Function at 0x53a33c
Capabilities:
Check mutex on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59e9c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x250
push edi
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x248], 0
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x10]
call fcn.00499580
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.0049eca0
push eax
call fcn.00537735
add esp, 4
and eax, 0xff
test eax, eax
je 0x53a47d
push 0x6b62f0
push 1
lea ecx, [ebp - 0x23c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004bb300
mov dword [ebp - 0x250], eax
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x254], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x254]
call fcn.004b9da0
mov byte [ebp - 0x238], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x23c]
call fcn.004995e0
mov eax, dword [ebp - 0x238]
and eax, 0xff
test eax, eax
je 0x53a406
push 0
push 0x6b62f4
lea ecx, [ebp - 0x10]
call fcn.0049e520
lea ecx, [ebp - 0x1c]
call fcn.00540f00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
push ecx
call fcn.0053a056
add esp, 4
mov byte [ebp - 4], 4
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
call fcn.00526cc0
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x18]
call fcn.0049eca0
push eax
call fcn.0053df20
add esp, 0xc
push 0
push 0x6b62f8
push 1
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0049e650
mov ecx, eax
call fcn.0049e520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004995e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004995e0
jmp 0x53a5ae
mov word [ebp - 0x228], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x226]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [ebp - 0x228]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x10]
call fcn.004b9d00
push 0x6b630c
push 1
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004bb300
mov dword [ebp - 0x258], eax
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x25c], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x25c]
call fcn.004b9da0
mov byte [ebp - 0x240], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x244]
call fcn.004995e0
mov eax, dword [ebp - 0x240]
and eax, 0xff
test eax, eax
je 0x53a522
push 0
push 0x6b6310
lea ecx, [ebp - 0x10]
call fcn.0049e520
lea ecx, [ebp - 0x22c]
call fcn.00540f00
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
push ecx
call fcn.0053a056
add esp, 4
mov byte [ebp - 4], 7
lea edx, [ebp - 0x22c]
push edx
lea ecx, [ebp - 0x20]
call fcn.00526cc0
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x20]
call fcn.0049eca0
push eax
call fcn.0053df20
add esp, 0xc
push 0
push str._XiaoHao_
push 1
lea ecx, [ebp - 0x22c]
push ecx
push 0
push 0x6b6314
lea ecx, [ebp - 0x10]
call fcn.0049e520
mov ecx, eax
call fcn.0049e650
mov ecx, eax
call fcn.0049e520
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
call fcn.004995e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x22c]
call fcn.004995e0
mov dword [ebp - 0x14], 0
jmp 0x53a5c0
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x3e8
jge 0x53a6a3
push 0x64
lea ecx, [ebp - 0x230]
call fcn.00499510
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
push str.bbs.125.la_Cookie_d
lea ecx, [ebp - 0x230]
push ecx
call fcn.0049e6b0
add esp, 0xc
lea ecx, [ebp - 0x230]
call fcn.0049eca0
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x234], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x53a63a
cmp dword [ebp - 0x234], 0
je 0x53a638
mov edx, dword [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x53a68f
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
lea ecx, [ebp - 0x10]
call fcn.0049eca0
push eax
push str._s_d
lea ecx, [ebp - 0x230]
push ecx
call fcn.0049e6b0
add esp, 0x10
lea edx, [ebp - 0x230]
push edx
lea ecx, [ebp - 0x10]
call fcn.00499600
cmp dword [ebp + 0xc], 0
je 0x53a67e
mov eax, dword [ebp - 0x14]
add eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.004995e0
jmp 0x53a6a3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.004995e0
jmp 0x53a5b7
lea ecx, [ebp - 0x10]
call fcn.0049eca0
push eax
call fcn.00537735
add esp, 4
and eax, 0xff
test eax, eax
jne 0x53a6c9
lea edx, [ebp - 0x10]
push edx
call fcn.0053777a
add esp, 4
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 8]
call fcn.00499580
mov ecx, dword [ebp - 0x248]
or ecx, 1
mov dword [ebp - 0x248], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004995e0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 0xc