Function at 0x10004738
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
push 0x40
xor dl, dl
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], dl
push 0x40
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x30f]
mov byte [ebp - 0x310], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], dl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._skernel32.dll
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.sserddAcorPteG
push eax
call sub.MSVCRT.dll_strcpy
mov esi, dword [sym.imp.MSVCRT.dll__strrev]
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10090340], eax
lea eax, [ebp - 0x108]
push str.AsgnirtSevirDlacigoLteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x1009033c], eax
lea eax, [ebp - 0x108]
push str.ssecorPnepO
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090334], eax
lea eax, [ebp - 0x108]
push str.tsriF23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090330], eax
lea eax, [ebp - 0x108]
push str.txeN23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x1009032c], eax
lea eax, [ebp - 0x108]
push str.AxetuMetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090328], eax
lea eax, [ebp - 0x108]
push str.AemaNeliFeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090324], eax
lea eax, [ebp - 0x108]
push str.AeliFetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090318], eax
lea eax, [ebp - 0x108]
push str.eliFdaeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090314], eax
lea eax, [ebp - 0x108]
push str.eliFetirW
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090310], eax
lea eax, [ebp - 0x108]
push str.AeliFypoC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x1009030c], eax
lea eax, [ebp - 0x108]
push str.AeliFtsriFdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090308], eax
lea eax, [ebp - 0x108]
push str.AeliFtxeNdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090304], eax
lea eax, [ebp - 0x108]
push str.daerhTetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090300], eax
lea eax, [ebp - 0x108]
push str.AeldnaHeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1009031c], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sAdvapi32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.AxEyeKnepOgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x1009034c], eax
lea eax, [ebp - 0x108]
push str.AxEeulaVyreuQgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090348], eax
lea eax, [ebp - 0x108]
push str.AeulaVmunEgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090344], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sDbghelp.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.eliFroFeerThcraeS
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x10090340]
mov dword [0x10090338], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sUser32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov edi, eax
lea eax, [ebp - 0x108]
push str.swodniWmunE
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop edi
pop esi
mov dword [0x10090320], eax
pop ebx
leave
ret