Function at 0x4344e0
Capabilities:
Extract resource via kernel32 functions
Get hostname

Disassembly:
sub esp, 0xc3c
mov eax, dword [0x48ea40]
xor eax, esp
mov dword [esp + 0xc38], eax
push ebx
push ebp
mov ebp, dword [esp + 0xc48]
push esi
push 0x400
mov ebx, ecx
mov eax, dword [ebx]
mov edx, dword [eax + 0x14]
push 0xa
push ebp
call edx
mov esi, eax
test esi, esi
je 0x434573
push edi
lea eax, [esp + 0x38]
push eax
push str.GET__s
push esi
call fcn.0045e843
push esi
mov edi, eax
call fcn.0045d145
add esp, 0x10
test edi, edi
je 0x434572
cmp edi, 0xffffffff
je 0x434572
lea ecx, [esp + 0x38]
push ecx
push str.._vnchttpconnect.cpp_:_file__s_requested_n
push 1
push 0x490660
call fcn.00401810
add esp, 0x10
mov esi, 1
push esi
lea edx, [esp + 0x17]
push edx
mov ecx, ebp
call fcn.0044a060
test eax, eax
je 0x434572
mov al, byte [esp + 0x13]
cmp al, 0xa
jne 0x434518
test esi, esi
jne 0x434532
mov esi, 1
jmp 0x43451e
cmp al, 0x20
jl 0x43451e
xor esi, esi
push 1
lea eax, [esp + 0x17]
push eax
mov ecx, ebp
call fcn.0044a060
test eax, eax
jne 0x434505
jmp 0x434572
push str.._vnchttpconnect.cpp_:_parameters_read_n
push 9
push 0x490660
call fcn.00401810
add esp, 0xc
cmp byte [esp + 0x38], 0x2f
je 0x43458d
push str.._vnchttpconnect.cpp_:_filename_didnt_begin_with___n
push 0
push 0x490660
call fcn.00401810
add esp, 0xc
push 0xa8
push str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
mov ecx, ebp
call fcn.0044a040
pop edi
mov ecx, dword [esp + 0xc44]
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0045c20d
add esp, 0xc3c
ret 4
mov edi, 0x47bbb8
lea esi, [esp + 0x38]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x434734
push str.._vnchttpconnect.cpp_:_sending_main_page_n
push 1
push 0x490660
call fcn.00401810
add esp, 0xc
push 0x11
push str.HTTP_1.0_200_OK_n_n
mov ecx, ebp
call fcn.0044a040
test eax, eax
je 0x434572
mov ecx, dword [ebx + 0x64]
mov eax, dword [ecx]
mov edx, dword [eax + 0x138]
call edx
test eax, eax
je 0x4346d9
mov ecx, dword [ebx + 0x64]
mov eax, dword [ecx]
mov eax, dword [eax + 0x164]
lea edx, [esp + 0x20]
push edx
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x20]
push edx
call eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x24], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x434661
lea eax, [esp + 0x28]
xor esi, esi
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x434621
sub eax, edx
je 0x434680
mov edi, edi
movsx eax, byte [esp + esi + 0x28]
push eax
call fcn.0045ec1e
mov byte [esp + esi + 0x2c], al
lea eax, [esp + 0x2c]
add esp, 4
add esi, 1
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x434650
sub eax, edx
cmp esi, eax
jb 0x434630
jmp 0x434680
mov ecx, dword [0x478710]
mov dx, word [0x478714]
mov al, byte [0x478716]
mov dword [esp + 0x28], ecx
mov word [esp + 0x2c], dx
mov byte [esp + 0x2e], al
mov ecx, dword [ebx + 0x64]
mov edx, dword [ecx]
mov eax, dword [edx + 0xf8]
mov esi, ecx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esi]
add ecx, 0x40
push ecx
add edx, 0x40
push edx
mov edx, dword [eax + 0xf8]
mov ecx, esi
call edx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
add eax, 0x40
push eax
add ecx, 0x40
push ecx
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x454]
push str._HTML__n___HEAD__TITLE____.256s____TITLE___HEAD__n___BODY__n___SPAN_styleposition:_absolute__top:0px_left:0px__n_OBJECT__n____IDVncViewer_n____classid__clsid:8AD9C840_044E_11D1_B3E9_00805F499D93_n____codebase__http:__java.sun.com_update_1.4.2_jinstall_1_4_windows_i586.cabVersion1_4_0_0_n____WIDTH___d_HEIGHT___d___n_____PARAM_NAME__CODE_VALUE__VncViewer.class___n_____PARAM_NAME__ARCHIVE_VALUE__VncViewer.jar___n_____PARAM_NAME__type_VALUE__application_x_java_applet_version1.4__n_____PARAM_NAME__scriptable_VALUE__false__n_____PARAM_NAME__PORT_VALUE_d__n_____PARAM_NAME__ENCODING_VALUETight__n_____PARAM_NAME__Open_New_Window_VALUENo__n_____COMMENT__n_t_EMBED__n____________type__application_x_java_applet_version1.4__n____________CODE__VncViewer.class__n____________ARCHIVE__VncViewer.jar__n____________WIDTH___d__n____________HEIGHT___d__n____________PORT__d__n____________ENCODING_Tight__n_t____scriptable__false__n_t____pluginspage_http:__java.sun.com_products_plugin_index.htmldownload__n_t_____NOEMBED__n______________NOEMBED__n_t__EMBED__n______COMMENT__n__OBJECT__n____SPAN__n____BODY__n__HTML__n
push eax
call fcn.0045c58a
add esp, 0x24
jmp 0x4346ee
lea ecx, [esp + 0x438]
push str._HTML__n___HEAD__TITLE_Ultr_VNC_desktop__TITLE___HEAD__n___BODY__n_____H1_Connections_Disabled__H1__n____The_requested_desktop_is_not_configured_to_accept_incoming_connections._n____BODY__n__HTML__n
push ecx
call fcn.0045c58a
add esp, 8
lea eax, [esp + 0x438]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4346f8
sub eax, edx
push eax
lea edx, [esp + 0x43c]
push edx
mov ecx, ebp
call fcn.0044a040
test eax, eax
je 0x434572
push str.._vnchttpconnect.cpp_:_sent_page_n
push 9
push 0x490660
call fcn.00401810
add esp, 0xc
jmp 0x434572
xor edi, edi
mov esi, 0x47b990
jmp 0x434740
mov ecx, dword [esi]
lea eax, [esp + 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x434766
test dl, dl
je 0x434762
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x434766
add eax, 2
add ecx, 2
test dl, dl
jne 0x434746
xor eax, eax
jmp 0x43476b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x434782
add esi, 0xc
add edi, 1
cmp esi, 0x47ba38
jl 0x434740
jmp 0x434561
push str.._vnchttpconnect.cpp_:_requested_file_recognised_n
push 9
push 0x490660
call fcn.00401810
lea eax, [edi + edi*2]
add eax, eax
mov ecx, dword [eax + eax + 0x47b994]
movzx edx, word [eax + eax + 0x47b998]
add eax, eax
mov eax, dword [0x4a9630]
add esp, 0xc
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
test esi, esi
je 0x434572
mov ecx, dword [0x4a9630]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, dword [0x4a9630]
push esi
push edx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x434572
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x434572
push str.._vnchttpconnect.cpp_:_sending_file..._n
push 9
push 0x490660
call fcn.00401810
add esp, 0xc
push 0x11
push str.HTTP_1.0_200_OK_n_n
mov ecx, ebp
call fcn.0044a040
test eax, eax
je 0x434572
push edi
push esi
mov ecx, ebp
call fcn.0044a040
test eax, eax
je 0x434572
push str.._vnchttpconnect.cpp_:_file_successfully_sent_n
push 9
push 0x490660
call fcn.00401810
add esp, 0xc
jmp 0x434572