Function at 0x424780
Capabilities:
Create thread
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x398
mov eax, dword [0x4ba700]
xor eax, esp
mov dword [esp + 0x394], eax
push ebx
push edi
push str.._vncdesktopsink.cpp_:_InitWindow_called_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
push 0x400001cf
push 0
push 0
call dword [sym.imp.USER32.dll_OpenInputDesktop]
mov edi, eax
xor ecx, ecx
mov dword [esp + 0x18], edi
mov eax, 0x4bc990
test edi, edi
jne 0x4247d7
push str.._vncdesktopsink.cpp_:_InitWindow:OpenInputdesktop_Error__n
jmp 0x4247dc
push str.._vncdesktopsink.cpp_:_InitWindow:OpenInputdesktop_OK_n
call fcn.00401110
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_GetThreadDesktop]
mov ebx, eax
lea eax, [esp + 0x74]
push eax
push 0x100
lea ecx, [esp + 0x2a0]
push ecx
push 2
push edi
mov dword [esp + 0x30], ebx
call dword [sym.imp.USER32.dll_GetUserObjectInformationA]
test eax, eax
jne 0x42482a
push str.._vncdesktopsink.cpp_:_InitWindow:_GetUserObjectInformation__n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
push ebx
push edi
lea edx, [esp + 0x2a0]
push edx
push str.._vncdesktopsink.cpp_:_InitWindow:SelectHDESK_to__s___x__from__x_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
add esp, 0x10
push edi
call dword [sym.imp.USER32.dll_SetThreadDesktop]
test eax, eax
jne 0x424867
push str.._vncdesktopsink.cpp_:_InitWindow:SelectHDESK:_SetThreadDesktop__n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.ChangeWindowMessageFilter
push eax
call ebx
mov edi, eax
xor eax, eax
cmp edi, eax
je 0x4248b9
mov eax, dword [0x4f37d8]
push 1
push eax
call edi
mov ecx, dword [0x4f37e0]
push 1
push ecx
call edi
mov edx, dword [0x4f37dc]
push 1
push edx
call edi
push 1
push 0x12
call edi
push 1
push 0x8008
call edi
xor eax, eax
cmp word [0x4f375c], ax
jne 0x424960
mov ecx, dword [0x4f21dc]
push eax
mov dword [esp + 0x48], 0x30
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0x423f00
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
lea edx, [esp + 0x44]
xor edi, edi
push edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], str.WinVNC_desktop_sink
mov dword [esp + 0x74], edi
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov word [0x4f375c], ax
cmp ax, di
jne 0x42495e
push str.._vncdesktopsink.cpp_:_failed_to_register_window_class_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov eax, dword [esi + 0xdb9c]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
pop edi
pop ebx
mov ecx, dword [esp + 0x394]
xor ecx, esp
call fcn.0047c3ff
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [0x4f21dc]
push eax
push ecx
push eax
push eax
push 0xc8
push 0x190
push bind
push bind
push 0xcf0000
push 0x4ab7e8
push str.WinVNC_desktop_sink
push eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [esi + 0xdc14], eax
test eax, eax
jne 0x4249d5
push str.._vncdesktopsink.cpp_:_failed_to_create_hook_window_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov edx, dword [esi + 0xdb9c]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
pop edi
pop ebx
mov ecx, dword [esp + 0x394]
xor ecx, esp
call fcn.0047c3ff
mov esp, ebp
pop ebp
ret
push esi
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov eax, dword [esi + 0xdc14]
push eax
call dword [sym.imp.USER32.dll_SetClipboardViewer]
mov dword [esi + 0xdc18], eax
mov eax, dword [esi + 0xe0fc]
mov byte [esi + 0xb8], 0
test eax, eax
je 0x424a40
cmp dword [eax + 8], 0
jne 0x424a1c
mov eax, 1
mov dword [esi + 0xe130], eax
mov dword [esi + 0xe134], eax
jmp 0x424a40
mov edx, dword [esi + 0xdc14]
lea ecx, [esp + 0x20]
push ecx
push 0
push edx
push 0x421440
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_load_hookdlls_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add esp, 4
push 0x104
lea eax, [esp + 0x8c]
push eax
push 0
mov dword [esi + 0xe140], 0
call edi
test eax, eax
je 0x424acd
lea ecx, [esp + 0x88]
push 0x5c
push ecx
call fcn.0047c410
add esp, 8
test eax, eax
je 0x424948
mov byte [eax], 0
lea eax, [esp + 0x88]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x424aa0
mov edx, dword [str._vnchooks.dll]
mov ecx, dword [0x4adc5c]
mov dword [eax], edx
mov edx, dword [0x4adc60]
mov dword [eax + 4], ecx
mov cx, word [0x4adc64]
mov dword [eax + 8], edx
mov word [eax + 0xc], cx
push 0x104
lea edx, [esp + 0x194]
push edx
push 0
mov dword [esi + 0xe144], 0
call edi
test eax, eax
je 0x424b36
lea eax, [esp + 0x190]
push 0x5c
push eax
call fcn.0047c410
xor edx, edx
add esp, 8
cmp eax, edx
je 0x424948
mov byte [eax], dl
lea eax, [esp + 0x190]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x424b12
mov ecx, dword [str._schook.dll]
mov dword [eax], ecx
mov ecx, dword [0x4adc6c]
mov dword [eax + 4], ecx
mov ecx, dword [0x4adc70]
mov dword [eax + 8], ecx
jmp 0x424b38
xor edx, edx
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esi + 0xe14c], edx
mov dword [esi + 0xe15c], edx
mov dword [esi + 0xe158], edx
mov dword [esi + 0xe148], edx
mov dword [esi + 0xe154], edx
mov dword [esi + 0xe150], edx
lea edx, [esp + 0x88]
push edx
call edi
mov dword [esi + 0xe140], eax
lea eax, [esp + 0x190]
push eax
call edi
mov dword [esi + 0xe144], eax
mov eax, dword [esi + 0xe140]
test eax, eax
je 0x424bd6
push str.UnSetHooks
push eax
call ebx
mov ecx, dword [esi + 0xe140]
push str.SetMouseFilterHook
push ecx
mov dword [esi + 0xe14c], eax
call ebx
mov edx, dword [esi + 0xe140]
push str.SetKeyboardFilterHook
push edx
mov dword [esi + 0xe15c], eax
call ebx
mov dword [esi + 0xe158], eax
mov eax, dword [esi + 0xe140]
push str.SetHooks
push eax
call ebx
mov dword [esi + 0xe148], eax
mov eax, dword [esi + 0xe144]
test eax, eax
je 0x424c02
push str.UnSetHook
push eax
call ebx
mov ecx, dword [esi + 0xe144]
push str.SetHook
push ecx
mov dword [esi + 0xe154], eax
call ebx
mov dword [esi + 0xe150], eax
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_start_dispatch_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov edx, dword [esi + 0xdb9c]
mov edi, dword [sym.imp.KERNEL32.dll_SetEvent]
add esp, 4
push edx
call edi
jmp 0x424c36
mov edi, dword [sym.imp.KERNEL32.dll_SetEvent]
push 1
push 0
push 0
push 0
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x424e64
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
push ecx
push edx
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO__i__i_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov eax, dword [esp + 0x38]
add esp, 0xc
cmp eax, 0x12
je 0x424e92
cmp byte [0x4f378d], 0
jne 0x424e92
cmp eax, 0x8008
je 0x424e6f
cmp eax, dword [0x4f37d8]
jne 0x424dc3
cmp byte [esi + 0xe174], 0
je 0x424c36
push str.._vncdesktopsink.cpp_:_RFB_SCREEN_UPDATE___n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esi + 0x6c]
movsx eax, cx
shr ecx, 0x10
movsx edi, cx
movsx ecx, dx
shr edx, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], ecx
sub eax, ebx
sub ecx, ebx
mov ebx, dword [esi + 0x70]
movsx edx, dx
add esp, 4
sub edx, ebx
push edx
sub edi, ebx
push edi
push ecx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
push str.._vncdesktopsink.cpp_:_REct__i__i__i__i___n
xor ecx, ecx
mov eax, 0x4bc990
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], edx
call fcn.00401110
add esp, 0x14
lea ecx, [esi + 0xa8]
lea eax, [esp + 0x78]
lea edx, [esp + 8]
call fcn.00410ba0
mov edi, dword [eax]
mov ecx, dword [eax + 4]
mov ebx, dword [eax + 8]
cmp edi, ebx
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], eax
jge 0x424c30
cmp ecx, eax
jge 0x424c30
cmp byte [esi + 0xdbac], 0
je 0x424d65
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [esi + 0xdbac], 0
jne 0x424d54
push 0x4a3fbe
call fcn.0047d6d1
mov ecx, dword [esp + 0x10]
add esp, 4
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
push eax
push ebx
push ecx
push edi
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push 2
mov edi, eax
mov eax, dword [esi + 0xdba4]
push edi
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esp + 0x24]
push edx
call fcn.0047d643
mov eax, dword [esi + 0xdb88]
mov edi, dword [sym.imp.KERNEL32.dll_SetEvent]
add esp, 4
push eax
call edi
jmp 0x424c36
cmp eax, dword [0x4f37dc]
jne 0x424e2e
cmp byte [esi + 0xe174], 0
je 0x424c36
push str.._vncdesktopsink.cpp_:_RFB_MOUSE_UPDATE___n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov eax, dword [esp + 0x34]
add esp, 4
test eax, eax
jne 0x424e0e
mov eax, dword [esi + 0xdb8c]
mov ecx, dword [esi + 0xe0b4]
push eax
mov dword [esi + 0xe0ac], ecx
call edi
jmp 0x424c36
mov edx, dword [esi + 0xe0ac]
mov dword [esi + 0xe0ac], eax
mov eax, dword [esi + 0xdb8c]
push eax
mov dword [esi + 0xe0b0], edx
call edi
jmp 0x424c36
cmp eax, 0x403
jne 0x424e49
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_called_wm_user3_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
lea ecx, [esp + 0x28]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x28]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x424c36
call dword [sym.imp.USER32.dll_WaitMessage]
jmp 0x424c36
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_called_wm_user4_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov eax, dword [esi + 0xdc14]
add esp, 4
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x424ebc
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_called_wm_quit_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov ecx, dword [esi + 0xdc14]
add esp, 4
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edx, dword [esi + 0xdb98]
push edx
call edi
mov eax, dword [esi + 0xe140]
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
je 0x424ecf
push eax
call edi
mov eax, dword [esi + 0xe144]
test eax, eax
je 0x424edc
push eax
call edi
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SetThreadDesktop]
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.USER32.dll_CloseDesktop]
push str.._vncdesktopsink.cpp_:_OOOOOOOOOOOO_end_dispatch_n
xor ecx, ecx
mov eax, 0x4bc990
call fcn.00401110
mov ecx, dword [esp + 0x3a0]
add esp, 4
pop edi
pop ebx
xor ecx, esp
mov dword [esi + 0xdc14], 0
mov eax, 1
call fcn.0047c3ff
mov esp, ebp
pop ebp
ret