Function at 0x1006b73
Capabilities:
Get common file path
Get system information on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x42c
mov eax, dword [0x1009008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
cmp esi, edi
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x414], edi
jne 0x1006a88
xor eax, eax
jmp 0x1007303
test dword [ebp + 0xc], 0xfffffff3
jne 0x1006a81
push ebx
call fcn.01006694
mov dword [0x1009680], eax
and al, 0x20
neg al
sbb eax, eax
and eax, 0x1e
inc eax
inc eax
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
cmp ebx, edi
je 0x1006b09
mov eax, dword [0x1009680]
xor esi, esi
test al, 0x60
jne 0x1007300
mov ecx, eax
and cl, 0x78
neg cl
sbb ecx, ecx
and al, 0x66
neg ecx
neg al
mov dword [ebp - 0x420], ecx
sbb eax, eax
neg eax
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x410]
push eax
push 0x104
push edi
push dword [ebp - 0x42c]
push edi
call dword [sym.imp.KERNEL32.dll_SearchPathW]
test eax, eax
jne 0x1006b10
xor eax, eax
jmp 0x1007302
mov eax, dword [ebp - 0x414]
cmp eax, edi
jne 0x1006b2e
lea eax, [ebp - 0x410]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x418], edi
jmp 0x1006b3e
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x418], ecx
mov word [eax - 2], di
push 0x1001f30
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x100729b
cmp word [ebp + 0x10], di
jne 0x1007226
mov al, byte [0x1009680]
test al, 4
je 0x1006fc7
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp ax, 0x404
mov dword [ebp - 0x424], eax
jne 0x1006b8e
call fcn.0100661a
movzx eax, ax
mov dword [ebp - 0x424], eax
mov eax, dword [ebp + 0xc]
and eax, 8
mov dword [ebp - 0x428], eax
mov edi, 0x1001fbc
cmp dword [ebp - 0x428], 0
je 0x1006c88
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x424]
call fcn.01006868
test eax, eax
je 0x1006e95
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push dword [ebp - 0x41c]
lea eax, [ebp - 0x15c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
cmp word [ebp - 0x208], ax
je 0x1006c6a
push dword [ebp - 0x41c]
lea eax, [ebp - 0x208]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
cmp word [ebp - 0x424], 0xc04
jne 0x1006ead
mov dword [ebp - 0x424], 0x404
jmp 0x1006b9f
movzx eax, word [ebp - 0x424]
push eax
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x424]
call fcn.01006868
test eax, eax
je 0x1006d4a
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.0100737e
movzx eax, ax
test ax, ax
je 0x1006d4a
movzx eax, ax
push eax
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
cmp word [ebp - 0x424], 0xc04
je 0x1006c79
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
cmp ax, word [ebp - 0x424]
mov dword [ebp - 0x428], eax
je 0x1006e2f
movzx eax, ax
push eax
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x428]
call fcn.01006868
test eax, eax
je 0x1006e2f
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.0100737e
movzx eax, ax
test ax, ax
je 0x1006e2f
movzx eax, ax
push eax
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
mov eax, 0x409
cmp word [ebp - 0x424], ax
je 0x1006e6f
cmp word [ebp - 0x428], ax
je 0x1006e6f
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push 0x1001fa8
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push 0
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
xor edi, edi
cmp esi, edi
je 0x100729b
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, esi
jmp 0x1007302
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx edi, ax
cmp di, word [ebp - 0x424]
je 0x1006f78
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push edi
call fcn.01006868
test eax, eax
je 0x1007299
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push dword [ebp - 0x41c]
lea eax, [ebp - 0x15c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
cmp word [ebp - 0x208], ax
je 0x1006f78
push dword [ebp - 0x41c]
lea eax, [ebp - 0x208]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
mov eax, 0x409
cmp word [ebp - 0x424], ax
je 0x1006e6f
cmp di, ax
je 0x1006e6f
push 0
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0xb0]
push ecx
push eax
call fcn.01006868
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
jmp 0x1006e5d
test al, 3
je 0x100729b
call fcn.010068bf
test byte [ebp + 0xc], 8
movzx eax, ax
mov dword [ebp - 0x428], eax
je 0x10070fb
lea ecx, [ebp - 0x208]
push ecx
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0xb0]
push ecx
push eax
call fcn.01006868
test eax, eax
je 0x100729b
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
cmp esi, edi
jne 0x1006e9f
push dword [ebp - 0x41c]
lea eax, [ebp - 0x15c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
cmp esi, edi
jne 0x1006e9f
cmp word [ebp - 0x208], di
je 0x10070a0
push dword [ebp - 0x41c]
lea eax, [ebp - 0x208]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
cmp esi, edi
jne 0x1006e9f
mov eax, 0x409
cmp word [ebp - 0x428], ax
je 0x10071f8
push edi
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0xb0]
push ecx
push eax
call fcn.01006868
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
cmp esi, edi
jne 0x1006e9f
jmp 0x10071f8
movzx eax, ax
push eax
mov edi, 0x1001fbc
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x428]
call fcn.01006868
test eax, eax
je 0x10071be
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.0100737e
movzx eax, ax
test ax, ax
je 0x10071be
movzx eax, ax
push eax
push edi
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
cmp word [ebp - 0x428], 0x409
je 0x10071f6
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push 0x1001fa8
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
test esi, esi
jne 0x1006e9f
xor edi, edi
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push edi
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
cmp esi, edi
jne 0x1006e9f
jmp 0x1006e97
test byte [0x1009680], 7
je 0x100729b
test byte [ebp + 0xc], 8
je 0x100727c
push edi
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp + 0x10]
call fcn.01006868
test eax, eax
je 0x100729b
push dword [ebp - 0x41c]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x420]
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
push ebx
call fcn.0100696f
mov esi, eax
jmp 0x1006e97
movzx eax, word [ebp + 0x10]
push eax
push 0x1001fbc
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.01004de6
add esp, 0x10
jmp 0x1007250
xor edi, edi
test bl, 1
je 0x1007300
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x420], edi
je 0x10072e5
push dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push dword [ebp - 0x418]
push 0x1001f9c
push 0x104
push eax
call fcn.01004de6
add esp, 0x14
push edi
push 1
lea eax, [ebp - 0x410]
push eax
call fcn.0100658d
jmp 0x10072fe
xor eax, eax
cmp dword [ebp - 0x41c], edi
setne al
push eax
push edi
push dword [ebp - 0x42c]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.01005c74
leave
ret 0xc