Function at 0x407a80
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2b30
call fcn.005357a0
mov eax, dword [0x5b4e20]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push 0x58f454
push eax
lea eax, [ebp - 0x2b24]
push eax
mov ebx, ecx
mov dword [ebp - 0x2b24], 0
call fcn.005316a7
add esp, 0xc
cmp dword [ebp - 0x2b24], 0
je 0x407f79
test eax, eax
jne 0x407f79
push esi
lea eax, [ebp - 0x3ec]
push eax
push 0x3e8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0x58e80c
lea eax, [ebp - 0x3ec]
push eax
push str._sHiddenFileFinder_banner__s.bmp
push 0x3e8
push eax
call fcn.00530e69
lea ecx, [ebp - 0x3ec]
call fcn.00403070
push dword [ebp - 0x2b24]
push str.__DOCTYPE_html_PUBLIC_____W3C__DTD_XHTML_1.0_Transitional__EN___http:__www.w3.org_TR_xhtml1_DTD_xhtml1_transitional.dtd__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._html_xmlns_http:__www.w3.org_1999_xhtml__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._head___meta_http_equiv_Content_Type__content_text_html__charsetutf_8____
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._title_Hidden_File_Scan_Report_by_HiddenFileFinder__title_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._style__table__border_collapse:collapse__table_layout:auto__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.th__font_family:_Times_New_Roman___Times__serif__font_size:medium_color:white_background_color:222__border:1px_solid_444__
call fcn.00531deb
add esp, 0x44
push dword [ebp - 0x2b24]
push str.td__font_family:Verdana__font_size:10px__height:25px__font_weight:bold__border:1px_solid__ccc__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.tr.hiddenfolder__color:blue
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.tr.hiddenexefile__color:red
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.tr.normalrow__color:black
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.tr__color:black__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str..footer__font_family:verdana__font_size:12px__color:black__
call fcn.00531deb
push dword [ebp - 0x2b24]
push str.__style____head_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._body_style_width:98___
call fcn.00531deb
add esp, 0x40
lea eax, [ebp - 0x3ec]
push str.100_
push eax
push str.http:__securityxploded.com_hidden_file_finder.php
push str._a_styleborder:0px__href__s__target_blank___img_src_file:___s__styleborder:0px__width_s____a__br_
push dword [ebp - 0x2b24]
call fcn.00531ef1
push dword [ebp - 0x2b24]
push str._br__br__center__h1_stylecolor:black_text_shadow:_1px_1px_2px_C0C0C0_font_family:_Arial___Hidden_File_Scan_Report____center___h1_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._br__p_stylecolor:_860003__font_size:16px__font_family:_Arial__font_weight:bold_text_shadow:_1px_1px_2px_C0C0C0___strong__Scan_Statistics:___strong_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._p__div_styleborder:1px_font_family:Verdana__font_size:12px_padding_left:50px__
call fcn.00531deb
lea eax, [ebp - 0x2b2c]
push eax
call fcn.00531f0a
lea eax, [ebp - 0x2b2c]
push eax
lea eax, [ebp - 0x2b20]
push eax
call fcn.00531f56
mov eax, dword [ebp - 0x2b0c]
add eax, 0x76c
push eax
mov eax, dword [ebp - 0x2b10]
inc eax
push eax
push dword [ebp - 0x2b14]
push str._p__ul_typesquare___li__Scan_Date:__2.2d__2.2d__4d__li_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0x4c
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
lea ecx, [ebx + 0x1f80]
call fcn.00419e40
lea eax, [ebp - 0x2afc]
push eax
push str._li__Scan_Location:__s__li_
push dword [ebp - 0x2b24]
call fcn.00531ef1
mov eax, dword [ebx + 0x2dc4]
add eax, dword [ebx + 0x2dc0]
push eax
push str._li__Total_Scanned_Files:__ld__li_
push dword [ebp - 0x2b24]
call fcn.00531ef1
mov eax, dword [ebx + 0x2db0]
push eax
push str._li__Hidden_Files:__ld__li_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0x24
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
lea ecx, [ebx + 0x352c]
call fcn.00419e40
lea eax, [ebp - 0x2afc]
push eax
push str._li__Total_Scan_Time:__s__li_
push dword [ebp - 0x2b24]
call fcn.00531ef1
push dword [ebp - 0x2b24]
push str.__ul___div_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._br__p_stylecolor:_860003__font_size:16px__font_family:_Arial__font_weight:bold_text_shadow:_1px_1px_2px_C0C0C0___strong__Detailed_Scan_Report:___strong_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._p_class_footer__style_color:6C6CFF____b_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._table_cellspacing5_cellpadding5_width100____tr_style_height:40px____th_style_width:25___Hidden_File_Name__th___th_style_width:10___Type__th___th_style_width:12___File_Size__th_
call fcn.00531deb
push dword [ebp - 0x2b24]
push str._th_style_width:80px__nowrap_nowrap__File_Date__th____th_File_Path__th____tr_
call fcn.00531deb
add esp, 0x34
xor esi, esi
push esi
push esi
push 0x1004
push dword [ebx + 0xb4]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jle 0x407f0a
push edi
lea edi, [ebx + 0x94]
jmp 0x407da0
lea eax, [ebp - 0x2b30]
push eax
lea eax, [ebp - 0x2b28]
push eax
push esi
mov ecx, edi
call fcn.00404170
mov eax, dword [ebp - 0x2b28]
push dword [ebp - 0x2b24]
cmp eax, 0xff0000
jne 0x407dd0
push str._tr_class_hiddenfolder__
jmp 0x407de3
cmp eax, 0xff
jne 0x407dde
push str._tr_class_hiddenexefile__
jmp 0x407de3
push str._tr_class_normalrow__
call fcn.00531deb
add esp, 8
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
push 0
push esi
mov ecx, edi
call fcn.0041cf6f
lea eax, [ebp - 0x2afc]
push eax
push str._td__s__td_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0xc
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
push 1
push esi
mov ecx, edi
call fcn.0041cf6f
lea eax, [ebp - 0x2afc]
push eax
push str._td__s__td_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0xc
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
push 2
push esi
mov ecx, edi
call fcn.0041cf6f
lea eax, [ebp - 0x2afc]
push eax
push str._td_styletext_align:right___s__td_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0xc
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
push 3
push esi
mov ecx, edi
call fcn.0041cf6f
lea eax, [ebp - 0x2afc]
push eax
push str._td_styletext_align:right___s__td_
push dword [ebp - 0x2b24]
call fcn.00531ef1
add esp, 0xc
lea eax, [ebp - 0x2afc]
push 0x3e8
push eax
push 4
push esi
mov ecx, edi
call fcn.0041cf6f
lea eax, [ebp - 0x2afc]
push eax
push str._td_styletext_align:left___s__td_
push dword [ebp - 0x2b24]
call fcn.00531ef1
push dword [ebp - 0x2b24]
push str.__tr_
call fcn.00531deb
add esp, 0x14
inc esi
push 0
push 0
push 0x1004
push dword [ebx + 0xb4]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, eax
jl 0x407da0
pop edi
push dword [ebp - 0x2b24]
push str.__table___br_
call fcn.00531deb
push 0x58e80c
push str.__br___hr___div_class_footer___Report_generated_by__b_HiddenFileFinder__b__Application__version__s__from
push dword [ebp - 0x2b24]
call fcn.00531ef1
push str.http:__securityxploded.com_hidden_file_finder.php
push str._a_href__s__www.SecurityXploded.com.__a____div_
push dword [ebp - 0x2b24]
call fcn.00531ef1
push dword [ebp - 0x2b24]
push str.__br_____body____html_
call fcn.00531deb
push dword [ebp - 0x2b24]
call fcn.00531cd0
add esp, 0x2c
mov eax, 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005308a3
mov esp, ebp
pop ebp
ret 4
push 0x10
push 0x58def0
push str.Failed_to_create_file_for_saving_the_Hidden_File_report._nMake_sure_you_have_specified_valid_file_path.
mov ecx, ebx
call fcn.00415b78
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.005308a3
mov esp, ebp
pop ebp
ret 4