Function at 0x49d490
Capabilities:
Check for time delay via gettickcount
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x62819c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov dword [ebp - 0xb0], ebx
xor edi, edi
call fcn.004993a0
test al, al
jne 0x49d4cc
push str.ispdfalone1
push ebx
call fcn.0054c0c3
add esp, 8
test eax, eax
je 0x49d4e7
push 1
call fcn.00546014
add esp, 4
test eax, eax
je 0x49d4e5
mov ecx, eax
call fcn.0052a420
mov edi, eax
jmp 0x49d4e7
xor edi, edi
mov edx, dword [str.PerfToolDllDir]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49d506
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x78]
call fcn.0042daa0
push 0x13
push str.SetupUninstallTotal
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.00437dd0
xor eax, eax
mov dword [ebp - 0x80], 0
push 0x34
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov dword [ebp - 0x44], eax
call fcn.00546014
add esp, 4
lea ecx, [ebp - 0x48]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x48], eax
xor eax, eax
push 1
push eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
call fcn.0049cf40
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x48]
call fcn.0043fdf0
mov esi, dword [ebp - 0xc4]
cmp byte [esi + 0xd], 0
jne 0x49d637
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x48]
call fcn.004402a0
test al, al
jne 0x49d637
cmp esi, dword [ebp - 0x48]
je 0x49d637
lea eax, [esi + 0x28]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004976f0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xc8]
cmp ecx, edx
jne 0x49d61c
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x60]
call fcn.0043e510
lea ecx, [ebp - 0xcc]
call fcn.0043e620
jmp 0x49d646
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x49e499
jmp 0x49d606
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x60]
call fcn.0043e510
push 1
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xac]
call fcn.00463380
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x49d695
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49d68b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49e49e
push edx
push ecx
call fcn.00546044
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
call fcn.004979c0
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x49d6ee
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49d6e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49e49e
push edx
push ecx
call fcn.00546044
add esp, 8
mov edx, dword [ebp - 8]
cmp edx, 0x10
jb 0x49d722
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49d718
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49e49e
push edx
push ecx
call fcn.00546044
add esp, 8
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
cmp edx, 8
jb 0x49d76e
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49d764
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49e49e
push edx
push ecx
call fcn.00546044
add esp, 8
call fcn.0047af30
lea ecx, [ebp - 0xf4]
call fcn.004c9870
mov dword [ebp - 0xd0], 0
call fcn.00428a90
test eax, eax
je 0x49e48f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
push 0x5beee4
push 0
mov dword [ebp - 0xd4], eax
call fcn.005633e9
add esp, 8
call fcn.004993a0
test al, al
jne 0x49d7d3
push str.ispdfalone1
push ebx
call fcn.0054c0c3
add esp, 8
test eax, eax
jne 0x49d7d3
xor ebx, ebx
jmp 0x49d7d8
mov ebx, 1
push ebx
mov ecx, 0x6319b8
mov dword [ebp - 0xc4], ebx
call fcn.00493660
mov ecx, 0x81
test ebx, ebx
mov eax, 0x66
cmovne eax, ecx
mov ecx, 0x631c24
push eax
call fcn.004b9320
mov ecx, 0x6318dc
call fcn.0046e0d0
or ebx, 0xffffffff
test eax, eax
jne 0x49d823
mov eax, 7
mov dword [0x631b3c], eax
jmp 0x49e377
lea eax, [ebp - 0xb4]
push eax
call fcn.004766c0
add esp, 4
mov ecx, 0x631888
push str.kuninstall
push dword [eax]
call fcn.004676d0
mov edx, dword [ebp - 0xb4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d860
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0xb0]
push 0x5beef4
push esi
call fcn.0054c0c3
add esp, 8
test eax, eax
jne 0x49d941
cmp byte [0x631d90], al
je 0x49d8b5
push eax
push eax
push 0x5ae038
push str.CopySelf
push 1
call fcn.004ca730
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49d8b5
push 0xff
push str.CopySelf
call fcn.004ca7b0
add esp, 8
push esi
call fcn.00498370
add esp, 4
cmp eax, 1
jne 0x49d905
cmp byte [0x631d90], 0
je 0x49d8fe
push 0
push 0
push 0x5ae038
push str.CopySelf
push eax
call fcn.004ca770
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49d8fe
push 0xff
push str.CopySelf
call fcn.004ca7d0
add esp, 8
xor esi, esi
jmp 0x49e433
cmp byte [0x631d90], 0
je 0x49d941
push 0
push 0
push 0x5ae038
push str.CopySelf
push 1
call fcn.004ca770
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49d941
push 0xff
push str.CopySelf
call fcn.004ca7d0
add esp, 8
mov ecx, 0x6318dc
call fcn.004714f0
test eax, eax
je 0x49dab8
push str.458_twWinMain_thave_down_power_flag
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
mov ecx, 0x6318dc
call fcn.00470690
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push dword [0x631b40]
mov ecx, 0x631b68
push 0
call fcn.00499260
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x5be710
push eax
mov ecx, 0x631b68
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
call fcn.00497bf0
mov ecx, 0x6319b8
call fcn.00483750
lea eax, [ebp - 0xd0]
mov ecx, 0x6319b8
push eax
call fcn.0048bce0
push eax
lea ecx, [ebp - 0x48]
call fcn.0049e730
mov edx, dword [ebp - 0xd0]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49da2d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x258
push 1
lea ecx, [ebp - 0x48]
call fcn.0049f6c0
lea ecx, [ebp - 0x12c]
call fcn.0049aee0
mov ecx, 0x631b68
call fcn.0049ae40
mov ecx, 0x631b68
call fcn.0049b070
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x48]
call fcn.0049e760
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x49da86
push eax
call fcn.00554cf4
add esp, 4
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
test eax, eax
je 0x49daad
push eax
call fcn.00554cf4
add esp, 4
mov esi, dword [0x631b3c]
jmp 0x49e433
mov ecx, 0x6318dc
call fcn.00471500
test eax, eax
je 0x49db93
push str.466_twWinMain_thave_upgrade_power_flag
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x49dc8c
push 0x5b505c
lea ecx, [ebp - 0xc0]
call fcn.004434e0
push str.You_are_not_using_an_administrator_account._Please_switch_to_administrator_account_to_uninstall_WPS_Office.
lea ecx, [ebp - 0xb8]
call fcn.004434e0
lea eax, [ebp - 0xc0]
mov ecx, 0x631c24
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004bae00
mov ecx, 0x631c24
mov esi, dword [eax]
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004bae00
push 0x40
push esi
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xb4]
call fcn.00428fc0
lea ecx, [ebp - 0xb0]
call fcn.00428fc0
lea ecx, [ebp - 0xb8]
call fcn.00428fc0
lea ecx, [ebp - 0xc0]
call fcn.00428fc0
mov dword [0x631b3c], 5
push str.473_twWinMain_tThe_current_user_is_not_the_administrator_of_this_machine__Can_not_uninstall_WPS
jmp 0x49e322
push str.481_twWinMain_tUser_start_manually_for_the_first_time
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x49e397
cmp byte [0x631d90], 0
je 0x49dbf9
push 0
push 0
push 0x5ae038
push str.DownPower
push 1
call fcn.004ca730
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49dbf9
push 0xff
push str.DownPower
call fcn.004ca7b0
add esp, 8
call fcn.00498be0
cmp byte [0x631d90], 0
mov esi, eax
je 0x49dc3c
push 0
push 0
push 0x5ae038
push str.DownPower
push 1
call fcn.004ca770
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49dc3c
push 0xff
push str.DownPower
call fcn.004ca7d0
add esp, 8
test esi, esi
je 0x49e339
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, 0x6319b8
mov dword [ebp - 0xc0], eax
call fcn.0048b440
test eax, eax
jne 0x49dc82
mov ebx, dword [ebp - 0xc0]
call esi
sub eax, ebx
cmp eax, 0x1388
ja 0x49dc7f
mov ecx, 0x6319b8
call fcn.0048b440
test eax, eax
je 0x49dc66
or ebx, 0xffffffff
mov ecx, 0x6318dc
call fcn.0046b9a0
push 1
push 0x4a
call fcn.004741f0
xor esi, esi
add esp, 8
cmp dword [0x631b50], esi
jne 0x49e224
push str.12F47857_F427_4145_89DC_7ACD2ADDF00D
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push str.9848D113_B031_438e_A5CE_4C2A51735A58
push 4
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x631b38], eax
mov dword [0x631b4c], 4
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x631b50], eax
test eax, eax
jne 0x49dce9
call fcn.00464500
jmp 0x49dd64
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push dword [0x631b4c]
xor ecx, ecx
mov dword [0x631b60], 0xf001f
push 0
push 0
cmp eax, 0xb7
mov dword [0x631b58], esi
push 0xf001f
push dword [0x631b50]
sete cl
mov dword [0x631b5c], esi
mov dword [ebp - 0xc0], ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
mov dword [0x631b48], eax
test eax, eax
jne 0x49dd6a
call fcn.00464500
push dword [0x631b50]
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xe0]
mov dword [0x631b50], esi
mov esi, dword [ebp - 0xc0]
test eax, eax
js 0x49dd78
jmp 0x49dd70
mov esi, dword [ebp - 0xc0]
test esi, esi
jne 0x49e224
mov ecx, 0x6318dc
call fcn.0046de20
test eax, eax
je 0x49e224
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x49de37
push 0x5b505c
lea ecx, [ebp - 0xc4]
call fcn.004434e0
push str.You_are_not_using_an_administrator_account._Please_switch_to_administrator_account_to_uninstall_WPS_Office.
lea ecx, [ebp - 0xb8]
call fcn.004434e0
lea eax, [ebp - 0xc4]
mov ecx, 0x631c24
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004bae00
mov ecx, 0x631c24
mov esi, dword [eax]
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004bae00
push 0x40
push esi
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xb4]
call fcn.00428fc0
lea ecx, [ebp - 0xb0]
call fcn.00428fc0
lea ecx, [ebp - 0xb8]
call fcn.00428fc0
lea ecx, [ebp - 0xc4]
call fcn.00428fc0
mov dword [0x631b3c], 5
push str.534_twWinMain_tThe_current_user_is_not_the_administrator_of_this_machine__Can_not_uninstall_WPS
jmp 0x49e322
push 0
push ecx
mov ecx, esp
push 0x5ac698
call fcn.004435d0
call fcn.00439070
add esp, 8
test eax, eax
jne 0x49de61
mov eax, 2
mov dword [0x631b3c], eax
jmp 0x49e377
call fcn.004764f0
jmp 0x49de70
push dword [ebp - 0xc4]
lea eax, [ebp - 0xe8]
mov ecx, 0x6319b8
push eax
call fcn.0048ba30
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00474390
add esp, 0xc
lea ecx, [ebp - 0xd4]
push eax
call fcn.0042a6a0
mov edx, dword [ebp - 0xe4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49dec0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xe8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49dedd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0xd4]
cmp dword [esi - 0xc], 0
jle 0x49e079
push esi
push str.550_twWinMain_tExist_Wps_Process:_s
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x14
call fcn.00428a90
test eax, eax
je 0x49e48f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xb0]
push str.An_instance_of_WPS_Office___s__is_running._Please_close_and_try_again.
mov dword [ebp - 0xb8], eax
call fcn.004434e0
lea eax, [ebp - 0xb0]
mov ecx, 0x631c24
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004bae00
push esi
push dword [eax]
lea eax, [ebp - 0xb8]
push eax
call fcn.0042bf70
mov edx, dword [ebp - 0xd8]
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49df7e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb0]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49df9b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5b505c
lea ecx, [ebp - 0xb4]
call fcn.004434e0
lea eax, [ebp - 0xb4]
mov ecx, 0x631c24
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004bae00
mov esi, dword [ebp - 0xb8]
push 0x45
push dword [eax]
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0xdc]
cmp eax, 4
mov eax, ebx
sete byte [ebp - 0xb9]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49dffd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49e01a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xb9], 0
je 0x49e043
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49de70
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49de70
push str.557_twWinMain_tAn_instance_of_the_WPS_Office_application_is_running__please_close_and_try_again
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._ERROR_
push 0x631888
mov dword [0x631b3c], 4
call fcn.004677c0
add esp, 0x10
lea ecx, [ebp - 0xb8]
call fcn.00428fc0
jmp 0x49e339
mov ecx, 0x6318dc
call fcn.0046ca50
test eax, eax
jne 0x49e0a9
push eax
push str.565_twWinMain_tapp_init_failed__retCode_is_:__d
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._ERROR_
push 0x631888
call fcn.004677c0
add esp, 0x14
jmp 0x49e339
push str.570_twWinMain_tapp_init_success
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
mov ecx, 0x6319b8
call fcn.00497120
test al, al
je 0x49e0de
lea ecx, [ebp - 0xf4]
call fcn.004c99c0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xc8], 8
push eax
mov dword [ebp - 0xc4], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push dword [ebp + 8]
mov ecx, 0x631b68
push 0
call fcn.00499260
test eax, eax
js 0x49e1f1
push str.592_twWinMain_tg_App.Run...
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
cmp byte [0x631d90], 0
je 0x49e186
push 0
push 0
push 0x5ae038
push str.AppRun
push 1
call fcn.004ca730
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49e186
push 0xff
push str.AppRun
call fcn.004ca7b0
add esp, 8
mov ecx, 0x6318dc
call fcn.0046f090
cmp byte [0x631d90], 0
mov esi, eax
mov dword [ebp - 0xd0], esi
je 0x49e1d4
push 0
push 0
push 0x5ae038
push str.AppRun
push 1
call fcn.004ca770
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49e1d4
push 0xff
push str.AppRun
call fcn.004ca7d0
add esp, 8
push esi
push str.596_twWinMain_tg_App.Run_return:_d
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x14
mov ecx, 0x631b68
call fcn.0049b070
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [0x631b38]
test eax, eax
je 0x49e339
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x631b38], 0
jmp 0x49e339
push str.521_twWinMain_tOne_instance_is_running
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x10
lea ecx, [ebp - 0xb0]
push 0x5b505c
call fcn.004434e0
push str.Another_installation_or_uninstallation_program_is_running_in_system._Two_or_more_program_cannot_be_run_simultaneously.
lea ecx, [ebp - 0xb4]
call fcn.004434e0
lea eax, [ebp - 0xb0]
mov ecx, 0x631c24
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004bae00
mov ecx, 0x631c24
mov esi, dword [eax]
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004bae00
push 0x40
push esi
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0xdc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49e2bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xd8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49e2d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49e2f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb0]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49e313
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [0x631b3c], 3
push str.525_twWinMain_tThere_is_another_uninstaller_running_in_the_system__multiple_uninstallers_cannot_be_run_at_the_same_time
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._ERROR_
push 0x631888
call fcn.004677c0
add esp, 0x10
mov eax, dword [0x631b3c]
test eax, eax
jne 0x49e377
cmp dword [ebp - 0xd0], eax
jne 0x49e377
push 2
push str.611_twWinMain_tUninstall_is_terminated_by_script__retCode_is_:__d
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._ERROR_
push 0x631888
mov dword [0x631b3c], 2
call fcn.004677c0
mov eax, dword [0x631b3c]
add esp, 0x14
push eax
mov ecx, 0x6319b8
call fcn.00492720
mov ecx, 0x631888
call fcn.00467df0
mov esi, dword [0x631b3c]
jmp 0x49e433
cmp byte [0x631d90], 0
je 0x49e3d3
push 0
push 0
push 0x5ae038
push str.Upgrade
push 1
call fcn.004ca730
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49e3d3
push 0xff
push str.Upgrade
call fcn.004ca7b0
add esp, 8
call fcn.0049b9c0
cmp byte [0x631d90], 0
mov esi, eax
je 0x49e416
push 0
push 0
push 0x5ae038
push str.Upgrade
push 1
call fcn.004ca770
add esp, 0x14
cmp byte [0x631d90], 0
je 0x49e416
push 0xff
push str.Upgrade
call fcn.004ca7d0
add esp, 8
push esi
push str.620_twWinMain_tUpgrade_exitCode:__d
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallMain.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x14
mov edx, dword [ebp - 0xd4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x49e44e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xf4]
call fcn.004c9890
lea ecx, [ebp - 0xac]
call fcn.00463430
test edi, edi
je 0x49e47a
mov ecx, edi
call fcn.0052a570
push 1
push edi
call fcn.00546044
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00545ec7
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.004293d0
call fcn.00495ed0
call fcn.00555394
int3