c44a0
push 0xffffffffffffffff
push 0x10000101
push 0x1e
push 0x186
push 0xf
push 0xb4
push str.Backup__recovery
call fcn.005c0890
push 0
mov ecx, edi
call fcn.005c44a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, ebx
push str.Show_online_help__F1_
push 0x3c
push 0x46
push 5
push 0x24e
push 0x7d
push str.Help
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, ebx
push str.Show_online_help__F1_
push 0x3c
push 0x46
push 5
push 0x29e
push 0xb3
push str.Home
mov dword [ebx + 0x11bc], eax
call fcn.0045fdf0
push ecx
push 0xffffffffffffffff
push 0x41
push 0x41
push 0x4a
push 0x253
push ecx
push 0xcb
mov ecx, ebx
mov dword [ebx + 0x11c0], eax
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x41
push 0x41
push 0xc2
push 0x253
push ecx
push 0xcc
mov ecx, ebx
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x41
push 0x41
push 0x13a
push 0x253
push ecx
push 0xf4
mov ecx, ebx
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x41
push 0x41
push 0x1b2
push 0x253
push ecx
push 0x140
mov ecx, ebx
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
movsd xmm1, qword [0x6edb28]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000101
push 0x16
push 0x15e
push 0x4b
push 0xc8
push str.Create_or_update_a_backup
mov ecx, edi
call fcn.005c0890
push 0
push 0x14
push 0x14
push 0x6d
mov ecx, ebx
call fcn.00436420
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x6c
mov esi, eax
mov ecx, edi
push 0x14
push esi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x86
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0xa0
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push 0
push str.Arial
push 1
movsd xmm1, qword [0x6edb08]
mov ecx, edi
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x6f
push 0x2e
push str.Backup_user_profiles_with_options_to_choose_which_folders_to_copy
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x89
push 0x2e
push str.Backup_user_settings__including_browser_profiles__desktop_themes_and_wallpaper
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14a
push 0xa3
push 0x2e
push str.Backup_desired_additional_directories
mov ecx, edi
call fcn.005c0890
push 0
push ecx
mov dword [esp], 0x41800000
mov ecx, ebx
push str.Setup_and_start_the_backup_operation_now
push 0x26
push 0xb4
push 0x8f
push 0x21c
push 0xcb
push str.Start_backup
call fcn.0045fd50
movsd xmm1, qword [0x6edb28]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x320
mov dword [ebp - 0x54], eax
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000101
push 0x16
push 0x15e
push 0xc3
push 0xc8
push str.Restore_a_backup
mov ecx, edi
call fcn.005c0890
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0xe4
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0xfe
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x118
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
movsd xmm1, qword [0x6edb08]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0xe7
push 0x2e
push str.Fully_or_partially_restore_a_previously_created_backup
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x101
push 0x2e
push str.Automatic_creation_of_the_same_user_accounts__or_quick_user_mapping
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14a
push 0x11b
push 0x2e
push str.Restore_user_settings_and_the_additional_directories
mov ecx, edi
call fcn.005c0890
push 0
push ecx
mov dword [esp], 0x41800000
mov ecx, ebx
push str.Setup_and_start_the_restore_operation_now
push 0x26
push 0xb4
push 0x107
push 0x21c
push 0xcc
push str.Restore_now
call fcn.0045fd50
movsd xmm1, qword [0x6edb28]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x320
mov dword [ebp - 0x58], eax
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000101
push 0x16
push 0x154
push 0x13b
push 0xc8
push str.Restore_from_custom_location
mov ecx, edi
call fcn.005c0890
push 0x805030
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bec70
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x15c
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x176
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x190
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
movsd xmm1, qword [0x6edb08]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x15f
push 0x2e
push str.Restore_from_HDD_to_SSD__from_Windows.old__or_from_a_different_volume
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x179
push 0x2e
push str.Automatic_creation_of_the_same_user_accounts__or_quick_user_mapping
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14a
push 0x193
push 0x2e
push str.Restore_user_settings_and_any_other_directories
mov ecx, edi
call fcn.005c0890
push 0
push ecx
mov dword [esp], 0x41800000
mov ecx, ebx
push str.Setup_and_start_the_restore_operation_now
push 0x26
push 0xb4
push 0x17f
push 0x21c
push 0xf4
push str.Select_location
call fcn.0045fd50
movsd xmm1, qword [0x6edb28]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x320
mov dword [ebp - 0x60], eax
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000101
push 0x16
push 0x1b8
push 0x1b3
push 0x96
push str.Copy_Move_user_data_to_another_account
mov ecx, edi
call fcn.005c0890
push 0x805030
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bec70
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x1d6
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x1f0
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x20a
push 0x14
push esi
mov ecx, edi
call fcn.005c0240
movsd xmm1, qword [0x6edb08]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x1d7
push 0x2e
push str.Copy_or_move_user_data_from_a_user_account_to_a_different_one
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x1e0
push 0x1f1
push 0x2e
push str.Keep_user_settings__including_browser_data__desktop_themes_and_wallpaper
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14a
push 0x20b
push 0x2e
push str.Optionally_create_a_new_user_account_to_copy_the_data_to
mov ecx, edi
call fcn.005c0890
push 0
push ecx
mov dword [esp], 0x41800000
mov ecx, ebx
push str.Setup_and_start_the_copy_move_operation_now
push 0x26
push 0xb4
push 0x1f7
push 0x21c
push 0x140
push str.Select_folders
call fcn.0045fd50
mov dword [ebp - 0x64], eax
mov eax, 0x70
mov byte [ebp - 0x1c], 1
movzx ecx, word [ebx + 0x11bc]
mov word [ebp - 0x1a], ax
mov eax, 0x1b
mov word [ebp - 0x18], cx
movzx ecx, word [ebx + 0x11c0]
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x1c]
push 2
mov word [ebp - 0x12], cx
mov ecx, edi
push eax
mov byte [ebp - 0x16], 1
call fcn.005c47a0
mov ecx, ebx
call fcn.0045f300
xorps xmm0, xmm0
mov byte [ebp - 0x45], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movq qword [ebp - 0x2c], xmm0
call fcn.005dc5e0
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerBackupAndRecovery
mov dword [ebp - 0x20], 0
call fcn.005d6a80
push 0
mov ecx, ebx
mov byte [ebp - 4], 2
call fcn.004771c0
test eax, eax
je 0x485d46
nop
mov eax, dword [ebx + 0x14a8]
cmp eax, 0xfffffffa
je 0x485d46
mov esi, dword [ebp - 0x50]
cmp dword [ebx + 0x14d8], esi
jne 0x485d35
cmp eax, dword [ebx + 0x11c0]
je 0x485e99
cmp eax, dword [ebp - 0x54]
je 0x485e81
cmp eax, dword [ebp - 0x58]
jne 0x485c2a
lea eax, [ebp - 0x2c]
push eax
push str.LastBackupDir
lea ecx, [ebp - 0x20]
call fcn.005d6740
push 0
lea ecx, [ebp - 0x2c]
call fcn.005dbed0
mov ecx, eax
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x485b69
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc400
mov ecx, eax
call fcn.005dc190
push eax
push 1
push str.LastBackupDir
lea ecx, [ebp - 0x20]
call fcn.005d5f20
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 3
mov dl, 1
lea ecx, [ebx + 0x14a8]
call fcn.005c8820
test eax, eax
jne 0x485b91
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2c]
push eax
push str.uvkbk
push str.BackupInfo
push 0x1008
push str.Backup_files__.uvkbk_.pcdbk_
call fcn.005dc190
push eax
mov edx, str.Select_backup_file_to_open
lea ecx, [ebp - 0x38]
call fcn.005e1f20
test al, al
je 0x485bdf
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x485d8d
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5c], eax
test eax, eax
je 0x485d35
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 4
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
mov byte [ebp - 4], 2
jmp 0x485d35
cmp eax, dword [ebp - 0x60]
jne 0x485d2c
lea eax, [ebp - 0x2c]
push eax
push str.LastSourceRoot
lea ecx, [ebp - 0x20]
call fcn.005d6740
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x485c80
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc400
mov ecx, eax
call fcn.005dc190
push eax
push 1
push str.LastBackupDir
lea ecx, [ebp - 0x20]
call fcn.005d5f20
nop word [eax + eax]
mov dl, 1
lea ecx, [ebx + 0x14a8]
call fcn.005c8820
test eax, eax
jne 0x485c80
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
push 1
push ecx
lea ecx, [ebp - 0x2c]
call fcn.005dc400
mov edx, str.Select_root_directory_to_restore_from
mov ecx, eax
call fcn.005e1b00
test al, al
je 0x485d35
push ecx
lea ecx, [ebx + 0x1290]
call fcn.0057c4e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc4c0
lea ecx, [ebp - 0x2c]
test al, al
je 0x485e2f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Please_select_a_valid_source_such_as_D:_or_C:Windows.old.
push str.._The_source_and_destination_locations_are_the_same._r_n_r_n
call fcn.005dc190
push eax
push str.Error:_You_can_not_restore_from
lea ecx, [ebp - 0x2c]
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0x2c]
push 0x8c
push 0x190
push 0xc8
push esi
push 0
call fcn.005dc190
push eax
mov ecx, ebx
call fcn.0043e2e0
jmp 0x485d35
cmp eax, dword [ebp - 0x64]
je 0x485e72
push 0
mov ecx, ebx
call fcn.004771c0
test eax, eax
jne 0x485ae0
mov al, byte [ebp - 0x45]
xor al, 1
mov ecx, ebx
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0x20]
call fcn.005d69e0
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
mov al, byte [ebp - 0x45]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x30]
test eax, eax
mov esi, 1
cmove eax, esi
mov dword [ebp - 0x38], eax
call fcn.005dc190
push eax
lea ecx, [ebx + 0x1460]
call fcn.005dc510
mov eax, dword [ebp - 0x38]
test eax, eax
mov ecx, dword [ebp - 0x30]
push 0
cmove eax, esi
push 0
mov dword [ebp - 0x38], eax
call fcn.005dbed0
mov ecx, eax
call fcn.005dc190
push eax
push esi
push str.LastBackupDir
lea ecx, [ebp - 0x20]
call fcn.005d5f20
push 0
mov ecx, ebx
call fcn.0045f260
mov ecx, ebx
call fcn.0047da00
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x30]
mov byte [ebp - 0x45], al
test edi, edi
je 0x485d56
push fcn.005dc430
mov byte [ebp - 4], 5
lea esi, [edi - 4]
push dword [esi]
push 0xc
push edi
call fcn.0041e45b
mov eax, dword [edi - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
jmp 0x485d56
call fcn.005dc190
push eax
lea ecx, [ebx + 0x1460]
call fcn.005dc510
push 0
push 0
lea ecx, [ebp - 0x2c]
call fcn.005dbed0
mov ecx, eax
call fcn.005dc190
push eax
push 1
push str.LastSourceRoot
lea ecx, [ebp - 0x20]
call fcn.005d5f20
mov ecx, ebx
call fcn.0047af20
mov byte [ebp - 0x45], al
jmp 0x485d56
mov ecx, ebx
call fcn.00479700
mov byte [ebp - 0x45], al
jmp 0x485d56
push 0
mov ecx, ebx
call fcn.0045f260
mov ecx, ebx
call fcn.00482da0
mov byte [ebp - 0x45], al
jmp 0x485d56
mov al, 1
mov byte [ebp - 0x45], al
jmp 0x485d49