Function at 0x432410
Capabilities:
Extract resource via kernel32 functions
Get hostname

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xc34
mov ebp, ecx
mov ebx, dword [esp + 0xc48]
mov ecx, ebp
push 0x400
push 0xa
push ebx
call fcn.00432898
mov esi, eax
test esi, esi
je 0x43287c
lea edx, [esp]
push edx
push 0x49f110
push esi
call fcn.00464413
mov edi, eax
push esi
call fcn.00463168
add esp, 0x10
test edi, edi
jne 0x432467
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
cmp edi, 0xffffffff
je 0x43245a
lea eax, [esp]
push eax
push 0x49f120
push 1
push 0x481eac
call fcn.00407ffc
add esp, 0x10
mov esi, 1
lea eax, [esp + 0x400]
mov ecx, ebx
push 1
push eax
call fcn.00446d48
test eax, eax
je 0x432889
movsx eax, byte [esp + 0x400]
cmp eax, 0xa
je 0x4324b8
cmp eax, 0x20
jl 0x432489
xor esi, esi
jmp 0x432489
test esi, esi
jne 0x4324c3
mov esi, 1
jmp 0x432489
push 0x49f180
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
cmp byte [esp], 0x2f
je 0x432522
push 0x49f1e0
push 0
push 0x481eac
call fcn.00407ffc
add esp, 0xc
mov edi, str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x432508
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x432500
mov ecx, ebx
push eax
push str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
call fcn.00446d28
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
lea edi, [esp]
mov esi, 0x49f300
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x43254a
or dl, dl
je 0x432546
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x43254a
add edi, 2
add esi, 2
or dl, dl
jne 0x43252a
xor eax, eax
jmp 0x43254f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x432717
push 0x49f240
push 1
push 0x481eac
call fcn.00407ffc
add esp, 0xc
mov edi, str.HTTP_1.0_200_OK_n_n
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x432582
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x43257a
mov ecx, ebx
push eax
push str.HTTP_1.0_200_OK_n_n
call fcn.00446d28
test eax, eax
jne 0x4325a0
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
mov ecx, dword [ebp]
mov eax, dword [ecx]
call dword [eax + 0x128]
test eax, eax
je 0x4326b4
mov ecx, dword [ebp]
mov eax, dword [ecx]
lea edi, [esp + 0xc1c]
lea esi, [esp + 0xc18]
lea edx, [esp + 0xc14]
push edx
push esi
push edi
call dword [eax + 0x154]
mov dword [esp + 0xc20], 0x10
lea edx, [esp + 0xc24]
lea eax, [esp + 0xc20]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x432650
xor esi, esi
lea edi, [esp + 0xc24]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x432616
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x43260e
test eax, eax
jbe 0x432666
movsx eax, byte [esp + esi + 0xc24]
push eax
call fcn.0046406c
pop ecx
mov byte [esp + esi + 0xc24], al
lea edi, [esp + 0xc24]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x432649
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x432641
inc esi
cmp esi, eax
jb 0x43261a
jmp 0x432666
lea esi, [esp + 0xc24]
mov edi, 0x499fe0
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x43265c
mov ecx, dword [ebp]
mov eax, dword [ecx]
call dword [eax + 0xf4]
mov esi, eax
mov ecx, dword [ebp]
mov edx, dword [ecx]
call dword [edx + 0xf4]
mov ebp, dword [esp + 0xc1c]
mov edx, dword [esp + 0xc18]
add edx, 0x20
lea ecx, [esp + 0x404]
lea edi, [esp + 0xc24]
push eax
push edx
push ebp
push esi
push edx
push ebp
push edi
push str._HTML__n___HEAD__TITLE____.256s____TITLE___HEAD__n___BODY__n___SPAN_styleposition:_absolute__top:0px_left:0px__n_OBJECT__n____IDVncViewer_n____classid__clsid:8AD9C840_044E_11D1_B3E9_00805F499D93_n____codebase__http:__java.sun.com_update_1.4.2_jinstall_1_4_windows_i586.cabVersion1_4_0_0_n____WIDTH___d_HEIGHT___d___n_____PARAM_NAME__CODE_VALUE__VncViewer.class___n_____PARAM_NAME__ARCHIVE_VALUE__VncViewer.jar___n_____PARAM_NAME__type_VALUE__application_x_java_applet_version1.4__n_____PARAM_NAME__scriptable_VALUE__false__n_____PARAM_NAME__PORT_VALUE_d__n_____PARAM_NAME__ENCODING_VALUETight__n_____COMMENT__n_t_EMBED__n____________type__application_x_java_applet_version1.4__n____________CODE__VncViewer.class__n____________ARCHIVE__VncViewer.jar__n____________WIDTH___d__n____________HEIGHT___d__n____________PORT__d__n____________ENCODING_Tight__n_t____scriptable__false__n_t____pluginspage_http:__java.sun.com_products_plugin_index.htmldownload__n_t_____NOEMBED__n______________NOEMBED__n_t__EMBED__n______COMMENT__n__OBJECT__n____SPAN__n____BODY__n__HTML__n
push ecx
call fcn.00463577
add esp, 0x24
jmp 0x4326c9
lea eax, [esp + 0x404]
push str._HTML__n___HEAD__TITLE_Ultr_VNC_desktop__TITLE___HEAD__n___BODY__n_____H1_Connections_Disabled__H1__n____The_requested_desktop_is_not_configured_to_accept_incoming_connections._n____BODY__n__HTML__n
push eax
call fcn.00463577
add esp, 8
lea edi, [esp + 0x404]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4326e2
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4326da
lea edx, [esp + 0x404]
mov ecx, ebx
push eax
push edx
call fcn.00446d28
test eax, eax
je 0x43270a
push 0x49f2a0
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
xor ecx, ecx
lea ebx, [ecx + ecx]
lea ebp, [ebx + ebx]
lea eax, [ebp + ebp]
add eax, ebp
lea edi, [esp]
mov esi, dword [eax + 0x4751c0]
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x43274e
or dl, dl
je 0x43274a
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x43274e
add edi, 2
add esi, 2
or dl, dl
jne 0x43272e
xor eax, eax
jmp 0x432753
sbb eax, eax
or eax, 1
test eax, eax
je 0x43279d
inc ecx
cmp ecx, 0xb
jl 0x432719
mov ebx, dword [esp + 0xc48]
mov edi, str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x43277b
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x432773
mov ecx, ebx
push eax
push str.HTTP_1.0_404_Not_Found_n_n_HTML__n___HEAD__TITLE_404_Not_Found__TITLE___HEAD__n___BODY__n_____H1_Not_Found__H1__n____The_requested_file_could_not_be_found._n____BODY__n__HTML__n
call fcn.00446d28
test eax, eax
jne 0x43287c
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
mov esi, ebx
mov ebx, dword [esp + 0xc48]
push 0x49f320
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
movzx eax, word [ebp + esi*4 + 0x4751c8]
push dword [ebp + esi*4 + 0x4751c4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov ebp, eax
test ebp, ebp
je 0x43287c
push ebp
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push ebp
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x43287c
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebp, eax
test ebp, ebp
je 0x43287c
push 0x49f380
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
mov edi, str.HTTP_1.0_200_OK_n_n
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x432830
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x432828
mov ecx, ebx
push eax
push str.HTTP_1.0_200_OK_n_n
call fcn.00446d28
test eax, eax
jne 0x43284e
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
push esi
mov ecx, ebx
push ebp
call fcn.00446d28
test eax, eax
jne 0x432868
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
push 0x49f3e0
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4
add esp, 0xc34
pop ebx
pop ebp
pop esi
pop edi
ret 4