Function at 0x43e54d
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x50b228], esi
call fcn.0042cce3
xor ebp, ebp
inc ebp
push ebp
push ebp
push esi
call fcn.0042cce3
push 7
push 7
push esi
call fcn.0042cce3
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x50b228]
mov dword [0x50b22c], eax
call esi
push 0x3e9
push dword [0x50b228]
mov dword [0x50b230], eax
call esi
push 0x3ea
push dword [0x50b228]
mov dword [0x50b234], eax
call esi
push 0xa08c
push dword [0x50b228]
mov dword [0x50b238], eax
call esi
push 0x3fe
push dword [0x50b228]
mov dword [0x50b23c], eax
call esi
push 0xa08d
push dword [0x50b228]
mov dword [0x50b240], eax
call esi
push 0x3ff
push dword [0x50b228]
mov dword [0x50b244], eax
call esi
push 0xa08e
push dword [0x50b228]
mov dword [0x50b248], eax
call esi
push 0xa08f
push dword [0x50b228]
mov dword [0x50b24c], eax
call esi
push 0xa090
push dword [0x50b228]
mov dword [0x50b250], eax
call esi
push 0xa091
push dword [0x50b228]
mov dword [0x50b254], eax
call esi
push 0xa092
push dword [0x50b228]
mov dword [0x50b258], eax
call esi
push 0xa093
push dword [0x50b228]
mov dword [0x50b25c], eax
call esi
push 0x400
push dword [0x50b228]
mov dword [0x50b260], eax
call esi
mov dword [0x50b264], eax
xor edi, edi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push edi
push 0x1119
push dword [0x50b230]
call ebx
push 0x10
mov dword [0x50b26c], eax
call fcn.0042c451
push 0x20
mov dword [0x4a2aec], eax
call fcn.0042c451
push edi
push edi
push 0x478
push dword [0x50b234]
mov dword [0x4a2af0], eax
call ebx
push edi
push ebp
push 0x459
push dword [0x50b234]
call ebx
push ebp
push edi
push 0x445
push dword [0x50b250]
call ebx
push edi
push 0x103
mov esi, 0xc5
push esi
push dword [0x50b250]
call ebx
push edi
push 0xfd
push esi
push dword [0x50b268]
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x50a880
push edi
push 0x60
push 0x475e00
mov esi, 0x4575f4
push esi
call ebp
push 0x5c
push 0x4a2b68
push 0x50ab90
mov dword [esp + 0x1c], eax
call fcn.00448280
add esp, 0xc
push edi
push 0x5c
push 0x50ab90
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x43e79b
push 0x5c
push 0x4a2b68
push 0x50ab90
call fcn.00448280
add esp, 0xc
cmp dword [0x50abf8], 5
jne 0x43e805
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x43e805
push 0x47891c
push 0x50abac
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x43e805
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x43e7c7
cmp ecx, 0x3e8
jae 0x43e7c7
mov eax, dword [0x4a2abc]
cmp eax, ecx
je 0x43e7c7
push ecx
push eax
push dword [0x50ab90]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x50ab90], eax
mov eax, dword [0x50ab90]
add eax, 0x78
cmp eax, 0xf0
ja 0x43e7f1
cmp byte [0x50aba6], 0
jne 0x43e7f1
cmp byte [0x50aba5], 0
jne 0x43e7f1
cmp dword [0x50ab9c], 0
je 0x43e81c
push 0x5c
push 0x4a2b68
push 0x50ab90
call fcn.00448280
add esp, 0xc
push 0x40
push dword [0x4a2abc]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x50ab90], eax
push 0x50ab90
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50b27c], eax
test eax, eax
jne 0x43e840
push 0x4a2b68
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50b27c], eax
push 0
push 0
push 0x44e
push dword [0x50b234]
call ebx
push eax
push 1
push 0x44d
push dword [0x50b234]
call ebx
push 0
push dword [0x50b27c]
push 0x30
push dword [0x50b234]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x50ada8], eax
call ebp
push edi
push 0xffffff
push str.EditFontColorDk
push esi
mov dword [0x50b0f8], eax
call ebp
push edi
push 0x202020
push str.EditBkColorDk
push esi
mov dword [0x50adac], eax
call ebp
push edi
push 8
mov dword [0x50b0fc], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvFontColor
push esi
call ebp
push edi
push 5
mov dword [0x50abec], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvBkColor
push esi
call ebp
push edi
push 0xffffff
push str.TvFontColorDk
push esi
mov dword [0x50ada0], eax
call ebp
push edi
push 0x1a1a1a
push str.TvBkColorDk
push esi
mov dword [0x50abf0], eax
call ebp
push 0x50aa90
push 0x5c
push 0
push 0
push 0x31
push dword [0x50b230]
mov dword [0x50ada4], eax
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push edi
push 0x5c
push 0x50ab30
push str.TreeFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
je 0x43e980
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x43e970
cmp ecx, 0x3e8
jae 0x43e970
mov eax, dword [0x4a2abc]
cmp eax, ecx
je 0x43e970
push ecx
push eax
push dword [0x50ab30]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x50ab30], eax
push 0x50ab30
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50b280], eax
mov eax, dword [0x50b280]
test eax, eax
jne 0x43e9b3
push 0x50ab30
push 0x5c
push eax
push eax
push 0x31
push dword [0x50b230]
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x50ab30
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50b280], eax
push 1
push eax
push 0x30
push dword [0x50b230]
call ebx
push edi
push 0x7d0
push str.HighlightDuration
push esi
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x50b2e0], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x50b2e4], eax
call ebp
push edi
push 0
push str.HighlightEnsureVisible
push esi
mov dword [0x50b2e8], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x50b2ec], eax
call ebp
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
mov dword [0x50b2f0], eax
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x50b2f4], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x50b2fc], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x50b304], eax
call ebp
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
mov dword [0x50b30c], eax
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x50b31c], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x50b314], eax
call ebp
push edi
push 0xe
mov dword [0x50b32c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.HighlightSelFocus
push esi
call ebp
push edi
push 0xd9c0d
push str.HighlightColorArrivalDk
push esi
mov dword [0x50b324], eax
call ebp
push edi
push 0x1f1fba
push str.HighlightColorRemovalDk
push esi
mov dword [0x50b2f8], eax
call ebp
push edi
push 0x189292
push str.HighlightColorGotProblemDk
push esi
mov dword [0x50b300], eax
call ebp
push edi
push 0x9e9e1b
push str.HighlightColorSafeRemovalDk
push esi
mov dword [0x50b308], eax
call ebp
push edi
push 0xa66060
push str.HighlightColorCompanionSsDk
push esi
mov dword [0x50b310], eax
call ebp
push edi
push 0x6a6a9d
push str.HighlightColorCompanionHsDk
push esi
mov dword [0x50b320], eax
call ebp
push edi
push 0x5c5c5c
push str.HighlightSelNoFocusDk
push esi
mov dword [0x50b318], eax
call ebp
push edi
push 0x777777
push str.HighlightSelFocusDk
push esi
mov dword [0x50b330], eax
call ebp
mov dword [0x50b328], eax
mov eax, dword [0x50b2e4]
cdq
and edx, 0xff
push edi
add eax, edx
push 0x2710
sar eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x4a2af8], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x4a2afc], eax
call ebp
mov dword [0x50b2dc], eax
mov eax, dword [0x50b20c]
push 1
push dword [eax*4 + 0x50ada8]
push dword [0x50b234]
call fcn.00429cbb
mov eax, dword [0x50b20c]
push dword [eax*4 + 0x50b0f8]
push 0
push 0x443
push dword [0x50b234]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x4a2b10], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x50d7fc], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x50d820], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x50d824], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 4
and eax, 1
push eax
push 0x9d72
mov dword [0x50d800], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x50d810], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x50d814], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x4a2b18], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x50d818], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x50d81c], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0xa
and eax, 1
push eax
push 0x9d73
mov dword [0x50d804], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x50d830], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.00432ee6
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7d
mov dword [0x50d82c], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x4a2b14], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0xe
and eax, 1
push eax
push 0x9d7a
mov dword [0x50d828], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7e
mov dword [0x4a2b20], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x4a2b1c], eax
call fcn.00432e9c
mov eax, ebx
shr eax, 0x11
and eax, 1
push eax
push 0x9d7b
mov dword [0x50d834], eax
call fcn.00432e9c
shr ebx, 0x12
and ebx, 1
push ebx
push 0x9d7c
mov dword [0x50d838], ebx
call fcn.00432e9c
push edi
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x50d808], eax
call ebp
push edi
push 2
push str.TreeNamesByWhat
push esi
mov dword [0x50d80c], eax
call ebp
push 0x9d96
mov dword [0x4a2b24], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.00432ee6
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
push edi
push 1
push str.RegEditAsSystem
push esi
mov dword [0x4a2b30], eax
call ebp
mov dword [0x50d83c], eax
xor eax, eax
cmp dword [0x50abf8], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x4a2b28], eax
call ebp
mov dword [0x4a2b28], eax
cmp eax, 2
jne 0x43ee43
cmp dword [0x50abf8], 5
jne 0x43ee43
mov dword [0x4a2b28], 1
push edi
push ebx
push str.GrayMode
push esi
call ebp
push dword [0x50b20c]
mov dword [0x50b208], eax
push 0x9dbe
call fcn.00432e9c
call fcn.00437abf
call fcn.00428f1b
test eax, eax
je 0x43ee9a
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x4a2b2c], eax
call fcn.00432e9c
cmp dword [0x4a2b2c], ebx
jne 0x43eead
call fcn.00432f5e
jmp 0x43eead
push 1
push 0x9dbd
push dword [0x50b22c]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push ebx
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x50d840], eax
call fcn.00432e9c
cmp dword [0x50d840], ebx
je 0x43eedc
push 0xffffffffffffffff
push dword [0x50b228]
call fcn.0042aa71
push dword [0x50d844]
push 0x9dc1
call fcn.00432e9c
cmp dword [0x50abf8], 6
jb 0x43ef0a
push 4
push 4
push 0x112c
push dword [0x50b230]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x50b29c], eax
call fcn.004483d6
pop ecx
cmp eax, ebx
je 0x43ef3d
push 5
push dword [0x50b238]
mov ecx, eax
call fcn.00405d12
mov dword [0x50bb9c], eax
jmp 0x43ef43
mov dword [0x50bb9c], ebx
cmp dword [0x50d874], ebx
jne 0x43efbc
push 0x1018
call fcn.004483d6
pop ecx
cmp eax, ebx
je 0x43ef63
mov ecx, eax
call fcn.004077e7
jmp 0x43ef65
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [0x50d874], eax
mov dword [eax + 4], ebx
mov eax, dword [0x50d874]
mov dword [eax + 0x14], 2
mov eax, dword [0x50d874]
push 0x453148
add eax, 0xd0e
push eax
call esi
push str.Root
push 0x50b166
call esi
mov eax, dword [0x50d874]
mov edi, str.My_Computer
push edi
add eax, 0x20
push eax
call esi
mov eax, dword [0x50d874]
push edi
add eax, 0x424
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x4371ad
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x50b230]
call esi
push 0x431ee4
push edi
push dword [0x50b234]
mov dword [0x50b33c], eax
call esi
push 0x4325e3
push edi
push dword [0x50b250]
mov dword [0x50b340], eax
call esi
push 0x431e82
push edi
push dword [0x50b25c]
mov dword [0x50b344], eax
call esi
push 0x431eb3
push edi
push dword [0x50b260]
mov dword [0x50b34c], eax
call esi
mov dword [0x50b350], eax
call fcn.00428dc5
test eax, eax
je 0x43f03d
push 0x9cb3
push dword [0x50b22c]
call fcn.00428e8c
cmp word [0x50b970], bx
je 0x43f04d
push 0x438a7b
jmp 0x43f052
push 0x43e00a
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x50b1d8], ebx
jne 0x43f07c
push dword [0x50b230]
push dword [0x50b228]
call fcn.00429c45
cmp dword [0x4a2abc], 0x60
jle 0x43f098
push ebx
push ebx
push 0x8004
push dword [0x50b228]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x500000
push 0x100000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc