Function at 0x4a3b9a
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov ebx, ecx
call fcn.004a1675
test eax, eax
je 0x4a3e78
and dword [ebx + 0x1410], 0
lea eax, [ebx + 0x140c]
lea ecx, [ebx + 0x5c0]
mov dword [ebx + 0x19e4], 2
push eax
call fcn.004a97d1
mov dword [ebp - 0xc], eax
lea esi, [ebx + 0x5d4]
test eax, eax
je 0x4a3bed
lea eax, [ebp - 0xc]
mov ecx, esi
push eax
call fcn.004333f3
lea edi, [ebx + 0x1430]
mov ecx, edi
call fcn.0047c7d2
test eax, eax
je 0x4a3c31
push 0
push 0
mov ecx, edi
call fcn.0045ee99
mov ecx, edi
call fcn.0047c808
mov dword [ebp - 0xc], eax
test eax, eax
je 0x4a3c22
lea eax, [ebp - 0xc]
mov ecx, esi
push eax
call fcn.004333f3
mov ecx, edi
call fcn.0047cb81
test eax, eax
je 0x4a3e78
lea ecx, [ebp - 8]
call fcn.00404190
lea ecx, [ebp - 0xc]
call fcn.00404190
lea ecx, [ebp - 4]
call fcn.00404190
lea eax, [ebp - 0x10]
push eax
call fcn.0043ca0c
pop ecx
push eax
lea ecx, [ebp - 4]
call fcn.004048f0
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004023e0
push str.KPhoneUninstall.exe
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00413eaa
add esp, 0xc
lea ecx, [ebp - 8]
push eax
call fcn.004048f0
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004023e0
push str.ktransform.exe
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00413eaa
add esp, 0xc
lea ecx, [ebp - 0xc]
push eax
call fcn.004048f0
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004023e0
mov esi, dword [ebp - 8]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edi, dword [ebp - 0xc]
test eax, eax
je 0x4a3cec
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4a3cec
push 1
push 0
push str._from:duba__uninst__silent
push esi
push 0x61594c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 8]
call fcn.00404190
push 0
lea eax, [ebp - 8]
push eax
push str.kismain_ui_type
call fcn.0043f9a5
add esp, 0xc
test eax, eax
je 0x4a3d30
lea eax, [ebp - 8]
push eax
lea ecx, [ebx + 0x5c0]
call fcn.004a9410
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4a3d30
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x5d4]
call fcn.004333f3
lea eax, [ebx + 0x28]
xor edx, edx
test eax, eax
mov ecx, ebx
push 0x2e6
cmove ecx, edx
call fcn.0044aca2
test eax, eax
je 0x4a3d6c
mov eax, dword [eax + 0x30]
shr eax, 3
not eax
test al, 1
je 0x4a3d6c
push 0x2e6
lea ecx, [ebx + 0x28]
call fcn.00483099
neg eax
sbb eax, eax
add eax, 2
jmp 0x4a3d6f
push 3
pop eax
push dword [ebx + 0x1344]
lea ecx, [ebx + 0x5c0]
push eax
push dword [ebx + 0x5e4]
push 2
push dword [ebx + 0x5a0]
push dword [ebx + 0x5a8]
call fcn.004a9693
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4a3dab
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x5d4]
call fcn.004333f3
mov ecx, ebx
call fcn.0049e7a2
push 0x2ec
lea ecx, [ebx + 0x28]
call fcn.00483099
test eax, eax
je 0x4a3dca
mov ecx, ebx
call fcn.004a78cc
lea eax, [ebx + 0x13c8]
push eax
push dword [ebx + 0x13c4]
lea ecx, [ebx + 0x5c0]
push dword [ebx + 0x13c0]
call fcn.004a929f
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4a3dfe
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x5d4]
call fcn.004333f3
push str.uinstall_retain_head_new_3
push str.skin
push 0x3e8
lea ecx, [ebx + 0x28]
call fcn.0048a795
mov ecx, ebx
call fcn.004adb8f
lea eax, [ebx + 0x19d4]
push eax
lea ecx, [ebx + 0x5c0]
call fcn.00489be4
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4a3e44
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x5d4]
call fcn.004333f3
call fcn.00478e66
mov ecx, eax
call fcn.004a2a43
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.004023e0
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004023e0
lea ecx, [edi - 0x10]
call fcn.004023e0
lea ecx, [esi - 0x10]
call fcn.004023e0
jmp 0x4a3e81
push 2
mov ecx, ebx
call fcn.004aeca1
pop edi
pop esi
pop ebx
leave
ret