Function at 0x4d0144
Capabilities:
Check if file exists

Disassembly:
push 0x88
mov eax, 0x5339b4
call fcn.004f1db2
mov esi, dword [ebp + 8]
push esi
push str.StopSvr___ws__r_n
push 0x5aca00
call fcn.004dddd9
add esp, 0xc
call fcn.004cd647
push esi
lea ecx, [ebp - 0x60]
call fcn.00417260
lea eax, [ebp - 0x60]
xor esi, esi
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], esi
call fcn.00417230
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 1
push eax
call fcn.004cf946
mov ebx, str.knbcenter.exe
push ebx
call fcn.00416680
pop ecx
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x78]
call fcn.00418190
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x78]
push eax
call edi
push 5
pop ebx
test eax, eax
jne 0x4d0340
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
cmovae eax, dword [ebp - 0x78]
push eax
push str.CUninstall_StopSvr_PathFileExists___ws_r_n
push 0x5aca00
call fcn.004dddd9
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.0043bae5
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0043bb0e
test eax, eax
js 0x4d03b4
lea ecx, [ebp - 0x48]
call fcn.0043bbd9
test eax, eax
je 0x4d03b4
call fcn.00437474
push eax
lea ecx, [ebp - 0x80]
call fcn.0043a4ef
mov byte [ebp - 4], 3
call fcn.00437474
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043a4ef
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x48]
call fcn.0043beff
lea ecx, [ebp - 0x80]
call fcn.00454f04
push eax
lea ecx, [ebp - 0x80]
call fcn.0043c2e8
push str.knbcenter.exe
lea ecx, [ebp - 0x80]
call fcn.004684c0
test eax, eax
jne 0x4d029b
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0043bd0a
test eax, eax
js 0x4d029b
lea ecx, [ebp - 0x7c]
call fcn.00454f04
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043c2e8
push esi
push str.knbcenter.exe
lea ecx, [ebp - 0x7c]
call fcn.00468330
cmp eax, 0xffffffff
jne 0x4d02c7
mov ecx, dword [ebp - 0x7c]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
mov ecx, dword [ebp - 0x80]
mov byte [ebp - 4], 2
lea ecx, [ecx - 0x10]
call fcn.00436fdb
lea ecx, [ebp - 0x48]
call fcn.0043bbe7
test eax, eax
jne 0x4d0215
jmp 0x4d0334
push eax
push esi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00447a0f
mov esi, dword [eax]
push esi
mov byte [ebp - 4], bl
call fcn.00416680
pop ecx
push eax
push esi
lea ecx, [ebp - 0x60]
call fcn.00417b50
mov ecx, dword [ebp - 0x94]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.00436fdb
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push eax
push str.CUninstall_StopSvr_wstrPath___ws_r_n
push 0x5aca00
call fcn.004dddd9
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00436fdb
mov ecx, dword [ebp - 0x80]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.0043b9ef
cmp dword [ebp - 0x50], 0
je 0x4d0583
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x28]
call fcn.00417230
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
call fcn.004cf946
mov esi, str.Module_securityknbpolicy.dll
push esi
call fcn.00416680
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00418190
push 8
pop esi
cmp dword [ebp - 0x14], esi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call edi
test eax, eax
jne 0x4d03c6
cmp dword [ebp - 0x14], esi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x5aca00
call fcn.004dddd9
add esp, 0xc
xor edi, edi
mov esi, edi
jmp 0x4d04ae
lea ecx, [ebp - 0x48]
call fcn.0043b9ef
push 6
pop esi
xor edi, edi
jmp 0x4d0587
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
call fcn.00417230
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
call fcn.004cf946
mov dword [esp], str.knbcenter.exe
call fcn.00416680
pop ecx
push eax
push str.knbcenter.exe
lea ecx, [ebp - 0x40]
call fcn.00418190
cmp dword [ebp - 0x2c], esi
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call edi
test eax, eax
jne 0x4d042e
cmp dword [ebp - 0x2c], esi
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push str.PathFileExists_wstrPath___ws_no_exists__r_n
push 0x5aca00
call fcn.004dddd9
add esp, 0xc
xor edi, edi
mov esi, edi
jmp 0x4d04a3
xor edi, edi
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
call fcn.004d1197
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov esi, 0x5aca00
mov byte [ebp - 4], 8
cmovae eax, dword [ebp - 0x28]
push eax
push str.CUninstall_StopSvr_LoadInterface___ws_r_n
push esi
call fcn.004dddd9
add esp, 0xc
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x90]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.004cee7b
test eax, eax
jne 0x4d04be
xor esi, esi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
inc esi
call fcn.004cc696
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.00417d20
jmp 0x4d0587
push str.CUninstall_Initialize_Begin__r_n
push esi
call fcn.004dddd9
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
push eax
push str.CUninstall_Initialize_End__d_r_n
push esi
call fcn.004dddd9
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
push str.CUninstall_ExitHostProcess_Begin__r_n
push 0x5aca00
call fcn.004dddd9
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
push eax
push str.CUninstall_ExitHostProcess_End___d_r_n
push 0x5aca00
call fcn.004dddd9
add esp, 0xc
push 0x7d0
call esi
dec ebx
jne 0x4d04ed
push str.CUninstall_UnInitialize_Begin__r_n
mov ebx, 0x5aca00
push ebx
call fcn.004dddd9
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
push eax
push str.CUninstall_UnInitialize_End___d__r_n
push ebx
call fcn.004dddd9
add esp, 0xc
push 0x2710
call esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 7
call fcn.004cc696
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.00417d20
jmp 0x4d0585
xor edi, edi
mov esi, edi
push edi
push 1
lea ecx, [ebp - 0x78]
call fcn.00417d20
push edi
push 1
lea ecx, [ebp - 0x60]
call fcn.00417d20
mov eax, esi
call fcn.004f1d61
ret