Function at 0x533d50
Capabilities:
Accept command line arguments
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
call fcn.00533aa0
call fcn.005051a0
push str.360Safe
call fcn.004ed3b0
mov ecx, eax
call fcn.00535070
lea ecx, [ebp - 0x3c]
call fcn.004b29d0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004b2b10
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [0x5e5268], eax
cmp dword [ebp - 0x78], 0xffffffff
jne 0x533db9
mov dword [ebp - 0xb4], 1
lea ecx, [ebp - 0x3c]
call fcn.004b2a80
mov eax, dword [ebp - 0xb4]
jmp 0x53427f
cmp dword [ebp - 0x78], 9
jne 0x533ddc
mov dword [ebp - 0xb8], 1
lea ecx, [ebp - 0x3c]
call fcn.004b2a80
mov eax, dword [ebp - 0xb8]
jmp 0x53427f
cmp dword [ebp - 0x78], 8
jne 0x533e04
call fcn.005050a0
mov dword [ebp - 0xbc], 1
lea ecx, [ebp - 0x3c]
call fcn.004b2a80
mov eax, dword [ebp - 0xbc]
jmp 0x53427f
push str.360WDPAYPROTECTINIT
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x10], eax
push 0x3e8
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call fcn.00533bb0
add esp, 4
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp dword [ebp - 0x14], 0
je 0x533e67
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0x3c]
call fcn.004b2a80
mov eax, dword [ebp - 0xc0]
jmp 0x53427f
lea ecx, [ebp - 0x74]
call fcn.00534980
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x5f1980
call fcn.005347f0
lea ecx, [ebp - 0x3c]
push ecx
call fcn.004d07b0
mov ecx, eax
call fcn.004d2340
call fcn.004d07b0
mov ecx, eax
call fcn.004d0a10
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0xc8]
sub eax, 1
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xa
ja case.0x533ec4.8
mov ecx, dword [ebp - 0xc8]
jmp dword [ecx*4 + 0x534284]
lea ecx, [ebp - 0x7c]
call fcn.00426ee0
lea edx, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x3c]
call fcn.004b31c0
lea ecx, [ebp - 0x80]
call fcn.00426ee0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004b3190
cmp dword [ebp - 0x78], 0xb
jne 0x533f06
push 0x124
lea ecx, [ebp - 0x7c]
call fcn.00427980
lea ecx, [ebp - 0x80]
call fcn.004273c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.004273c0
push eax
push 2
push 6
call fcn.004d27a0
add esp, 0x10
lea ecx, [ebp - 0x80]
call fcn.00426fe0
lea ecx, [ebp - 0x7c]
call fcn.00426fe0
jmp case.0x533ec4.8
push 0
push 0
push 0
push 8
call fcn.004d27a0
add esp, 0x10
jmp case.0x533ec4.8
push 0
push 0
push 0
push 7
call fcn.004d27a0
add esp, 0x10
jmp case.0x533ec4.8
push 0
push 0
push 0
push 7
call fcn.004d27a0
add esp, 0x10
jmp case.0x533ec4.8
push 0
push 0
push 0
push 1
call fcn.004d27a0
add esp, 0x10
jmp case.0x533ec4.8
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.004d07b0
mov ecx, eax
call fcn.004d1540
jmp case.0x533ec4.8
mov edx, dword [ebp - 0x78]
push edx
call fcn.004d07b0
mov ecx, eax
call fcn.004d1540
jmp case.0x533ec4.8
mov eax, dword [ebp - 0x78]
push eax
call fcn.004d07b0
mov ecx, eax
call fcn.004d1540
jmp case.0x533ec4.8
push 0
push 0
push 8
push 6
call fcn.004d27a0
add esp, 0x10
cmp dword [ebp - 0x78], 4
je 0x533fd3
cmp dword [ebp - 0x78], 2
jne 0x533fd8
call fcn.00504fd0
cmp dword [ebp - 0x78], 1
je 0x533fea
cmp dword [ebp - 0x78], 3
je 0x533fea
cmp dword [ebp - 0x78], 5
jne 0x53405d
call fcn.00504d90
call fcn.004d48f0
test eax, eax
je 0x53405d
push 0x100000
lea ecx, [ebp - 0x3c]
call fcn.004b3200
push eax
call fcn.004d48f0
mov ecx, eax
call fcn.0052dfa0
call fcn.004d48f0
mov ecx, eax
call fcn.004d4aa0
test eax, eax
jle 0x53405d
mov dword [ebp - 0x88], 0x5155524c
mov dword [ebp - 0x84], 4
push 0x4d47534d
mov ecx, dword [ebp - 0x84]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.004b5b60
add esp, 0xc
call fcn.004d48f0
mov ecx, eax
call fcn.004d4ac0
lea ecx, [ebp - 0x74]
call fcn.005346b0
mov dword [ebp - 0xc], eax
call fcn.004d48f0
mov ecx, eax
call fcn.005346a0
mov eax, dword [0x5e5268]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
je 0x534092
cmp dword [ebp - 0x78], 3
je 0x534092
cmp dword [ebp - 0x78], 5
jne 0x5341c0
call fcn.004d07b0
mov ecx, eax
call fcn.00534960
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x94], 0
cmp dword [ebp - 0x8c], 1
jne 0x5340c3
mov dword [ebp - 0x94], 0
jmp 0x5340ea
cmp dword [ebp - 0x8c], 0
jne 0x5340d8
mov dword [ebp - 0x94], 1
jmp 0x5340ea
call fcn.004d07b0
mov ecx, eax
call fcn.004d32b0
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.00504f40
add esp, 4
mov edx, dword [ebp - 0x94]
push edx
call fcn.004d07b0
mov ecx, eax
call fcn.004d2d70
call fcn.004d07b0
mov ecx, eax
call fcn.004d2d90
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00534680
lea ecx, [ebp - 0x90]
call fcn.004273d0
test eax, eax
jle 0x5341b5
push 0x14
push 0
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0055e2a0
add esp, 0xc
mov dword [ebp - 0xa8], 0x4e504553
mov dword [ebp - 0xa0], 0x14
lea ecx, [ebp - 0x90]
call fcn.004273c0
push eax
call fcn.0055e008
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x8c], 1
jne 0x53418c
mov dword [ebp - 0x9c], 3
jmp 0x534196
mov dword [ebp - 0x9c], 2
push 0x4d47534d
mov edx, dword [ebp - 0xa0]
push edx
lea eax, [ebp - 0xa8]
push eax
call fcn.004d07b0
mov ecx, eax
call fcn.004d2280
lea ecx, [ebp - 0x90]
call fcn.00426fe0
call fcn.004d07b0
mov ecx, eax
call fcn.004d38b0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 8], eax
push 0x1388
call fcn.004d07b0
mov ecx, eax
call fcn.004d2220
test eax, eax
jne 0x5341fc
cmp dword [ebp - 8], 0
je 0x5341fc
push 0xffffffffffffffff
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.004ed1c0
mov ecx, eax
call fcn.00535170
mov ecx, 0x5f1980
call fcn.005348d0
cmp dword [ebp - 0x78], 2
jne 0x53424e
push 8
push 0
lea edx, [ebp - 0xb0]
push edx
call fcn.0055e2a0
add esp, 0xc
lea eax, [ebp - 0xb0]
push eax
call fcn.004b54f0
add esp, 4
mov ecx, dword [ebp - 0xb0]
push ecx
push str.NetPayExitTime
call fcn.004b5440
add esp, 8
cmp dword [ebp - 8], 0
je 0x534260
push 0
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x74]
call fcn.00534a80
lea ecx, [ebp - 0x3c]
call fcn.004b2a80
mov eax, dword [ebp - 0xc4]
mov esp, ebp
pop ebp
ret