Function at 0x43c40c
Capabilities:
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ecx
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
push edi
push 2
push 2
push esi
mov dword [0x5010bc], esi
call fcn.0042a782
xor edi, edi
inc edi
push edi
push edi
push esi
call fcn.0042a782
push 7
push 7
push esi
call fcn.0042a782
push esi
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [0x5010bc]
mov dword [0x5010c0], eax
call esi
push 0x3e9
push dword [0x5010bc]
mov dword [0x5010c4], eax
call esi
push 0x3ea
push dword [0x5010bc]
mov dword [0x5010c8], eax
call esi
push 0xa08c
push dword [0x5010bc]
mov dword [0x5010cc], eax
call esi
push 0x3fe
push dword [0x5010bc]
mov dword [0x5010d0], eax
call esi
push 0xa08d
push dword [0x5010bc]
mov dword [0x5010d4], eax
call esi
push 0x3ff
push dword [0x5010bc]
mov dword [0x5010d8], eax
call esi
push 0xa08e
push dword [0x5010bc]
mov dword [0x5010dc], eax
call esi
push 0xa08f
push dword [0x5010bc]
mov dword [0x5010e0], eax
call esi
push 0xa090
push dword [0x5010bc]
mov dword [0x5010e4], eax
call esi
push 0xa091
push dword [0x5010bc]
mov dword [0x5010e8], eax
call esi
push 0xa092
push dword [0x5010bc]
mov dword [0x5010ec], eax
call esi
push 0xa093
push dword [0x5010bc]
mov dword [0x5010f0], eax
call esi
push 0x400
push dword [0x5010bc]
mov dword [0x5010f4], eax
call esi
mov dword [0x5010f8], eax
xor esi, esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push esi
push esi
push 0x1119
push dword [0x5010c4]
call ebx
push 0x10
mov dword [0x501100], eax
call fcn.00429f6c
push 0x20
mov dword [0x498ae0], eax
call fcn.00429f6c
push esi
push esi
push 0x478
push dword [0x5010c8]
mov dword [0x498ae4], eax
call ebx
push esi
push edi
push 0x459
push dword [0x5010c8]
call ebx
push edi
push esi
push 0x445
push dword [0x5010e4]
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edi, 0x5007f0
push edi
push 0x60
push 0x46c9f0
mov esi, 0x450eac
push esi
call ebp
push 0x5c
push 0x498b48
push 0x500a48
mov dword [esp + 0x1c], eax
call fcn.00442d99
add esp, 0xc
push edi
push 0x5c
push 0x500a48
push str.EditFont
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
test eax, eax
jne 0x43c637
push 0x5c
push 0x498b48
push 0x500a48
call fcn.00442d99
add esp, 0xc
cmp dword [0x500aa8], 5
jne 0x43c6a1
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x411
cmp ax, cx
jne 0x43c6a1
push 0x46fe58
push 0x500a64
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x43c6a1
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x43c663
cmp ecx, 0x3e8
jae 0x43c663
mov eax, dword [0x498ab0]
cmp eax, ecx
je 0x43c663
push ecx
push eax
push dword [0x500a48]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [0x500a48], eax
mov eax, dword [0x500a48]
add eax, 0x78
cmp eax, 0xf0
ja 0x43c68d
cmp byte [0x500a5e], 0
jne 0x43c68d
cmp byte [0x500a5d], 0
jne 0x43c68d
cmp dword [0x500a54], 0
je 0x43c6b8
push 0x5c
push 0x498b48
push 0x500a48
call fcn.00442d99
add esp, 0xc
push 0x40
push dword [0x498ab0]
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [0x500a48], eax
push 0x500a48
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50110c], eax
test eax, eax
jne 0x43c6dc
push 0x498b48
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x50110c], eax
push 0
push eax
push 0x30
push dword [0x5010c8]
call ebx
push 0
push 0
push 0x44e
push dword [0x5010c8]
call ebx
push eax
push 1
push 0x44d
push dword [0x5010c8]
call ebx
push edi
push 0
push str.EditFontColor
push esi
call ebp
push edi
push 0xd8dce0
push str.EditBkColor
push esi
mov dword [0x500c50], eax
call ebp
push edi
push 0xffffff
push str.EditFontColorDk
push esi
mov dword [0x500fa0], eax
call ebp
push edi
push 0x1a1a1a
push str.EditBkColorDk
push esi
mov dword [0x500c54], eax
call ebp
push 0x501124
push 2
push 2
mov dword [0x500fa4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.0044848f
push 0x501128
push 2
push 2
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.0044848f
push edi
push 0x7d0
push str.HighlightDuration
push esi
call ebp
push edi
push 0x1f40
push str.FadingDuration
push esi
mov dword [0x501170], eax
call ebp
push edi
push 0
push str.HighlightSelItem
push esi
mov dword [0x501174], eax
call ebp
push edi
push 1
push str.HighlightEnsureVisible
push esi
mov dword [0x501178], eax
call ebp
push edi
push 2
push str.HighlightCompanionPorts
push esi
mov dword [0x50117c], eax
call ebp
mov dword [0x501180], eax
push edi
push 0x20ff20
push str.HighlightColorArrival
push esi
call ebp
push edi
push 0x4040ff
push str.HighlightColorRemoval
push esi
mov dword [0x501184], eax
call ebp
push edi
push 0x40ffff
push str.HighlightColorGotProblem
push esi
mov dword [0x50118c], eax
call ebp
push edi
push 0xffff40
push str.HighlightColorSafeRemoval
push esi
mov dword [0x501194], eax
call ebp
push edi
push 0xffe0e0
push str.HighlightColorCompanionSs
push esi
mov dword [0x50119c], eax
call ebp
push edi
push 0xccccff
push str.HighlightColorCompanionHs
push esi
mov dword [0x5011ac], eax
call ebp
push edi
push 0xc8d0d4
push str.HighlightSelNoFocus
push esi
mov dword [0x5011a4], eax
call ebp
push edi
push 0xe
mov dword [0x5011bc], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push str.HighlightSelFocus
push esi
call ebp
push edi
push 0xd9c0d
push str.HighlightColorArrivalDk
push esi
mov dword [0x5011b4], eax
call ebp
push edi
push 0x1f1fba
push str.HighlightColorRemovalDk
push esi
mov dword [0x501188], eax
call ebp
push edi
push 0x189292
push str.HighlightColorGotProblemDk
push esi
mov dword [0x501190], eax
call ebp
push edi
push 0x9e9e1b
push str.HighlightColorSafeRemovalDk
push esi
mov dword [0x501198], eax
call ebp
push edi
push 0xa66060
push str.HighlightColorCompanionSsDk
push esi
mov dword [0x5011a0], eax
call ebp
mov dword [0x5011b0], eax
push edi
push 0x6a6a9d
push str.HighlightColorCompanionHsDk
push esi
call ebp
push edi
push 0x5c5c5c
push str.HighlightSelNoFocusDk
push esi
mov dword [0x5011a8], eax
call ebp
push edi
push 0x777777
push str.HighlightSelFocusDk
push esi
mov dword [0x5011c0], eax
call ebp
mov dword [0x5011b8], eax
mov eax, dword [0x501174]
cdq
and edx, 0xff
push edi
add eax, edx
push 0x2710
sar eax, 8
push str.StatusTextTimeout
dec eax
push esi
mov dword [0x498ae8], eax
call ebp
push edi
push 0
push str.StringDescDelay
push esi
mov dword [0x498aec], eax
call ebp
mov dword [0x50116c], eax
mov eax, dword [0x5010a4]
push dword [eax*4 + 0x500c50]
push dword [0x5010c8]
call fcn.00428070
mov eax, dword [0x5010a4]
push dword [eax*4 + 0x500fa0]
push 0
push 0x443
push dword [0x5010c8]
call ebx
push edi
push 0x367
push str.DisplayOptions
push esi
call ebp
mov ebx, eax
and eax, 1
push eax
push 0x9d6c
mov dword [0x498af8], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 1
and eax, 1
push eax
push 0x9d71
mov dword [0x50350c], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 2
and eax, 1
push eax
push 0x9d76
mov dword [0x503530], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 3
and eax, 1
push eax
push 0x9d79
mov dword [0x503534], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 4
and eax, 1
push eax
push 0x9d72
mov dword [0x503510], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 5
not eax
and eax, 1
push eax
push 0x9d80
mov dword [0x503520], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 6
not eax
and eax, 1
push eax
push 0x9d81
mov dword [0x503524], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 7
not eax
and eax, 1
push eax
push 0x9d82
mov dword [0x498b00], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 8
not eax
and eax, 1
push eax
push 0x9d84
mov dword [0x503528], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 9
not eax
and eax, 1
push eax
push 0x9d85
mov dword [0x50352c], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0xa
and eax, 1
push eax
push 0x9d73
mov dword [0x503514], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0xb
and eax, 1
push 0x9d8b
mov dword [0x503540], eax
mov eax, 0x9d8a
push eax
push 0
pop ecx
setne cl
add ecx, eax
push ecx
call fcn.0042f62c
mov eax, ebx
shr eax, 0xc
and eax, 1
push eax
push 0x9d7d
mov dword [0x50353c], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0xd
and eax, 1
push eax
push 0x9d86
mov dword [0x498afc], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0xe
and eax, 1
push eax
push 0x9d7a
mov dword [0x503538], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0xf
not eax
and eax, 1
push eax
push 0x9d7e
mov dword [0x498b08], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0x10
not eax
and eax, 1
push eax
push 0x9d83
mov dword [0x498b04], eax
call fcn.0042f5e2
mov eax, ebx
shr eax, 0x11
and eax, 1
push eax
push 0x9d7b
mov dword [0x503544], eax
call fcn.0042f5e2
shr ebx, 0x12
and ebx, 1
push ebx
push 0x9d7c
mov dword [0x503548], ebx
call fcn.0042f5e2
push edi
xor ebx, ebx
push ebx
push str.SkipDeviceQualiDescForLowSpeedDevs
push esi
call ebp
push edi
push ebx
push str.SkipDeviceQualiDescForFullSpeedDevs
push esi
mov dword [0x503518], eax
call ebp
push edi
push 2
push str.TreeNamesByWhat
push esi
mov dword [0x50351c], eax
call ebp
push 0x9d96
mov dword [0x498b0c], eax
push 0x9d94
add eax, 0x9d94
push eax
call fcn.0042f62c
push edi
push 0x28
push str.MountPointsMaxCharsInTree
push esi
call ebp
mov dword [0x498b18], eax
xor eax, eax
cmp dword [0x500aa8], 5
push edi
setne al
inc eax
push eax
push str.ShowFileHandles
push esi
mov dword [0x498b10], eax
call ebp
mov dword [0x498b10], eax
cmp eax, 2
jne 0x43cbee
cmp dword [0x500aa8], 5
jne 0x43cbee
mov dword [0x498b10], 1
push edi
push ebx
push str.GrayMode
push esi
call ebp
push dword [0x5010a4]
mov dword [0x5010a0], eax
push 0x9dbe
call fcn.0042f5e2
call fcn.00433629
call fcn.0042734c
test eax, eax
je 0x43cc45
push edi
push 1
push str.VisualStyles
push esi
call ebp
push eax
push 0x9dbd
mov dword [0x498b14], eax
call fcn.0042f5e2
cmp dword [0x498b14], ebx
jne 0x43cc58
call fcn.0042f6a4
jmp 0x43cc58
push 1
push 0x9dbd
push dword [0x5010c0]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
push ebx
push str.Topmost
push esi
call ebp
push eax
push 0x9dc6
mov dword [0x50354c], eax
call fcn.0042f5e2
cmp dword [0x50354c], ebx
je 0x43cc87
push 0xffffffffffffffff
push dword [0x5010bc]
call fcn.004285cd
push dword [0x503550]
push 0x9dc1
call fcn.0042f5e2
cmp dword [0x500aa8], 6
jb 0x43ccb5
push 4
push 4
push 0x112c
push dword [0x5010c4]
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00432008
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x70
mov dword [0x501130], eax
call fcn.00442eef
pop ecx
cmp eax, ebx
je 0x43cced
push 5
push dword [0x5010cc]
mov ecx, eax
call fcn.0040592b
mov dword [0x501824], eax
jmp 0x43ccf3
mov dword [0x501824], ebx
cmp dword [0x503580], ebx
jne 0x43cd6c
push 0x100c
call fcn.00442eef
pop ecx
cmp eax, ebx
je 0x43cd13
mov ecx, eax
call fcn.00407025
jmp 0x43cd15
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [0x503580], eax
mov dword [eax + 4], ebx
mov eax, dword [0x503580]
mov dword [eax + 0x10], 2
mov eax, dword [0x503580]
push 0x44d0ac
add eax, 0xd0a
push eax
call esi
push str.Root
push 0x50100a
call esi
mov eax, dword [0x503580]
mov edi, str.My_Computer
push edi
add eax, 0x1c
push eax
call esi
mov eax, dword [0x503580]
push edi
add eax, 0x420
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x42e8e9
push 0xfffffffffffffffc
pop edi
push edi
push dword [0x5010c4]
call esi
push 0x42e979
push edi
push dword [0x5010c8]
mov dword [0x5011cc], eax
call esi
push 0x42ef30
push edi
push dword [0x5010e4]
mov dword [0x5011d0], eax
call esi
push 0x42e897
push edi
push dword [0x5010f0]
mov dword [0x5011d4], eax
call esi
push 0x42e8c0
push edi
push dword [0x5010f4]
mov dword [0x5011dc], eax
call esi
mov dword [0x5011e0], eax
call fcn.004271f6
test eax, eax
je 0x43cded
push 0x9cb3
push dword [0x5010c0]
call fcn.004272bd
cmp word [0x5015f8], bx
je 0x43cdfd
push 0x434456
jmp 0x43ce02
push 0x43a733
push 0xa
push 0x12340001
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x501074], ebx
jne 0x43ce2c
push dword [0x5010c4]
push dword [0x5010bc]
call fcn.00427ffa
cmp dword [0x498ab0], 0x60
jle 0x43ce48
push ebx
push ebx
push 0x8003
push dword [0x5010bc]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x240000
push 0x80000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 0xc