Function at 0x416929
Capabilities:
Get common file path
Read .ini file

Disassembly:
mov eax, 0x43e78c
call fcn.0041e498
sub esp, 0x248
push ebx
push esi
push edi
mov dword [ebp - 0x20], ecx
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x154]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x154]
xor ebx, ebx
push eax
push ebx
push ebx
push 0x8005
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea edi, [ebp - 0x154]
or ecx, 0xffffffff
xor eax, eax
push 5
repne scasb al, byte es:[edi]
pop ecx
dec edi
mov esi, 0x450aa0
lea eax, [ebp - 0x154]
push 0x450ab4
push eax
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrcatA]
call fcn.004016a6
mov ecx, eax
call fcn.00401702
mov esi, eax
cmp dword [esi + 0x30c], ebx
jne 0x416a0c
lea ecx, [ebp - 0x14]
call fcn.0040397c
lea ecx, [ebp + 8]
mov dword [ebp - 4], ebx
call fcn.0040397c
push 0xf230
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.0043686f
push 0xf231
lea ecx, [ebp + 8]
call fcn.0043686f
push 0x40
lea ecx, [ebp + 8]
call fcn.00401751
push eax
lea ecx, [ebp - 0x14]
call fcn.00401751
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00434425
and byte [ebp - 4], bl
lea ecx, [ebp + 8]
call fcn.00435f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00435f75
jmp 0x416bbc
lea ecx, [ebp - 0x30]
call fcn.0040cffb
mov esi, dword [esi + 0x30c]
push 0x87
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], esi
call fcn.0040d07c
push 3
lea ecx, [ebp - 0x30]
call fcn.0040d063
mov ecx, eax
push 0x400
push ebx
mov dword [ebp - 0x24], ecx
call fcn.0041858c
push 0x14
pop eax
cmp esi, eax
jle 0x416a55
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x416b84
mov eax, dword [ebp - 0x20]
mov edi, 0xff
lea esi, [eax + 0x84]
push ebx
lea eax, [ebp - 0x50]
push str.QW_d
push eax
call fcn.0041e8a9
add esp, 0xc
lea eax, [ebp - 0x154]
mov ecx, esi
push eax
push edi
push edi
call fcn.00436211
push eax
lea eax, [ebp - 0x50]
push 0x4568f0
push eax
push str.QuickWindow
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xffffffffffffffff
mov ecx, esi
call fcn.00436260
and dword [ebp - 0x28], 0
and byte [ebp - 0xd], 0
mov ecx, esi
call fcn.00401742
and dword [ebp - 0x18], 0
and dword [ebp - 0x14], 0
mov ecx, esi
call fcn.00401742
test eax, eax
jle 0x416b13
cmp byte [ebp - 0xd], 0
je 0x416aec
push dword [ebp - 0x18]
mov ecx, esi
call fcn.0041857d
mov ecx, dword [ebp - 0x14]
inc dword [ebp - 0x14]
mov byte [ebp + ecx - 0x254], al
push dword [ebp - 0x18]
mov ecx, esi
call fcn.0041857d
cmp al, 0x20
jne 0x416b04
mov eax, dword [ebp - 0x18]
mov byte [ebp - 0xd], 1
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x18]
mov ecx, esi
call fcn.00401742
cmp dword [ebp - 0x18], eax
jl 0x416acf
mov eax, dword [ebp - 0x14]
mov ecx, esi
and byte [ebp + eax - 0x254], 0
call fcn.0041856d
test eax, eax
je 0x416b39
lea eax, [ebx + 0x4e20]
push 0
push eax
push 0x800
jmp 0x416b6f
push dword [ebp - 0x28]
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0042ff6c
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00436062
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.00435f75
lea eax, [ebp - 0x254]
push eax
lea eax, [ebx + 0x4e20]
push eax
push 0
mov ecx, dword [ebp - 0x24]
call fcn.004184d9
inc ebx
add esi, 4
cmp ebx, dword [ebp - 0x1c]
jl 0x416a6d
lea ecx, [ebp - 0x44]
call fcn.00403987
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
call fcn.004011d2
push 0
mov ecx, dword [ebp - 0x24]
push dword [ebp - 0x20]
push dword [ebp - 0x38]
push dword [ebp - 0x44]
push 0
call fcn.004337e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.0040d02f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4