Function at 0x438bee
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x4fa140], esi
call fcn.00428d43
xor edi, edi
inc edi
push edi
push edi
push esi
call fcn.00428d43
push 7
push 7
push esi
call fcn.00428d43
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x4fa140]
mov dword [0x4fa144], eax
call esi
push 0x3e9
push dword [0x4fa140]
mov dword [0x4fa148], eax
call esi
push 0x3ea
push dword [0x4fa140]
mov dword [0x4fa14c], eax
call esi
push 0xa08c
push dword [0x4fa140]
mov dword [0x4fa150], eax
call esi
push 0x3fd
push dword [0x4fa140]
mov dword [0x4fa154], eax
call esi
push 0xa08d
push dword [0x4fa140]
mov dword [0x4fa158], eax
call esi
push 0x3fe
push dword [0x4fa140]
mov dword [0x4fa15c], eax
call esi
push 0xa08e
push dword [0x4fa140]
mov dword [0x4fa160], eax
call esi
push 0xa08f
push dword [0x4fa140]
mov dword [0x4fa164], eax
call esi
push 0xa090
push dword [0x4fa140]
mov dword [0x4fa168], eax
call esi
push 0xa091
push dword [0x4fa140]
mov dword [0x4fa16c], eax
call esi
push 0xa092
push dword [0x4fa140]
mov dword [0x4fa170], eax
call esi
push 0xa093
push dword [0x4fa140]
mov dword [0x4fa174], eax
call esi
push 0x3ff
push dword [0x4fa140]
mov dword [0x4fa178], eax
call esi
mov dword [0x4fa17c], eax
push 0x10
call fcn.00428559
push 0x20
mov dword [0x492a38], eax
call fcn.00428559
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
push esi
push esi
push 0x478
push dword [0x4fa14c]
mov dword [0x492a3c], eax
call ebx
push esi
push edi
push 0x459
push dword [0x4fa14c]
call ebx
push edi
push esi
push 0x445
push dword [0x4fa168]
call ebx
call fcn.004259bd
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x4f9890
mov esi, 0x44d58c
test eax, eax
je 0x438dbb
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x492a6c], eax
call fcn.0042d7c3
cmp dword [0x492a6c], 0
jne 0x438dce
call fcn.0042d885
jmp 0x438dce
push 1
push 0x9dbd
push dword [0x4fa144]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push 0
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x4fc590], eax
call fcn.0042d7c3
cmp dword [0x4fc590], 0
je 0x438dff
push 0xffffffffffffffff
push dword [0x4fa140]
call fcn.00426ab6
push dword [0x4fc594]
push 0x9dc1
call fcn.0042d7c3
cmp dword [0x4f9b48], 6
jb 0x438e29
push 4
push 4
push 0x112c
push dword [0x4fa148]
call ebx
push edi
push 0
push 0x468d98
push esi
call ebp
mov dword [esp + 0x10], eax
call fcn.0042ffc0
push 0x5c
push 0x492aa0
push 0x4f9ae8
call fcn.0043f4eb
add esp, 0xc
push edi
push 0x5c
push 0x4f9ae8
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x438eac
push 0x5c
push 0x492aa0
push 0x4f9ae8
call fcn.0043f4eb
add esp, 0xc
cmp dword [0x4f9b48], 5
jne 0x438f16
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x438f16
push 0x46b840
push 0x4f9b04
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x438f16
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x438ed8
cmp ecx, 0x3e8
jae 0x438ed8
mov eax, dword [0x492a28]
cmp eax, ecx
je 0x438ed8
push ecx
push eax
push dword [0x4f9ae8]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x4f9ae8], eax
mov eax, dword [0x4f9ae8]
add eax, 0x78
cmp eax, 0xf0
ja 0x438f02
cmp byte [0x4f9afe], 0
jne 0x438f02
cmp byte [0x4f9afd], 0
jne 0x438f02
cmp dword [0x4f9af4], 0
je 0x438f2d
push 0x5c
push 0x492aa0
push 0x4f9ae8
call fcn.0043f4eb
add esp, 0xc
push 0x40
push dword [0x492a28]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x4f9ae8], eax
push 0x4f9ae8
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x4fa18c], eax
test eax, eax
jne 0x438f51
push 0x492aa0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x4fa18c], eax
push 0
push eax
push 0x30
push dword [0x4fa14c]
call ebx
push 0
push 0
push 0x44e
push dword [0x4fa14c]
call ebx
push eax
push 1
push 0x44d
push dword [0x4fa14c]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x4f9c6c], eax
call ebp
push edi
push 0x7d0
push str.HighlightDuration
push esi
mov dword [0x4fa038], eax
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x4fa1dc], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x4fa1e0], eax
call ebp
push edi
push 1
push str.HighlightEnsureVisible
push esi
mov dword [0x4fa1e4], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x4fa1e8], eax
call ebp
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
mov dword [0x4fa1ec], eax
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x4fa1f0], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x4fa1f4], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x4fa1f8], eax
call ebp
mov dword [0x4fa1fc], eax
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x4fa204], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x4fa200], eax
call ebp
mov dword [0x4fa208], eax
mov eax, dword [0x4fa1e0]
cdq
and edx, 0xff
push edi
add eax, edx
push 0x2710
sar eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x492a40], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x492a44], eax
call ebp
push dword [0x4f9c6c]
mov dword [0x4fa20c], eax
push dword [0x4fa14c]
call fcn.00426687
push dword [0x4fa038]
push 0
push 0x443
push dword [0x4fa14c]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x492a50], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x4fc554], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x4fc578], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x4fc57c], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 4
and eax, 1
mov dword [0x4fc558], eax
push eax
push 0x9d72
call fcn.0042d7c3
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x4fc568], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x4fc56c], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x492a58], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x4fc570], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x4fc574], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 0xa
and eax, 1
push eax
push 0x9d73
mov dword [0x4fc55c], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x4fc588], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.0042d80d
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7c
mov dword [0x4fc584], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x492a54], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 0xe
and eax, 1
mov dword [0x4fc580], eax
push eax
push 0x9d7a
call fcn.0042d7c3
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7d
mov dword [0x492a60], eax
call fcn.0042d7c3
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x492a5c], eax
call fcn.0042d7c3
shr ebx, 0x11
and ebx, 1
push ebx
push 0x9d7b
mov dword [0x4fc58c], ebx
call fcn.0042d7c3
push edi
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x4fc560], eax
call ebp
push edi
push 2
push str.TreeNamesByWhat
push esi
mov dword [0x4fc564], eax
call ebp
push 0x9d96
mov dword [0x492a64], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.0042d80d
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
mov dword [0x492a70], eax
xor eax, eax
cmp dword [0x4f9b48], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x492a68], eax
call ebp
push 2
pop esi
mov dword [0x492a68], eax
cmp eax, esi
jne 0x439342
cmp dword [0x4f9b48], 5
jne 0x439342
mov dword [0x492a68], 1
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x4fa1a8], eax
call fcn.0043f641
pop ecx
cmp eax, ebx
je 0x439375
push 5
push dword [0x4fa150]
mov ecx, eax
call fcn.004054d6
mov dword [0x4fa870], eax
jmp 0x43937b
mov dword [0x4fa870], ebx
cmp dword [0x4fc5c4], ebx
jne 0x4393f0
push 0x1004
call fcn.0043f641
pop ecx
cmp eax, ebx
je 0x43939b
mov ecx, eax
call fcn.00406bc1
jmp 0x43939d
xor eax, eax
mov dword [0x4fc5c4], eax
mov dword [eax + 4], ebx
mov eax, dword [0x4fc5c4]
mov dword [eax + 0x10], esi
mov eax, dword [0x4fc5c4]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x449d34
add eax, 0xcf6
push eax
call esi
push str.Root
push 0x4fa09a
call esi
mov eax, dword [0x4fc5c4]
mov edi, str.My_Computer
push edi
add eax, 0x18
push eax
call esi
mov eax, dword [0x4fc5c4]
push edi
add eax, 0x41c
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x42cc73
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x4fa14c]
call esi
push 0x42d1cb
push edi
push dword [0x4fa168]
mov dword [0x4fa21c], eax
call esi
push 0x42cc21
push edi
push dword [0x4fa174]
mov dword [0x4fa220], eax
call esi
push 0x42cc4a
push edi
push dword [0x4fa178]
mov dword [0x4fa228], eax
call esi
mov dword [0x4fa22c], eax
call fcn.00425867
test eax, eax
je 0x43945e
push 0x9cb3
push dword [0x4fa144]
call fcn.0042592e
cmp word [0x4fa640], bx
je 0x43946e
push 0x431cf6
jmp 0x439473
push 0x4368e9
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x4fa104], ebx
jne 0x43949d
push dword [0x4fa148]
push dword [0x4fa140]
call fcn.00426611
cmp dword [0x492a28], 0x60
jle 0x4394b9
push ebx
push ebx
push 0x8003
push dword [0x4fa140]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x240000
push 0x80000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc