Function at 0x4403d1
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x51069c], esi
call fcn.0042e376
xor ebp, ebp
inc ebp
push ebp
push ebp
push esi
call fcn.0042e376
push 7
push 7
push esi
call fcn.0042e376
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x51069c]
mov dword [0x5106a0], eax
call esi
push 0x3e9
push dword [0x51069c]
mov dword [0x5106a4], eax
call esi
push 0x3ea
push dword [0x51069c]
mov dword [0x5106a8], eax
call esi
push 0xa08c
push dword [0x51069c]
mov dword [0x5106ac], eax
call esi
push 0x3fe
push dword [0x51069c]
mov dword [0x5106b0], eax
call esi
push 0xa08d
push dword [0x51069c]
mov dword [0x5106b4], eax
call esi
push 0x3ff
push dword [0x51069c]
mov dword [0x5106b8], eax
call esi
push 0xa08e
push dword [0x51069c]
mov dword [0x5106bc], eax
call esi
push 0xa08f
push dword [0x51069c]
mov dword [0x5106c0], eax
call esi
push 0xa090
push dword [0x51069c]
mov dword [0x5106c4], eax
call esi
push 0xa091
push dword [0x51069c]
mov dword [0x5106c8], eax
call esi
push 0xa092
push dword [0x51069c]
mov dword [0x5106cc], eax
call esi
push 0xa093
push dword [0x51069c]
mov dword [0x5106d0], eax
call esi
push 0x400
push dword [0x51069c]
mov dword [0x5106d4], eax
call esi
mov dword [0x5106d8], eax
xor edi, edi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push edi
push 0x1119
push dword [0x5106a4]
call ebx
push 0x10
mov dword [0x5106e0], eax
call fcn.0042dae4
push 0x20
mov dword [0x4a7b0c], eax
call fcn.0042dae4
push edi
push edi
push 0x478
push dword [0x5106a8]
mov dword [0x4a7b10], eax
call ebx
push edi
push ebp
push 0x459
push dword [0x5106a8]
call ebx
push ebp
push edi
push 0x445
push dword [0x5106c4]
call ebx
push edi
push 0x103
mov esi, 0xc5
push esi
push dword [0x5106c4]
call ebx
push edi
push 0xfd
push esi
push dword [0x5106dc]
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x50fcf0
push edi
push 0x60
push 0x479ea0
mov esi, 0x45acf8
push esi
call ebp
push 0x5c
push 0x4a7b88
push 0x510000
mov dword [esp + 0x1c], eax
call fcn.0044b1c8
add esp, 0xc
push edi
push 0x5c
push 0x510000
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x44061f
push 0x5c
push 0x4a7b88
push 0x510000
call fcn.0044b1c8
add esp, 0xc
cmp dword [0x510068], 5
jne 0x440689
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x440689
push 0x47c858
push 0x51001c
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x440689
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x44064b
cmp ecx, 0x3e8
jae 0x44064b
mov eax, dword [0x4a7adc]
cmp eax, ecx
je 0x44064b
push ecx
push eax
push dword [0x510000]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x510000], eax
mov eax, dword [0x510000]
add eax, 0x78
cmp eax, 0xf0
ja 0x440675
cmp byte [0x510016], 0
jne 0x440675
cmp byte [0x510015], 0
jne 0x440675
cmp dword [0x51000c], 0
je 0x4406a0
push 0x5c
push 0x4a7b88
push 0x510000
call fcn.0044b1c8
add esp, 0xc
push 0x40
push dword [0x4a7adc]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x510000], eax
push 0x510000
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x5106f0], eax
test eax, eax
jne 0x4406c4
push 0x4a7b88
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x5106f0], eax
push 0
push 0
push 0x44e
push dword [0x5106a8]
call ebx
push eax
push 1
push 0x44d
push dword [0x5106a8]
call ebx
push 0
push dword [0x5106f0]
push 0x30
push dword [0x5106a8]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x510218], eax
call ebp
push edi
push 0xffffff
push str.EditFontColorDk
push esi
mov dword [0x510568], eax
call ebp
push edi
push 0x202020
push str.EditBkColorDk
push esi
mov dword [0x51021c], eax
call ebp
push edi
push 8
mov dword [0x51056c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvFontColor
push esi
call ebp
push edi
push 5
mov dword [0x51005c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.TvBkColor
push esi
call ebp
push edi
push 0xffffff
push str.TvFontColorDk
push esi
mov dword [0x510210], eax
call ebp
push edi
push 0x1a1a1a
push str.TvBkColorDk
push esi
mov dword [0x510060], eax
call ebp
push 0x50ff00
push 0x5c
push 0
push 0
push 0x31
push dword [0x5106a4]
mov dword [0x510214], eax
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push edi
push 0x5c
push 0x50ffa0
push str.TreeFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
je 0x440804
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4407f4
cmp ecx, 0x3e8
jae 0x4407f4
mov eax, dword [0x4a7adc]
cmp eax, ecx
je 0x4407f4
push ecx
push eax
push dword [0x50ffa0]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x50ffa0], eax
push 0x50ffa0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x5106f4], eax
mov eax, dword [0x5106f4]
test eax, eax
jne 0x440837
push 0x50ffa0
push 0x5c
push eax
push eax
push 0x31
push dword [0x5106a4]
call ebx
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x50ffa0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x5106f4], eax
push 1
push eax
push 0x30
push dword [0x5106a4]
call ebx
push edi
push 0x7d0
push str.HighlightDuration
push esi
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x510750], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x510754], eax
call ebp
push edi
push 0
push str.HighlightEnsureVisible
push esi
mov dword [0x510758], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x51075c], eax
call ebp
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
mov dword [0x510760], eax
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x510764], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x51076c], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x510774], eax
call ebp
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
mov dword [0x51077c], eax
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x51078c], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x510784], eax
call ebp
push edi
push 0xe
mov dword [0x51079c], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.HighlightSelFocus
push esi
call ebp
push edi
push 0xd9c0d
push str.HighlightColorArrivalDk
push esi
mov dword [0x510794], eax
call ebp
push edi
push 0x2222ce
push str.HighlightColorRemovalDk
push esi
mov dword [0x510768], eax
call ebp
push edi
push 0x1ca6a6
push str.HighlightColorGotProblemDk
push esi
mov dword [0x510770], eax
call ebp
push edi
push 0x9e9e1b
push str.HighlightColorSafeRemovalDk
push esi
mov dword [0x510778], eax
call ebp
push edi
push 0xa66060
push str.HighlightColorCompanionSsDk
push esi
mov dword [0x510780], eax
call ebp
push edi
push 0x6a6a9d
push str.HighlightColorCompanionHsDk
push esi
mov dword [0x510790], eax
call ebp
push edi
push 0x5c5c5c
push str.HighlightSelNoFocusDk
push esi
mov dword [0x510788], eax
call ebp
push edi
push 0x777777
push str.HighlightSelFocusDk
push esi
mov dword [0x5107a0], eax
call ebp
mov dword [0x510798], eax
mov eax, dword [0x510754]
push edi
push 0x2710
shr eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x4a7b18], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x4a7b1c], eax
call ebp
mov dword [0x5107a4], eax
mov eax, dword [0x510680]
push 1
push dword [eax*4 + 0x510218]
push dword [0x5106a8]
call fcn.0042b135
mov eax, dword [0x510680]
push dword [eax*4 + 0x510568]
push 0
push 0x443
push dword [0x5106a8]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x4a7b30], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x512c74], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x512c98], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x512c9c], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 4
and eax, 1
push eax
push 0x9d72
mov dword [0x512c78], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x512c88], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x512c8c], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x4a7b38], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x512c90], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x512c94], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [0x512c7c], eax
push eax
push 0x9d73
call fcn.00434e1d
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x512ca8], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.00434e67
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7d
mov dword [0x512ca4], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x4a7b34], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0xe
and eax, 1
push eax
push 0x9d7a
mov dword [0x512ca0], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7e
mov dword [0x4a7b40], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x4a7b3c], eax
call fcn.00434e1d
mov eax, ebx
shr eax, 0x11
and eax, 1
push eax
push 0x9d7b
mov dword [0x512cac], eax
call fcn.00434e1d
shr ebx, 0x12
and ebx, 1
push ebx
push 0x9d7c
mov dword [0x512cb0], ebx
call fcn.00434e1d
push edi
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x512c80], eax
call ebp
push edi
mov dword [0x512c84], eax
push 2
push str.TreeNamesByWhat
push esi
call ebp
push 0x9d96
mov dword [0x4a7b44], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.00434e67
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
push edi
push 1
push str.RegEditAsSystem
push esi
mov dword [0x4a7b50], eax
call ebp
mov dword [0x512cb4], eax
xor eax, eax
cmp dword [0x510068], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x4a7b48], eax
call ebp
mov dword [0x4a7b48], eax
cmp eax, 2
jne 0x440cbe
cmp dword [0x510068], 5
jne 0x440cbe
mov dword [0x4a7b48], 1
push edi
push ebx
push str.GrayMode
push esi
call ebp
push dword [0x510680]
mov dword [0x51067c], eax
push 0x9dbe
call fcn.00434e1d
call fcn.0043a139
call fcn.0042a395
test eax, eax
je 0x440d15
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x4a7b4c], eax
call fcn.00434e1d
cmp dword [0x4a7b4c], ebx
jne 0x440d28
call fcn.00434edf
jmp 0x440d28
push 1
push 0x9dbd
push dword [0x5106a0]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push ebx
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x512cb8], eax
call fcn.00434e1d
cmp dword [0x512cb8], ebx
je 0x440d57
push 0xffffffffffffffff
push dword [0x51069c]
call fcn.0042c0ab
push dword [0x512cbc]
push 0x9dc1
call fcn.00434e1d
cmp dword [0x510068], 6
jb 0x440d85
push 4
push 4
push 0x112c
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x510710], eax
call fcn.0044b31e
pop ecx
cmp eax, ebx
je 0x440db8
push 5
push dword [0x5106ac]
mov ecx, eax
call fcn.00405f06
mov dword [0x511014], eax
jmp 0x440dbe
mov dword [0x511014], ebx
cmp dword [0x512cec], ebx
jne 0x440e37
push 0x11b4
call fcn.0044b31e
pop ecx
cmp eax, ebx
je 0x440dde
mov ecx, eax
call fcn.00407b47
jmp 0x440de0
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [0x512cec], eax
mov dword [eax + 4], ebx
mov eax, dword [0x512cec]
mov dword [eax + 0x18], 2
mov eax, dword [0x512cec]
push 0x4561e0
add eax, 0xd90
push eax
call esi
push str.Root
push 0x5105d6
call esi
mov eax, dword [0x512cec]
mov edi, str.My_Computer
push edi
add eax, 0x24
push eax
call esi
mov eax, dword [0x512cec]
push edi
add eax, 0x428
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x439671
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x5106a4]
call esi
push 0x433def
push edi
push dword [0x5106a8]
mov dword [0x5107b4], eax
call esi
push 0x43450c
push edi
push dword [0x5106c4]
mov dword [0x5107b8], eax
call esi
push 0x433d8d
push edi
push dword [0x5106d0]
mov dword [0x5107bc], eax
call esi
push 0x433dbe
push edi
push dword [0x5106d4]
mov dword [0x5107c4], eax
call esi
mov dword [0x5107c8], eax
call fcn.0042a23f
test eax, eax
je 0x440eb8
push 0x9cb3
push dword [0x5106a0]
call fcn.0042a306
cmp word [0x510de8], bx
je 0x440ec8
push 0x43b0ac
jmp 0x440ecd
push 0x43fe82
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x51064c], ebx
jne 0x440ef7
push dword [0x5106a4]
push dword [0x51069c]
call fcn.0042b0bf
cmp dword [0x4a7adc], 0x60
jle 0x440f13
push ebx
push ebx
push 0x8004
push dword [0x51069c]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x500000
push 0x100000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc