Function at 0x408c20
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov eax, 0x113c
push edi
push esi
push ebx
call fcn.00428920
mov ebp, 0xa0d
sub esp, eax
mov eax, dword [0x64cb20]
lea ebx, [esp + 0x130]
mov dword [esp + 4], str._d:
add eax, 1
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [0x64cb20], eax
call sub.msvcrt.dll_sprintf
mov ecx, 0x29
lea edx, [ebx + eax]
lea esi, [ebx + eax + 0xd]
mov dword [edx], 0x57636950
lea edi, [eax + 0xf]
mov dword [edx + 4], 0x6e456265
mov dword [edx + 8], 0x28617274
mov word [edx + 0xc], cx
mov dword [esp], esi
call sub.msvcrt.dll_strlen
add esi, eax
mov eax, dword [0x62cb00]
mov word [esi], bp
mov byte [esi + 2], 0
lea esi, [eax + edi]
cmp esi, 0x1ffff
jbe 0x408cac
mov eax, 0x1ffff
sub eax, edi
mov dword [esp + 8], eax
lea eax, [edi + 0x62cb20]
mov ebp, 0x62cb20
mov dword [esp + 4], 0x62cb20
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov edx, edi
xor eax, eax
and edx, 0xfffffffc
mov ecx, dword [ebx + eax]
add eax, 4
mov dword [eax + 0x62cb1c], ecx
cmp eax, edx
jb 0x408cd2
lea edx, [eax + 0x62cb20]
xor ecx, ecx
add eax, ebx
test edi, 2
jne 0x408de8
and edi, 1
jne 0x408dd0
cmp esi, 0x20000
ja 0x408dc0
mov eax, dword [0x62c9e0]
mov dword [esp + 4], 0x62cb20
mov dword [0x62cb00], esi
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x4c4b5d
call sub.msvcrt.dll_printf
mov esi, dword [0x62c974]
cmp esi, 1
je 0x408e00
mov dword [esp + 0xc], 0x10
test esi, esi
je 0x408d90
mov eax, dword [esp + 0x1150]
mov dword [esp + 8], str.Disconnettiti_e_riprova_
xor esi, esi
mov dword [esp + 4], str.Sei_connesso_in_uno_stato_non_corretto_
mov dword [esp], eax
call sub.USER32.dll_MessageBoxA
sub esp, 0x10
add esp, 0x113c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x1150]
mov dword [esp + 8], str.Disconnettiti_
mov dword [esp + 4], str.Sei_gi
mov dword [esp], eax
call sub.USER32.dll_MessageBoxA
mov eax, esi
sub esp, 0x10
add esp, 0x113c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, 0x20000
jmp 0x408d0d
movzx eax, byte [eax + ecx]
mov byte [edx + ecx], al
cmp esi, 0x20000
jbe 0x408d0d
jmp 0x408dc0
movzx ecx, word [eax]
and edi, 1
mov word [edx], cx
mov ecx, 2
je 0x408d01
jmp 0x408dd0
mov dword [esp + 8], 0x100000
mov dword [esp + 4], 0
mov dword [esp], 0x950ba0
call sub.msvcrt.dll_memset
mov dword [esp + 8], 0x850b80
mov eax, 0x3d54
mov dword [esp + 4], 0x950bae
mov dword [esp], str.__EVENTTARGET
mov dword [0x950ba0], 0x56455f5f
mov dword [0x950ba4], 0x54544e45
mov dword [0x950ba8], 0x45475241
mov word [0x950bac], ax
mov byte [0x950bae], 0
call fcn.004089d0
mov edx, 0x950ba0
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x408e6d
test eax, 0x8080
jne 0x408e90
shr eax, 0x10
add edx, 2
mov ecx, eax
mov dword [esp + 8], 0x850b80
add cl, al
mov eax, 0x3d
mov dword [esp], str.__EVENTARGUMENT
sbb edx, 0x950ba3
mov dword [edx + 0x950ba0], 0x455f5f26
mov dword [edx + 0x950ba4], 0x544e4556
mov dword [edx + 0x950ba8], 0x55475241
mov dword [edx + 0x950bac], 0x544e454d
mov word [edx + 0x950bb0], ax
add edx, 0x950bb1
mov dword [esp + 4], edx
call fcn.004089d0
mov edx, 0x950ba0
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x408ef1
test eax, 0x8080
jne 0x408f14
shr eax, 0x10
add edx, 2
mov ecx, eax
mov edi, 0x3d
mov dword [esp + 8], 0x850b80
add cl, al
mov dword [esp], str.__VIEWSTATE
sbb edx, 0x950ba3
mov dword [edx + 0x950ba0], 0x565f5f26
mov dword [edx + 0x950ba4], 0x53574549
mov dword [edx + 0x950ba8], 0x45544154
mov word [edx + 0x950bac], di
add edx, 0x950bad
mov dword [esp + 4], edx
call fcn.004089d0
test eax, eax
je 0x4093d0
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3e9
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 8], 0x20
mov dword [esp + 4], str.00000
mov dword [esp], eax
call sub.USER32.dll_GetWindowTextA
sub esp, 0xc
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3ea
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
sub esp, 8
lea edi, [esp + 0x30]
mov dword [esp + 8], 0x100
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.USER32.dll_GetWindowTextA
mov edx, 0x950ba0
sub esp, 0xc
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x408fdd
test eax, 0x8080
je 0x4093c0
mov ecx, eax
mov dword [esp + 8], 0x850b80
add cl, al
mov ecx, 0x3d52
mov dword [esp], str.__VIEWSTATEGENERATOR
sbb edx, 0x950ba3
mov dword [edx + 0x950ba0], 0x565f5f26
mov dword [edx + 0x950ba4], 0x53574549
mov dword [edx + 0x950ba8], 0x45544154
mov dword [edx + 0x950bac], 0x454e4547
mov dword [edx + 0x950bb0], 0x4f544152
mov word [edx + 0x950bb4], cx
mov byte [edx + 0x950bb6], 0
add edx, 0x950bb6
mov dword [esp + 4], edx
call fcn.004089d0
mov edx, 0x950ba0
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x409070
test eax, 0x8080
jne 0x409093
shr eax, 0x10
add edx, 2
mov ecx, eax
mov dword [esp + 8], 0x850b80
add cl, al
mov dword [esp], str.__EVENTVALIDATION
sbb edx, 0x950ba3
mov dword [edx + 0x950ba0], 0x455f5f26
mov dword [edx + 0x950ba4], 0x544e4556
mov dword [edx + 0x950ba8], 0x494c4156
mov dword [edx + 0x950bac], 0x49544144
mov dword [edx + 0x950bb0], 0x3d4e4f
add edx, 0x950bb3
mov dword [esp + 4], edx
call fcn.004089d0
mov edx, 0x950ba0
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x4090f2
test eax, 0x8080
jne 0x409115
shr eax, 0x10
add edx, 2
mov ecx, eax
mov dword [esp + 4], str.00000
add cl, al
sbb edx, 0x950ba3
mov dword [edx + 0x950ba0], 0x74787426
mov dword [edx + 0x950ba4], 0x74746f42
mov dword [edx + 0x950ba8], 0x3d656e6f
mov dword [edx + 0x950bac], 0x78742630
mov dword [edx + 0x950bb0], 0x74614d74
mov dword [edx + 0x950bb4], 0x6f636972
mov dword [edx + 0x950bb8], 0x3d616c
add edx, 0x950bbb
mov dword [esp], edx
call fcn.00401960
mov eax, 0x950ba0
mov ecx, dword [eax]
add eax, 4
lea edx, [ecx - 0x1010101]
not ecx
and edx, ecx
and edx, 0x80808080
je 0x409180
test edx, 0x8080
jne 0x4091a5
shr edx, 0x10
add eax, 2
mov ecx, edx
mov dword [esp + 4], edi
add cl, dl
mov edx, 0x3d
sbb eax, 0x950ba3
mov dword [eax + 0x950ba0], 0x74787426
mov dword [eax + 0x950ba4], 0x73736150
mov dword [eax + 0x950ba8], 0x64726f77
mov word [eax + 0x950bac], dx
add eax, 0x950bad
mov dword [esp], eax
call fcn.004017d0
mov dword [esp + 4], 0
mov dword [esp], 1
call fcn.004082d0
test eax, eax
jne 0x409528
mov dword [esp + 4], 0x950ba0
mov dword [esp], str._nPostdata:__s_n
call sub.msvcrt.dll_printf
mov ecx, 0x62c740
call fcn.00402460
cmp eax, 0x18f
jg 0x409548
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x850b80
mov dword [esp + 4], 1
mov dword [esp], str.Matricola_o_Password_non_valida
call fcn.00401470
test eax, eax
je 0x4095b0
mov eax, dword [0x64cb20]
mov dword [esp + 4], str._d:
mov dword [esp], ebx
add eax, 1
mov dword [esp + 8], eax
mov dword [0x64cb20], eax
call sub.msvcrt.dll_sprintf
lea edx, [ebx + eax]
lea esi, [ebx + eax + 0x1f]
mov dword [edx], 0x7274614d
mov dword [edx + 4], 0x6c6f6369
mov dword [edx + 8], 0x206f2061
mov dword [edx + 0xc], 0x73736150
mov dword [edx + 0x10], 0x64726f77
mov dword [edx + 0x14], 0x6e6f6e20
mov dword [edx + 0x18], 0x6c617620
mov dword [edx + 0x1c], 0x616469
lea edx, [eax + 0x21]
mov dword [esp], esi
mov dword [esp + 0x28], edx
call sub.msvcrt.dll_strlen
mov edx, dword [esp + 0x28]
add esi, eax
mov eax, 0xa0d
mov word [esi], ax
mov eax, dword [0x62cb00]
mov byte [esi + 2], 0
lea edi, [eax + edx]
mov dword [esp + 0x28], edi
cmp edi, 0x1ffff
jbe 0x4092fd
mov eax, 0x1ffff
sub eax, edx
mov dword [esp + 8], eax
lea eax, [edx + 0x62cb20]
mov edi, ebp
mov esi, ebx
mov dword [esp + 4], 0x62cb20
mov dword [esp], eax
mov dword [esp + 0x2c], edx
call sub.msvcrt.dll_memmove
mov edx, dword [esp + 0x2c]
xor eax, eax
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
test dl, 2
jne 0x409598
and edx, 1
jne 0x409588
mov ebp, dword [esp + 0x28]
cmp ebp, 0x20000
ja 0x409578
mov eax, dword [0x62c9e0]
mov dword [esp + 4], 0x62cb20
mov dword [0x62cb00], ebp
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x4c4b5d
call sub.msvcrt.dll_printf
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Riprova
mov dword [esp + 4], str.Matricola_o_Password_non_valida
mov eax, dword [esp + 0x1150]
xor esi, esi
mov dword [esp], eax
call sub.USER32.dll_MessageBoxA
mov eax, esi
mov dword [0x62c9f4], 1
sub esp, 0x10
add esp, 0x113c
pop ebx
pop esi
pop edi
pop ebp
ret
shr eax, 0x10
add edx, 2
jmp 0x408ffe
mov eax, dword [0x64cb20]
mov dword [esp], ebx
mov esi, 0x21
mov edi, 0xa0d
mov dword [esp + 4], str._d:
add eax, 1
mov dword [esp + 8], eax
mov dword [0x64cb20], eax
call sub.msvcrt.dll_sprintf
lea edx, [ebx + eax]
mov word [edx + 0x24], si
lea esi, [ebx + eax + 0x25]
mov dword [edx], 0x57636950
mov dword [edx + 4], 0x6e456265
mov dword [edx + 8], 0x3a617274
mov dword [edx + 0xc], 0x74654720
mov dword [edx + 0x10], 0x77656956
mov dword [edx + 0x14], 0x74617453
mov dword [edx + 0x18], 0x41462065
mov dword [edx + 0x1c], 0x2045534c
mov dword [edx + 0x20], 0x74697865
lea edx, [eax + 0x27]
mov dword [esp], esi
mov dword [esp + 0x28], edx
call sub.msvcrt.dll_strlen
mov edx, dword [esp + 0x28]
add esi, eax
mov eax, dword [0x62cb00]
mov word [esi], di
lea edi, [eax + edx]
mov byte [esi + 2], 0
mov dword [esp + 0x28], edi
cmp edi, 0x1ffff
jbe 0x40947b
mov eax, 0x1ffff
sub eax, edx
mov dword [esp + 8], eax
lea eax, [edx + 0x62cb20]
mov edi, ebp
mov esi, ebx
mov dword [esp + 4], 0x62cb20
mov dword [esp], eax
mov dword [esp + 0x2c], edx
call sub.msvcrt.dll_memmove
mov edx, dword [esp + 0x2c]
xor eax, eax
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
test dl, 2
je 0x4094ba
movzx eax, word [esi]
mov word [edi], ax
mov eax, 2
and edx, 1
je 0x4094c6
movzx edx, byte [esi + eax]
mov byte [edi + eax], dl
mov ebp, dword [esp + 0x28]
cmp ebp, 0x20000
jbe 0x4094d7
mov ebp, 0x20000
mov eax, dword [0x62c9e0]
mov dword [esp + 4], 0x62cb20
mov dword [0x62cb00], ebp
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x4c4b5d
call sub.msvcrt.dll_printf
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Disconnetti_e_riprova
mov dword [esp + 4], str.PicWebEntra:_Errore_non_ricevo_il_VIEWSTATE
jmp 0x409394
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Disconnetti_e_riprova
mov dword [esp + 4], str.Errore_di_Sessione__ReachLocation_PicWebEntra_
jmp 0x409394
mov dword [esp + 8], eax
mov dword [esp + 4], str.Errore_di_sessione__BAD_REQUEST:__d_
mov dword [esp], edi
call sub.msvcrt.dll_sprintf
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Disconnetti_e_riprova
mov dword [esp + 4], edi
jmp 0x409394
mov ebp, 0x20000
jmp 0x40934e
movzx edx, byte [esi + eax]
mov byte [edi + eax], dl
jmp 0x40933e
movzx eax, word [esi]
mov word [edi], ax
mov eax, 2
jmp 0x409335
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x850b80
mov dword [esp + 4], 1
mov dword [esp], str.inserisci_la_tua_matricola
call fcn.00401470
test eax, eax
je 0x409720
mov eax, dword [0x64cb20]
mov dword [esp], ebx
mov ebp, 0x2e2e
mov dword [esp + 4], str._d:
add eax, 1
mov dword [esp + 8], eax
mov dword [0x64cb20], eax
call sub.msvcrt.dll_sprintf
lea edx, [ebx + eax]
lea esi, [ebx + eax + 0x12]
mov dword [edx], 0x6f727245
lea edi, [eax + 0x14]
mov dword [edx + 4], 0x65206572
mov dword [edx + 8], 0x6172746e
mov dword [edx + 0xc], 0x2e6f646e
mov word [edx + 0x10], bp
mov byte [edx + 0x12], 0
mov dword [esp], esi
call sub.msvcrt.dll_strlen
add esi, eax
mov eax, 0xa0d
mov word [esi], ax
mov eax, dword [0x62cb00]
mov byte [esi + 2], 0
lea esi, [eax + edi]
cmp esi, 0x1ffff
jbe 0x409664
mov eax, 0x1ffff
sub eax, edi
mov dword [esp + 8], eax
lea eax, [edi + 0x62cb20]
mov dword [esp + 4], 0x62cb20
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov ecx, edi
xor eax, eax
and ecx, 0xfffffffc
mov edx, dword [ebx + eax]
add eax, 4
mov dword [eax + 0x62cb1c], edx
cmp eax, ecx
jb 0x409685
lea edx, [eax + 0x62cb20]
xor ecx, ecx
add eax, ebx
test edi, 2
je 0x4096b2
movzx ecx, word [eax]
mov word [edx], cx
mov ecx, 2
and edi, 1
je 0x4096be
movzx eax, byte [eax + ecx]
mov byte [edx + ecx], al
cmp esi, 0x20000
jbe 0x4096cb
mov esi, 0x20000
mov eax, dword [0x62c9e0]
mov dword [esp + 4], 0x62cb20
mov dword [0x62cb00], esi
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x4c4b5d
call sub.msvcrt.dll_printf
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Riprova
mov dword [esp + 4], str.Errore_entrando...
jmp 0x409394
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x850b80
mov dword [esp + 4], 1
mov dword [esp], str.Dipendente:
call fcn.004016b0
mov ebx, eax
test eax, eax
je 0x4097de
mov dword [esp + 4], 0x3c
mov dword [esp], eax
call sub.msvcrt.dll_strchr
mov edi, eax
test eax, eax
je 0x4097de
mov byte [eax], 0
mov dword [esp + 4], 0x22
mov dword [esp], ebx
call sub.msvcrt.dll_strchr
mov ebp, eax
test eax, eax
je 0x4097fa
mov byte [eax], 0
mov dword [esp + 4], 0x27
mov dword [esp], ebx
call sub.msvcrt.dll_strchr
test eax, eax
je 0x409844
mov byte [eax], 0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3ee
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
mov byte [ebp], 0x22
sub esp, 8
mov edx, dword [esp + 0x28]
mov byte [edx], 0x27
mov byte [edi], 0x3c
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.00407e90
jmp 0x408d7a
mov dword [esp + 4], 0x27
mov dword [esp], ebx
call sub.msvcrt.dll_strchr
test eax, eax
je 0x409876
mov byte [eax], 0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3ee
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
sub esp, 8
mov edx, dword [esp + 0x28]
jmp 0x4097d8
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3ee
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
mov byte [ebp], 0x22
sub esp, 8
jmp 0x4097db
mov eax, dword [esp + 0x1150]
mov dword [esp + 4], 0x3ee
mov dword [esp], eax
call sub.USER32.dll_GetDlgItem
push edx
push edx
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.USER32.dll_SetWindowTextA
push ecx
push ecx
jmp 0x4097db