Function at 0x10249bb
Capabilities:
Get common file path
Query environment variable

Disassembly:
push 0xb3c
mov eax, 0x10291b6
call fcn.01027da8
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0xb48], esi
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb44], eax
cmp edi, eax
je 0x10251a2
cmp esi, eax
je 0x10251a2
mov ebx, dword [ebp + 0x10]
cmp ebx, 0x104
jae 0x1024a0e
mov dword [ebp - 0xb40], 0xa0
jmp 0x10251c1
mov dword [ebp - 4], eax
xor ecx, ecx
push 2
pop edx
lea eax, [ebx + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.01019242
pop ecx
mov dword [ebp - 0xb44], eax
test eax, eax
jne 0x1024a42
mov dword [ebp - 0xb40], 0xe
jmp 0x10251ac
push ebx
xor ecx, ecx
push eax
mov word [esi], cx
push edi
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x1024a68
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb40], eax
jmp 0x10251ac
mov dword [ebp - 0xb3c], 0x30
push 8
pop edx
mov ecx, edx
mov esi, 0x1011e34
lea edi, [ebp - 0xb38]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
push 7
pop ebx
mov ecx, ebx
lea edi, [ebp - 0xb16]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0xaf8], 0x1d
mov ecx, edx
mov esi, 0x1011e10
lea edi, [ebp - 0xaf4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
mov ecx, ebx
lea edi, [ebp - 0xad2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0xab4], 0x1a
xor eax, eax
push 9
mov ecx, ebx
mov esi, 0x1011df4
lea edi, [ebp - 0xab0]
rep movsd dword es:[edi], dword [esi]
pop ecx
lea edi, [ebp - 0xa94]
rep stosd dword es:[edi], eax
mov dword [ebp - 0xa70], 0xa
mov ecx, edx
mov esi, 0x1011dd4
lea edi, [ebp - 0xa6c]
rep movsd dword es:[edi], dword [esi]
push 0xc
mov ecx, edx
lea edi, [ebp - 0xa4c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0xa2c], 0x2f
pop ecx
mov esi, 0x1011da4
lea edi, [ebp - 0xa28]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x9f8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x9e8], 0x1e
xor eax, eax
push 0xc
pop ecx
mov esi, 0x1011d74
lea edi, [ebp - 0x9e4]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x9b4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x9a4], 0x23
push 0xa
pop ecx
mov esi, 0x1011d48
lea edi, [ebp - 0x9a0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x976]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x960], 0x19
xor eax, eax
push 0xf
pop ecx
push 0xb
mov esi, 0x1011d0c
lea edi, [ebp - 0x95c]
rep movsd dword es:[edi], dword [esi]
pop ecx
lea edi, [ebp - 0x920]
stosd dword es:[edi], eax
mov dword [ebp - 0x91c], 0x2e
mov esi, 0x1011cdc
lea edi, [ebp - 0x918]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x8ea]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x8d8], 0x1f
push 0xb
pop ecx
xor eax, eax
mov esi, 0x1011cac
lea edi, [ebp - 0x8d4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x8a6]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x894], 0x17
xor eax, eax
push 0xb
pop ecx
mov esi, 0x1011c80
lea edi, [ebp - 0x890]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x864]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x850], 0x16
push 0xb
pop ecx
mov esi, 0x1011c50
lea edi, [ebp - 0x84c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x81e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x80c], 0x18
push 0xa
pop ecx
mov esi, 0x1011c24
lea edi, [ebp - 0x808]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x7de]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x7c8], 0x2d
push 0xb
pop ecx
mov esi, 0x1011bf4
lea edi, [ebp - 0x7c4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x796]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x784], 3
mov ecx, ebx
mov esi, 0x1011bd4
lea edi, [ebp - 0x780]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x762]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x740], 0x21
push 9
xor eax, eax
mov ecx, ebx
mov esi, 0x1011bb8
lea edi, [ebp - 0x73c]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 9
lea edi, [ebp - 0x720]
rep stosd dword es:[edi], eax
and dword [ebp - 0x6fc], eax
mov ecx, ebx
mov esi, 0x1011b9c
lea edi, [ebp - 0x6f8]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 0xb
lea edi, [ebp - 0x6dc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x6b8], 0x10
pop ecx
mov esi, 0x1011b6c
lea edi, [ebp - 0x6b4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x686]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 6
mov dword [ebp - 0x674], 0x11
pop ecx
mov esi, 0x1011b50
lea edi, [ebp - 0x670]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x656]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x630], 6
mov ecx, edx
mov esi, 0x1011b30
lea edi, [ebp - 0x62c]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x60c]
rep stosd dword es:[edi], eax
push 6
mov dword [ebp - 0x5ec], 0x14
pop ecx
mov esi, 0x1011b18
push 0xa
lea edi, [ebp - 0x5e8]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 9
lea edi, [ebp - 0x5d0]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5a8], 0x22
mov ecx, ebx
mov esi, 0x1011afc
lea edi, [ebp - 0x5a4]
rep movsd dword es:[edi], dword [esi]
pop ecx
lea edi, [ebp - 0x588]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x564], 1
mov ecx, ebx
mov esi, 0x1011adc
lea edi, [ebp - 0x560]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, edx
lea edi, [ebp - 0x542]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x520], 0x20
push 0xa
pop ecx
mov esi, 0x1011ab0
lea edi, [ebp - 0x51c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x4f2]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xa
mov dword [ebp - 0x4dc], 0x1c
pop ecx
push 6
mov esi, 0x1011a88
lea edi, [ebp - 0x4d8]
rep movsd dword es:[edi], dword [esi]
pop ecx
xor eax, eax
lea edi, [ebp - 0x4b0]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x498], 0x27
mov ecx, edx
mov esi, 0x1011a64
lea edi, [ebp - 0x494]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, ebx
lea edi, [ebp - 0x472]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x454], 0x13
push 9
mov ecx, ebx
mov esi, 0x1011a48
lea edi, [ebp - 0x450]
rep movsd dword es:[edi], dword [esi]
pop ecx
xor eax, eax
lea edi, [ebp - 0x434]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x410], 0x12
mov ecx, ebx
mov esi, 0x1011a2c
lea edi, [ebp - 0x40c]
rep movsd dword es:[edi], dword [esi]
push 9
pop ecx
lea edi, [ebp - 0x3f0]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x3cc], 5
mov ecx, ebx
mov esi, 0x1011a0c
lea edi, [ebp - 0x3c8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, edx
lea edi, [ebp - 0x3aa]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x388], 4
mov ecx, ebx
mov esi, 0x10119ec
lea edi, [ebp - 0x384]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x366]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x344], 0x1b
xor eax, eax
push 9
mov ecx, edx
mov esi, 0x10119cc
lea edi, [ebp - 0x340]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edi, [ebp - 0x320]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x300], 0x28
mov ecx, ebx
mov esi, 0x10119b0
lea edi, [ebp - 0x2fc]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 0xa
lea edi, [ebp - 0x2e0]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2bc], 0x26
pop ecx
push 6
mov esi, 0x1011988
lea edi, [ebp - 0x2b8]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 0xd
lea edi, [ebp - 0x290]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x278], 0x2b
pop ecx
mov esi, 0x1011950
lea edi, [ebp - 0x274]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x23e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x234], 2
mov ecx, ebx
mov esi, 0x1011930
lea edi, [ebp - 0x230]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x212]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 6
pop ecx
mov dword [ebp - 0x1f0], edx
mov esi, 0x1011914
lea edi, [ebp - 0x1ec]
rep movsd dword es:[edi], dword [esi]
push 9
movsw word es:[edi], word [esi]
pop esi
mov ecx, esi
xor eax, eax
push 6
lea edi, [ebp - 0x1d2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x1ac], esi
pop ecx
mov esi, 0x10118f8
lea edi, [ebp - 0x1a8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x18e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x168], 0xb
mov ecx, edx
xor eax, eax
push 9
mov esi, 0x10118d8
lea edi, [ebp - 0x164]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edi, [ebp - 0x144]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x124], ebx
mov ecx, ebx
mov esi, 0x10118bc
lea edi, [ebp - 0x120]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 6
lea edi, [ebp - 0x104]
rep stosd dword es:[edi], eax
mov dword [ebp - 0xe0], 0x25
pop ecx
mov esi, 0x10118a0
lea edi, [ebp - 0xdc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 9
pop ecx
lea edi, [ebp - 0xc2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x9c], 0x15
mov ecx, edx
mov esi, 0x1011880
lea edi, [ebp - 0x98]
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x58], 0x24
push 9
mov ecx, ebx
mov esi, 0x1011864
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
pop ecx
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0xb44]
lea esi, [edi + 2]
push 0x25
push esi
call dword [sym.imp.msvcrt.dll_wcschr]
cmp word [edi], 0x25
pop ecx
pop ecx
mov ebx, eax
jne 0x102517f
test ebx, ebx
je 0x102517f
mov edi, dword [ebp - 0xb48]
sub eax, esi
sar eax, 1
push esi
inc eax
push eax
push edi
call fcn.010248bf
inc ebx
inc ebx
xor esi, esi
mov eax, esi
imul eax, eax, 0x44
lea eax, [ebp + eax - 0xb38]
push eax
push edi
call fcn.01024498
cmp eax, 2
je 0x102511d
inc esi
cmp esi, 0x2a
jb 0x10250fa
jmp 0x10251ac
imul esi, esi, 0x44
push edi
xor eax, eax
push eax
push eax
push dword [ebp + esi - 0xb3c]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jge 0x1025142
push eax
call fcn.01023e47
jmp 0x1024a5d
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
call esi
push ebx
mov dword [ebp - 0xb48], eax
call esi
mov ecx, dword [ebp - 0xb48]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp + 0x10]
jl 0x102516f
mov dword [ebp - 0xb40], 0x6f
jmp 0x10251ac
push ebx
push dword [ebp + 0x10]
push edi
call fcn.01024934
test eax, eax
jge 0x10251ac
jmp 0x1025137
push edi
push dword [ebp + 0x10]
push dword [ebp - 0xb48]
call fcn.010248bf
jmp 0x1025179
mov dword [ebp - 0xb40], 0xa0
cmp dword [ebp - 0xb44], 0
je 0x10251c1
push dword [ebp - 0xb44]
call fcn.01017ef4
pop ecx
push dword [ebp - 0xb40]
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
cmp dword [ebp - 0xb40], eax
sete al
call fcn.01027e13
ret 0xc