Function at 0x10005a78
Capabilities:
Get common file path
Resolve dns

Disassembly:
push ebp
lea ebp, [esp - 0x1288]
mov eax, 0x13a0
call fcn.10043e70
mov eax, dword [0x1007ef24]
xor eax, ebp
mov dword [ebp + 0x1284], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0x1290]
push str.SpeedNet
push 0x80
xor ebx, ebx
push ebx
push 4
push ebx
push 0xffffffffffffffff
mov dword [ebp + 0x80], ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov esi, eax
cmp esi, ebx
je 0x10005ae3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
push esi
je 0x10005add
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10005cf6
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0xfff
push esi
lea eax, [ebp + 0x85]
push ebx
push eax
mov byte [ebp + 0x84], bl
call fcn.10042a90
push 0x1006429c
push edi
call fcn.10043620
mov edi, eax
add esp, 0x14
cmp edi, ebx
je 0x10005cf6
inc edi
inc edi
push 0x10063ef0
push edi
call fcn.10043620
cmp eax, ebx
pop ecx
pop ecx
je 0x10005cf6
sub eax, edi
cmp eax, esi
jg 0x10005cf6
push eax
lea eax, [ebp + 0x84]
push edi
push eax
call fcn.10043ac0
lea eax, [ebp + 0x84]
push str..sogou.
push eax
call fcn.10043620
add esp, 0x14
test eax, eax
jne 0x10005cf6
mov esi, dword [ebp + 0x80]
add esi, 0x231
cmp byte [esi], bl
je 0x10005cf6
push 0x1ff
lea eax, [ebp + 0x1085]
push ebx
push eax
mov byte [ebp + 0x1084], bl
call fcn.10042a90
lea edx, [ebp + 0x1084]
add esp, 0xc
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x10005b98
lea edi, [ebp + 0x1084]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10005ba9
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, str.dialer.dll
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp + 0x1084]
push eax
movsb byte es:[edi], byte [esi]
call ebx
test eax, eax
mov dword [ebp + 0x7c], eax
jne 0x10005c29
mov esi, 0x200
push esi
push eax
lea eax, [ebp + 0x1084]
push eax
call fcn.10042a90
add esp, 0xc
push esi
lea eax, [ebp + 0x1084]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp byte [ebp + 0x1084], 0
je 0x10005cf6
lea edi, [ebp + 0x1084]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10005c09
mov esi, 0x10064278
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1084]
push eax
movsd dword es:[edi], dword [esi]
call ebx
test eax, eax
mov dword [ebp + 0x7c], eax
je 0x10005c41
push str.dlrremoveorgrtrentry
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [ebp + 0x80], eax
jne 0x10005c55
push str._dlr_remove_org_rtrentry__YAHKK_Z
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp + 0x80], eax
xor edi, edi
push 0x18c
lea eax, [ebp - 0x114]
push edi
push eax
mov dword [ebp - 0x118], edi
call fcn.10042a90
add esp, 0xc
lea eax, [ebp + 0x84]
push eax
mov dword [ebp + 0x78], edi
call dword [sym.imp.WS2_32.dll_gethostbyname]
cmp eax, edi
je 0x10005cf6
cmp word [eax + 8], 2
jne 0x10005cc0
mov esi, dword [eax + 0xc]
mov ecx, dword [esi]
cmp ecx, edi
je 0x10005cc0
movsx edi, word [eax + 0xa]
lea ebx, [ebp - 0x118]
push edi
push ecx
push ebx
call fcn.10043ac0
add esp, 0xc
inc dword [ebp + 0x78]
add ebx, 4
cmp dword [ebp + 0x78], 0x64
jge 0x10005cc0
add esi, 4
mov ecx, dword [esi]
test ecx, ecx
jne 0x10005ca0
xor edi, edi
cmp dword [ebp + 0x80], edi
je 0x10005ce8
xor esi, esi
cmp dword [ebp + 0x78], edi
jle 0x10005ce8
push 0xffffffffffffffff
push dword [ebp + esi*4 - 0x118]
call dword [ebp + 0x80]
inc esi
cmp esi, dword [ebp + 0x78]
pop ecx
pop ecx
jl 0x10005cd1
cmp dword [ebp + 0x7c], edi
je 0x10005cf6
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp + 0x1284]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10042977
add ebp, 0x1288
leave
ret 4