Function at 0x100432dc
Capabilities:
Get common file path
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x40]
push 2
call fcn.10015242
xor ebx, ebx
mov dword [ebp - 0x20], 0x7e8b72fd
mov dword [ebp - 0x10], ebx
jmp 0x1004330f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x40]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100432ff
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10043338
push ebx
push ebx
push 0xecf
push 0x233c
call esi
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
call fcn.10015b02
push 0x221d
push 1
push edi
call fcn.1003e071
add esp, 0xc
lea ecx, [ebp - 0x34]
push 3
call fcn.10015242
mov dword [ebp - 0xc], 0x16df251d
xor edx, edx
mov dword [ebp - 0x14], 8
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], 0xd2ae4566
mov dword [ebp - 8], ebx
jmp 0x1004338e
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x34]
mov dword [eax + ecx*4], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x10043382
mov dword [ebp - 8], ebx
jmp 0x100433a7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1c], 0x82e58099
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10043399
dec dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setg dl
add eax, edx
cmp eax, dword [ebp - 0xc]
je 0x100433d2
cmp dword [ebp - 0x14], ebx
jne 0x100433d2
mov eax, ebx
jmp 0x100433d5
xor eax, eax
inc eax
mov edx, dword [ebp - 0x34]
add eax, 0xfffffffb
xor ecx, ecx
cmp dword [edx + 4], eax
setle cl
cmp ecx, 0xe467b47e
sbb eax, eax
neg eax
sub eax, 0x7540
neg eax
sbb eax, eax
inc eax
cmp dword [edx + 4], eax
jl 0x10043405
cmp dword [ebp - 0x1c], ebx
jne 0x10043405
mov eax, ebx
jmp 0x10043408
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [edx + 4]
jle 0x1004342f
mov eax, dword [ebp - 0x34]
cmp dword [eax + 8], ebx
je 0x1004342f
xor eax, eax
inc eax
jmp 0x10043431
mov eax, ebx
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x34]
call fcn.10015b02
push edi
call fcn.1002b16c
mov dword [ebp - 8], 0xe60
mov edi, eax
mov dword [ebp - 0x18], 0x31aa08
mov dword [ebp - 0x20], 0x7ef2
mov dword [ebp - 0xc], 0xffff
mov dword [ebp - 0x10], 3
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x1004347b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x28], 0xff63588c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1004346d
cmp dword [ebp - 8], ebx
jne 0x100434b3
dec dword [ebp - 0x20]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], 1
jg 0x100434ec
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100434c8
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xc], ebx
jmp 0x100434e4
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100434e1
push 0x1cf4
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jle 0x100434cd
jmp 0x1004355c
mov dword [ebp - 8], ebx
jmp 0x100434fb
mov dword [ebp - 0x24], 0xe0cd1ad7
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x1a
jne 0x100434f1
mov dword [ebp - 0x10], ebx
jmp 0x10043556
mov dword [ebp - 0x20], ebx
xor edx, edx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ecx, eax
setle dl
inc edx
je 0x1004352a
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10043553
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
jmp 0x10043553
mov dword [ebp - 0x18], 0xfffffffd
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 1], bl
cmp byte [ebp - 1], al
je 0x10043553
push 0x133c
push ebx
push 0xcca
call esi
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff4
jle 0x10043506
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10043574
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret