Function at 0x446110
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3a8
mov eax, dword [0x5ab3e4]
xor eax, esp
mov dword [esp + 0x3a4], eax
cmp word [0x5b4158], 0
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
jne 0x446166
push 0x104
push 0x5b4158
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x5b4158
call esi
push 0x5b4158
call esi
push str.logInstallMonitor.log
push 0x5b4158
push 0x5b4158
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov ecx, 0x5b4158
mov dword [esp + 0xec], 0
xor eax, eax
mov dword [esp + 0xf0], 7
mov word [esp + 0xdc], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4461a3
sub ecx, edx
sar ecx, 1
push ecx
push 0x5b4158
lea ecx, [esp + 0xe4]
call fcn.00429470
cmp dword [esp + 0xf0], 8
lea eax, [esp + 0xdc]
cmovae eax, dword [esp + 0xdc]
push eax
call fcn.00465040
push str.Global_f30e900e_41cb_4da4_bf6f_6ede61b98fe7
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4467a3
cmp eax, 5
je 0x4467a3
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x446341
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00464d40
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4468d5
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.004295d0
push 3
push 0x58aa1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.004295d0
push 0x2b
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00413b70
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042b240
add esp, 8
call fcn.00464d40
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413cd0
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4462f3
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4462e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a55
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4468d5
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4468cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a55
jmp 0x4468cb
call fcn.00464d40
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x44645e
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.004295d0
push 3
push 0x58aa1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.004295d0
push 0x31
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00413b70
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042b240
add esp, 8
call fcn.00464d40
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413cd0
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x446413
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446409
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a5a
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x44645e
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446454
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a5a
push edx
push ecx
call fcn.004dfb61
add esp, 8
call fcn.00436060
push ecx
call fcn.00435fc0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push dword [esp + 0x3c]
call fcn.0047d830
add esp, 4
lea eax, [esp + 0x138]
push 0x84
push 0
push eax
call fcn.0051cba0
add esp, 0xc
lea eax, [esp + 0x138]
push eax
call fcn.00478ea0
add esp, 4
lea ecx, [esp + 0x138]
push str.skin
call fcn.00486180
lea ecx, [esp + 0x138]
call fcn.00478ff0
push eax
call fcn.0047dab0
add esp, 4
push 1
push str.InstMonitor.zip
call fcn.0047db70
add esp, 8
mov dword [esp + 0xf4], 1
lea eax, [esp + 0xf4]
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
push 0
push eax
lea eax, [esp + 0x10c]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x30
lea eax, [esp + 0x10c]
push 0
push eax
call fcn.0051cba0
add esp, 0xc
lea ecx, [esp + 0x108]
call fcn.00467450
push edi
lea ecx, [esp + 0x28]
call fcn.00427630
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x10c]
call fcn.00467710
mov edx, dword [esp + 0x38]
cmp edx, 8
jb 0x44659f
mov ecx, dword [esp + 0x24]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x446595
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a5f
push edx
push ecx
call fcn.004dfb61
add esp, 8
call fcn.00464d40
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4466cd
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.004295d0
push 3
push 0x58aa1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.004295d0
push 0x4c
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00413b70
mov esi, eax
push str.cmd:
push esi
call fcn.0042b240
test edi, edi
mov ecx, str._null_
cmovne ecx, edi
push ecx
push esi
call fcn.0042b240
add esp, 0x10
call fcn.00464d40
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413cd0
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x446682
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446678
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a64
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4466cd
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4466c3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a64
push edx
push ecx
call fcn.004dfb61
add esp, 8
push 0x314
call fcn.004df7b6
add esp, 4
mov esi, eax
push 0x314
push 0
push esi
call fcn.0051cba0
add esp, 0xc
mov ecx, esi
call fcn.00436920
push 0
sub esp, 0x10
mov dword [esi], vtable.CMainWnd.4.0
mov eax, esp
mov dword [esi + 0x14], vtable.CMainWnd.0
xorps xmm0, xmm0
mov dword [esi + 0x24], vtable.CMainWnd.2.0
mov ecx, esi
mov dword [esi + 0x28], vtable.CMainWnd.3.0
push 0
push SysReAllocString
push 0x58a57c
push 0
mov dword [esi + 0x2c], vtable.CMainWnd.1.0
movups xmmword [eax], xmm0
call fcn.0046a530
push 0x1e8
lea eax, [esp + 0x1c4]
push 0
push eax
call fcn.0051cba0
add esp, 0xc
lea ecx, [esp + 0x1c0]
call fcn.00415980
push ecx
lea ecx, [esp + 0x1c4]
call fcn.00416620
mov ecx, esi
call fcn.0046a570
mov ecx, eax
call fcn.0047b5e0
call fcn.004654b0
lea ecx, [esp + 0x1c0]
call fcn.004162a0
lea ecx, [esp + 0x108]
call fcn.004674b0
lea ecx, [esp + 0x138]
call fcn.004273d0
jmp 0x4469ff
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x4468e1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00464d40
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4468d5
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.004295d0
push 3
push 0x58aa1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.004295d0
push 0x1d
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00413b70
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.0042b240
add esp, 8
call fcn.00464d40
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413cd0
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x44688a
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x446880
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a69
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4468d5
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4468cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a69
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov ecx, edi
call fcn.0044a660
jmp 0x4469ff
call fcn.00464d40
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4469fa
push 0x6b
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_maininstallmonitorprocmoncprocmonc.cpp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x2c], al
call fcn.004295d0
push 3
push 0x58aa1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.004295d0
push 0x23
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4c]
call fcn.00413b70
mov esi, eax
push str.run_in_admin
push esi
call fcn.0042b240
add esp, 8
call fcn.00464d40
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [esp + 0x40]
call fcn.00413cd0
mov edx, dword [esp + 0x20]
cmp edx, 0x10
jb 0x4469b3
mov ecx, dword [esp + 0xc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4469a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a6e
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xf
mov byte [esp + 0xc], 0
cmp edx, 0x10
jb 0x4469fa
mov ecx, dword [esp + 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4469f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a6e
push edx
push ecx
call fcn.004dfb61
add esp, 8
call fcn.004654b0
mov edx, dword [esp + 0xf0]
cmp edx, 8
jb 0x446a3d
mov ecx, dword [esp + 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x446a33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x446a73
push edx
push ecx
call fcn.004dfb61
add esp, 8
mov ecx, dword [esp + 0x3ac]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.004df59c
mov esp, ebp
pop ebp
ret 0x10
call fcn.0052430b
call fcn.0052430b
call fcn.0052430b
call fcn.0052430b
call fcn.0052430b
call fcn.0052430b
call fcn.0052430b
int3