Function at 0x140007800
Capabilities:
Get common file path
Get startup folder

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0xa90
mov rax, qword [0x140034010]
xor rax, rsp
mov qword [rsp + 0xa80], rax
xor ebp, ebp
movsxd rsi, edx
mov qword [r8], rbp
mov rbx, r8
mov r14, rcx
cmp esi, 9
ja 0x140007b2e
mov rax, qword [rcx + rsi*8]
mov qword [rsp + 0xad8], r15
lea r15, [rcx + rsi*8]
test rax, rax
je 0x140007877
mov qword [r8], rax
xor eax, eax
mov r15, qword [rsp + 0xad8]
mov rcx, qword [rsp + 0xa80]
xor rcx, rsp
call fcn.14000ab20
add rsp, 0xa90
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0x400
call fcn.14000ad98
xor edx, edx
mov qword [rbx], rax
mov r8d, 0x400
mov rcx, rax
call fcn.14000bdd0
lea rdx, [0x140000000]
mov ecx, dword [rdx + rsi*4 + 0x7b38]
add rcx, rdx
jmp rcx
mov r8d, 0x1a
mov rdx, qword [rbx]
mov r9d, 1
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov rcx, qword [rbx]
lea r8, [0x14002ee4c]
mov edx, 0x400
mov edi, eax
call fcn.140012b8c
jmp 0x14000790c
mov r8d, 0x1c
jmp 0x1400078ad
mov r8d, 0x26
jmp 0x1400078ad
mov r8d, 0x2a
jmp 0x1400078ad
mov r8d, 0x20
jmp 0x1400078ad
mov rdx, qword [rbx]
mov ecx, 0x103
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
mov edi, ebp
setne dil
test edi, edi
je 0x140007b19
lea eax, [rsi - 7]
cmp eax, 2
jbe 0x140007ae6
jmp 0x1400079e3
xor edx, edx
lea rcx, [rsp + 0x260]
mov r8d, 0x104
call fcn.14000bdd0
mov r8d, 0x104
lea rdx, [rsp + 0x260]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140007b19
xor edx, edx
lea rcx, [rsp + 0x670]
mov r8d, 0x104
call fcn.14000bdd0
xor edx, edx
lea rcx, [rsp + 0x50]
mov r8d, 0x104
call fcn.14000bdd0
mov qword [rsp + 0x40], rbp
lea r9, [rsp + 0x50]
mov qword [rsp + 0x38], rbp
lea rdx, [rsp + 0x670]
mov qword [rsp + 0x30], rbp
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x28], rbp
mov r8d, 0x104
mov qword [rsp + 0x20], 0x104
call fcn.1400154b8
mov rcx, qword [rbx]
lea r8, [rsp + 0x670]
mov edx, 0x400
call fcn.140012b8c
mov rcx, qword [rbx]
lea r8, [rsp + 0x50]
mov edx, 0x400
call fcn.140012b8c
cmp dword [r14 + 0x50], 1
lea r8, str.RoomConnector
lea rax, [0x14002ee50]
cmovne r8, rax
jmp 0x140007aed
mov edi, 1
lea rdx, [rsp + 0x670]
mov r9d, edi
xor ecx, ecx
lea r8d, [rdi + 0xf]
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x140007a3a
mov r9d, edi
lea r8d, [rdi + 0x18]
lea rdx, [rsp + 0x878]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x140007a3c
mov edi, ebp
lea r9, [rsp + 0x260]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x670]
call fcn.140007340
test al, al
jne 0x140007a80
lea r9, [rsp + 0x260]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x878]
call fcn.140007340
test al, al
jne 0x140007a80
test edi, edi
je 0x140007b19
lea rax, [rsp + 0x260]
mov rcx, 0xffffffffffffffff
nop
cmp word [rax + rcx*2 + 2], bp
lea rcx, [rcx + 1]
jne 0x140007a90
mov rax, qword [rbx]
lea r9d, [rcx + 1]
mov qword [rsp + 0x38], rbp
lea r8, [rsp + 0x260]
mov qword [rsp + 0x30], rbp
xor edx, edx
mov dword [rsp + 0x28], 0x400
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rbx]
lea rdx, [0x14002fbe0]
call fcn.14000bf60
test rax, rax
je 0x140007ae6
mov byte [rax + 1], bpl
lea r8, str.ZoomVDI
mov rcx, qword [rbx]
mov edx, 0x400
call fcn.140012b8c
mov rcx, qword [rbx]
lea r8, [0x14002ee4c]
mov edx, 0x400
call fcn.140012b8c
mov rax, qword [rbx]
mov qword [r15], rax
jmp 0x14000784f
mov rcx, qword [rbx]
call fcn.14000ab40
mov eax, 3
mov qword [rbx], rbp
jmp 0x140007851
mov eax, 1
jmp 0x140007859