Function at 0x418ba0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x15c
mov eax, dword [0x4b38b4]
xor eax, esp
mov dword [esp + 0x158], eax
mov eax, dword [0x4b8810]
push ebx
push ebp
mov ebp, dword [esp + 0x168]
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push edi
mov ebx, ecx
mov edi, edx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0
mov dword [0x4b8a68], eax
test ebx, ebx
jne 0x418bfc
push 0x3ef
push edi
call esi
push eax
call fcn.0040c9d0
mov ebx, eax
shr ebx, 0x10
add esp, 4
sub ebx, 0x41
cmp dword [0x4dc3bc], 0
jne 0x418c0f
mov dword [0x4b85d0], 0
test ebp, ebp
jne 0x418c30
push 0x104
lea ecx, [esp + 0x68]
push ecx
push 0x40a
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ebp, [esp + 0x64]
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418c35
sub eax, edx
jne 0x418c49
mov dword [esp + 0x14], eax
jmp 0x418ff0
push ebp
call fcn.00440aa0
add esp, 4
test eax, eax
je 0x418c6d
push str.VOL_ALREADY_MOUNTED
call fcn.00432f40
mov dword [esp + 0x18], 0
jmp 0x418fed
push ebp
call fcn.0043e980
add esp, 4
test eax, eax
jne 0x418c98
cmp dword [0x4dc3bc], eax
jne 0x418c8b
push edi
call fcn.00433e20
add esp, 4
mov dword [esp + 0x14], 0
jmp 0x418ff0
call fcn.00432450
call fcn.004309a0
mov edx, dword [0x4dc36c]
mov eax, dword [0x4b8a00]
mov ecx, dword [0x4b89e4]
push 0
push edx
push 0x4b8800
push eax
push ecx
push 0
push ebp
mov edx, edi
push ebx
push edx
call fcn.00441930
mov edi, eax
add esp, 0x24
test edi, edi
jne 0x418d90
cmp dword [0x4dc3a4], eax
je 0x418d4d
mov eax, dword [0x4dc3a8]
test eax, eax
je 0x418d4d
push eax
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x24], edi
call fcn.004493b0
mov ecx, dword [0x4dc36c]
mov edx, dword [0x4b8a00]
mov eax, dword [0x4b89e4]
push edi
push ecx
push 0x4b8800
push edx
mov edx, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x38]
push ecx
push ebp
push ebx
push edx
call fcn.00441930
lea edx, [esp + 0x48]
mov ecx, 0x48
mov edi, eax
add esp, 0x2c
mov esi, ecx
mov eax, edx
mov byte [eax], 0
inc eax
sub esi, 1
jne 0x418d33
lea esp, [esp]
dec ecx
mov byte [edx], 0
inc edx
test ecx, ecx
jne 0x418d40
test edi, edi
jne 0x418d90
cmp dword [0x4dc3bc], 0
je 0x418d90
cmp dword [0x4b85d0], 0
je 0x418d90
mov eax, dword [0x4dc36c]
mov ecx, dword [0x4b8a00]
mov edx, dword [0x4b89e4]
push 0
push eax
mov eax, dword [esp + 0x18]
push 0x4b8800
push ecx
push edx
push 0x4b85d0
push ebp
push ebx
push eax
call fcn.00441930
add esp, 0x24
mov edi, eax
call fcn.00433ac0
test edi, edi
je 0x418df7
push ebx
call fcn.0040c060
add esp, 4
cmp eax, 3
je 0x418dac
cmp eax, 4
jne 0x418db9
push str.WARN_CBC_MODE
call fcn.00432f40
add esp, 4
push ebx
call fcn.0040bf70
add esp, 4
cmp eax, 0x40
jne 0x418dd4
push str.WARN_64_BIT_BLOCK_CIPHER
call fcn.00432f40
add esp, 4
push ebp
call fcn.004323f0
add esp, 4
test eax, eax
je 0x418f94
push str.EXE_FILE_EXTENSION_MOUNT_WARNING
call fcn.00432f40
add esp, 4
jmp 0x418f94
mov eax, dword [0x4dc36c]
mov ecx, dword [0x4b8618]
test ecx, ecx
jbe 0x418e19
mov ecx, 0x12
mov esi, 0x4b8618
mov edi, 0x4b85d0
rep movsd dword es:[edi], dword [esi]
jmp 0x418e4d
test eax, eax
jne 0x418e4d
mov edx, 0x4b8868
mov eax, ebp
sub edx, ebp
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x418e26
mov edx, dword [esp + 0x10]
push 1
xor eax, eax
mov ecx, 0x4b85d0
call fcn.004161e0
add esp, 4
test eax, eax
je 0x418ff0
call fcn.004309a0
cmp dword [0x4dc3a4], 0
je 0x418e6f
mov ecx, dword [0x4dc3a8]
push ecx
push 0x4b85d0
call fcn.004493b0
add esp, 8
mov eax, dword [0x4dc36c]
mov ecx, dword [0x4b89e4]
xor edx, edx
test eax, eax
sete dl
push edx
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [0x4b8a00]
push 0x4b8800
push eax
push ecx
push 0x4b85d0
push ebp
push ebx
push edx
call fcn.00441930
mov edi, eax
call fcn.00433ac0
push ebx
call fcn.0040c060
add esp, 0x28
cmp eax, 3
je 0x418eba
cmp eax, 4
jne 0x418ec7
push str.WARN_CBC_MODE
call fcn.00432f40
add esp, 4
push ebx
call fcn.0040bf70
add esp, 4
cmp eax, 0x40
jne 0x418ee2
push str.WARN_64_BIT_BLOCK_CIPHER
call fcn.00432f40
add esp, 4
test edi, edi
jle 0x418f29
cmp dword [0x4dc3a4], 0
jne 0x418f0f
push 0x4b85d0
push 0
call fcn.0044ba00
add esp, 8
test eax, eax
jne 0x418f0f
push str.UNSUPPORTED_CHARS_IN_PWD_RECOM
call fcn.00432f40
add esp, 4
push ebp
call fcn.004323f0
add esp, 4
test eax, eax
je 0x418f29
push str.EXE_FILE_EXTENSION_MOUNT_WARNING
call fcn.00432f40
add esp, 4
cmp dword [0x4dc3bc], 0
jne 0x418f59
mov edx, 0x4b85d0
mov ecx, 0x48
mov esi, ecx
mov eax, edx
mov byte [eax], 0
inc eax
sub esi, 1
jne 0x418f40
lea esp, [esp]
dec ecx
mov byte [edx], 0
inc edx
test ecx, ecx
jne 0x418f50
mov edx, 0x4b8814
mov ecx, 0x48
mov esi, ecx
mov eax, edx
mov byte [eax], 0
inc eax
sub esi, 1
jne 0x418f67
dec ecx
mov byte [edx], 0
inc edx
test ecx, ecx
jne 0x418f70
mov ecx, dword [0x4b8618]
test ecx, ecx
ja 0x418f94
mov eax, dword [0x4dc36c]
test eax, eax
jne 0x418f94
test edi, edi
je 0x418e02
test edi, edi
jle 0x418ff0
cmp dword [0x4b89dc], 0
mov dword [esp + 0x14], 1
je 0x418fb1
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, dword [esp + 0x10]
push eax
call fcn.00418700
add esp, 4
cmp dword [0x4b89d8], 0
je 0x418fda
call fcn.004309a0
push ebx
call fcn.00430fd0
add esp, 4
call fcn.00433ac0
cmp dword [0x4b8808], 0
je 0x418ff0
push str.HIDVOL_PROT_WARN_AFTER_MOUNT
call fcn.00432ee0
add esp, 4
cmp dword [0x4dc3bc], 0
jne 0x419019
mov edx, 0x4b85d0
mov ecx, 0x48
mov esi, ecx
mov eax, edx
mov byte [eax], 0
inc eax
sub esi, 1
jne 0x419007
dec ecx
mov byte [edx], 0
inc edx
test ecx, ecx
jne 0x419010
mov edx, 0x4b8814
mov ecx, 0x48
mov esi, ecx
mov eax, edx
mov byte [eax], 0
inc eax
sub esi, 1
jne 0x419027
dec ecx
mov byte [edx], 0
inc edx
test ecx, ecx
jne 0x419030
call fcn.00433300
cmp dword [0x4b0354], 0
je 0x419053
mov ecx, dword [0x4b89e8]
mov dword [0x4b89e4], ecx
mov esi, dword [esp + 0x14]
test esi, esi
je 0x419072
cmp dword [0x4b8a24], 0
je 0x419072
cmp dword [0x4dc3bc], 0
jne 0x419072
call fcn.00451fd0
mov ecx, dword [esp + 0x168]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00469f7b
add esp, 0x15c
ret