Function at 0x444600
Capabilities:
Check if file exists
Enumerate gui resources
Get file attributes

Disassembly:
push ecx
push ebx
push esi
push 0x51c0cc
call fcn.00404690
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add esp, 4
push eax
call esi
mov bl, 1
cmp eax, 0xffffffff
je 0x444642
test al, 0x10
je 0x444642
push 0x51c0b8
mov byte [0x53c037], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51c098
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444679
test al, 0x10
je 0x444679
push 0x51c084
mov byte [0x53c046], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51c064
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x4446b0
test al, 0x10
je 0x4446b0
push 0x51c04c
mov byte [0x53c047], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51c030
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x4446e7
test al, 0x10
je 0x4446e7
push 0x51c01c
mov byte [0x53c040], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51bff4
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x44471e
test al, 0x10
je 0x44471e
push 0x51c01c
mov byte [0x53c041], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x1b
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x444763
push 0x51bfd8
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444763
test al, 0x10
je 0x444763
push 0x51bfc4
mov byte [0x53c042], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51bf98
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x44479a
test al, 0x10
je 0x44479a
push 0x51bf84
mov byte [0x53c043], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51bf5c
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x4447d1
test al, 0x10
je 0x4447d1
push 0x51bf3c
mov byte [0x53c04b], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51bf18
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444808
test al, 0x10
je 0x444808
push 0x51befc
mov byte [0x53c04a], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51bee0
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x44483f
test al, 0x10
je 0x44483f
push 0x51becc
mov byte [0x53c044], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x1b
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x444884
push 0x51beac
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444884
test al, 0x10
je 0x444884
push 0x51be98
mov byte [0x53c045], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0x51be74
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x4448bb
test al, 0x10
je 0x4448bb
push 0x51be58
mov byte [0x53c049], bl
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
push 0xe
call fcn.0040a8e0
add esp, 4
test eax, eax
je 0x444906
push 0x51be40
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444906
test al, 0x10
je 0x444906
mov byte [0x53c048], bl
push 0x51be1c
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
pop esi
mov al, bl
pop ebx
pop ecx
ret
push 0x51bdf0
call fcn.00404690
add esp, 4
push eax
call esi
cmp eax, 0xffffffff
je 0x444926
test al, 0x10
je 0x444926
push 0x51bdd8
jmp 0x4448ed
push 0x51bdc4
call fcn.00404690
mov esi, dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x444973
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bdac
call fcn.00404690
push eax
call fcn.0043cb00
push 0x538140
push 0x527e20
call fcn.00401350
add esp, 0x10
pop esi
mov al, bl
pop ebx
pop ecx
ret
push 0x51bd94
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x444999
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bd80
jmp 0x444950
push 0x51bd60
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x4449bf
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bd48
jmp 0x444950
push 0x51bd2c
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x4449e8
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bd18
jmp 0x444950
push 0x51bcfc
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x444a11
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bcec
jmp 0x444950
push 0x51bcd0
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
push 0x1b
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x444a5c
push 0x51bcc4
call fcn.00404690
add esp, 4
push eax
push 0
push 4
call esi
test eax, eax
je 0x444a5c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bcb0
jmp 0x444950
push 0x51bca4
call fcn.00404690
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
add esp, 4
push eax
push 0
push 0x100000
call esi
test eax, eax
je 0x444a8e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bc98
jmp 0x444950
push 0x51bc8c
call fcn.00404690
add esp, 4
push eax
push 0
push 0x100000
call esi
test eax, eax
je 0x444aba
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bc80
jmp 0x444950
push 0x51bc70
call fcn.00404690
add esp, 4
push eax
push 0
push 0x100000
call esi
test eax, eax
je 0x444ae6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x51bc70
jmp 0x444950
lea eax, [esp + 0xb]
push eax
push 0x43f5a0
mov byte [esp + 0x13], 0
call dword [sym.imp.USER32.dll_EnumWindows]
cmp byte [esp + 0xb], 0
pop esi
setne al
pop ebx
pop ecx
ret