Function at 0x402b4e
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
nop
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x4092bc]
push eax
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
mov dword [ebp - 4], eax
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x4092c0]
push eax
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
inc eax
mov dword [ebp - 8], eax
mov eax, 0xa
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [0x4092c4]
push eax
call sub.user32.dll_GetWindowTextA
movsx eax, byte [ebp - 0x1e]
cmp eax, 0x2b
jne 0x402bd3
mov eax, 1
mov dword [ebp - 0x14], eax
jmp 0x402bdb
mov eax, 2
mov dword [ebp - 0x14], eax
mov eax, 1
push eax
mov eax, 1
push eax
lea eax, [ebp - 0x1e]
push eax
call fcn.004012ea
add esp, 0xc
lea eax, [ebp - 0x1e]
push eax
call sub.msvcrt.dll_atoi
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 8]
cmp eax, ecx
jge 0x402f77
jmp 0x402c2c
mov eax, dword [ebp - 0x24]
mov ecx, eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x402c0e
mov eax, 0
mov byte [ebp - 0xec], al
mov eax, 0xc7
push eax
mov eax, 0
push eax
lea eax, [ebp - 0xeb]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0
mov byte [ebp - 0x1b4], al
mov eax, 0xc7
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x1b3]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xc4
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
mov eax, 0
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x14]
cmp eax, 1
jne 0x402ea3
mov eax, 0x20
mov byte [ebp - 0x1f4], al
mov eax, 0x20
mov byte [ebp - 0x1f3], al
mov eax, 0x20
mov byte [ebp - 0x1f2], al
mov eax, 0x20
mov byte [ebp - 0x1f1], al
mov eax, 0x20
mov byte [ebp - 0x1f0], al
mov eax, 0x20
mov byte [ebp - 0x1ef], al
mov eax, 0x20
mov byte [ebp - 0x1ee], al
mov eax, 0x20
mov byte [ebp - 0x1ed], al
mov eax, 0x20
mov byte [ebp - 0x1ec], al
mov eax, 0x20
mov byte [ebp - 0x1eb], al
mov eax, 0x20
mov byte [ebp - 0x1ea], al
mov eax, 0x20
mov byte [ebp - 0x1e9], al
mov eax, 0x20
mov byte [ebp - 0x1e8], al
mov eax, 0x20
mov byte [ebp - 0x1e7], al
mov eax, 0x20
mov byte [ebp - 0x1e6], al
mov eax, 0x20
mov byte [ebp - 0x1e5], al
mov eax, 0x20
mov byte [ebp - 0x1e4], al
mov eax, 0x20
mov byte [ebp - 0x1e3], al
mov eax, 0x20
mov byte [ebp - 0x1e2], al
mov eax, 0x20
mov byte [ebp - 0x1e1], al
mov eax, 0x20
mov byte [ebp - 0x1e0], al
mov eax, 0x20
mov byte [ebp - 0x1df], al
mov eax, 0
mov byte [ebp - 0x1de], al
mov eax, 0x25
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x1dd]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0x20
mov byte [ebp - 0x230], al
mov eax, 0
mov byte [ebp - 0x22f], al
mov eax, 0x3a
push eax
mov eax, 0
push eax
lea eax, [ebp - 0x22e]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x230]
push eax
call sub.msvcrt.dll_strncpy
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x230]
push eax
mov eax, 0x408232
push eax
lea eax, [ebp - 0x1b4]
push eax
call sub.msvcrt.dll_sprintf
add esp, 0x10
lea eax, [ebp - 0x1b4]
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0x1b8]
add ecx, eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
push ecx
mov eax, dword [ebp - 0x1b8]
push eax
mov eax, 0xb1
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x1b4]
push eax
mov eax, 1
push eax
mov eax, 0xc2
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
jmp 0x402f72
mov eax, 0
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x24]
inc eax
mov ecx, 0
push ecx
push eax
mov eax, 0xbb
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
sub eax, ecx
cmp eax, 3
jge 0x402f04
jmp 0x402c21
mov eax, dword [ebp - 0xc]
push eax
mov eax, 0
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004012ea
add esp, 0xc
lea eax, [ebp - 0xec]
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0x1b8]
add ecx, eax
mov eax, dword [ebp - 0x10]
add ecx, eax
push ecx
mov eax, dword [ebp - 0x1b8]
push eax
mov eax, 0xb1
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0xec]
push eax
mov eax, 1
push eax
mov eax, 0xc2
push eax
mov eax, dword [0x409294]
push eax
call sub.user32.dll_SendMessageA
jmp 0x402c21
leave
ret