Function at 0x415c8f
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x208], 0
cmp dword [0x43acf8], 0
jne 0x415cb9
xor eax, eax
jmp 0x415e91
test byte [ebp + 0xc], 0x10
jne 0x415cca
xor eax, eax
jmp 0x415e91
push 0x200
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x5056a4
lea eax, [ebp - 0x204]
push eax
call fcn.0041d138
add esp, 8
cmp dword [ebp + 8], 0
je 0x415d41
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0041d0c4
add esp, 4
add eax, 0x32
push eax
call fcn.0041d2ec
add esp, 8
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041d13c
add esp, 8
push 0x5056b4
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041d138
add esp, 8
push 0
push 0x4800
push 0x4dd050
mov eax, dword [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.00416099
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x415d7f
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041ce53
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x415da0
push 0x2004012
call fcn.0040648e
add esp, 4
mov eax, 0xffffffff
jmp 0x415e91
push 0x200
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x5056c4
lea eax, [ebp - 0x204]
push eax
call fcn.0041d138
add esp, 8
push 0x5056cc
lea eax, [ebp - 0x204]
push eax
call fcn.0041d138
add esp, 8
cmp dword [ebp + 8], 0
je 0x415e2b
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0041d0c4
add esp, 4
add eax, 0x32
push eax
call fcn.0041d2ec
add esp, 8
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041d13c
add esp, 8
push 0x5056dc
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041d138
add esp, 8
push 0
push 0x63e
push str.__r_n__INF_File_for_USB_Hardlock___Windows95_OSR2___Detroit_r_n_______________________________________________________r_n__r_n___c__Copyright_1997_1998_by_Aladdin_Knowledge_Systems_Germany_r_n__r_n___Revision:_1.2___r_n___Date:_1999_12_23_06:28:48___r_n___Author:_GILF___r_n__r_n___Log:_aksusb95.inf___r_n__Revision_1.2__1999_12_23_06:28:48__GILF_r_n__The_hinstall_inf_file_no_need_to_copylist_r_n___r_n__Revision_1.1__1999_10_27_13:44:49__GILF_r_n__Initial_revision_r_n__Revision_1.3__1998_08_30_06:09:51__CHARLIEH_r_n__Revision_1.2__1998_07_28_08:59:16__CHARLIEH_r_n__Change_usbpd_to_aksusb95_r_n__Revision_1.4__1998_05_13_15:32:33__chris_r_n__removed_hardlock.vxd_from_copylist_r_n___r_n__Revision_1.3__1998_03_11_14:00:37__chris_r_n__usbpd____aksusb_name_change_r_n__r_n__Revision_1.2__1998_03_06_13:09:13__chris_r_n__added_hardlock.vxd_to_copylist_r_n__r_n_r_n_Version__r_nsignature__CHICAGO___r_nProvider_Fast__r_nLayoutFileLAYOUT.INF_r_nClassUSB_r_n_r_n__Table_of_Contents_r_n_Manufacturer__r_n_FastMfg_Aladdin_r_n_r_n_PreCopySection__r_nHKR__NoSetupUI__1_r_n_r_n_DestinationDirs__r_naksusb95.CopyList__11_r_nDefaultDestDir10_system_r_n_r_n_Aladdin__r_n_USBVID_0529PID_0001.DeviceDesc_aksusb95__USBVID_0529PID_0001__USB_Protection_Device_r_n_r_n_NODRIVER__r_n_r_n_ControlFlags__r_nExcludeFromSelectUSBVID_0529PID_0001_r_n_r_n_aksusb95__r_n__CopyFilesaksusb95.CopyList_r_nAddRegaksusb95.AddReg_r_n_r_n_aksusb95.AddReg__r_nHKR__DevLoader__ntkern_r_nHKR__NTMPDriver__aksusb95.sys_r_nHKR__MyLittleTag__MyEntryInTheRegistry_r_n_r_n_aksusb95.CopyList__r_naksusb95.sys_r_n_r_n_Strings__r_nFast_Aladdin_Knowledge_Systems__r_nFastMfg_Aladdin_Knowledge_Systems__r_nUSBVID_0529PID_0001.DeviceDesc_Aladdin_USB_Key__r_n_r_n
mov eax, dword [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.00416099
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x415e69
mov eax, dword [ebp - 0x208]
push eax
call fcn.0041ce53
add esp, 4
cmp dword [ebp - 4], 0xffffffff
jne 0x415e8a
push 0x2004013
call fcn.0040648e
add esp, 4
mov eax, 0xffffffff
jmp 0x415e91
xor eax, eax
jmp 0x415e91
pop edi
pop esi
pop ebx
leave
ret