Function at 0x42f865
Capabilities:
Get common file path
Get hostname
Resolve dns

Disassembly:
mov eax, 0x53a3e3
call fcn.004f8378
mov eax, 0x1328
call fcn.004f86e0
push ebx
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0042f772
pop ecx
mov eax, dword [ebp - 0x18]
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [eax - 8], ebx
je 0x42fa9f
push edi
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x4f]
mov byte [ebp - 0x50], bl
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x2ec]
push 0x100
push eax
call sub.WSOCK32.dll_gethostname
test eax, eax
jne 0x42f8ff
lea eax, [ebp - 0x2ec]
push eax
call sub.WSOCK32.dll_gethostbyname
cmp eax, ebx
je 0x42f8ff
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx]
cmp ecx, ebx
je 0x42f8e5
movsx eax, word [eax + 0xa]
push eax
lea eax, [ebp - 0x5c]
push ecx
push eax
call fcn.004f87d0
add esp, 0xc
push dword [ebp - 0x5c]
call sub.WSOCK32.dll_inet_ntoa
push eax
lea eax, [ebp - 0x50]
push 0x590b1c
push eax
call fcn.004f9c39
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
call fcn.0050f9f9
lea eax, [ebp - 0x1c]
push str._Y_m_d
push eax
lea ecx, [ebp - 0x20]
call fcn.0050fa92
push dword [eax]
call fcn.004f92dd
pop ecx
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1c]
call fcn.00513730
mov eax, dword [0x59fe84]
mov dword [ebp - 0x14], eax
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x1eb]
mov byte [ebp - 0x1ec], bl
mov byte [ebp - 4], 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1ec]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x1ec]
lea ecx, [ebp - 0x14]
push eax
call fcn.005138b9
lea eax, [ebp - 0x1c]
push 1
push eax
lea ecx, [ebp - 0x14]
call fcn.0050f1ed
mov eax, dword [eax]
mov esi, 0x591374
push esi
push eax
call fcn.004f8b05
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x1c]
setne byte [ebp - 0xd]
call fcn.00513730
cmp byte [ebp - 0xd], bl
pop edi
je 0x42f9aa
push esi
lea ecx, [ebp - 0x14]
call fcn.00513b0c
lea ecx, [ebp - 0x34]
call fcn.005191bd
push ebx
push 0x1041
push dword [ebp - 0x18]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.005192cf
test eax, eax
je 0x42fa88
mov esi, 0x88
lea eax, [ebp - 0xe8]
push esi
push ebx
push eax
call fcn.004f8540
call fcn.0042f65c
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x24]
push 0x62
mov dword [ebp - 0x66], eax
push dword [ebp - 0x14]
lea eax, [ebp - 0xe4]
push eax
call fcn.004f97c0
lea eax, [ebp - 0x50]
push 0x19
push eax
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 0x82], bl
call fcn.004f97c0
add esp, 0x24
lea ecx, [ebp - 0x1334]
mov byte [ebp - 0x67], bl
push 0xc
push str.l2wl_verify0
call fcn.00405f83
lea eax, [ebp - 0xe8]
push esi
push eax
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 3
call fcn.004060a5
lea eax, [ebp - 0xe8]
push esi
push eax
lea ecx, [ebp - 0x34]
call fcn.00519426
lea ecx, [ebp - 0x34]
call fcn.005194ea
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00519212
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00513730
push 1
pop eax
jmp 0x42faad
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00519212
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00513730
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret