Function at 0x453d2a
Capabilities:
Get common file path

Disassembly:
push 0x128
mov eax, 0x5c03fa
call fcn.00595e89
mov eax, dword [ebp + 8]
and dword [ebp - 0x134], 0
mov esi, ecx
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x130], eax
call fcn.004048be
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi + 0x190]
test ax, 0x2000
je 0x453d9b
push 0x104
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x453de8
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x128]
push 0x61f3c4
push eax
call fcn.004048ab
add esp, 0xc
jmp 0x453de8
test ax, 0x1000
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [esi]
mov ecx, esi
je 0x453dbe
call dword [eax + 0xac]
push eax
call fcn.00404b87
mov byte [ebp - 4], 2
jmp 0x453dce
call dword [eax + 0xac]
push eax
call fcn.00404b87
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x128]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x11c]
call fcn.00401752
lea ecx, [ebp - 0x120]
call fcn.004048be
mov byte [ebp - 4], 4
mov eax, dword [esi + 4]
cmp eax, 0xa
jne 0x453e14
push str.NetNannyInstall.exe
lea ecx, [ebp - 0x120]
call fcn.004014d3
jmp 0x453f8b
lea eax, [esi + 0x17c]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
push ecx
mov dword [ebp - 0x124], esp
mov ecx, esp
je 0x453e5a
push eax
call fcn.004049a2
mov byte [ebp - 4], 5
mov byte [ebp - 4], 4
lea edi, [ebp - 0x11c]
call fcn.0040d04c
pop ecx
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x120]
call fcn.004048fa
jmp 0x453f7c
add esi, 0x178
push esi
call fcn.004049a2
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
lea edi, [ebp - 0x12c]
call fcn.0040d04c
pop ecx
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x120]
call fcn.004048fa
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.00401752
push ecx
lea eax, [ebp - 0x120]
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 9
push ecx
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 4
lea esi, [ebp - 0x11c]
call fcn.0040d17c
mov byte [ebp - 4], 0xb
add esp, 4
mov eax, esi
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xb
call fcn.0040c97a
test eax, eax
pop ecx
je 0x453f7c
push ecx
lea eax, [ebp - 0x120]
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0xb
call fcn.0040d13c
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x124]
push 0x61b228
push eax
lea ecx, [ebp - 0x12c]
call fcn.004046a1
add esp, 0x10
mov byte [ebp - 4], 0xf
push dword [eax]
lea eax, [ebp - 0x120]
push dword [ebp - 0x12c]
push eax
call fcn.00413e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x124]
call fcn.00401752
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x12c]
call fcn.00401752
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11c]
call fcn.00401752
push ecx
lea eax, [ebp - 0x120]
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x10
push ecx
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x11c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x130]
call fcn.0040d17c
pop ecx
pop ecx
mov dword [ebp - 0x134], ebx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x120]
call fcn.00401752
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x128]
call fcn.00401752
mov eax, esi
call fcn.00595f0c
ret 4