Function at 0x40e421
Capabilities:
Extract resource via kernel32 functions
Get hostname

Disassembly:
mov eax, 0x1028
call fcn.00434930
push ebx
mov ebx, dword [esp + 0x1030]
push ebp
push esi
push 0x400
mov ebp, ecx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push 0xa
push ebx
call edx
mov esi, eax
test esi, esi
je 0x40e796
push edi
lea eax, [esp + 0x38]
push eax
push str.GET__s_HTTP_
push esi
call fcn.004328cf
push esi
mov edi, eax
call fcn.00432002
add esp, 0x10
cmp edi, 1
jne 0x40e795
lea ecx, [esp + 0x38]
push ecx
push str.._vncHTTPConnect.cpp:_tfile__s_requested_n
push edi
push 0x457788
call fcn.00401860
add esp, 0x10
push edi
lea edx, [esp + 0x17]
push edx
mov ecx, ebx
mov esi, edi
call fcn.00417a10
test eax, eax
je 0x40e795
mov al, byte [esp + 0x13]
cmp al, 0xa
jne 0x40e3f7
test esi, esi
jne 0x40e41c
mov esi, 1
jmp 0x40e3fd
cmp al, 0x20
jl 0x40e3fd
xor esi, esi
push 1
lea eax, [esp + 0x17]
push eax
mov ecx, ebx
call fcn.00417a10
test eax, eax
jne 0x40e3e4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1028
ret 4
push str.._vncHTTPConnect.cpp:_tHTTP_headers_skipped_n
push 9
push 0x457788
call fcn.00401860
add esp, 0xc
cmp byte [esp + 0x38], 0x2f
je 0x40e469
push str.._vncHTTPConnect.cpp:_tfilename_didnt_begin_with___n
push 0
push 0x457788
call fcn.00401860
add esp, 0xc
push 0xa8
push str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
mov ecx, ebx
call fcn.00417bc0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1028
ret 4
mov al, byte [esp + 0x39]
test al, al
mov bl, 0x3f
je 0x40e5a7
cmp dword [ebp + 0x5c], 0
je 0x40e485
cmp al, bl
je 0x40e5a7
xor edi, edi
mov esi, 0x448cc8
lea esp, [esp]
mov ecx, dword [esi]
lea eax, [esp + 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e4b6
test dl, dl
je 0x40e4b2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e4b6
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e496
xor eax, eax
jmp 0x40e4bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40e4f0
add esi, 0xc
add edi, 1
cmp esi, str.._vncHTTPConnect.cpp:_tquitting_HTTP_client_thread_n
jl 0x40e490
mov ecx, dword [esp + 0x103c]
push 0xa8
push str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
call fcn.00417bc0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1028
ret 4
push str.._vncHTTPConnect.cpp:_trequested_file_recognised_n
push 9
push 0x457788
call fcn.00401860
lea eax, [edi + edi*2]
add eax, eax
mov ecx, dword [eax + eax + 0x448ccc]
movzx edx, word [eax + eax + 0x448cd0]
add eax, eax
add esp, 0xc
push ecx
push edx
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
test esi, esi
je 0x40e795
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push 0
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x40e795
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x40e795
push str.._vncHTTPConnect.cpp:_tsending_file..._n
push 9
push 0x457788
call fcn.00401860
mov ebx, dword [esp + 0x1048]
add esp, 0xc
push 0x11
push str.HTTP_1.0_200_OK_n_n
mov ecx, ebx
call fcn.00417bc0
test eax, eax
je 0x40e795
push edi
push esi
mov ecx, ebx
call fcn.00417bc0
test eax, eax
je 0x40e795
push str.._vncHTTPConnect.cpp:_tfile_successfully_sent_n
jmp 0x40e786
push str.._vncHTTPConnect.cpp:_tsending_main_page_n
push 1
push 0x457788
call fcn.00401860
add esp, 0xc
cmp byte [esp + 0x39], bl
jne 0x40e5d5
push str.._vncHTTPConnect.cpp:_tapplet_parameters_specified_n
push 8
push 0x457788
call fcn.00401860
add esp, 0xc
mov edi, dword [esp + 0x103c]
push 0x11
push str.HTTP_1.0_200_OK_n_n
mov ecx, edi
call fcn.00417bc0
test eax, eax
je 0x40e795
mov ecx, dword [ebp + 0x54]
mov eax, dword [ecx]
mov edx, dword [eax + 0x118]
call edx
test eax, eax
je 0x40e743
mov ecx, dword [ebp + 0x54]
mov eax, dword [ecx]
mov eax, dword [eax + 0x134]
lea edx, [esp + 0x30]
push edx
lea edx, [esp + 0x28]
push edx
lea edx, [esp + 0x30]
push edx
call eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x34], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x40e682
lea eax, [esp + 0x14]
xor esi, esi
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40e648
sub eax, edx
je 0x40e6a1
movsx eax, byte [esp + esi + 0x14]
push eax
call fcn.00432d3f
mov byte [esp + esi + 0x18], al
lea eax, [esp + 0x18]
add esp, 4
add esi, 1
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40e671
sub eax, edx
cmp esi, eax
jb 0x40e655
jmp 0x40e6a1
mov ecx, dword [str.WinVNC]
mov dx, word [0x4476b0]
mov al, byte [0x4476b2]
mov dword [esp + 0x14], ecx
mov word [esp + 0x18], dx
mov byte [esp + 0x1a], al
push 0x3ff
lea ecx, [esp + 0x43d]
push 0
push ecx
mov byte [esp + 0x444], 0
call fcn.004326b0
add esp, 0xc
cmp byte [esp + 0x39], bl
jne 0x40e704
mov edx, dword [ebp]
mov edx, dword [edx + 0x14]
push 0x400
lea eax, [esp + 0x43c]
push eax
lea ecx, [esp + 0x42]
push ecx
mov ecx, ebp
call edx
test eax, eax
jne 0x40e704
push 0xb8
push str._HTML__n___HEAD__TITLE_TightVNC_desktop__TITLE___HEAD__n___BODY__n_____H1_Bad_Parameters__H1__n____The_sequence_of_applet_parameters_specified_within_the_URL_is_invalid._n____BODY__n__HTML__n
mov ecx, edi
call fcn.00417bc0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1028
ret 4
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
lea eax, [esp + 0x438]
push eax
mov eax, dword [edx + 0xcc]
call eax
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
push eax
add ecx, 0x20
push ecx
push edx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x84c]
push str._HTML__n___HEAD__TITLE_TightVNC_desktop___.256s___TITLE___HEAD__n___BODY__n_____APPLET_CODEVncViewer.class_ARCHIVEVncViewer.jar_WIDTH_d_HEIGHT_d__n_______PARAM_NAME_PORT__VALUE__d___n_.1024s______APPLET__BR__n_____A_HREF_http:__www.tightvnc.com___www.TightVNC.com__A__n____BODY__n__HTML__n
push ecx
call fcn.004324fb
add esp, 0x1c
jmp 0x40e758
lea edx, [esp + 0x838]
push str._HTML__n___HEAD__TITLE_TightVNC_desktop__TITLE___HEAD__n___BODY__n_____H1_Connections_Disabled__H1__n____The_requested_desktop_is_not_configured_to_accept_incoming_connections._n____BODY__n__HTML__n
push edx
call fcn.004324fb
add esp, 8
lea eax, [esp + 0x838]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40e762
sub eax, edx
push eax
lea eax, [esp + 0x83c]
push eax
mov ecx, edi
call fcn.00417bc0
test eax, eax
je 0x40e795
push str.._vncHTTPConnect.cpp:_tsent_page_n
push 9
push 0x457788
call fcn.00401860
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1028
ret 4