Function at 0x4881e0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc41f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x440
mov eax, dword [0x50ffd8]
mov dword [ebp - 0x1c], eax
push esi
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x43c]
mov dword [eax + 0xe8], 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x43c]
call fcn.0045f920
mov ecx, eax
call fcn.0045f850
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x10], 0
je 0x4884fd
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_GetTopWindow]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4884fd
push 0x400
lea edx, [ebp - 0x41c]
push edx
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x41c]
push ecx
call fcn.004980d0
add esp, 4
test eax, eax
jbe 0x4884e7
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4884e7
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x428]
call fcn.0045c060
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.00489380
lea ecx, [ebp + 8]
call fcn.0045c210
sub eax, 6
push eax
lea ecx, [ebp - 0x424]
push ecx
lea ecx, [ebp + 8]
call fcn.00461e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x420]
call fcn.004014a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x424]
call fcn.0045c210
test eax, eax
jle 0x4884ba
push 0x4e8180
lea edx, [ebp - 0x42c]
push edx
lea ecx, [ebp - 0x424]
call fcn.004893d0
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x444]
push ecx
lea ecx, [ebp - 0x420]
call fcn.0045c0d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x42c]
call fcn.004014e0
push 0
lea ecx, [ebp - 0x420]
call fcn.0046d080
push eax
lea ecx, [ebp - 0x428]
call fcn.004656a0
cmp eax, 0xffffffff
je 0x48844e
mov edx, dword [ebp - 0x43c]
mov dword [edx + 0xe8], 1
lea eax, [ebp - 0x41c]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.0045c0f0
push 0
push str.Microsoft_Internet_Explorer
mov ecx, dword [ebp + 0xc]
call fcn.004656a0
cmp eax, 0xffffffff
jne 0x48844e
push str.Microsoft_AntiSpyware_Spyware_Scan_Results
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0046fb40
add esp, 8
movzx edx, al
test edx, edx
je 0x48844e
push str.Microsoft_AntiSpyware
mov eax, dword [ebp + 0xc]
push eax
call fcn.0046fb40
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x48844e
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x18]
je 0x48844e
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
push 1
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x430], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x420]
call fcn.004014e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x424]
call fcn.004014e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.004014e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004014e0
mov eax, dword [ebp - 0x430]
jmp 0x48851c
lea ecx, [ebp - 0x424]
call fcn.0045c210
mov esi, eax
lea ecx, [ebp - 0x420]
call fcn.0045c210
add eax, 1
sub esi, eax
push esi
lea edx, [ebp - 0x434]
push edx
lea ecx, [ebp - 0x424]
call fcn.00461e40
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44c]
push ecx
lea ecx, [ebp - 0x424]
call fcn.0045c0d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x434]
call fcn.004014e0
jmp 0x4882f1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x420]
call fcn.004014e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x424]
call fcn.004014e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.004014e0
push 2
mov edx, dword [ebp - 0x14]
push edx
call fcn.0045f7d0
add esp, 8
mov dword [ebp - 0x14], eax
jmp 0x488259
mov dword [ebp - 0x438], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004014e0
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x1c]
call fcn.00497e50
pop esi
mov esp, ebp
pop ebp
ret 8