Function at 0x4066fd
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e8
mov eax, dword [0x485008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, edx
mov dword [ebp - 0x198], esi
push edi
mov edi, ecx
mov dword [ebp - 0x1a0], edi
sub eax, 1
je 0x40690e
sub eax, 0xf
je 0x406901
sub eax, 0x101
je 0x406754
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x406b15
movzx eax, word [ebp + 0xc]
mov ecx, 0x22c
xor ebx, ebx
cmp ax, cx
jne 0x4068e3
push 0x80
lea eax, [ebp - 0x84]
push eax
push dword [edi + 0x4c]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 2
or eax, 0xffffffff
push eax
push 0x100c
push dword [edi + 0x40]
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x1004
push dword [edi + 0x40]
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x22e
push dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor edi, edi
mov edx, eax
inc edi
mov dword [ebp - 0x1a4], edx
test edx, edx
push 0xffffffffffffffff
pop eax
cmovne edi, eax
xor eax, eax
add edi, esi
mov ecx, edi
shr ecx, 0x1f
cmp edi, dword [ebp - 0x19c]
setge al
test edx, edx
cmovne eax, ecx
test eax, eax
jne 0x406863
mov esi, dword [ebp - 0x1a0]
lea eax, [ebp - 0x184]
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1d4], eax
lea eax, [ebp - 0x1e8]
push eax
push edi
push 0x102d
push dword [esi + 0x40]
mov dword [ebp - 0x1d0], 0x100
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x184]
call fcn.00401b6f
test eax, eax
jne 0x40687f
mov edx, dword [ebp - 0x1a4]
inc eax
test edx, edx
push 0xffffffffffffffff
pop ecx
cmovne eax, ecx
add edi, eax
xor eax, eax
mov ecx, edi
shr ecx, 0x1f
cmp edi, dword [ebp - 0x19c]
setge al
test edx, edx
cmovne eax, ecx
test eax, eax
je 0x4067ee
push ebx
push str.Not_found
push str.No_matches_were_found
push dword [ebp - 0x198]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x406b13
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x1d8], 0xf
push eax
push edi
push 0x102b
push dword [esi + 0x40]
mov dword [ebp - 0x1dc], 3
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push edi
push 0x1013
push dword [esi + 0x40]
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
push dword [esi + 0x40]
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
push dword [0x6b845c]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push dword [esi + 0x40]
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, dword [ebp - 0x198]
movzx eax, word [ebp + 0xc]
mov ecx, 0x22d
cmp ax, cx
jne 0x406b13
push ebx
push ebx
push 2
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x406b13
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x406b13
lea eax, [ebp - 0x194]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ebx, ebx
push ebx
push ebx
call edi
push eax
mov eax, dword [ebp - 0x18c]
push 0x22b
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExA]
add eax, 0xffffffec
push 0x19
push eax
push 0xa
push 0xa
push 0x50000000
push 0x47c41a
push str.edit
push 0x200
call esi
mov ecx, dword [ebp - 0x1a0]
push eax
mov dword [ecx + 0x4c], eax
call dword [sym.imp.USER32.dll_SetFocus]
push ebx
push ebx
call edi
push eax
mov eax, dword [ebp - 0x188]
push 0x22c
push dword [ebp - 0x198]
add eax, 0xffffffce
push 0x14
push 0x4b
push eax
mov eax, dword [ebp - 0x18c]
add eax, 0xffffffab
push eax
push 0x52000000
push str.Find_Next
push str.button
push ebx
call esi
push ebx
push ebx
mov dword [ebp - 0x1a4], eax
call edi
mov ecx, dword [ebp - 0x188]
push eax
mov eax, dword [ebp - 0x18c]
add ecx, 0xffffffe2
push 0x22d
push dword [ebp - 0x198]
add eax, 0xffffffab
push 0x14
push 0x4b
push ecx
push eax
push 0x52000000
push str.Close
push str.button
push ebx
call esi
push ebx
push ebx
mov dword [ebp - 0x19c], eax
call edi
push eax
mov eax, dword [ebp - 0x188]
push 0x22e
push dword [ebp - 0x198]
add eax, 0xffffffce
push 0x14
push 0x3c
push eax
push 0x46
push 0x50000009
push 0x47cfd4
push str.BUTTON
push ebx
call esi
push ebx
push ebx
mov dword [ebp - 0x1a8], eax
call edi
push eax
mov eax, dword [ebp - 0x188]
push 0x22f
push dword [ebp - 0x198]
add eax, 0xffffffe2
push 0x14
push 0x3c
push eax
push 0x46
push 0x50000009
push str.Down
push str.BUTTON
push ebx
call esi
push ebx
push ebx
mov dword [ebp - 0x1ac], eax
call edi
mov edi, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x188]
push eax
push 0x230
push edi
push 0x14
push 0x32
add ecx, 0xffffffce
push ecx
push 0xf
push 0x50000000
push str.Direction:
push str.static
push ebx
call esi
mov ebx, eax
mov eax, 0x22f
push eax
push eax
push 0x22e
push edi
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov edi, dword [sym.imp.GDI32.dll_GetStockObject]
push 0
push 0x11
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
mov eax, dword [ebp - 0x1a0]
push 0x30
push dword [eax + 0x4c]
call esi
push 0
push 0x11
call edi
push eax
push 0x30
push dword [ebp - 0x1a4]
call esi
push 0
push 0x11
call edi
push eax
push 0x30
push dword [ebp - 0x19c]
call esi
push 0
push 0x11
call edi
push eax
push 0x30
push dword [ebp - 0x1a8]
call esi
push 0
push 0x11
call edi
push eax
push 0x30
push dword [ebp - 0x1ac]
call esi
push 0
push 0x11
call edi
push eax
push 0x30
push ebx
call esi
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00445b7e
leave
ret 0xc