Function at 0x1049694
Capabilities:
Get common file path
Query environment variable

Disassembly:
push 0x874
mov eax, 0x10cf391
call fcn.010b53c2
mov esi, ecx
mov dword [ebp - 0x880], esi
call fcn.01033230
xor ebx, ebx
lea ecx, [esi + 0x1c]
mov dword [ebp - 4], ebx
call fcn.01033230
lea ecx, [esi + 0x38]
call fcn.01033230
lea ecx, [esi + 0x54]
call fcn.01033230
lea ecx, [esi + 0x70]
call fcn.01033230
lea ecx, [esi + 0x8c]
call fcn.01033230
lea ecx, [esi + 0xa8]
call fcn.01033230
lea ecx, [esi + 0xc4]
call fcn.01033230
lea ecx, [esi + 0xe0]
call fcn.01033230
lea ecx, [esi + 0x104]
mov byte [esi + 0xfc], bl
mov byte [esi + 0xfd], bl
mov byte [esi + 0xfe], bl
mov byte [esi + 0xff], bl
mov byte [esi + 0x100], bl
mov byte [esi + 0x101], bl
call fcn.01033230
lea ecx, [esi + 0x120]
call fcn.01033230
lea ecx, [esi + 0x13c]
call fcn.01033230
lea ecx, [esi + 0x158]
call fcn.01033230
lea ecx, [esi + 0x174]
call fcn.01033230
lea ecx, [esi + 0x190]
call fcn.01033230
xor edi, edi
inc edi
lea ecx, [esi + 0x1b0]
mov byte [ebp - 4], 0xe
mov dword [esi + 0x1ac], edi
call fcn.01042dc5
lea ecx, [esi + 0x1bc]
call fcn.01040b4c
lea ecx, [esi + 0x220]
call fcn.01040b4c
lea ecx, [esi + 0x288]
mov byte [esi + 0x284], bl
call fcn.01033230
lea ecx, [esi + 0x2a4]
call fcn.01033230
lea ecx, [esi + 0x2c0]
call fcn.01033230
lea ecx, [esi + 0x2dc]
push ebx
mov byte [ebp - 4], 0x14
call fcn.01046350
lea ecx, [esi + 0x2ec]
call fcn.01033230
lea ecx, [esi + 0x308]
call fcn.01033230
lea ecx, [esi + 0x328]
push ebx
mov byte [ebp - 4], 0x17
mov dword [esi + 0x324], ebx
call fcn.01046302
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x1010508
mov byte [ebp - 4], 0x18
mov byte [esi + 0x338], bl
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, ebx
jne 0x10498c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 7
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.01033bfc
push esi
lea eax, [ebp - 0x860]
push eax
mov byte [ebp - 4], 0x19
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x87c]
push 0x10104d8
push eax
mov byte [ebp - 4], 0x1a
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0x1b
call fcn.01033bb7
push ebx
push edi
lea ecx, [ebp - 0x87c]
call fcn.01032f16
push ebx
push edi
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0x19
call fcn.01032f16
push 0x1010408
lea ecx, [ebp - 0x844]
call fcn.01033c5d
lea eax, [ebp - 0x844]
push eax
lea ecx, [ebp - 0x874]
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x874]
push eax
call fcn.010b4e4c
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x860]
call fcn.01033a48
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.01033880
push ebx
push edi
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0x18
call fcn.01032f16
push dword [esi + 0x14]
mov edi, 0x1002650
push edi
mov ecx, esi
call fcn.01035b55
mov ecx, dword [esi + 0x14]
dec ecx
cmp ecx, eax
je 0x1049911
push edi
mov ecx, esi
call fcn.01036fbc
push 0x104
lea eax, [ebp - 0x628]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, ebx
jne 0x10499a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 7
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.01033bfc
push esi
lea eax, [ebp - 0x87c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x860]
push 0x10103dc
push eax
mov byte [ebp - 4], 0x1e
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0x1f
call fcn.01033bb7
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.01032f16
push ebx
push 1
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x1d
call fcn.01032f16
push 0x10102e8
jmp 0x1049894
lea eax, [ebp - 0x628]
push eax
lea ecx, [esi + 0x1c]
call fcn.0103389a
push dword [esi + 0x30]
lea ecx, [esi + 0x1c]
push edi
call fcn.01035b55
push eax
push ebx
lea eax, [ebp - 0x87c]
push eax
lea ecx, [esi + 0x1c]
call fcn.010372dc
push edi
push eax
lea eax, [ebp - 0x860]
push eax
mov byte [ebp - 4], 0x20
call fcn.010377ae
add esp, 0xc
push eax
lea ecx, [esi + 0x1c]
mov byte [ebp - 4], 0x21
call fcn.01033880
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.01032f16
push ebx
push 1
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x18
call fcn.01032f16
push 0x104
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp eax, ebx
jne 0x1049aa0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 7
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.01033bfc
push esi
lea eax, [ebp - 0x87c]
push eax
mov byte [ebp - 4], 0x22
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x860]
push 0x10102b8
push eax
mov byte [ebp - 4], 0x23
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0x24
call fcn.01033bb7
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.01032f16
push ebx
push 1
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x22
call fcn.01032f16
push 0x10101d8
jmp 0x1049894
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0x860]
call fcn.01033a48
push eax
lea ecx, [esi + 0x38]
mov byte [ebp - 4], 0x25
call fcn.01033880
push ebx
push 1
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0x18
call fcn.01032f16
push dword [esi + 0x4c]
lea ecx, [esi + 0x38]
push edi
call fcn.01035b55
mov ecx, dword [esi + 0x4c]
dec ecx
cmp ecx, eax
je 0x1049aee
push edi
lea ecx, [esi + 0x38]
call fcn.01036fbc
lea eax, [ebp - 0x420]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp eax, ebx
jne 0x1049b7e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 7
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.01033bfc
push esi
lea eax, [ebp - 0x87c]
push eax
mov byte [ebp - 4], 0x26
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x860]
push 0x10101a8
push eax
mov byte [ebp - 4], 0x27
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0x28
call fcn.01033bb7
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.01032f16
push ebx
push 1
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x26
call fcn.01032f16
push 0x10100b8
jmp 0x1049894
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x860]
call fcn.01033a48
push eax
lea ecx, [esi + 0x54]
mov byte [ebp - 4], 0x29
call fcn.01033880
push ebx
push 1
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0x18
call fcn.01032f16
push dword [esi + 0x68]
lea ecx, [esi + 0x54]
push edi
call fcn.01035b55
mov ecx, dword [esi + 0x68]
dec ecx
cmp ecx, eax
je 0x1049bcc
push edi
lea ecx, [esi + 0x54]
call fcn.01036fbc
lea edi, [esi + 0x1c]
push edi
lea ecx, [esi + 0x70]
call fcn.01033880
push edi
lea ecx, [esi + 0x8c]
call fcn.01033880
push edi
lea ecx, [esi + 0xa8]
call fcn.01033880
push 0x1010098
lea eax, [ebp - 0x860]
push esi
push eax
call fcn.010377ae
add esp, 0xc
push eax
lea ecx, [esi + 0xe0]
mov byte [ebp - 4], 0x2a
call fcn.01033880
push eax
lea ecx, [esi + 0xc4]
call fcn.01033880
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.01032f16
mov eax, esi
call fcn.010b5454
ret