Function at 0x1000486c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
push 0x40
xor dl, dl
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], dl
push 0x40
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x30f]
mov byte [ebp - 0x310], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], dl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._skernel32.dll
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.sserddAcorPteG
push eax
call sub.MSVCRT.dll_strcpy
mov esi, dword [sym.imp.MSVCRT.dll__strrev]
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100918ec], eax
lea eax, [ebp - 0x108]
push str.AsgnirtSevirDlacigoLteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918e8], eax
lea eax, [ebp - 0x108]
push str.ssecorPnepO
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918e0], eax
lea eax, [ebp - 0x108]
push str.tsriF23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918dc], eax
lea eax, [ebp - 0x108]
push str.txeN23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918d8], eax
lea eax, [ebp - 0x108]
push str.AxetuMetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918d4], eax
lea eax, [ebp - 0x108]
push str.AemaNeliFeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918d0], eax
lea eax, [ebp - 0x108]
push str.AeliFetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918c4], eax
lea eax, [ebp - 0x108]
push str.eliFdaeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918c0], eax
lea eax, [ebp - 0x108]
push str.eliFetirW
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918bc], eax
lea eax, [ebp - 0x108]
push str.AeliFypoC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918b8], eax
lea eax, [ebp - 0x108]
push str.AeliFtsriFdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918b4], eax
lea eax, [ebp - 0x108]
push str.AeliFtxeNdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918b0], eax
lea eax, [ebp - 0x108]
push str.daerhTetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918ac], eax
lea eax, [ebp - 0x108]
push str.AeldnaHeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100918c8], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sAdvapi32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.AxEyeKnepOgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918f8], eax
lea eax, [ebp - 0x108]
push str.AxEeulaVyreuQgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918f4], eax
lea eax, [ebp - 0x108]
push str.AeulaVmunEgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918f0], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sDbghelp.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.eliFroFeerThcraeS
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x100918ec]
mov dword [0x100918e4], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sUser32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov edi, eax
lea eax, [ebp - 0x108]
push str.swodniWmunE
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop edi
pop esi
mov dword [0x100918cc], eax
pop ebx
leave
ret