Function at 0x41898f
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x208], 0
cmp dword [0x430048], 0
jne 0x4189b9
xor eax, eax
jmp 0x418b91
test byte [ebp + 0xc], 0x10
jne 0x4189ca
xor eax, eax
jmp 0x418b91
push 0x200
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x550b9c
lea eax, [ebp - 0x204]
push eax
call fcn.004202e0
add esp, 8
cmp dword [ebp + 8], 0
je 0x418a41
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.00420150
add esp, 4
add eax, 0x32
push eax
call fcn.00420574
add esp, 8
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x208]
push eax
call fcn.004202d0
add esp, 8
push 0x550bac
mov eax, dword [ebp - 0x208]
push eax
call fcn.004202e0
add esp, 8
push 0
push 0x4600
push 0x534728
mov eax, dword [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.00418d99
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x418a7f
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041ffa0
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x418aa0
push 0x2004012
call fcn.00406c68
add esp, 4
mov eax, 0xffffffff
jmp 0x418b91
push 0x200
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x550bbc
lea eax, [ebp - 0x204]
push eax
call fcn.004202e0
add esp, 8
push 0x550bc4
lea eax, [ebp - 0x204]
push eax
call fcn.004202e0
add esp, 8
cmp dword [ebp + 8], 0
je 0x418b2b
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.00420150
add esp, 4
add eax, 0x32
push eax
call fcn.00420574
add esp, 8
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x208]
push eax
call fcn.004202d0
add esp, 8
push 0x550bd4
mov eax, dword [ebp - 0x208]
push eax
call fcn.004202e0
add esp, 8
push 0
push 0x682
push str.__r_n__INF_File_for_USB_Hardlock___Windows95_OSR2___Detroit_r_n_______________________________________________________r_n__r_n___c__Copyright_1997_1998_by_Aladdin_Knowledge_Systems_Germany_r_n__r_n___Revision:_1.4___r_n___Date:_2001_11_07_14:16:31___r_n___Author:_gerhard___r_n__r_n___Log:_aksusb95.inf_v___r_n__Revision_1.4__2001_11_07_14:16:31__gerhard_r_n__HDD_4.65_r_n__r_n__Revision_1.2__1999_12_23_06:28:48__GILF_r_n__The_hinstall_inf_file_no_need_to_copylist_r_n__r_n__r_n__Revision_1.1__1999_10_27_13:44:49__GILF_r_n__Initial_revision_r_n__Revision_1.3__1998_08_30_06:09:51__CHARLIEH_r_n__Revision_1.2__1998_07_28_08:59:16__CHARLIEH_r_n__Change_usbpd_to_aksusb95_r_n__Revision_1.4__1998_05_13_15:32:33__chris_r_n__removed_hardlock.vxd_from_copylist_r_n___r_n__Revision_1.3__1998_03_11_14:00:37__chris_r_n__usbpd____aksusb_name_change_r_n__r_n__Revision_1.2__1998_03_06_13:09:13__chris_r_n__added_hardlock.vxd_to_copylist_r_n__r_n_r_n_Version__r_nsignature__CHICAGO___r_nProvider_Fast__r_nLayoutFileLAYOUT.INF_r_nClassUSB_r_n_r_n__Table_of_Contents_r_n_Manufacturer__r_n_FastMfg_Aladdin_r_n_r_n_PreCopySection__r_nHKR__NoSetupUI__1_r_n_r_n_DestinationDirs__r_naksusb95.CopyList__11_r_nDefaultDestDir10_system_r_n_r_n_Aladdin__r_n_USBVID_0529PID_0001.DeviceDesc_aksusb95__USBVID_0529PID_0001__USB_Protection_Device_r_n_r_n_NODRIVER__r_n_r_n_ControlFlags__r_nExcludeFromSelectUSBVID_0529PID_0001_r_n_r_n_aksusb95__r_n__CopyFilesaksusb95.CopyList_r_nAddRegaksusb95.AddReg_r_n_r_n_aksusb95.AddReg__r_nHKR__DevLoader__ntkern_r_nHKR__NTMPDriver__aksusb95.sys_r_nHKR__MyLittleTag__MyEntryInTheRegistry_r_n_r_n_aksusb95.CopyList__r_naksusb95.sys_r_n_r_n_Strings__r_nFast_Aladdin_Knowledge_Systems__r_nFastMfg_Aladdin_Knowledge_Systems__r_nUSBVID_0529PID_0001.DeviceDesc_Aladdin_USB_Key__r_n_r_n
mov eax, dword [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.00418d99
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x418b69
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041ffa0
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x418b8a
push 0x2004013
call fcn.00406c68
add esp, 4
mov eax, 0xffffffff
jmp 0x418b91
xor eax, eax
jmp 0x418b91
pop edi
pop esi
pop ebx
leave
ret