Function at 0x415010
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x20a8
call fcn.0041a850
mov eax, dword [0x4343f4]
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
mov esi, ecx
jne 0x41534f
push ebx
push str.Enabled
push str.softwareGator.comGInternetProxy
push reloc.WSOCK32.dll_bind
mov dword [0x4343f4], 1
xor ebp, ebp
call fcn.0040adc0
add esp, 0x10
lea eax, [esp + 0xc]
mov ecx, esi
mov dword [0x4343f8], ebx
push eax
mov dword [esp + 0x10], ebx
call fcn.00414f40
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x41534f
push edi
push eax
call fcn.00425956
mov ecx, dword [esp + 0x14]
push str.iexplore.exe
push ecx
call fcn.0041ae30
add esp, 0xc
test eax, eax
jne 0x4151d6
mov edx, dword [esp + 0x10]
push str.aol.exe
push edx
call fcn.0041ae30
add esp, 8
test eax, eax
jne 0x4151d6
mov eax, dword [esp + 0x10]
push str.netscape.exe
push eax
call fcn.0041ae30
add esp, 8
test eax, eax
je 0x4152ce
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.Netscape
push 0x4343fc
call edi
call fcn.00415440
mov esi, eax
cmp esi, ebx
je 0x4152ce
lea ecx, [esp + 0x6c]
push esi
push ecx
call edi
push esi
call fcn.0041a842
add esp, 4
lea edx, [esp + 0x6c]
push str.prefs.js
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x180
lea eax, [esp + 0x70]
push ebx
push eax
call fcn.0041c1d4
mov esi, eax
add esp, 0xc
cmp esi, ebx
jl 0x4152ce
mov ecx, 0x7d0
xor eax, eax
lea edi, [esp + 0x174]
push 0x1f40
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x178]
push ecx
push esi
stosb byte es:[edi], al
call fcn.0041bf96
add esp, 0xc
test eax, eax
jle 0x4151cb
lea edx, [esp + 0x174]
push edx
call fcn.00425956
lea eax, [esp + 0x178]
push str.network.proxy.type_
push eax
call fcn.00415360
add esp, 0xc
cmp eax, 1
jne 0x4151cb
lea ecx, [esp + 0x1c]
push 0x50
push ecx
lea edx, [esp + 0x17c]
push str.network.proxy.http_
push edx
call fcn.004153c0
add esp, 0x10
test eax, eax
je 0x4151cb
lea eax, [esp + 0x1c]
push 0x50
push eax
push 0x43444c
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea ecx, [esp + 0x174]
push str.network.proxy.http_port_
push ecx
call fcn.00415360
add esp, 8
mov dword [0x43449c], eax
mov ebp, 1
push esi
call fcn.0041beb6
jmp 0x4152cb
push str.Microsoft_IE
push 0x4343fc
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x18]
push ebx
push edx
push str.ProxyEnable
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
mov dword [esp + 0x2c], ebx
call fcn.0040ab80
mov eax, dword [esp + 0x2c]
add esp, 0x14
cmp eax, ebx
je 0x4152ce
lea eax, [esp + 0x14]
push ebx
push eax
push str.ProxyServer
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
mov dword [esp + 0x28], ebx
call fcn.0040a980
mov esi, dword [esp + 0x28]
add esp, 0x14
cmp esi, ebx
je 0x4152ce
push esi
call fcn.00425956
push str.http
push esi
call fcn.0041ae30
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x41527e
push str.http
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add edi, eax
cmp byte [edi], bl
je 0x4152c1
push 0x3b
push edi
call fcn.0041b0a0
add esp, 8
cmp eax, ebx
je 0x41527c
mov byte [eax], bl
mov esi, edi
cmp esi, ebx
je 0x4152c1
push 0x3a
push esi
call fcn.0041b0a0
add esp, 8
cmp eax, ebx
je 0x4152a4
mov byte [eax], bl
inc eax
push eax
call fcn.0041a90a
add esp, 4
mov dword [0x43449c], eax
jmp 0x4152ae
mov dword [0x43449c], 0x50
push 0x50
push esi
push 0x43444c
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ebp, 1
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0041a842
add esp, 4
mov edx, dword [esp + 0x10]
push edx
call fcn.0041a842
add esp, 4
cmp ebp, ebx
pop edi
je 0x41534f
push 1
push str.Enabled
push str.softwareGator.comGInternetProxy
push reloc.WSOCK32.dll_bind
mov dword [0x4343f8], 1
call fcn.0040adc0
push 0x4343fc
push str.Browser
push str.softwareGator.comGInternetProxy
push reloc.WSOCK32.dll_bind
call fcn.0040ad40
push 0x43444c
push str.Server
push str.softwareGator.comGInternetProxy
push reloc.WSOCK32.dll_bind
call fcn.0040ad40
mov eax, dword [0x43449c]
push eax
push str.Port
push str.softwareGator.comGInternetProxy
push reloc.WSOCK32.dll_bind
call fcn.0040adc0
add esp, 0x40
pop esi
pop ebp
pop ebx
add esp, 0x20a8
ret