Function at 0x10003fdd
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
push 0x40
xor dl, dl
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], dl
push 0x40
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x30f]
mov byte [ebp - 0x310], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], dl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._skernel32.dll
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.sserddAcorPteG
push eax
call sub.MSVCRT.dll_strcpy
mov esi, dword [sym.imp.MSVCRT.dll__strrev]
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1009004c], eax
lea eax, [ebp - 0x108]
push str.AsgnirtSevirDlacigoLteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090048], eax
lea eax, [ebp - 0x108]
push str.ssecorPnepO
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090040], eax
lea eax, [ebp - 0x108]
push str.tsriF23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x1009003c], eax
lea eax, [ebp - 0x108]
push str.txeN23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090038], eax
lea eax, [ebp - 0x108]
push str.AxetuMetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090034], eax
lea eax, [ebp - 0x108]
push str.AemaNeliFeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090030], eax
lea eax, [ebp - 0x108]
push str.AeliFetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090024], eax
lea eax, [ebp - 0x108]
push str.eliFdaeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090020], eax
lea eax, [ebp - 0x108]
push str.eliFetirW
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x1009001c], eax
lea eax, [ebp - 0x108]
push str.AeliFypoC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090018], eax
lea eax, [ebp - 0x108]
push str.AeliFtsriFdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090014], eax
lea eax, [ebp - 0x108]
push str.AeliFtxeNdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090010], eax
lea eax, [ebp - 0x108]
push str.daerhTetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x1009000c], eax
lea eax, [ebp - 0x108]
push str.AeldnaHeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10090028], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sAdvapi32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.AxEyeKnepOgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090058], eax
lea eax, [ebp - 0x108]
push str.AxEeulaVyreuQgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090054], eax
lea eax, [ebp - 0x108]
push str.AeulaVmunEgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090050], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sDbghelp.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.eliFroFeerThcraeS
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009004c]
mov dword [0x10090044], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sUser32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov edi, eax
lea eax, [ebp - 0x108]
push str.swodniWmunE
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop edi
pop esi
mov dword [0x1009002c], eax
pop ebx
leave
ret