Function at 0x445d40
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c0
mov eax, dword [0x5ac3e4]
xor eax, esp
mov dword [esp + 0x1bc], eax
cmp word [0x5b5548], 0
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
jne 0x445d96
push 0x104
push 0x5b5548
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x5b5548
call esi
push 0x5b5548
call esi
push 0x58e718
push 0x5b5548
push 0x5b5548
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov ecx, 0x5b5548
mov dword [esp + 0xec], 0
xor eax, eax
mov dword [esp + 0xf0], 7
mov word [esp + 0xdc], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x445dd3
sub ecx, edx
sar ecx, 1
push ecx
push 0x5b5548
lea ecx, [esp + 0xe4]
call fcn.004295e0
cmp dword [esp + 0xf0], 8
lea eax, [esp + 0xdc]
cmovae eax, dword [esp + 0xdc]
push eax
call fcn.00464660
push 0x58e488
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4463a2
cmp eax, 5
je 0x4463a2
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x445f71
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00464360
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4464d4
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00429740
push 3
push 0x58c024
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00429740
push 0x2a
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00414be0
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042b610
add esp, 8
call fcn.00464360
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00414d40
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x445f23
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x445f19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446654
push edx
push ecx
call fcn.004e0941
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4464d4
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4464ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446654
jmp 0x4464ca
call fcn.00464360
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x44608e
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00429740
push 3
push 0x58c024
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00429740
push 0x30
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00414be0
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042b610
add esp, 8
call fcn.00464360
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00414d40
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x446043
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446039
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446659
push edx
push ecx
call fcn.004e0941
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x44608e
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446659
push edx
push ecx
call fcn.004e0941
add esp, 8
call fcn.00435d50
push ecx
call fcn.00435cb0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push dword [esp + 0x3c]
call fcn.0047ce40
add esp, 4
lea eax, [esp + 0x138]
push 0x84
push 0
push eax
call fcn.0051d990
add esp, 0xc
lea eax, [esp + 0x138]
push eax
call fcn.004784b0
add esp, 4
lea ecx, [esp + 0x138]
push str.skin
call fcn.00485780
lea ecx, [esp + 0x138]
call fcn.00478600
push eax
call fcn.0047d0c0
add esp, 4
push 1
push str.InstMonitor.zip
call fcn.0047d180
add esp, 8
mov dword [esp + 0xf4], 1
lea eax, [esp + 0xf4]
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
push 0
push eax
lea eax, [esp + 0x10c]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x30
lea eax, [esp + 0x10c]
push 0
push eax
call fcn.0051d990
add esp, 0xc
lea ecx, [esp + 0x108]
call fcn.00466a70
push edi
lea ecx, [esp + 0x28]
call fcn.004277a0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x10c]
call fcn.00466d00
mov edx, dword [esp + 0x38]
cmp edx, 8
jb 0x4461cf
mov ecx, dword [esp + 0x24]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4461c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44665e
push edx
push ecx
call fcn.004e0941
add esp, 8
call fcn.00464360
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4462fd
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00429740
push 3
push 0x58c024
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00429740
push 0x4b
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00414be0
mov esi, eax
push str.cmd:
push esi
call fcn.0042b610
test edi, edi
mov ecx, str._null_
cmovne ecx, edi
push ecx
push esi
call fcn.0042b610
add esp, 0x10
call fcn.00464360
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00414d40
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4462b2
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4462a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446663
push edx
push ecx
call fcn.004e0941
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4462fd
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4462f3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446663
push edx
push ecx
call fcn.004e0941
add esp, 8
push 0x4dc
call fcn.004e0596
add esp, 4
mov esi, eax
push 0x4dc
push 0
push esi
call fcn.0051d990
add esp, 0xc
mov ecx, esi
call fcn.00436610
lea ecx, [esi + 0x314]
mov dword [esi], vtable.CMainWnd.3.0
mov dword [esi + 0x14], vtable.CMainWnd.4.0
mov dword [esi + 0x24], vtable.CMainWnd.1.0
mov dword [esi + 0x28], vtable.CMainWnd.2.0
mov dword [esi + 0x2c], vtable.CMainWnd.0
call fcn.00416b00
push 0
sub esp, 0x10
xorps xmm0, xmm0
mov eax, esp
mov ecx, esi
push 0
push SysReAllocString
push 0x58ba6c
push 0
movups xmmword [eax], xmm0
call fcn.00469b20
mov ecx, esi
call fcn.00469b60
mov ecx, eax
call fcn.0047abf0
call fcn.00464ad0
lea ecx, [esp + 0x108]
call fcn.00466ad0
lea ecx, [esp + 0x138]
call fcn.004274e0
jmp 0x4465fe
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x4464e0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00464360
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4464d4
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00429740
push 3
push 0x58c024
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00429740
push 0x1c
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00414be0
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042b610
add esp, 8
call fcn.00464360
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00414d40
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x446489
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44647f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446668
push edx
push ecx
call fcn.004e0941
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4464d4
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4464ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446668
push edx
push ecx
call fcn.004e0941
add esp, 8
mov ecx, edi
call fcn.0044a260
jmp 0x4465fe
call fcn.00464360
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4465f9
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.00429740
push 3
push 0x58c024
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00429740
push 0x22
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00414be0
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042b610
add esp, 8
call fcn.00464360
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00414d40
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4465b2
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4465a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44666d
push edx
push ecx
call fcn.004e0941
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4465f9
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4465ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44666d
push edx
push ecx
call fcn.004e0941
add esp, 8
call fcn.00464ad0
mov edx, dword [esp + 0xf0]
cmp edx, 8
jb 0x44663c
mov ecx, dword [esp + 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x446632
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446672
push edx
push ecx
call fcn.004e0941
add esp, 8
mov ecx, dword [esp + 0x1c4]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.004e037c
mov esp, ebp
pop ebp
ret 0x10
call fcn.0052511b
call fcn.0052511b
call fcn.0052511b
call fcn.0052511b
call fcn.0052511b
call fcn.0052511b
call fcn.0052511b
int3