Function at 0x406b40
Capabilities:
Create directory
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x42970e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x13c
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea eax, [ebp + 0x14]
push eax
call fcn.00408ac0
mov eax, dword [ebp + 0x1c]
push eax
call fcn.0040bfe0
mov eax, dword [ebp + 0x1c]
add esp, 4
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call fcn.0040c240
push eax
lea ecx, [esp + 0x30]
call fcn.00420085
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x48]
push str.setup.cfg
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x30]
lea edx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x160], ebx
call fcn.0042021f
mov eax, dword [eax]
push eax
lea eax, [esp + 0x4c]
push 0x104
push eax
push 0x437490
push str.PATH
push str.SETTINGS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x10]
call fcn.00420017
lea ecx, [esp + 0x48]
lea edx, [esp + 0x2c]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call fcn.0042021f
lea ecx, [esp + 0x38]
push str.config
lea edx, [esp + 0x2c]
push ecx
push edx
mov byte [esp + 0x160], 1
call fcn.0042021f
mov eax, dword [0x435dd0]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x154], 3
push ecx
call fcn.00409270
mov edx, dword [esp + 0x18]
add esp, 4
cmp dword [edx - 8], ebx
je 0x406c4a
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.00420104
mov cl, byte [esp + 0x3f]
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x18], cl
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push edx
push str.ncstudio.dat
push eax
mov ecx, ebp
mov byte [esp + 0x160], 4
call fcn.00406fb0
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp esi, ebx
je 0x406c94
mov ecx, eax
sub ecx, esi
test ecx, 0xfffffffc
jne 0x406ccf
cmp esi, eax
mov byte [esp + 0x154], 3
mov edi, eax
je 0x406cb5
push ebx
mov ecx, esi
call fcn.00409f60
add esi, 4
cmp esi, edi
jne 0x406ca2
mov esi, dword [esp + 0x1c]
push esi
call fcn.0041fd81
add esp, 4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
jmp 0x406f46
mov edx, dword [0x435dd0]
mov dword [esp + 0x34], edx
cmp esi, eax
mov byte [esp + 0x154], 5
mov ebx, 6
je 0x406dba
push esi
lea ecx, [esp + 0x14]
call fcn.0041fd8c
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], bl
call fcn.0041f2bd
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x18]
call fcn.0041f245
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], 7
call fcn.00420104
lea ecx, [esp + 0x44]
mov byte [esp + 0x154], bl
call fcn.00420017
push 0x5c
lea ecx, [esp + 0x14]
call fcn.0041f2bd
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x40]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.0041f1c9
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], 8
call fcn.00420104
lea ecx, [esp + 0x40]
mov byte [esp + 0x154], bl
call fcn.00420017
lea eax, [esp + 0x10]
lea ecx, [esp + 0x34]
push eax
call fcn.004203a2
push 0xa
lea ecx, [esp + 0x38]
call fcn.0042038d
lea ecx, [esp + 0x10]
mov byte [esp + 0x154], 5
call fcn.00420017
mov eax, dword [esp + 0x20]
add esi, 4
cmp esi, eax
jne 0x406cee
push 0x434028
call fcn.0040c340
add esp, 4
lea ecx, [esp + 0x30]
push eax
call fcn.00420085
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 9
push ecx
lea ecx, [esp + 0x34]
call fcn.004203a2
push 0x434030
call fcn.0040c340
add esp, 4
lea ecx, [esp + 0x30]
push eax
call fcn.00420366
mov edx, dword [esp + 0x30]
xor edi, edi
push edi
push 0x34
push edx
call fcn.00426fa4
cmp eax, ebx
jne 0x406ee7
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp esi, eax
mov byte [ebp], 1
je 0x406e3a
mov eax, dword [esi]
mov ecx, ebp
push eax
call fcn.00407960
mov eax, dword [esp + 0x20]
add esi, 4
cmp esi, eax
jne 0x406e25
lea ecx, [esp + 0x30]
mov byte [esp + 0x154], 5
call fcn.00420017
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 4
call fcn.00420017
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov byte [esp + 0x154], 3
mov ebx, eax
je 0x406e84
mov ecx, esi
call fcn.00420017
add esi, 4
cmp esi, ebx
jne 0x406e72
mov esi, dword [esp + 0x1c]
push esi
call fcn.0041fd81
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov byte [esp + 0x154], 2
call fcn.00420017
lea ecx, [esp + 0x28]
mov byte [esp + 0x154], 1
call fcn.00420017
lea ecx, [esp + 0x38]
mov byte [esp + 0x154], 0
call fcn.00420017
lea ecx, [esp + 0x2c]
mov dword [esp + 0x154], 0xffffffff
call fcn.00420017
mov al, 1
jmp 0x406f8f
lea ecx, [esp + 0x30]
mov byte [esp + 0x154], 5
call fcn.00420017
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 4
call fcn.00420017
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov byte [esp + 0x154], 3
mov ebx, eax
je 0x406f31
mov ecx, esi
call fcn.00420017
add esi, 4
cmp esi, ebx
jne 0x406f1f
mov esi, dword [esp + 0x1c]
push esi
call fcn.0041fd81
add esp, 4
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x154], 2
call fcn.00420017
lea ecx, [esp + 0x28]
mov byte [esp + 0x154], 1
call fcn.00420017
lea ecx, [esp + 0x38]
mov byte [esp + 0x154], 0
call fcn.00420017
lea ecx, [esp + 0x2c]
mov dword [esp + 0x154], 0xffffffff
call fcn.00420017
xor al, al
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x148
ret