Function at 0x1007b6d0
Capabilities:
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008e8cb
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x100b400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x260], ebx
lea eax, [ebx + 0x140]
xor edi, edi
push eax
lea ecx, [ebp - 0x248]
call fcn.10007640
mov dword [ebp - 4], edi
cmp dword [ebx + 0x134], edi
je 0x1007bd57
mov ecx, ebx
call fcn.100159b0
mov ecx, eax
test ecx, ecx
jne 0x1007b771
mov eax, dword [ebx + 0x3a8]
cmp eax, 1
jne 0x1007b749
push ecx
push 0x100b56c8
jmp 0x1007b755
cmp eax, 3
jne 0x1007b771
push 0
push 0x100b556c
push 0x100b54cc
push 0
push ebx
call sub.VCRUNTIME140.dll___RTDynamicCast
add esp, 0x14
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xbc]
mov ecx, eax
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, ebx
mov esi, eax
call fcn.100159b0
mov ecx, eax
test ecx, ecx
jne 0x1007b7c0
mov edx, dword [ebx + 0x3a8]
cmp edx, 1
jne 0x1007b798
push eax
push 0x100b56c8
jmp 0x1007b7a4
cmp edx, 3
jne 0x1007b7c0
push 0
push 0x100b556c
push 0x100b54cc
push 0
push ebx
call sub.VCRUNTIME140.dll___RTDynamicCast
add esp, 0x14
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xbc]
mov ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [ebx + 0xf8]
lea edx, [ebx + 0xfc]
mov dword [ebp - 0x254], edx
cmp ecx, esi
jne 0x1007b7e7
cmp dword [edx], eax
je 0x1007b82b
mov dword [ebp - 0x254], edx
jmp 0x1007b803
movd xmm1, ecx
movd xmm0, esi
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebx + 0x110], xmm1
mov ecx, dword [edx]
cmp ecx, eax
je 0x1007b82b
movd xmm1, ecx
movd xmm0, eax
cvtdq2pd xmm1, xmm1
mov dword [ebp - 0x254], edx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebx + 0x118], xmm1
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x14
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
lea edx, [ecx + 2]
mov word [ebp - 0x230], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1007b884
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.100052a0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x238]
test ecx, ecx
jne 0x1007b8bd
push 0xa
push str._arial.ttf
jmp 0x1007b8d3
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
push ecx
cmovae eax, dword [ebp - 0x248]
push eax
lea ecx, [ebp - 0x230]
call fcn.10016cc0
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x230]
call fcn.1007c4c0
mov ecx, eax
mov dword [ebp - 0x268], ecx
test ecx, ecx
je 0x1007bcfe
mov eax, dword [ebx + 0x170]
cmp eax, 0xffffffff
jne 0x1007b92b
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebx + 0x170], eax
push eax
push ecx
call dword [sym.imp.SDL2_ttf.dll_TTF_OpenFont]
mov esi, eax
add esp, 8
mov dword [ebp - 0x264], esi
test esi, esi
je 0x1007bcd7
mov al, byte [ebx + 0x184]
mov byte [ebp - 0x24c], al
mov al, byte [ebx + 0x185]
mov byte [ebp - 0x24b], al
mov al, byte [ebx + 0x186]
mov byte [ebp - 0x24a], al
mov eax, dword [ebx + 0x188]
mov ecx, eax
or ecx, 4
cmp dword [ebx + 0x180], 0
cmove ecx, eax
mov eax, ecx
or eax, 8
cmp dword [ebx + 0x17c], 0
cmove eax, ecx
push eax
push esi
call dword [sym.imp.SDL2_ttf.dll_TTF_SetFontStyle]
lea eax, [ebx + 0x124]
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x1007b9a7
mov eax, dword [eax]
test eax, eax
je 0x1007b9be
push dword [ebp - 0x24c]
push eax
push esi
call dword [sym.imp.SDL2_ttf.dll_TTF_RenderUNICODE_Blended]
add esp, 0xc
mov edi, eax
mov edx, dword [ebx + 0x190]
mov dword [ebp - 0x250], edx
lea eax, [edx - 1]
cmp eax, 0x63
ja 0x1007bac7
xor eax, eax
mov dword [ebp - 0x24c], eax
cmp dword [edi + 8], eax
jle 0x1007bac7
mov ecx, dword [edi + 0xc]
nop word [eax + eax]
xor esi, esi
mov dword [ebp - 0x258], esi
test ecx, ecx
jle 0x1007bab1
mov ebx, dword [ebp - 0x24c]
mov eax, 0x64
sub eax, edx
mov dword [ebp - 0x25c], eax
mov eax, dword [edi + 4]
movzx ecx, byte [eax + 9]
mov eax, dword [edi + 0x10]
mov edx, ecx
imul edx, ebx
dec ecx
imul eax, esi
add edx, eax
add edx, dword [edi + 0x14]
cmp ecx, 3
ja case.default.0x1007ba30
jmp dword [ecx*4 + 0x1007bdb8]
movzx esi, byte [edx]
jmp 0x1007ba5e
movzx esi, word [edx]
jmp 0x1007ba5e
movzx esi, byte [edx + 2]
movzx eax, byte [edx + 1]
shl esi, 8
or esi, eax
movzx eax, byte [edx]
shl esi, 8
or esi, eax
jmp 0x1007ba5e
mov esi, dword [edx]
jmp 0x1007ba5e
xor esi, esi
mov ecx, esi
mov eax, 0x51eb851f
shr ecx, 0x18
and esi, 0xffffff
imul ecx, dword [ebp - 0x25c]
mul ecx
mov ecx, edi
shr edx, 5
shl edx, 0x18
or edx, esi
mov esi, dword [ebp - 0x258]
push edx
push esi
mov edx, ebx
call fcn.1007b3e0
mov ecx, dword [edi + 0xc]
inc esi
add esp, 8
mov dword [ebp - 0x258], esi
cmp esi, ecx
jl 0x1007ba13
mov eax, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x24c], eax
cmp eax, dword [edi + 8]
jl 0x1007b9f0
mov ebx, dword [ebp - 0x260]
test edi, edi
je 0x1007bcc0
cmp dword [ebx + 0xdc], 0
mov eax, dword [edi + 8]
mov ecx, eax
mov edx, dword [edi + 0xc]
mov esi, edx
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x24c], esi
je 0x1007bb69
movsd xmm3, qword [ebx + 0x110]
xorps xmm2, xmm2
ucomisd xmm3, xmm2
lahf
test ah, 0x44
jp 0x1007bb2b
movsd xmm1, qword [ebx + 0x118]
ucomisd xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1007bb81
ucomisd xmm3, xmm2
lahf
test ah, 0x44
jnp 0x1007bb4d
movd xmm0, dword [ebp - 0x25c]
movsd xmm1, qword [ebx + 0x118]
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm3
cvttsd2si ecx, xmm0
mov dword [ebp - 0x250], ecx
ucomisd xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1007bb81
movd xmm0, edx
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
cvttsd2si esi, xmm0
jmp 0x1007bb7b
mov ecx, dword [ebx + 0xe8]
mov esi, dword [ebx + 0xec]
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x24c], esi
mov eax, dword [ebx + 0xf8]
mov dword [ebp - 0x258], eax
cmp ecx, eax
jg 0x1007bb9d
mov edx, dword [ebp - 0x254]
mov edx, dword [edx]
cmp esi, edx
jle 0x1007bbc8
cmp ecx, dword [ebp - 0x258]
cmovle eax, ecx
mov ecx, eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x250], ecx
mov edx, dword [eax]
cmp esi, edx
jle 0x1007bbc8
mov esi, edx
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x24c], esi
mov eax, dword [ebx + 0xe0]
add eax, ecx
cmp eax, dword [ebp - 0x258]
jle 0x1007bbee
mov eax, dword [ebp - 0x258]
sub eax, ecx
mov dword [ebx + 0xe0], eax
mov eax, dword [ebp - 0x254]
mov edx, dword [eax]
mov eax, dword [ebx + 0xe4]
add eax, esi
cmp eax, edx
jle 0x1007bc02
sub edx, esi
mov dword [ebx + 0xe4], edx
cmp ecx, dword [ebp - 0x25c]
jne 0x1007bc12
cmp esi, dword [ebp - 0x260]
je 0x1007bc36
mov edx, ecx
mov ecx, edi
push esi
call fcn.1007b490
push edi
mov esi, eax
call dword [sym.imp.SDL2.dll_SDL_FreeSurface]
mov ecx, dword [ebp - 0x250]
mov edi, esi
mov esi, dword [ebp - 0x24c]
add esp, 8
mov dword [ebx + 0xe8], ecx
mov dword [ebx + 0xec], esi
mov eax, dword [ebx + 0x13c]
test eax, eax
je 0x1007bc66
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebx + 0x13c]
test eax, eax
je 0x1007bc66
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov esi, dword [ebx + 0x19c]
test esi, esi
je 0x1007bc98
test byte [esi], 2
je 0x1007bc7f
push esi
call dword [sym.imp.SDL2.dll_SDL_LockSurface]
add esp, 4
push esi
call dword [sym.imp.SDL2.dll_SDL_FreeSurface]
add esp, 4
test byte [edi], 2
je 0x1007bc98
push edi
call dword [sym.imp.SDL2.dll_SDL_UnlockSurface]
add esp, 4
mov dword [ebx + 0x19c], edi
mov eax, dword [ebx + 0x13c]
test eax, eax
je 0x1007bcc6
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [ebp - 0x264]
call dword [sym.imp.SDL2_ttf.dll_TTF_CloseFont]
add esp, 4
jmp 0x1007bcf0
mov edi, dword [ebx + 0x19c]
push dword [ebp - 0x264]
call dword [sym.imp.SDL2_ttf.dll_TTF_CloseFont]
add esp, 4
jmp 0x1007bcf0
call dword [sym.imp.SDL2.dll_SDL_GetError]
push eax
push str.TTF_OpenFont_failed:__s
push str.CreateTextSurface
call fcn.1007c440
add esp, 0xc
push dword [ebp - 0x268]
call fcn.1008029f
add esp, 4
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x1007bd3a
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007bd30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007bd89
push edx
push ecx
call fcn.1007face
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x1007bd99
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007bd8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007bd8f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007face
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007fac0
mov esp, ebp
pop ebp
ret