Function at 0x10003e30
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
push 0x40
xor dl, dl
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], dl
push 0x40
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x30f]
mov byte [ebp - 0x310], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], dl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._skernel32.dll
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.sserddAcorPteG
push eax
call sub.MSVCRT.dll_strcpy
mov esi, dword [sym.imp.MSVCRT.dll__strrev]
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1009273c], eax
lea eax, [ebp - 0x108]
push str.AsgnirtSevirDlacigoLteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092738], eax
lea eax, [ebp - 0x108]
push str.ssecorPnepO
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092730], eax
lea eax, [ebp - 0x108]
push str.tsriF23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x1009272c], eax
lea eax, [ebp - 0x108]
push str.txeN23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092728], eax
lea eax, [ebp - 0x108]
push str.AxetuMetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092724], eax
lea eax, [ebp - 0x108]
push str.AemaNeliFeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092720], eax
lea eax, [ebp - 0x108]
push str.AeliFetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092714], eax
lea eax, [ebp - 0x108]
push str.eliFdaeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092710], eax
lea eax, [ebp - 0x108]
push str.eliFetirW
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x1009270c], eax
lea eax, [ebp - 0x108]
push str.AeliFypoC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092708], eax
lea eax, [ebp - 0x108]
push str.AeliFtsriFdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092704], eax
lea eax, [ebp - 0x108]
push str.AeliFtxeNdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092700], eax
lea eax, [ebp - 0x108]
push str.daerhTetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x100926fc], eax
lea eax, [ebp - 0x108]
push str.AeldnaHeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10092718], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sAdvapi32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.AxEyeKnepOgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092748], eax
lea eax, [ebp - 0x108]
push str.AxEeulaVyreuQgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092744], eax
lea eax, [ebp - 0x108]
push str.AeulaVmunEgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092740], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sDbghelp.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.eliFroFeerThcraeS
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1009273c]
mov dword [0x10092734], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sUser32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov edi, eax
lea eax, [ebp - 0x108]
push str.swodniWmunE
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop edi
pop esi
mov dword [0x1009271c], eax
pop ebx
leave
ret