Function at 0x43f991
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x50e67c], esi
call fcn.0042daf6
xor ebp, ebp
inc ebp
push ebp
push ebp
push esi
call fcn.0042daf6
push 7
push 7
push esi
call fcn.0042daf6
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x50e67c]
mov dword [0x50e680], eax
call esi
push 0x3e9
push dword [0x50e67c]
mov dword [0x50e684], eax
call esi
push 0x3ea
push dword [0x50e67c]
mov dword [0x50e688], eax
call esi
push 0xa08c
push dword [0x50e67c]
mov dword [0x50e68c], eax
call esi
push 0x3fe
push dword [0x50e67c]
mov dword [0x50e690], eax
call esi
push 0xa08d
push dword [0x50e67c]
mov dword [0x50e694], eax
call esi
push 0x3ff
push dword [0x50e67c]
mov dword [0x50e698], eax
call esi
push 0xa08e
push dword [0x50e67c]
mov dword [0x50e69c], eax
call esi
push 0xa08f
push dword [0x50e67c]
mov dword [0x50e6a0], eax
call esi
push 0xa090
push dword [0x50e67c]
mov dword [0x50e6a4], eax
call esi
push 0xa091
push dword [0x50e67c]
mov dword [0x50e6a8], eax
call esi
push 0xa092
push dword [0x50e67c]
mov dword [0x50e6ac], eax
call esi
push 0xa093
push dword [0x50e67c]
mov dword [0x50e6b0], eax
call esi
push 0x400
push dword [0x50e67c]
mov dword [0x50e6b4], eax
call esi
mov dword [0x50e6b8], eax
xor edi, edi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push edi
push 0x1119
push dword [0x50e684]
call ebx
push 0x10
mov dword [0x50e6c0], eax
call fcn.0042d264
push 0x20
mov dword [0x4a5b04], eax
call fcn.0042d264
push edi
push edi
push 0x478
push dword [0x50e688]
mov dword [0x4a5b08], eax
call ebx
push edi
push ebp
push 0x459
push dword [0x50e688]
call ebx
push ebp
push edi
push 0x445
push dword [0x50e6a4]
call ebx
push edi
push 0x103
mov esi, 0xc5
push esi
push dword [0x50e6a4]
call ebx
push edi
push 0xfd
push esi
push dword [0x50e6bc]
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x50dcd0
push edi
push 0x60
push 0x4786c0
mov esi, 0x4598c8
push esi
call ebp
push 0x5c
push 0x4a5b80
push 0x50dfe0
mov dword [esp + 0x1c], eax
call fcn.00449ce2
add esp, 0xc
push edi
push 0x5c
push 0x50dfe0
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x43fbdf
push 0x5c
push 0x4a5b80
push 0x50dfe0
call fcn.00449ce2
add esp, 0xc
cmp dword [0x50e048], 5
jne 0x43fc49
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x43fc49
push 0x47b1fc
push 0x50dffc
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x43fc49
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x43fc0b
cmp ecx, 0x3e8
jae 0x43fc0b
mov eax, dword [0x4a5ad4]
cmp eax, ecx
je 0x43fc0b
push ecx
push eax
push dword [0x50dfe0]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x50dfe0], eax
mov eax, dword [0x50dfe0]
add eax, 0x78
cmp eax, 0xf0
ja 0x43fc35
cmp byte [0x50dff6], 0
jne 0x43fc35
cmp byte [0x50dff5], 0
jne 0x43fc35
cmp dword [0x50dfec], 0
je 0x43fc60
push 0x5c
push 0x4a5b80
push 0x50dfe0
call fcn.00449ce2
add esp, 0xc
push 0x40
push dword [0x4a5ad4]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x50dfe0], eax
push 0x50dfe0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50e6d0], eax
test eax, eax
jne 0x43fc84
push 0x4a5b80
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50e6d0], eax
push 0
push 0
push 0x44e
push dword [0x50e688]
call ebx
push eax
push 1
push 0x44d
push dword [0x50e688]
call ebx
push 0
push dword [0x50e6d0]
push 0x30
push dword [0x50e688]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x50e1f8], eax
call ebp
push edi
push 0xffffff
push str.EditFontColorDk
push esi
mov dword [0x50e548], eax
call ebp
push edi
push 0x202020
push str.EditBkColorDk
push esi
mov dword [0x50e1fc], eax
call ebp
push edi
push 8
mov dword [0x50e54c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvFontColor
push esi
call ebp
push edi
push 5
mov dword [0x50e03c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvBkColor
push esi
call ebp
push edi
push 0xffffff
push str.TvFontColorDk
push esi
mov dword [0x50e1f0], eax
call ebp
push edi
push 0x1a1a1a
push str.TvBkColorDk
push esi
mov dword [0x50e040], eax
call ebp
push 0x50dee0
push 0x5c
push 0
push 0
push 0x31
push dword [0x50e684]
mov dword [0x50e1f4], eax
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push edi
push 0x5c
push 0x50df80
push str.TreeFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
je 0x43fdc4
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x43fdb4
cmp ecx, 0x3e8
jae 0x43fdb4
mov eax, dword [0x4a5ad4]
cmp eax, ecx
je 0x43fdb4
push ecx
push eax
push dword [0x50df80]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x50df80], eax
push 0x50df80
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50e6d4], eax
mov eax, dword [0x50e6d4]
test eax, eax
jne 0x43fdf7
push 0x50df80
push 0x5c
push eax
push eax
push 0x31
push dword [0x50e684]
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x50df80
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50e6d4], eax
push 1
push eax
push 0x30
push dword [0x50e684]
call ebx
push edi
push 0x7d0
push str.HighlightDuration
push esi
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x50e730], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x50e734], eax
call ebp
push edi
push 0
push str.HighlightEnsureVisible
push esi
mov dword [0x50e738], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x50e73c], eax
call ebp
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
mov dword [0x50e740], eax
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x50e744], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x50e74c], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x50e754], eax
call ebp
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
mov dword [0x50e75c], eax
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x50e76c], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x50e764], eax
call ebp
push edi
push 0xe
mov dword [0x50e77c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.HighlightSelFocus
push esi
call ebp
push edi
push 0xd9c0d
push str.HighlightColorArrivalDk
push esi
mov dword [0x50e774], eax
call ebp
push edi
push 0x1f1fba
push str.HighlightColorRemovalDk
push esi
mov dword [0x50e748], eax
call ebp
push edi
push 0x189292
push str.HighlightColorGotProblemDk
push esi
mov dword [0x50e750], eax
call ebp
push edi
push 0x9e9e1b
push str.HighlightColorSafeRemovalDk
push esi
mov dword [0x50e758], eax
call ebp
push edi
push 0xa66060
push str.HighlightColorCompanionSsDk
push esi
mov dword [0x50e760], eax
call ebp
push edi
push 0x6a6a9d
push str.HighlightColorCompanionHsDk
push esi
mov dword [0x50e770], eax
call ebp
push edi
push 0x5c5c5c
push str.HighlightSelNoFocusDk
push esi
mov dword [0x50e768], eax
call ebp
push edi
push 0x777777
push str.HighlightSelFocusDk
push esi
mov dword [0x50e780], eax
call ebp
mov dword [0x50e778], eax
mov eax, dword [0x50e734]
push edi
push 0x2710
shr eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x4a5b10], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x4a5b14], eax
call ebp
mov dword [0x50e784], eax
mov eax, dword [0x50e660]
push 1
push dword [eax*4 + 0x50e1f8]
push dword [0x50e688]
call fcn.0042a8c3
mov eax, dword [0x50e660]
push dword [eax*4 + 0x50e548]
push 0
push 0x443
push dword [0x50e688]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x4a5b28], eax
call fcn.00433fde
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x510c54], eax
call fcn.00433fde
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x510c78], eax
call fcn.00433fde
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x510c7c], eax
call fcn.00433fde
mov eax, ebx
shr eax, 4
and eax, 1
push eax
push 0x9d72
mov dword [0x510c58], eax
call fcn.00433fde
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x510c68], eax
call fcn.00433fde
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x510c6c], eax
call fcn.00433fde
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x4a5b30], eax
call fcn.00433fde
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x510c70], eax
call fcn.00433fde
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x510c74], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [0x510c5c], eax
push eax
push 0x9d73
call fcn.00433fde
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x510c88], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.00434028
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7d
mov dword [0x510c84], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x4a5b2c], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0xe
and eax, 1
push eax
push 0x9d7a
mov dword [0x510c80], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7e
mov dword [0x4a5b38], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x4a5b34], eax
call fcn.00433fde
mov eax, ebx
shr eax, 0x11
and eax, 1
push eax
push 0x9d7b
mov dword [0x510c8c], eax
call fcn.00433fde
shr ebx, 0x12
and ebx, 1
push ebx
push 0x9d7c
mov dword [0x510c90], ebx
call fcn.00433fde
push edi
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x510c60], eax
call ebp
push edi
mov dword [0x510c64], eax
push 2
push str.TreeNamesByWhat
push esi
call ebp
push 0x9d96
mov dword [0x4a5b3c], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.00434028
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
push edi
push 1
push str.RegEditAsSystem
push esi
mov dword [0x4a5b48], eax
call ebp
mov dword [0x510c94], eax
xor eax, eax
cmp dword [0x50e048], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x4a5b40], eax
call ebp
mov dword [0x4a5b40], eax
cmp eax, 2
jne 0x44027e
cmp dword [0x50e048], 5
jne 0x44027e
mov dword [0x4a5b40], 1
push edi
push ebx
push str.GrayMode
push esi
call ebp
push dword [0x50e660]
mov dword [0x50e65c], eax
push 0x9dbe
call fcn.00433fde
call fcn.00438ef5
call fcn.00429b23
test eax, eax
je 0x4402d5
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x4a5b44], eax
call fcn.00433fde
cmp dword [0x4a5b44], ebx
jne 0x4402e8
call fcn.004340a0
jmp 0x4402e8
push 1
push 0x9dbd
push dword [0x50e680]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push ebx
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x510c98], eax
call fcn.00433fde
cmp dword [0x510c98], ebx
je 0x440317
push 0xffffffffffffffff
push dword [0x50e67c]
call fcn.0042b82c
push dword [0x510c9c]
push 0x9dc1
call fcn.00433fde
cmp dword [0x50e048], 6
jb 0x440345
push 4
push 4
push 0x112c
push dword [0x50e684]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x50e6f0], eax
call fcn.00449e38
pop ecx
cmp eax, ebx
je 0x440378
push 5
push dword [0x50e68c]
mov ecx, eax
call fcn.00405e78
mov dword [0x50eff4], eax
jmp 0x44037e
mov dword [0x50eff4], ebx
cmp dword [0x510ccc], ebx
jne 0x4403f7
push 0x11b4
call fcn.00449e38
pop ecx
cmp eax, ebx
je 0x44039e
mov ecx, eax
call fcn.004079fd
jmp 0x4403a0
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [0x510ccc], eax
mov dword [eax + 4], ebx
mov eax, dword [0x510ccc]
mov dword [eax + 0x18], 2
mov eax, dword [0x510ccc]
push 0x4551b0
add eax, 0xd90
push eax
call esi
push str.Root
push 0x50e5b6
call esi
mov eax, dword [0x510ccc]
mov edi, str.My_Computer
push edi
add eax, 0x24
push eax
call esi
mov eax, dword [0x510ccc]
push edi
add eax, 0x428
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x438607
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x50e684]
call esi
push 0x432fb0
push edi
push dword [0x50e688]
mov dword [0x50e794], eax
call esi
push 0x4336cd
push edi
push dword [0x50e6a4]
mov dword [0x50e798], eax
call esi
push 0x432f4e
push edi
push dword [0x50e6b0]
mov dword [0x50e79c], eax
call esi
push 0x432f7f
push edi
push dword [0x50e6b4]
mov dword [0x50e7a4], eax
call esi
mov dword [0x50e7a8], eax
call fcn.004299cd
test eax, eax
je 0x440478
push 0x9cb3
push dword [0x50e680]
call fcn.00429a94
cmp word [0x50edc8], bx
je 0x440488
push 0x439f91
jmp 0x44048d
push 0x43f448
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x50e62c], ebx
jne 0x4404b7
push dword [0x50e684]
push dword [0x50e67c]
call fcn.0042a84d
cmp dword [0x4a5ad4], 0x60
jle 0x4404d3
push ebx
push ebx
push 0x8004
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x500000
push 0x100000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc