Function at 0x4d061d
Capabilities:
Check if file exists

Disassembly:
push 0x88
mov eax, 0x53405b
call fcn.004f2332
mov esi, dword [ebp + 8]
push esi
push str.StopSvr___ws__r_n
push 0x5aea00
call fcn.004de360
add esp, 0xc
call fcn.004cdb20
push esi
lea ecx, [ebp - 0x60]
call fcn.00417260
lea eax, [ebp - 0x60]
xor esi, esi
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], esi
call fcn.00417230
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 1
push eax
call fcn.004cfe1f
mov ebx, str.knbcenter.exe
push ebx
call fcn.00416680
pop ecx
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.00418190
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x78]
push eax
call edi
push 5
pop ebx
test eax, eax
jne 0x4d0819
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
cmovae eax, dword [ebp - 0x78]
push eax
push str.CUninstall_StopSvr_PathFileExists___ws_r_n
push 0x5aea00
call fcn.004de360
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.0043bae5
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0043bb0e
test eax, eax
js 0x4d088d
lea ecx, [ebp - 0x48]
call fcn.0043bbd9
test eax, eax
je 0x4d088d
call fcn.00437474
push eax
lea ecx, [ebp - 0x80]
call fcn.0043a4ef
mov byte [ebp - 4], 3
call fcn.00437474
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043a4ef
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x48]
call fcn.0043beff
lea ecx, [ebp - 0x80]
call fcn.00454f04
push eax
lea ecx, [ebp - 0x80]
call fcn.0043c2e8
push str.knbcenter.exe
lea ecx, [ebp - 0x80]
call fcn.004684c0
test eax, eax
jne 0x4d0774
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0043bd0a
test eax, eax
js 0x4d0774
lea ecx, [ebp - 0x7c]
call fcn.00454f04
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043c2e8
push esi
push str.knbcenter.exe
lea ecx, [ebp - 0x7c]
call fcn.00468330
cmp eax, 0xffffffff
jne 0x4d07a0
mov ecx, dword [ebp - 0x7c]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
mov ecx, dword [ebp - 0x80]
mov byte [ebp - 4], 2
lea ecx, [ecx - 0x10]
call fcn.00436fdb
lea ecx, [ebp - 0x48]
call fcn.0043bbe7
test eax, eax
jne 0x4d06ee
jmp 0x4d080d
push eax
push esi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00447a0f
mov esi, dword [eax]
push esi
mov byte [ebp - 4], bl
call fcn.00416680
pop ecx
push eax
push esi
lea ecx, [ebp - 0x60]
call fcn.00417b50
mov ecx, dword [ebp - 0x94]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.00436fdb
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push eax
push str.CUninstall_StopSvr_wstrPath___ws_r_n
push 0x5aea00
call fcn.004de360
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00436fdb
mov ecx, dword [ebp - 0x80]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.0043b9ef
cmp dword [ebp - 0x50], 0
je 0x4d0a5c
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x28]
call fcn.00417230
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
call fcn.004cfe1f
mov esi, str.Module_securityknbpolicy.dll
push esi
call fcn.00416680
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00418190
push 8
pop esi
cmp dword [ebp - 0x14], esi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call edi
test eax, eax
jne 0x4d089f
cmp dword [ebp - 0x14], esi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x5aea00
call fcn.004de360
add esp, 0xc
xor edi, edi
mov esi, edi
jmp 0x4d0987
lea ecx, [ebp - 0x48]
call fcn.0043b9ef
push 6
pop esi
xor edi, edi
jmp 0x4d0a60
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
call fcn.00417230
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
call fcn.004cfe1f
mov dword [esp], str.knbcenter.exe
call fcn.00416680
pop ecx
push eax
push str.knbcenter.exe
lea ecx, [ebp - 0x40]
call fcn.00418190
cmp dword [ebp - 0x2c], esi
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call edi
test eax, eax
jne 0x4d0907
cmp dword [ebp - 0x2c], esi
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x5aea00
call fcn.004de360
add esp, 0xc
xor edi, edi
mov esi, edi
jmp 0x4d097c
xor edi, edi
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
call fcn.004d166f
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov esi, 0x5aea00
mov byte [ebp - 4], 8
cmovae eax, dword [ebp - 0x28]
push eax
push str.CUninstall_StopSvr_LoadInterface___ws_r_n
push esi
call fcn.004de360
add esp, 0xc
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x90]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.004cf354
test eax, eax
jne 0x4d0997
xor esi, esi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
inc esi
call fcn.004ccb6f
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.00417d20
jmp 0x4d0a60
push str.CUninstall_Initialize_Begin__r_n
push esi
call fcn.004de360
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
push eax
push str.CUninstall_Initialize_End__d_r_n
push esi
call fcn.004de360
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
push str.CUninstall_ExitHostProcess_Begin__r_n
push 0x5aea00
call fcn.004de360
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
push eax
push str.CUninstall_ExitHostProcess_End___d_r_n
push 0x5aea00
call fcn.004de360
add esp, 0xc
push 0x7d0
call esi
dec ebx
jne 0x4d09c6
push str.CUninstall_UnInitialize_Begin__r_n
mov ebx, 0x5aea00
push ebx
call fcn.004de360
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
push eax
push str.CUninstall_UnInitialize_End___d__r_n
push ebx
call fcn.004de360
add esp, 0xc
push 0x2710
call esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 7
call fcn.004ccb6f
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.00417d20
jmp 0x4d0a5e
xor edi, edi
mov esi, edi
push edi
push 1
lea ecx, [ebp - 0x78]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x60]
call fcn.00417d20
mov eax, esi
call fcn.004f22e1
ret