Function at 0x41ca80
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffce8
xor eax, eax
push esi
push edi
mov dword [ebp - 0xc], eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.0041cd3c
pop ecx
test eax, eax
je 0x41caa6
or eax, 0xffffffff
jmp 0x41cca8
push 0x104
lea edx, [ebp - 0x110]
push edx
call sub.KERNEL32.dll_GetSystemDirectoryA
lea ecx, [ebp - 0x214]
push ecx
push 0
push 0x458538
lea eax, [ebp - 0x110]
push eax
call sub.KERNEL32.dll_GetTempFileNameA
lea edx, [ebp - 0x214]
push edx
call fcn.0043ed20
pop ecx
push 0x2e
lea ecx, [ebp - 0x214]
push ecx
call fcn.0040a4a8
add esp, 8
mov edi, eax
mov esi, 0x45853c
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0
push 0x80
lea edx, [ebp - 0x214]
push edx
call fcn.0043ebb0
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41cb23
mov eax, 2
jmp 0x41cca8
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx + 0x40]
push ecx
call fcn.00414434
pop ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x41cb42
mov dword [ebp - 0xc], 0xe
jmp 0x41cb9a
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x40]
push edx
mov ecx, dword [ebp - 8]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043ecac
add esp, 0xc
mov edx, dword [ebp + 0xc]
cmp eax, dword [edx + 0x40]
je 0x41cb6a
mov dword [ebp - 0xc], 4
jmp 0x41cb90
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x40]
push eax
mov edx, dword [ebp - 8]
push edx
mov ecx, dword [ebp - 4]
push ecx
call fcn.0043ecd8
add esp, 0xc
mov edx, dword [ebp + 0xc]
cmp eax, dword [edx + 0x40]
je 0x41cb90
mov dword [ebp - 0xc], 5
mov eax, dword [ebp - 8]
push eax
call fcn.00414320
pop ecx
mov ecx, dword [ebp - 4]
push ecx
call fcn.0043ec88
pop ecx
lea eax, [ebp - 0x318]
push eax
push 0
push 0x458538
lea edx, [ebp - 0x110]
push edx
call sub.KERNEL32.dll_GetTempFileNameA
lea ecx, [ebp - 0x318]
push ecx
call fcn.0043ed20
pop ecx
push 0x2e
lea eax, [ebp - 0x318]
push eax
call fcn.0040a4a8
add esp, 8
mov edi, eax
mov esi, 0x458541
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0xc], 0
jne 0x41cc28
push 0
lea edx, [ebp - 0x214]
push edx
lea ecx, [ebp - 0x318]
push ecx
push 1
call sub.GDI32.dll_CreateScalableFontResourceA
test eax, eax
jne 0x41cc11
mov dword [ebp - 0xc], 0xf
jmp 0x41cc28
lea eax, [ebp - 0x318]
push eax
call sub.GDI32.dll_AddFontResourceA
test eax, eax
jne 0x41cc28
mov dword [ebp - 0xc], 0xf
cmp dword [ebp - 0xc], 0
je 0x41cc4a
lea edx, [ebp - 0x318]
push edx
call fcn.0043ed20
pop ecx
lea ecx, [ebp - 0x214]
push ecx
call fcn.0043ed20
pop ecx
jmp 0x41cca5
cmp dword [ebp + 0x10], 0
je 0x41cca5
mov eax, dword [ebp + 0x10]
lea edi, [ebp - 0x318]
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 0x10]
lea edi, [ebp - 0x214]
add eax, 0x104
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0xc]
pop edi
pop esi
mov esp, ebp
pop ebp
ret