Function at 0x444b60
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c0
mov eax, dword [0x5ab3e4]
xor eax, esp
mov dword [esp + 0x1bc], eax
cmp word [0x5b40c0], 0
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
jne 0x444bb6
push 0x104
push 0x5b40c0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x5b40c0
call esi
push 0x5b40c0
call esi
push str.logInstallMonitor.log
push 0x5b40c0
push 0x5b40c0
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov ecx, 0x5b40c0
mov dword [esp + 0xec], 0
xor eax, eax
mov dword [esp + 0xf0], 7
mov word [esp + 0xdc], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x444bf3
sub ecx, edx
sar ecx, 1
push ecx
push 0x5b40c0
lea ecx, [esp + 0xe4]
call fcn.00428400
cmp dword [esp + 0xf0], 8
lea eax, [esp + 0xdc]
cmovae eax, dword [esp + 0xdc]
push eax
call fcn.00463480
push str.Global_f30e900e_41cb_4da4_bf6f_6ede61b98fe7
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4451c2
cmp eax, 5
je 0x4451c2
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x444d91
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00463180
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4452f4
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00428560
push 3
push 0x58aa54
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00428560
push 0x2a
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.004139f0
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042a430
add esp, 8
call fcn.00463180
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413b50
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x444d43
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x444d39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445474
push edx
push ecx
call fcn.004df751
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4452f4
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4452ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445474
jmp 0x4452ea
call fcn.00463180
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x444eae
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00428560
push 3
push 0x58aa54
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00428560
push 0x30
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.004139f0
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042a430
add esp, 8
call fcn.00463180
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413b50
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x444e63
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x444e59
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445479
push edx
push ecx
call fcn.004df751
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x444eae
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x444ea4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445479
push edx
push ecx
call fcn.004df751
add esp, 8
call fcn.00434b70
push ecx
call fcn.00434ad0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push dword [esp + 0x3c]
call fcn.0047bc60
add esp, 4
lea eax, [esp + 0x138]
push 0x84
push 0
push eax
call fcn.0051c790
add esp, 0xc
lea eax, [esp + 0x138]
push eax
call fcn.004772d0
add esp, 4
lea ecx, [esp + 0x138]
push str.skin
call fcn.004845b0
lea ecx, [esp + 0x138]
call fcn.00477420
push eax
call fcn.0047bee0
add esp, 4
push 1
push str.InstMonitor.zip
call fcn.0047bfa0
add esp, 8
mov dword [esp + 0xf4], 1
lea eax, [esp + 0xf4]
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
push 0
push eax
lea eax, [esp + 0x10c]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x30
lea eax, [esp + 0x10c]
push 0
push eax
call fcn.0051c790
add esp, 0xc
lea ecx, [esp + 0x108]
call fcn.00465890
push edi
lea ecx, [esp + 0x28]
call fcn.004265c0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x10c]
call fcn.00465b20
mov edx, dword [esp + 0x38]
cmp edx, 8
jb 0x444fef
mov ecx, dword [esp + 0x24]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x444fe5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44547e
push edx
push ecx
call fcn.004df751
add esp, 8
call fcn.00463180
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x44511d
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00428560
push 3
push 0x58aa54
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00428560
push 0x4b
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.004139f0
mov esi, eax
push str.cmd:
push esi
call fcn.0042a430
test edi, edi
mov ecx, str._null_
cmovne ecx, edi
push ecx
push esi
call fcn.0042a430
add esp, 0x10
call fcn.00463180
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413b50
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4450d2
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4450c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445483
push edx
push ecx
call fcn.004df751
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x44511d
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x445113
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445483
push edx
push ecx
call fcn.004df751
add esp, 8
push 0x4dc
call fcn.004df3a6
add esp, 4
mov esi, eax
push 0x4dc
push 0
push esi
call fcn.0051c790
add esp, 0xc
mov ecx, esi
call fcn.00435430
lea ecx, [esi + 0x314]
mov dword [esi], vtable.CMainWnd.2.0
mov dword [esi + 0x14], vtable.CMainWnd.4.0
mov dword [esi + 0x24], vtable.CMainWnd.1.0
mov dword [esi + 0x28], vtable.CMainWnd.3.0
mov dword [esi + 0x2c], vtable.CMainWnd.0
call fcn.00415920
push 0
sub esp, 0x10
xorps xmm0, xmm0
mov eax, esp
mov ecx, esi
push 0
push SysReAllocString
push 0x58a5ec
push 0
movups xmmword [eax], xmm0
call fcn.00468940
mov ecx, esi
call fcn.00468980
mov ecx, eax
call fcn.00479a10
call fcn.004638f0
lea ecx, [esp + 0x108]
call fcn.004658f0
lea ecx, [esp + 0x138]
call fcn.00426300
jmp 0x44541e
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x445300
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00463180
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4452f4
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00428560
push 3
push 0x58aa54
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00428560
push 0x1c
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.004139f0
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042a430
add esp, 8
call fcn.00463180
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413b50
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4452a9
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44529f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445488
push edx
push ecx
call fcn.004df751
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4452f4
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4452ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445488
push edx
push ecx
call fcn.004df751
add esp, 8
mov ecx, edi
call fcn.00449080
jmp 0x44541e
call fcn.00463180
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x445419
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00428560
push 3
push 0x58aa54
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00428560
push 0x22
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.004139f0
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042a430
add esp, 8
call fcn.00463180
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413b50
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4453d2
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4453c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44548d
push edx
push ecx
call fcn.004df751
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x445419
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44540f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44548d
push edx
push ecx
call fcn.004df751
add esp, 8
call fcn.004638f0
mov edx, dword [esp + 0xf0]
cmp edx, 8
jb 0x44545c
mov ecx, dword [esp + 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x445452
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x445492
push edx
push ecx
call fcn.004df751
add esp, 8
mov ecx, dword [esp + 0x1c4]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.004df18c
mov esp, ebp
pop ebp
ret 0x10
call fcn.00523f1b
call fcn.00523f1b
call fcn.00523f1b
call fcn.00523f1b
call fcn.00523f1b
call fcn.00523f1b
call fcn.00523f1b
int3