Function at 0x469740
Capabilities:
Get common file path
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4b730b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x21c
push ebx
push esi
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x125]
mov byte [esp + 0x124], 0
push 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x128]
push 0x1a
xor ebx, ebx
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x21]
mov byte [esp + 0x20], bl
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x124]
lea edx, [esp + 0x20]
stosw word es:[edi], ax
push ecx
push str._sTencentQQGameDdzRpg_adconfig.ini
push 0x103
push edx
stosb byte es:[edi], al
call dword [sym.imp.MSVCRT.dll__snprintf]
mov eax, dword [0x5156d8]
add esp, 0x10
lea ecx, [eax + 0x2f54]
call fcn.00473270
lea ecx, [esp + 0x20]
push 0x4d08cc
push ecx
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
cmp eax, ebx
mov dword [esp + 0x1c], eax
je 0x4699b7
push ebp
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_3
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor edx, edx
mov dword [esp + 0x234], ebx
mov dword [esp + 0x15], edx
mov byte [esp + 0x14], bl
mov dword [esp + 0x19], edx
mov esi, 0x50d928
mov byte [esp + 0x1d], dl
push str.Activity
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::operator_1
lea eax, [esp + 0x14]
push 0xa
push eax
push ebx
call dword [sym.imp.MSVCRT.dll__itoa]
add esp, 0xc
lea ecx, [esp + 0x10]
push eax
call fcn.004ac100
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push ecx
push 0
push str.Action
push edx
call edi
mov ecx, dword [esp + 0x10]
mov dword [esi - 0x148], eax
lea eax, [esp + 0x24]
push eax
push 0
push str.nHeight
push ecx
call edi
lea edx, [esp + 0x24]
mov dword [esi], eax
mov eax, dword [esp + 0x10]
push edx
push 0
push str.nWidth
push eax
call edi
lea ecx, [esp + 0x24]
lea edx, [esi - 0x144]
push ecx
push 0x3f
mov dword [esi - 4], eax
mov eax, dword [esp + 0x18]
push edx
push 0x4daff4
push str.Tips
push eax
call ebp
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push ecx
lea edx, [esi - 0x104]
push 0x3f
push edx
push 0x4daff4
push 0x4d6838
push eax
call ebp
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push ecx
lea edx, [esi + 4]
push 0x3f
push edx
push 0x4daff4
push str.Title
push eax
call ebp
add esi, 0x18c
inc ebx
cmp esi, 0x50dc40
jl 0x469825
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.MSVCRT.dll_fclose]
mov eax, dword [0x50d7d8]
add esp, 4
cmp eax, 1
pop ebp
jne 0x469920
push eax
push 0xb2
jmp 0x46995d
cmp eax, 2
jne 0x469951
mov eax, dword [0x5156d8]
push 1
push 0xb2
lea ecx, [eax + 0x2f54]
call fcn.00472c90
mov ecx, dword [0x5156d8]
push 1
push 0xb3
add ecx, 0x2f54
jmp 0x469969
cmp eax, 3
jne 0x4699a3
push 1
push 0xb3
mov edx, dword [0x5156d8]
lea ecx, [edx + 0x2f54]
call fcn.00472c90
mov ecx, 0x50d088
call sub.MFC42.DLL_CWinThread::GetMainWnd
mov ebx, eax
test ebx, ebx
je 0x4699a3
xor edi, edi
mov esi, 0x50d7e4
lea eax, [edi + 0xb2]
push esi
push eax
mov ecx, ebx
call fcn.004886d0
add esi, 0x18c
inc edi
cmp esi, 0x50dafc
jl 0x469985
lea ecx, [esp + 0xc]
mov dword [esp + 0x230], 0xffffffff
call fcn.004ac05e
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x228
ret