Function at 0x436f70
Capabilities:
Check if file exists
Get file attributes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48dbe1
mov eax, dword fs:[0]
push eax
sub esp, 0x220
mov eax, dword [0x4ad650]
xor eax, esp
mov dword [esp + 0x218], eax
push ebx
push esi
push edi
mov eax, dword [0x4ad650]
xor eax, esp
push eax
lea eax, [esp + 0x230]
mov dword fs:[0], eax
push 0x49bc28
lea eax, [esp + 0x18]
push 0x4b2dc0
push eax
call fcn.0040cf10
add esp, 0xc
mov dword [esp + 0x238], 0
mov ecx, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push ecx
call esi
cmp eax, 0xffffffff
jne 0x43702e
push 0xc
push str..Config.ini
lea ecx, [esp + 0x1c]
call fcn.00406010
mov edx, dword [esp + 0x14]
push edx
call esi
cmp eax, 0xffffffff
jne 0x43702e
mov dword [esp + 0x238], eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437027
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x4375b2
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov edx, dword [esp + 0x14]
mov ecx, 0x7f
lea edi, [esp + 0x24]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x437050
sub eax, esi
sar eax, 1
add eax, eax
push eax
push edx
lea ecx, [esp + 0x2c]
push ecx
call fcn.00476650
add esp, 0xc
call fcn.00454183
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x43708a
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x238], 1
call fcn.00454183
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4370bc
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
push 8
push str.handicon
lea ecx, [esp + 0x20]
mov byte [esp + 0x240], 2
call fcn.00406010
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0
push ecx
push str.ICON
call esi
mov eax, 0x4b2028
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x437127
sub eax, ecx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b28e0
call fcn.00406010
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
lea edx, [esp + 0x24]
push edx
push 1
push str.notAskAgain
push str.GLOBAL
call ebx
mov dword [0x4b2980], eax
lea eax, [esp + 0x24]
push eax
push 0
push str.isClosed
push str.GLOBAL
call ebx
lea ecx, [esp + 0x24]
push ecx
push 1
push str.langSwitch
push str.GLOBAL
mov dword [0x4b2984], eax
call ebx
lea edx, [esp + 0x24]
push edx
push 0x409
push str.langId
push str.GLOBAL
mov dword [0x4b2988], eax
call ebx
mov dword [0x4b2990], eax
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push str.imagstr.dll
push str.Model
push str.GLOBAL
call esi
mov eax, 0x4b2028
lea ecx, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x4371f0
sub eax, ecx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b2994
call fcn.00406010
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push str.nicDll
push str.GLOBAL
call esi
mov eax, 0x4b2028
lea ecx, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x437250
sub eax, ecx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b2998
call fcn.00406010
lea ecx, [esp + 0x24]
push ecx
push 0
push str.softAp
push str.GLOBAL
call ebx
mov dword [0x4b2a00], eax
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push str.nicGuid
push str.GLOBAL
call esi
mov eax, 0x4b2028
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4372c7
sub eax, edx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b299c
call fcn.00406010
lea ecx, [esp + 0x24]
push ecx
mov edi, 1
push edi
push str.powerStatus
push str.GLOBAL
call ebx
mov edx, dword [0x4b2988]
mov dword [0x4b298c], eax
mov ax, word [0x4b2990]
mov dword [0x4b1e1c], edx
mov word [0x4b1e18], ax
cmp dword [0x4b1dac], edi
jne 0x437328
mov dword [0x4b2a00], edi
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push str.ssid
push str.SOFTAP
call esi
mov eax, 0x4b2028
lea edx, [eax + 2]
jmp 0x437370
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x437370
sub eax, edx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b2a04
call fcn.00406010
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push 0x49bd04
push str.SOFTAP
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4b2028
call fcn.00406140
call fcn.0044d160
mov dword [0x4b2a08], eax
xor eax, eax
movzx edx, ax
mov eax, edx
add esp, 4
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push 0x49bd14
push str.SOFTAP
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4b2028
call fcn.00406140
call fcn.0044d430
mov dword [0x4b2a0c], eax
xor eax, eax
movzx edx, ax
mov eax, edx
add esp, 4
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push 0x49bd20
push str.SOFTAP
call esi
mov eax, 0x4b2028
lea ecx, [eax + 2]
jmp 0x437480
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x437480
sub eax, ecx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b2a10
call fcn.00406010
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, pe_nt_image_headers32
mov edi, 0x4b2028
rep stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push 0x200
push 0x4b2028
push 0x499064
push str.icsGuid
push str.GLOBAL
call esi
mov eax, 0x4b2028
lea ecx, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x4374e0
sub eax, ecx
sar eax, 1
push eax
push 0x4b2028
mov ecx, 0x4b29a0
call fcn.00406010
lea ecx, [esp + 0x24]
push ecx
push 1
push str.channel
push str.SOFTAP
call ebx
lea edx, [esp + 0x24]
push edx
push 0x96c
push 0x49bd48
push str.SOFTAP
mov dword [0x4b2a14], eax
call ebx
mov dword [0x4b2a18], eax
mov byte [esp + 0x238], 1
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43755a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x238], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437582
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x238], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4375ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0x230]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x218]
xor ecx, esp
call fcn.004705a7
mov esp, ebp
pop ebp
ret