Function at 0x402280
Capabilities:
Check os version
Get common file path
Set socket configuration

Disassembly:
sub esp, 0x3c0
mov eax, dword [0x42a390]
xor eax, esp
mov dword [esp + 0x3bc], eax
mov eax, dword [esp + 0x3c4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c8]
push edi
mov dword [esp + 0xc], eax
mov dword [eax], 0
xor eax, eax
mov ecx, 0x25
lea edi, [esp + 0x14]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x4022dd
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4022f5
xor eax, eax
pop edi
mov ecx, dword [esp + 0x3bc]
xor ecx, esp
call fcn.0041413a
add esp, 0x3c0
ret
push 0x208
lea edx, [esp + 0x1bc]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp dword [esp + 0x24], 1
jne 0x40231e
push str.hosts
lea eax, [esp + eax + 0x1bc]
push eax
jmp 0x40232b
push str._system32driversetchosts
lea ecx, [esp + eax + 0x1bc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
lea edx, [esp + 0x1bc]
push 0x4244c0
push edx
call fcn.0041502a
mov ebx, eax
add esp, 8
test ebx, ebx
mov dword [esp + 0xc], ebx
jne 0x402368
pop ebx
pop edi
mov ecx, dword [esp + 0x3bc]
xor ecx, esp
call fcn.0041413a
add esp, 0x3c0
ret
push ebp
push esi
mov esi, 0x400
push esi
mov dword [esp + 0x14], esi
call fcn.00414fbc
add esp, 4
mov ebp, eax
test ebp, ebp
push ebx
jne 0x402392
call fcn.00414ec4
add esp, 4
xor eax, eax
jmp 0x402587
xor eax, eax
push 0x400
mov ecx, 0x100
mov edi, ebp
push ebp
rep stosd dword es:[edi], eax
call fcn.00414df2
add esp, 0xc
test eax, eax
je 0x402573
mov al, byte [esi + ebp - 2]
xor ebx, ebx
test al, al
je 0x40241c
jmp 0x4023c3
mov esi, dword [esp + 0x10]
cmp al, 0xa
je 0x40241c
add esi, 0x400
push esi
push ebp
mov dword [esp + 0x18], esi
call fcn.00414c40
add esp, 8
test eax, eax
je 0x40241c
mov ebp, eax
inc ebx
sub eax, ebx
lea esi, [eax + esi - 0x400]
xor eax, eax
mov ecx, 0x100
lea edi, [esi + ebx]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
push eax
push 0x400
push esi
call fcn.00414df2
add esp, 0xc
test eax, eax
je 0x402418
mov al, byte [esi + 0x3fe]
test al, al
jne 0x4023bf
mov esi, dword [esp + 0x10]
cmp byte [ebp], 0x23
je 0x402558
push 0x4244bc
push ebp
call fcn.00414c00
add esp, 8
test eax, eax
je 0x40243b
mov byte [eax], 0
movsx ecx, byte [ebp]
push ecx
mov edi, ebp
call fcn.00414a45
add esp, 4
test eax, eax
je 0x402462
mov edi, edi
movsx edx, byte [edi + 1]
inc edi
push edx
call fcn.00414a45
add esp, 4
test eax, eax
jne 0x402450
push 0x4244b8
push edi
call fcn.00414c00
mov esi, eax
add esp, 8
test esi, esi
je 0x40247a
mov byte [esi], 0
inc esi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push edi
call ebx
test eax, eax
jle 0x402554
cmp eax, 0xf
jg 0x402554
push edi
call dword [sym.imp.WSOCK32.dll_inet_addr]
cmp eax, 0xffffffff
je 0x402554
test eax, eax
jne 0x4024c0
push 0xf
push str.255.255.255.255
push edi
call fcn.004148e0
add esp, 0xc
test eax, eax
jne 0x402554
push edi
lea eax, [esp + 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
test esi, esi
je 0x402554
mov al, byte [esi]
test al, al
je 0x402554
movsx ecx, al
push ecx
call fcn.00414a45
add esp, 4
test eax, eax
je 0x402502
lea ecx, [ecx]
movsx edx, byte [esi + 1]
inc esi
push edx
call fcn.00414a45
add esp, 4
test eax, eax
jne 0x4024f0
push 0x4244b8
push esi
mov edi, esi
call fcn.00414c00
mov esi, eax
add esp, 8
test esi, esi
je 0x40251c
mov byte [esi], 0
inc esi
push edi
call ebx
test eax, eax
jle 0x402550
cmp eax, 0xff
jg 0x402550
push edi
lea eax, [esp + 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0xb4]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00402240
mov eax, dword [esp + 0x18]
inc dword [eax]
test esi, esi
jne 0x4024d7
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push edx
push esi
push ebp
call fcn.00414df2
add esp, 0xc
test eax, eax
jne 0x4023b3
mov ebx, dword [esp + 0x14]
push ebp
call fcn.0041414d
push ebx
call fcn.00414ec4
add esp, 8
mov eax, 1
mov ecx, dword [esp + 0x3cc]
pop esi
pop ebp
pop ebx
pop edi
xor ecx, esp
call fcn.0041413a
add esp, 0x3c0
ret