Function at 0x510a20
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5aa966
mov eax, dword fs:[0]
push eax
mov eax, 0x21b8
call fcn.00583150
mov eax, dword [0x63ad78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x11], 0
call fcn.005065a0
mov ecx, 0x6426b8
call fcn.005059f0
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x11], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x21c0], eax
lea ecx, [ebp - 0x21c0]
push ecx
mov ecx, 0x6426b8
call fcn.005064f0
test eax, eax
jge 0x510aa7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x21bc], eax
lea ecx, [ebp - 0x21bc]
push ecx
mov ecx, 0x6426b8
call fcn.00505c50
call fcn.005066b0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x510cc6
call fcn.005221f0
movsx eax, byte [0x6411d0]
test eax, eax
jne 0x510ae5
push 0x6411d0
call dword [sym.imp.RPCRT4.dll_UuidCreate]
movsx eax, byte [0x6411d0]
test eax, eax
jne 0x510ae5
mov byte [0x6411d0], 1
push 0xac
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.00582ec0
add esp, 0xc
mov dword [ebp - 0x3c], 0x34
mov dword [ebp - 0x40], 0x52
mov dword [ebp - 0x38], 0x1e
mov dword [ebp - 0x34], 0x1f40
push str.nat.167bt.com
lea eax, [ebp - 0xc0]
push eax
call fcn.00583180
add esp, 8
push 8
push 0x6411d0
lea eax, [ebp - 0x2c]
push eax
call fcn.005865c0
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
push 0x101
call fcn.0053b080
mov dword [ebp - 0xc4], eax
mov byte [0x642a80], 0
mov byte [0x63a50b], 0
mov byte [0x64135c], 0
movzx eax, byte [0x63a50b]
test eax, eax
je 0x510c55
mov al, byte [0x60ec6e]
mov byte [ebp - 0x10c4], al
push 0xfff
push 0
lea eax, [ebp - 0x10c3]
push eax
call fcn.00582ec0
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x10c4]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
movsx eax, byte [ebp - 0x10c4]
test eax, eax
je 0x510bfe
lea eax, [ebp - 0x10c4]
push eax
call fcn.00582530
add esp, 4
movsx ecx, byte [ebp + eax - 0x10c5]
cmp ecx, 0x5c
je 0x510bfe
push str.StartingShotKademlia.kad
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
jmp 0x510c12
push 0x609fe0
lea eax, [ebp - 0x10c4]
push eax
call fcn.00583190
add esp, 8
lea eax, [ebp - 0x10c4]
push eax
lea ecx, [ebp - 0x21b8]
call fcn.00410d30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x21b8]
push ecx
call fcn.00526b00
mov ecx, eax
call fcn.0052b690
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21b8]
call fcn.004115f0
call fcn.00526c50
push 0
lea ecx, [ebp - 0x2158]
call fcn.00521760
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2158]
call fcn.00521a40
sub eax, 2
mov dword [ebp - 0x215c], eax
cmp dword [ebp - 0x215c], 0
jg 0x510c92
mov dword [ebp - 0x21c4], 0x20
jmp 0x510c9e
mov eax, dword [ebp - 0x215c]
mov dword [ebp - 0x21c4], eax
mov ecx, dword [ebp - 0x21c4]
push ecx
push 0x20
call fcn.00513fd0
add esp, 8
mov dword [0x63a514], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2158]
call fcn.00521950
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005824ce
mov esp, ebp
pop ebp
ret