Function at 0x406b50
Capabilities:
Create directory
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x42a54e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x13c
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea eax, [ebp + 0x14]
push eax
call fcn.00408a80
mov eax, dword [ebp + 0x1c]
push eax
call fcn.0040bf60
mov eax, dword [ebp + 0x1c]
add esp, 4
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call fcn.0040c1c0
push eax
lea ecx, [esp + 0x30]
call fcn.00420eb4
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x48]
push str.setup.cfg
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x30]
lea edx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x160], ebx
call fcn.0042104e
mov eax, dword [eax]
push eax
lea eax, [esp + 0x4c]
push 0x104
push eax
push 0x43a4b0
push str.PATH
push str.SETTINGS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x10]
call fcn.00420e46
lea ecx, [esp + 0x48]
lea edx, [esp + 0x2c]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call fcn.0042104e
lea ecx, [esp + 0x38]
push str.config
lea edx, [esp + 0x2c]
push ecx
push edx
mov byte [esp + 0x160], 1
call fcn.0042104e
mov eax, dword [0x436dd0]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x154], 3
push ecx
call fcn.00409230
mov edx, dword [esp + 0x18]
add esp, 4
cmp dword [edx - 8], ebx
je 0x406c5a
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.00420f33
mov cl, byte [esp + 0x3f]
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x18], cl
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push edx
push str.ncstudio.dat
push eax
mov ecx, ebp
mov byte [esp + 0x160], 4
call fcn.00406fc0
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp esi, ebx
je 0x406ca4
mov ecx, eax
sub ecx, esi
test ecx, 0xfffffffc
jne 0x406cdf
cmp esi, eax
mov byte [esp + 0x154], 3
mov edi, eax
je 0x406cc5
push ebx
mov ecx, esi
call fcn.00409f20
add esi, 4
cmp esi, edi
jne 0x406cb2
mov esi, dword [esp + 0x1c]
push esi
call fcn.00420bb0
add esp, 4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
jmp 0x406f56
mov edx, dword [0x436dd0]
mov dword [esp + 0x34], edx
cmp esi, eax
mov byte [esp + 0x154], 5
mov ebx, 6
je 0x406dca
push esi
lea ecx, [esp + 0x14]
call fcn.00420bbb
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], bl
call fcn.004200a7
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x18]
call fcn.0042002f
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], 7
call fcn.00420f33
lea ecx, [esp + 0x44]
mov byte [esp + 0x154], bl
call fcn.00420e46
push 0x5c
lea ecx, [esp + 0x14]
call fcn.004200a7
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x40]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.0041ffb3
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x158], 8
call fcn.00420f33
lea ecx, [esp + 0x40]
mov byte [esp + 0x154], bl
call fcn.00420e46
lea eax, [esp + 0x10]
lea ecx, [esp + 0x34]
push eax
call fcn.004211d1
push 0xa
lea ecx, [esp + 0x38]
call fcn.004211bc
lea ecx, [esp + 0x10]
mov byte [esp + 0x154], 5
call fcn.00420e46
mov eax, dword [esp + 0x20]
add esi, 4
cmp esi, eax
jne 0x406cfe
push 0x435028
call fcn.0040c2c0
add esp, 4
lea ecx, [esp + 0x30]
push eax
call fcn.00420eb4
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 9
push ecx
lea ecx, [esp + 0x34]
call fcn.004211d1
push 0x435030
call fcn.0040c2c0
add esp, 4
lea ecx, [esp + 0x30]
push eax
call fcn.00421195
mov edx, dword [esp + 0x30]
xor edi, edi
push edi
push 0x34
push edx
call fcn.00427dee
cmp eax, ebx
jne 0x406ef7
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp esi, eax
mov byte [ebp], 1
je 0x406e4a
mov eax, dword [esi]
mov ecx, ebp
push eax
call fcn.00407920
mov eax, dword [esp + 0x20]
add esi, 4
cmp esi, eax
jne 0x406e35
lea ecx, [esp + 0x30]
mov byte [esp + 0x154], 5
call fcn.00420e46
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 4
call fcn.00420e46
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov byte [esp + 0x154], 3
mov ebx, eax
je 0x406e94
mov ecx, esi
call fcn.00420e46
add esi, 4
cmp esi, ebx
jne 0x406e82
mov esi, dword [esp + 0x1c]
push esi
call fcn.00420bb0
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov byte [esp + 0x154], 2
call fcn.00420e46
lea ecx, [esp + 0x28]
mov byte [esp + 0x154], 1
call fcn.00420e46
lea ecx, [esp + 0x38]
mov byte [esp + 0x154], 0
call fcn.00420e46
lea ecx, [esp + 0x2c]
mov dword [esp + 0x154], 0xffffffff
call fcn.00420e46
mov al, 1
jmp 0x406f9f
lea ecx, [esp + 0x30]
mov byte [esp + 0x154], 5
call fcn.00420e46
lea ecx, [esp + 0x34]
mov byte [esp + 0x154], 4
call fcn.00420e46
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov byte [esp + 0x154], 3
mov ebx, eax
je 0x406f41
mov ecx, esi
call fcn.00420e46
add esi, 4
cmp esi, ebx
jne 0x406f2f
mov esi, dword [esp + 0x1c]
push esi
call fcn.00420bb0
add esp, 4
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x154], 2
call fcn.00420e46
lea ecx, [esp + 0x28]
mov byte [esp + 0x154], 1
call fcn.00420e46
lea ecx, [esp + 0x38]
mov byte [esp + 0x154], 0
call fcn.00420e46
lea ecx, [esp + 0x2c]
mov dword [esp + 0x154], 0xffffffff
call fcn.00420e46
xor al, al
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x148
ret