Function at 0x5814dc
Capabilities:
Check mutex on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x612096
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x250
push edi
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x248], 0
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x10]
call fcn.004e0750
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.004e1270
push eax
call fcn.0057e8d5
add esp, 4
and eax, 0xff
test eax, eax
je 0x58161d
push 0x7cf840
push 1
lea ecx, [ebp - 0x23c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00502390
mov dword [ebp - 0x250], eax
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x254], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x254]
call fcn.00500d90
mov byte [ebp - 0x238], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x23c]
call fcn.004e0030
mov eax, dword [ebp - 0x238]
and eax, 0xff
test eax, eax
je 0x5815a6
push 0
push 0x7cf844
lea ecx, [ebp - 0x10]
call fcn.004e5570
lea ecx, [ebp - 0x1c]
call fcn.005013a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
push ecx
call fcn.005811f6
add esp, 4
mov byte [ebp - 4], 4
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
call fcn.004e0910
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x18]
call fcn.004e1270
push eax
call fcn.005850c0
add esp, 0xc
push 0
push 0x7cf848
push 1
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004e56a0
mov ecx, eax
call fcn.004e5570
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004e0030
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004e0030
jmp 0x58174e
mov word [ebp - 0x228], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x226]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [ebp - 0x228]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x10]
call fcn.00500cf0
push 0x7cf85c
push 1
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00502390
mov dword [ebp - 0x258], eax
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x25c], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x25c]
call fcn.00500d90
mov byte [ebp - 0x240], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x244]
call fcn.004e0030
mov eax, dword [ebp - 0x240]
and eax, 0xff
test eax, eax
je 0x5816c2
push 0
push 0x7cf860
lea ecx, [ebp - 0x10]
call fcn.004e5570
lea ecx, [ebp - 0x22c]
call fcn.005013a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
push ecx
call fcn.005811f6
add esp, 4
mov byte [ebp - 4], 7
lea edx, [ebp - 0x22c]
push edx
lea ecx, [ebp - 0x20]
call fcn.004e0910
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x20]
call fcn.004e1270
push eax
call fcn.005850c0
add esp, 0xc
push 0
push str._XiaoHao_
push 1
lea ecx, [ebp - 0x22c]
push ecx
push 0
push 0x7cf864
lea ecx, [ebp - 0x10]
call fcn.004e5570
mov ecx, eax
call fcn.004e56a0
mov ecx, eax
call fcn.004e5570
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
call fcn.004e0030
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x22c]
call fcn.004e0030
mov dword [ebp - 0x14], 0
jmp 0x581760
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x3e8
jge 0x581843
push 0x64
lea ecx, [ebp - 0x230]
call fcn.004e06e0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
push str.bbs.125.la_Cookie_d
lea ecx, [ebp - 0x230]
push ecx
call fcn.004e5700
add esp, 0xc
lea ecx, [ebp - 0x230]
call fcn.004e1270
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x234], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x5817da
cmp dword [ebp - 0x234], 0
je 0x5817d8
mov edx, dword [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x58182f
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
lea ecx, [ebp - 0x10]
call fcn.004e1270
push eax
push str._s_d
lea ecx, [ebp - 0x230]
push ecx
call fcn.004e5700
add esp, 0x10
lea edx, [ebp - 0x230]
push edx
lea ecx, [ebp - 0x10]
call fcn.004e07b0
cmp dword [ebp + 0xc], 0
je 0x58181e
mov eax, dword [ebp - 0x14]
add eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.004e0030
jmp 0x581843
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.004e0030
jmp 0x581757
lea ecx, [ebp - 0x10]
call fcn.004e1270
push eax
call fcn.0057e8d5
add esp, 4
and eax, 0xff
test eax, eax
jne 0x581869
lea edx, [ebp - 0x10]
push edx
call fcn.0057e91a
add esp, 4
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 8]
call fcn.004e0750
mov ecx, dword [ebp - 0x248]
or ecx, 1
mov dword [ebp - 0x248], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004e0030
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 0xc