Function at 0x4029f0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
nop
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x409228]
push eax
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
mov dword [ebp - 4], eax
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x40922c]
push eax
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
inc eax
mov dword [ebp - 8], eax
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x409230]
push eax
call sub.user32.dll_GetWindowTextA
movsx eax, byte [ebp - 0x1e]
cmp eax, 0x2b
jne 0x402a75
mov eax, 1
mov dword [ebp - 0x14], eax
jmp 0x402a7d
mov eax, 2
mov dword [ebp - 0x14], eax
mov eax, 1
push eax
mov eax, 1
push eax
lea eax, [ebp - 0x1e]
push eax
call fcn.004012ea
add esp, 0xc
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 8]
cmp eax, ecx
jge 0x402e19
jmp 0x402ace
mov eax, dword [ebp - 0x24]
mov ecx, eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x402ab0
mov eax, 0
mov byte [ebp - 0xec], al
mov eax, 0xc7
push eax
mov eax, 0
push eax
lea eax, [ebp - 0xeb]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0
mov byte [ebp - 0x1b4], al
mov eax, 0xc7
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x1b3]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xc4
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
mov eax, 0
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x14]
cmp eax, 1
jne 0x402d45
mov eax, 0x20
mov byte [ebp - 0x1f4], al
mov eax, 0x20
mov byte [ebp - 0x1f3], al
mov eax, 0x20
mov byte [ebp - 0x1f2], al
mov eax, 0x20
mov byte [ebp - 0x1f1], al
mov eax, 0x20
mov byte [ebp - 0x1f0], al
mov eax, 0x20
mov byte [ebp - 0x1ef], al
mov eax, 0x20
mov byte [ebp - 0x1ee], al
mov eax, 0x20
mov byte [ebp - 0x1ed], al
mov eax, 0x20
mov byte [ebp - 0x1ec], al
mov eax, 0x20
mov byte [ebp - 0x1eb], al
mov eax, 0x20
mov byte [ebp - 0x1ea], al
mov eax, 0x20
mov byte [ebp - 0x1e9], al
mov eax, 0x20
mov byte [ebp - 0x1e8], al
mov eax, 0x20
mov byte [ebp - 0x1e7], al
mov eax, 0x20
mov byte [ebp - 0x1e6], al
mov eax, 0x20
mov byte [ebp - 0x1e5], al
mov eax, 0x20
mov byte [ebp - 0x1e4], al
mov eax, 0x20
mov byte [ebp - 0x1e3], al
mov eax, 0x20
mov byte [ebp - 0x1e2], al
mov eax, 0x20
mov byte [ebp - 0x1e1], al
mov eax, 0x20
mov byte [ebp - 0x1e0], al
mov eax, 0x20
mov byte [ebp - 0x1df], al
mov eax, 0
mov byte [ebp - 0x1de], al
mov eax, 0x25
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x1dd]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0x20
mov byte [ebp - 0x230], al
mov eax, 0
mov byte [ebp - 0x22f], al
mov eax, 0x3a
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x22e]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x230]
push eax
call sub.msvcrt.dll_strncpy
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x230]
push eax
mov eax, 0x40822e
push eax
lea eax, [ebp - 0x1b4]
push eax
call sub.msvcrt.dll_sprintf
add esp, 0x10
lea eax, [ebp - 0x1b4]
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0x1b8]
add ecx, eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
push ecx
mov eax, dword [ebp - 0x1b8]
push eax
mov eax, 0xb1
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x1b4]
push eax
mov eax, 1
push eax
mov eax, 0xc2
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
jmp 0x402e14
mov eax, 0
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x24]
inc eax
mov ecx, 0
push ecx
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
sub eax, ecx
cmp eax, 3
jge 0x402da6
jmp 0x402ac3
mov eax, dword [ebp - 0xc]
push eax
mov eax, 0
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004012ea
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0x1b8]
add ecx, eax
mov eax, dword [ebp - 0x10]
add ecx, eax
push ecx
mov eax, dword [ebp - 0x1b8]
push eax
mov eax, 0xb1
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0xec]
push eax
mov eax, 1
push eax
mov eax, 0xc2
push eax
mov eax, dword [0x409200]
push eax
call sub.user32.dll_SendMessageA
jmp 0x402ac3
leave
ret