Function at 0x510a20
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5aa966
mov eax, dword fs:[0]
push eax
mov eax, 0x21b8
call fcn.00583150
mov eax, dword [0x636d78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x11], 0
call fcn.005065a0
mov ecx, 0x63e6a8
call fcn.005059f0
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x11], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x21c0], eax
lea ecx, [ebp - 0x21c0]
push ecx
mov ecx, 0x63e6a8
call fcn.005064f0
test eax, eax
jge 0x510aa7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x21bc], eax
lea ecx, [ebp - 0x21bc]
push ecx
mov ecx, 0x63e6a8
call fcn.00505c50
call fcn.005066b0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x510cc6
call fcn.005221d0
movsx eax, byte [0x63d1c0]
test eax, eax
jne 0x510ae5
push 0x63d1c0
call dword [sym.imp.RPCRT4.dll_UuidCreate]
movsx eax, byte [0x63d1c0]
test eax, eax
jne 0x510ae5
mov byte [0x63d1c0], 1
push 0xac
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.00582ec0
add esp, 0xc
mov dword [ebp - 0x3c], 0x34
mov dword [ebp - 0x40], 0x52
mov dword [ebp - 0x38], 0x1e
mov dword [ebp - 0x34], 0x1f40
push str.nat.167bt.com
lea eax, [ebp - 0xc0]
push eax
call fcn.00583180
add esp, 8
push 8
push 0x63d1c0
lea eax, [ebp - 0x2c]
push eax
call fcn.005865c0
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
push 0x101
call fcn.0053b080
mov dword [ebp - 0xc4], eax
mov byte [0x63ea70], 0
mov byte [0x63650b], 0
mov byte [0x63d34c], 0
movzx eax, byte [0x63650b]
test eax, eax
je 0x510c55
mov al, byte [0x60ac7e]
mov byte [ebp - 0x10c4], al
push 0xfff
push 0
lea eax, [ebp - 0x10c3]
push eax
call fcn.00582ec0
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x10c4]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
movsx eax, byte [ebp - 0x10c4]
test eax, eax
je 0x510bfe
lea eax, [ebp - 0x10c4]
push eax
call fcn.00582530
add esp, 4
movsx ecx, byte [ebp + eax - 0x10c5]
cmp ecx, 0x5c
je 0x510bfe
push str.StartingShotKademlia.kad
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
jmp 0x510c12
push 0x605ff0
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
lea eax, [ebp - 0x10c4]
push eax
lea ecx, [ebp - 0x21b8]
call fcn.00410d30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x21b8]
push ecx
call fcn.00526b20
mov ecx, eax
call fcn.0052b6b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21b8]
call fcn.004115f0
call fcn.00526c70
push 0
lea ecx, [ebp - 0x2158]
call fcn.00521740
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2158]
call fcn.00521a20
sub eax, 2
mov dword [ebp - 0x215c], eax
cmp dword [ebp - 0x215c], 0
jg 0x510c92
mov dword [ebp - 0x21c4], 0x20
jmp 0x510c9e
mov eax, dword [ebp - 0x215c]
mov dword [ebp - 0x21c4], eax
mov ecx, dword [ebp - 0x21c4]
push ecx
push 0x20
call fcn.00513fd0
add esp, 8
mov dword [0x636514], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2158]
call fcn.00521930
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005824ce
mov esp, ebp
pop ebp
ret