Function at 0x438d05
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x4fa548], esi
call fcn.00428fa5
xor edi, edi
inc edi
push edi
push edi
push esi
call fcn.00428fa5
push 7
push 7
push esi
call fcn.00428fa5
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x4fa548]
mov dword [0x4fa54c], eax
call esi
push 0x3e9
push dword [0x4fa548]
mov dword [0x4fa550], eax
call esi
push 0x3ea
push dword [0x4fa548]
mov dword [0x4fa554], eax
call esi
push 0xa08c
push dword [0x4fa548]
mov dword [0x4fa558], eax
call esi
push 0x3fd
push dword [0x4fa548]
mov dword [0x4fa55c], eax
call esi
push 0xa08d
push dword [0x4fa548]
mov dword [0x4fa560], eax
call esi
push 0x3fe
push dword [0x4fa548]
mov dword [0x4fa564], eax
call esi
push 0xa08e
push dword [0x4fa548]
mov dword [0x4fa568], eax
call esi
push 0xa08f
push dword [0x4fa548]
mov dword [0x4fa56c], eax
call esi
push 0xa090
push dword [0x4fa548]
mov dword [0x4fa570], eax
call esi
push 0xa091
push dword [0x4fa548]
mov dword [0x4fa574], eax
call esi
push 0xa092
push dword [0x4fa548]
mov dword [0x4fa578], eax
call esi
push 0xa093
push dword [0x4fa548]
mov dword [0x4fa57c], eax
call esi
push 0x3ff
push dword [0x4fa548]
mov dword [0x4fa580], eax
call esi
mov dword [0x4fa584], eax
push 0x10
call fcn.004287bb
push 0x20
mov dword [0x492a40], eax
call fcn.004287bb
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
push esi
push esi
push 0x478
push dword [0x4fa554]
mov dword [0x492a44], eax
call ebx
push esi
push edi
push 0x459
push dword [0x4fa554]
call ebx
push edi
push esi
push 0x445
push dword [0x4fa570]
call ebx
call fcn.00425bb0
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x4f9c98
mov esi, 0x44d6b4
test eax, eax
je 0x438ed2
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x492a74], eax
call fcn.0042d9d5
cmp dword [0x492a74], 0
jne 0x438ee5
call fcn.0042da97
jmp 0x438ee5
push 1
push 0x9dbd
push dword [0x4fa54c]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push 0
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x4fc998], eax
call fcn.0042d9d5
cmp dword [0x4fc998], 0
je 0x438f16
push 0xffffffffffffffff
push dword [0x4fa548]
call fcn.00426ca9
push dword [0x4fc99c]
push 0x9dc1
call fcn.0042d9d5
cmp dword [0x4f9f50], 6
jb 0x438f40
push 4
push 4
push 0x112c
push dword [0x4fa550]
call ebx
push edi
push 0
push 0x468e40
push esi
call ebp
mov dword [esp + 0x10], eax
call fcn.004301b7
push 0x5c
push 0x492aa8
push 0x4f9ef0
call fcn.0043f542
add esp, 0xc
push edi
push 0x5c
push 0x4f9ef0
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x438fc3
push 0x5c
push 0x492aa8
push 0x4f9ef0
call fcn.0043f542
add esp, 0xc
cmp dword [0x4f9f50], 5
jne 0x43902d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x43902d
push 0x46b760
push 0x4f9f0c
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x43902d
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x438fef
cmp ecx, 0x3e8
jae 0x438fef
mov eax, dword [0x492a30]
cmp eax, ecx
je 0x438fef
push ecx
push eax
push dword [0x4f9ef0]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x4f9ef0], eax
mov eax, dword [0x4f9ef0]
add eax, 0x78
cmp eax, 0xf0
ja 0x439019
cmp byte [0x4f9f06], 0
jne 0x439019
cmp byte [0x4f9f05], 0
jne 0x439019
cmp dword [0x4f9efc], 0
je 0x439044
push 0x5c
push 0x492aa8
push 0x4f9ef0
call fcn.0043f542
add esp, 0xc
push 0x40
push dword [0x492a30]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x4f9ef0], eax
push 0x4f9ef0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x4fa594], eax
test eax, eax
jne 0x439068
push 0x492aa8
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x4fa594], eax
push 0
push eax
push 0x30
push dword [0x4fa554]
call ebx
push 0
push 0
push 0x44e
push dword [0x4fa554]
call ebx
push eax
push 1
push 0x44d
push dword [0x4fa554]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x4fa074], eax
call ebp
push edi
push 0x7d0
push str.HighlightDuration
push esi
mov dword [0x4fa440], eax
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x4fa5e4], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x4fa5e8], eax
call ebp
push edi
push 1
push str.HighlightEnsureVisible
push esi
mov dword [0x4fa5ec], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x4fa5f0], eax
call ebp
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
mov dword [0x4fa5f4], eax
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x4fa5f8], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x4fa5fc], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x4fa600], eax
call ebp
mov dword [0x4fa604], eax
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x4fa60c], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x4fa608], eax
call ebp
mov dword [0x4fa610], eax
mov eax, dword [0x4fa5e8]
cdq
and edx, 0xff
push edi
add eax, edx
push 0x2710
sar eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x492a48], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x492a4c], eax
call ebp
push dword [0x4fa074]
mov dword [0x4fa614], eax
push dword [0x4fa554]
call fcn.0042687a
push dword [0x4fa440]
push 0
push 0x443
push dword [0x4fa554]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x492a58], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x4fc95c], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x4fc980], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x4fc984], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 4
and eax, 1
mov dword [0x4fc960], eax
push eax
push 0x9d72
call fcn.0042d9d5
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x4fc970], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x4fc974], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x492a60], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x4fc978], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x4fc97c], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 0xa
and eax, 1
push eax
push 0x9d73
mov dword [0x4fc964], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x4fc990], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.0042da1f
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7b
mov dword [0x4fc98c], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x492a5c], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 0xe
and eax, 1
mov dword [0x4fc988], eax
push eax
push 0x9d7a
call fcn.0042d9d5
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7c
mov dword [0x492a68], eax
call fcn.0042d9d5
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x492a64], eax
call fcn.0042d9d5
shr ebx, 0x11
and ebx, 1
push edi
mov dword [0x4fc994], ebx
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x4fc968], eax
call ebp
push edi
push 2
push str.TreeNamesByWhat
push esi
mov dword [0x4fc96c], eax
call ebp
push 0x9d96
mov dword [0x492a6c], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.0042da1f
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
mov dword [0x492a78], eax
xor eax, eax
cmp dword [0x4f9f50], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x492a70], eax
call ebp
push 2
pop esi
mov dword [0x492a70], eax
cmp eax, esi
jne 0x43944e
cmp dword [0x4f9f50], 5
jne 0x43944e
mov dword [0x492a70], 1
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x4fa5b0], eax
call fcn.0043f698
pop ecx
cmp eax, ebx
je 0x439481
push 5
push dword [0x4fa558]
mov ecx, eax
call fcn.004054ee
mov dword [0x4fac78], eax
jmp 0x439487
mov dword [0x4fac78], ebx
cmp dword [0x4fc9cc], ebx
jne 0x4394fc
push 0x1004
call fcn.0043f698
pop ecx
cmp eax, ebx
je 0x4394a7
mov ecx, eax
call fcn.00406ffa
jmp 0x4394a9
xor eax, eax
mov dword [0x4fc9cc], eax
mov dword [eax + 4], ebx
mov eax, dword [0x4fc9cc]
mov dword [eax + 0x10], esi
mov eax, dword [0x4fc9cc]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x449d24
add eax, 0xcf6
push eax
call esi
push str.Root
push 0x4fa4a2
call esi
mov eax, dword [0x4fc9cc]
mov edi, str.My_Computer
push edi
add eax, 0x18
push eax
call esi
mov eax, dword [0x4fc9cc]
push edi
add eax, 0x41c
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x42ce8e
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x4fa554]
call esi
push 0x42d3e6
push edi
push dword [0x4fa570]
mov dword [0x4fa624], eax
call esi
push 0x42ce3c
push edi
push dword [0x4fa57c]
mov dword [0x4fa628], eax
call esi
push 0x42ce65
push edi
push dword [0x4fa580]
mov dword [0x4fa630], eax
call esi
mov dword [0x4fa634], eax
call fcn.00425a5a
test eax, eax
je 0x43956a
push 0x9cb3
push dword [0x4fa54c]
call fcn.00425b21
cmp word [0x4faa48], bx
je 0x43957a
push 0x431e25
jmp 0x43957f
push 0x4369f8
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x4fa50c], ebx
jne 0x4395a9
push dword [0x4fa550]
push dword [0x4fa548]
call fcn.00426804
cmp dword [0x492a30], 0x60
jle 0x4395c5
push ebx
push ebx
push 0x8003
push dword [0x4fa548]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x240000
push 0x80000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc