Function at 0x431799
Capabilities:
Get file attributes
Read .ini file
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x888c
call fcn.004990f0
push ebx
push esi
xor ebx, ebx
test byte [ebp + 8], 0x80
push edi
je 0x43197e
mov ecx, dword [0x531bbc]
sub esp, 0x10
mov edi, esp
mov dword [ebp - 8], 1
mov esi, 0x4d1ef0
mov dword [ebp + 8], ebx
mov dword [ebp - 4], ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00406f92
mov edi, eax
test edi, edi
je 0x43188a
push 1
mov ecx, edi
call fcn.00431770
mov esi, eax
test esi, esi
je 0x431852
call fcn.0046c7f0
call fcn.0046c8e3
push dword [0x531f70]
mov ecx, esi
call fcn.0043175a
mov dword [ebp - 8], eax
test eax, eax
jne 0x43184b
lea eax, [ebp + 8]
mov ecx, esi
push eax
call fcn.004316e7
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x431839
push 1
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00431744
push dword [ebp + 8]
mov ecx, esi
call fcn.00431713
mov ecx, esi
call fcn.00431729
mov ecx, dword [0x531bbc]
push edi
call fcn.00431786
mov esi, dword [ebp - 8]
test esi, esi
jne 0x43188d
cmp dword [ebp + 8], ebx
je 0x43188d
push ebx
push ebx
push 0x7e8
call fcn.00441947
add esp, 0xc
push eax
push 0x3f9
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x43188d
xor esi, esi
inc esi
call fcn.0048f385
call fcn.004891e1
call fcn.00485813
test esi, esi
jne 0x431944
mov esi, 0x5019f8
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x4318bd
dec eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edi, 0x104
lea eax, [ebp - 0x190]
push edi
push ebx
push eax
call fcn.0049a3b0
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x4d1f00
push 0x4d1f04
push 0x4d1f14
call esi
push 0x501c00
push edi
lea eax, [ebp - 0x190]
push eax
push 0x4ccc30
push str.WAParam
push 0x4d1f30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x5019f8
push ebx
push ebx
push str.SETUP
call esi
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesA]
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
cmp dword [ebp + 8], eax
setne al
push eax
call fcn.0046a4f2
add esp, 0xc
call fcn.004877e2
cmp dword [ebp + 8], ebx
je 0x431957
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [ebp - 4], ebx
je 0x431972
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x431972
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.00411d79
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
call fcn.00465fe3
xor edi, edi
inc edi
push edi
call fcn.00465c4d
test byte [ebp + 8], 0x20
pop ecx
pop ecx
push ebx
je 0x43199d
call fcn.00465a88
jmp 0x4319a2
call fcn.004140eb
mov eax, dword [ebp + 8]
pop ecx
test al, 0x10
je 0x4319c7
push 0x5019f8
push 0x4cf54c
push 0x4d1f04
push 0x4d1f14
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp + 8]
test al, 8
je 0x4319d8
call fcn.00412232
test eax, eax
jne 0x4319ea
push ebx
push edi
jmp 0x4319e3
call fcn.00412232
test eax, eax
je 0x4319ea
push ebx
push ebx
call fcn.00413914
pop ecx
pop ecx
test byte [ebp + 8], 0x46
je 0x431ba3
push 0x8000
lea eax, [ebp - 0x888c]
push ebx
push eax
call fcn.0049a3b0
mov eax, dword [ebp + 8]
add esp, 0xc
test al, 6
je 0x431b0f
call fcn.0048942a
mov dword [ebp - 0xc], eax
mov esi, eax
mov dword [ebp - 4], eax
test eax, eax
je 0x431b0c
cmp word [esi], bx
je 0x431af1
push 0x800
lea eax, [ebp - 0x88c]
push ebx
push eax
call fcn.0049a3b0
push 0x7e
lea eax, [ebp - 0x8a]
push ebx
push eax
call fcn.0049a3b0
push esi
push str.test._s
lea eax, [ebp - 0x88c]
push 0x400
push eax
call fcn.0040adba
xor eax, eax
mov word [ebp - 0x8c], ax
lea eax, [ebp - 0x8c]
push 0x20
push eax
lea eax, [ebp - 0x88c]
push str.type
push eax
call fcn.00427818
lea eax, [ebp - 0x8c]
push eax
call fcn.004a2eb4
add esp, 0x3c
mov dword [ebp - 8], eax
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [ebp - 0x888c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esi, eax
cmp esi, 0x3f00
jg 0x431af1
cmp dword [ebp - 8], ebx
jne 0x431be6
test byte [ebp + 8], 2
jne 0x431bf0
mov esi, dword [ebp - 4]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [esi + eax*2]
add esi, 2
mov dword [ebp - 4], esi
jne 0x431a29
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push ebx
push ebx
push 0x3000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov eax, dword [ebp + 8]
test al, 0x40
je 0x431b90
mov ecx, dword [0x531bd0]
push ebx
mov dword [ebp - 4], ebx
call fcn.004316fd
mov esi, eax
test esi, esi
je 0x431b90
mov ebx, dword [ebp + 8]
shr ebx, 6
and ebx, edi
inc dword [ebp - 4]
test ebx, ebx
je 0x431b72
push ebx
push esi
call fcn.004139a5
cmp word [ebp - 0x888c], 0
pop ecx
pop ecx
je 0x431b60
push 0x4cc7e4
push 0x4000
lea eax, [ebp - 0x888c]
push eax
call fcn.0040ad38
push esi
push 0x2000
lea eax, [ebp - 0x888c]
push eax
call fcn.0040ad38
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov eax, dword [ebp - 4]
mov ecx, dword [0x531bd0]
push eax
call fcn.004316fd
mov esi, eax
test esi, esi
jne 0x431b30
xor ebx, ebx
lea eax, [ebp - 0x888c]
push eax
push 0x4cc7d4
call fcn.004120f3
pop ecx
pop ecx
push edi
push 0x4ccb5c
call fcn.004139a5
push edi
push 0x4ccb64
call fcn.004139a5
push edi
push 0x4ccb6c
call fcn.004139a5
push ebx
call fcn.00414206
add esp, 0x1c
call fcn.0048f385
call fcn.004891e1
call fcn.00485813
call fcn.004877e2
jmp 0x431972
test byte [ebp + 8], 4
je 0x431ad8
mov esi, dword [ebp - 4]
push edi
push esi
call fcn.004139a5
pop ecx
pop ecx
cmp word [ebp - 0x888c], bx
je 0x431c1b
push 0x4cc7e4
push 0x4000
lea eax, [ebp - 0x888c]
push eax
call fcn.0040ad38
push esi
push 0x4000
lea eax, [ebp - 0x888c]
push eax
call fcn.0040ad38
jmp 0x431adb