Function at 0x49e84f
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x52fe80]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
push str.StopSvr___ws__r_n
push 0x55b31c
call fcn.004a9913
add esp, 0xc
call fcn.0049c0dd
push esi
lea ecx, [ebp - 0x54]
call fcn.00406c40
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00406c10
lea eax, [ebp - 0x6c]
push eax
call fcn.0049e01b
mov esi, str.knbcenter.exe
push esi
call fcn.00405d70
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x6c]
call fcn.00407480
cmp dword [ebp - 0x58], 8
lea eax, [ebp - 0x6c]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x6c]
push eax
call edi
xor ebx, ebx
test eax, eax
jne 0x49ea25
cmp dword [ebp - 0x58], 8
lea eax, [ebp - 0x6c]
cmovae eax, dword [ebp - 0x6c]
push eax
push str.CUninstall_StopSvr_PathFileExists___ws_r_n
push 0x55b31c
call fcn.004a9913
add esp, 0xc
lea ecx, [ebp - 0x3c]
call fcn.00425467
lea ecx, [ebp - 0x3c]
call fcn.00425490
test eax, eax
js 0x49ea92
lea ecx, [ebp - 0x3c]
call fcn.0042555b
test eax, eax
je 0x49ea92
call fcn.00420bd2
push eax
lea ecx, [ebp - 0x74]
call fcn.00423e41
call fcn.00420bd2
push eax
lea ecx, [ebp - 0x70]
call fcn.00423e41
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00425881
lea ecx, [ebp - 0x74]
call fcn.0043f655
push eax
lea ecx, [ebp - 0x74]
call fcn.00425c4a
push esi
lea ecx, [ebp - 0x74]
call fcn.0046805d
test eax, eax
jne 0x49e98f
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0042568c
test eax, eax
js 0x49e98f
lea ecx, [ebp - 0x70]
call fcn.0043f655
push eax
lea ecx, [ebp - 0x70]
call fcn.00425c4a
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.0049bf19
cmp eax, 0xffffffff
jne 0x49e9b7
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.004206ab
mov ecx, dword [ebp - 0x74]
lea ecx, [ecx - 0x10]
call fcn.004206ab
lea ecx, [ebp - 0x3c]
call fcn.00425569
test eax, eax
jne 0x49e919
jmp 0x49ea1d
push eax
push ebx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x70]
call fcn.004319d0
mov esi, dword [eax]
push esi
call fcn.00405d70
pop ecx
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.00407560
mov ecx, dword [ebp - 0x88]
lea ecx, [ecx - 0x10]
call fcn.004206ab
cmp dword [ebp - 0x40], 8
lea eax, [ebp - 0x54]
cmovae eax, dword [ebp - 0x54]
push eax
push str.CUninstall_StopSvr_wstrPath___ws_r_n
push 0x55b31c
call fcn.004a9913
mov ecx, dword [ebp - 0x70]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.004206ab
mov ecx, dword [ebp - 0x74]
lea ecx, [ecx - 0x10]
call fcn.004206ab
lea ecx, [ebp - 0x3c]
call fcn.00425389
cmp dword [ebp - 0x44], ebx
je 0x49ec5f
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00406c10
lea eax, [ebp - 0x1c]
push eax
call fcn.0049e01b
mov esi, str.Module_securityknbpolicy.dll
push esi
call fcn.00405d70
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1c]
call fcn.00407480
push 8
pop esi
cmp dword [ebp - 8], esi
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
push eax
call edi
test eax, eax
jne 0x49eaa2
cmp dword [ebp - 8], esi
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x55b31c
call fcn.004a9913
add esp, 0xc
mov esi, ebx
jmp 0x49eb7d
lea ecx, [ebp - 0x3c]
call fcn.00425389
push 6
pop esi
jmp 0x49ec61
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x34]
call fcn.00406c10
lea eax, [ebp - 0x34]
push eax
call fcn.0049e01b
mov dword [esp], str.knbcenter.exe
call fcn.00405d70
pop ecx
push eax
push str.knbcenter.exe
lea ecx, [ebp - 0x34]
call fcn.00407480
cmp dword [ebp - 0x20], esi
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
call edi
test eax, eax
jne 0x49eb04
cmp dword [ebp - 0x20], esi
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x55b31c
call fcn.004a9913
add esp, 0xc
mov esi, ebx
jmp 0x49eb72
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.0049f8ed
cmp dword [ebp - 8], esi
lea eax, [ebp - 0x1c]
mov esi, 0x55b31c
cmovae eax, dword [ebp - 0x1c]
push eax
push str.CUninstall_StopSvr_LoadInterface___ws_r_n
push esi
call fcn.004a9913
add esp, 0xc
lea eax, [ebp - 0x1c]
cmp dword [ebp - 8], 8
lea ecx, [ebp - 0x84]
cmovae eax, dword [ebp - 0x1c]
push eax
call fcn.0049d58b
test eax, eax
jne 0x49eb8d
xor esi, esi
lea ecx, [ebp - 0x84]
inc esi
call fcn.0049bf53
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x49eb72
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.00403650
push ebx
push 1
lea ecx, [ebp - 0x1c]
call fcn.00403650
jmp 0x49ec61
push str.CUninstall_Initialize_Begin__r_n
push esi
call fcn.004a9913
mov eax, dword [ebp - 0x84]
pop ecx
pop ecx
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
push eax
push str.CUninstall_Initialize_End__d_r_n
push esi
call fcn.004a9913
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
push 5
pop esi
push str.CUninstall_ExitHostProcess_Begin__r_n
push 0x55b31c
call fcn.004a9913
mov eax, dword [ebp - 0x84]
pop ecx
pop ecx
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
push eax
push str.CUninstall_ExitHostProcess_End___d_r_n
push 0x55b31c
call fcn.004a9913
add esp, 0xc
push 0x7d0
call edi
dec esi
jne 0x49ebbf
push str.CUninstall_UnInitialize_Begin__r_n
mov esi, 0x55b31c
push esi
call fcn.004a9913
mov eax, dword [ebp - 0x84]
pop ecx
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
push eax
push str.CUninstall_UnInitialize_End___d__r_n
push esi
call fcn.004a9913
add esp, 0xc
push 0x2710
call edi
lea ecx, [ebp - 0x84]
call fcn.0049bf53
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x49ec49
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.00403650
push ebx
push 1
lea ecx, [ebp - 0x1c]
call fcn.00403650
mov esi, ebx
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00403650
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00403650
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bc1bd
mov esp, ebp
pop ebp
ret