Function at 0x10004452
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
push 0x40
xor dl, dl
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], dl
push 0x40
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x30f]
mov byte [ebp - 0x310], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], dl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._skernel32.dll
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.sserddAcorPteG
push eax
call sub.MSVCRT.dll_strcpy
mov esi, dword [sym.imp.MSVCRT.dll__strrev]
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1008ffe4], eax
lea eax, [ebp - 0x108]
push str.AsgnirtSevirDlacigoLteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffe0], eax
lea eax, [ebp - 0x108]
push str.ssecorPnepO
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffd8], eax
lea eax, [ebp - 0x108]
push str.tsriF23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffd4], eax
lea eax, [ebp - 0x108]
push str.txeN23ssecorP
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffd0], eax
lea eax, [ebp - 0x108]
push str.AxetuMetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffcc], eax
lea eax, [ebp - 0x108]
push str.AemaNeliFeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffc8], eax
lea eax, [ebp - 0x108]
push str.AeliFetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffbc], eax
lea eax, [ebp - 0x108]
push str.eliFdaeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffb8], eax
lea eax, [ebp - 0x108]
push str.eliFetirW
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffb4], eax
lea eax, [ebp - 0x108]
push str.AeliFypoC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffb0], eax
lea eax, [ebp - 0x108]
push str.AeliFtsriFdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffac], eax
lea eax, [ebp - 0x108]
push str.AeliFtxeNdniF
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffa8], eax
lea eax, [ebp - 0x108]
push str.daerhTetaerC
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffa4], eax
lea eax, [ebp - 0x108]
push str.AeldnaHeludoMteG
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1008ffc0], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sAdvapi32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.AxEyeKnepOgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008fff0], eax
lea eax, [ebp - 0x108]
push str.AxEeulaVyreuQgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffec], eax
lea eax, [ebp - 0x108]
push str.AeulaVmunEgeR
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffe8], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sDbghelp.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x108]
push str.eliFroFeerThcraeS
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 4]
call dword [0x1008ffe4]
mov dword [0x1008ffdc], eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x20c]
push str._sUser32.dll
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov edi, eax
lea eax, [ebp - 0x108]
push str.swodniWmunE
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop edi
pop esi
mov dword [0x1008ffc4], eax
pop ebx
leave
ret