Function at 0x40f3f1
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
push edi
mov dword [ebp - 0x6c], 0
cmp dword [0x42a190], 0
jne 0x40f415
xor eax, eax
jmp 0x40f5a0
push 0x64
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x484ca8
lea eax, [ebp - 0x68]
push eax
call fcn.0041a84c
add esp, 8
cmp dword [ebp + 8], 0
je 0x40f47a
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0041a7d8
add esp, 4
add eax, 0x32
push eax
call fcn.0041addb
add esp, 8
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a850
add esp, 8
push 0x484cb8
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a84c
add esp, 8
push 0
push 0x4000
push 0x465488
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040f755
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x40f4af
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a905
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x40f4d0
push 0x2004012
call fcn.00405434
add esp, 4
mov eax, 0xffffffff
jmp 0x40f5a0
push 0x64
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x484cc8
lea eax, [ebp - 0x68]
push eax
call fcn.0041a84c
add esp, 8
push 0x484cd0
lea eax, [ebp - 0x68]
push eax
call fcn.0041a84c
add esp, 8
cmp dword [ebp + 8], 0
je 0x40f543
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0041a7d8
add esp, 4
push eax
call fcn.0041addb
add esp, 8
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a850
add esp, 8
push 0x484ce0
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a84c
add esp, 8
push 0
push 0x5a6
push str.__r_n__INF_File_for_USB_Hardlock___Windows95_OSR2___Detroit_r_n_______________________________________________________r_n__r_n___c__Copyright_1997_1998_by_Aladdin_Knowledge_Systems_Germany_r_n__r_n___Revision:_1.5___r_n___Date:_1998_08_30_06:09:50___r_n___Author:_CHARLIEH___r_n__r_n___Log:_aksusb95.inf___r_n__Revision_1.5__1998_08_30_06:09:50__CHARLIEH_r_n__Revision_1.4__1998_07_28_08:59:16__CHARLIEH_r_n__Change_usbpd_to_aksusb95_r_n__Revision_1.4__1998_05_13_15:32:33__chris_r_n__removed_hardlock.vxd_from_copylist_r_n___r_n__Revision_1.3__1998_03_11_14:00:37__chris_r_n__usbpd____aksusb_name_change_r_n__r_n__Revision_1.2__1998_03_06_13:09:13__chris_r_n__added_hardlock.vxd_to_copylist_r_n__r_n_r_n_Version__r_nsignature__CHICAGO___r_nProvider_Fast__r_nLayoutFileLAYOUT.INF_r_nClassUSB_r_n_r_n__Table_of_Contents_r_n_Manufacturer__r_n_FastMfg_Aladdin_r_n_r_n_PreCopySection__r_nHKR__NoSetupUI__1_r_n_r_n_DestinationDirs__r_naksusb95.CopyList__11_r_nDefaultDestDir10_system_r_n_r_n_Aladdin__r_n_USBVID_0529PID_0001.DeviceDesc_aksusb95__USBVID_0529PID_0001__USB_Protection_Device_r_n_r_n_NODRIVER__r_n_r_n_ControlFlags__r_nExcludeFromSelectUSBVID_0529PID_0001_r_n_r_n_aksusb95__r_n_CopyFilesaksusb95.CopyList_r_nAddRegaksusb95.AddReg_r_n_r_n_aksusb95.AddReg__r_nHKR__DevLoader__ntkern_r_nHKR__NTMPDriver__aksusb95.sys_r_nHKR__MyLittleTag__MyEntryInTheRegistry_r_n_r_n_aksusb95.CopyList__r_naksusb95.sys_r_n_r_n_Strings__r_nFast_Aladdin_Knowledge_Systems__r_nFastMfg_Aladdin_Knowledge_Systems__r_nUSBVID_0529PID_0001.DeviceDesc_Aladdin_USB_Key__r_n_r_n
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040f755
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x40f578
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0041a905
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x40f599
push 0x2004013
call fcn.00405434
add esp, 4
mov eax, 0xffffffff
jmp 0x40f5a0
xor eax, eax
jmp 0x40f5a0
pop edi
pop esi
pop ebx
leave
ret