Function at 0x406d20
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x20a8
call fcn.0041f420
mov eax, dword [0x437960]
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
mov esi, ecx
jne 0x40705f
push ebx
push str.Enabled
push str.softwareGator.comGatordynProxy
push reloc.WSOCK32.dll_bind
mov dword [0x437960], 1
xor ebp, ebp
call fcn.00410550
add esp, 0x10
lea eax, [esp + 0xc]
mov ecx, esi
mov dword [0x437964], ebx
push eax
mov dword [esp + 0x10], ebx
call fcn.00406c50
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x40705f
push edi
push eax
call fcn.00429866
mov ecx, dword [esp + 0x14]
push str.iexplore.exe
push ecx
call fcn.0041e940
add esp, 0xc
test eax, eax
jne 0x406ee6
mov edx, dword [esp + 0x10]
push str.aol.exe
push edx
call fcn.0041e940
add esp, 8
test eax, eax
jne 0x406ee6
mov eax, dword [esp + 0x10]
push str.netscape.exe
push eax
call fcn.0041e940
add esp, 8
test eax, eax
je 0x406fde
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.Netscape
push 0x437968
call edi
call fcn.00407150
mov esi, eax
cmp esi, ebx
je 0x406fde
lea ecx, [esp + 0x6c]
push esi
push ecx
call edi
push esi
call fcn.0041e9c0
add esp, 4
lea edx, [esp + 0x6c]
push str.prefs.js
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x180
lea eax, [esp + 0x70]
push ebx
push eax
call fcn.0041fa55
mov esi, eax
add esp, 0xc
cmp esi, ebx
jl 0x406fde
mov ecx, 0x7d0
xor eax, eax
lea edi, [esp + 0x174]
push 0x1f40
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x178]
push ecx
push esi
stosb byte es:[edi], al
call fcn.0041f817
add esp, 0xc
test eax, eax
jle 0x406edb
lea edx, [esp + 0x174]
push edx
call fcn.00429866
lea eax, [esp + 0x178]
push str.network.proxy.type_
push eax
call fcn.00407070
add esp, 0xc
cmp eax, 1
jne 0x406edb
lea ecx, [esp + 0x1c]
push 0x50
push ecx
lea edx, [esp + 0x17c]
push str.network.proxy.http_
push edx
call fcn.004070d0
add esp, 0x10
test eax, eax
je 0x406edb
lea eax, [esp + 0x1c]
push 0x50
push eax
push 0x4379b8
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea ecx, [esp + 0x174]
push str.network.proxy.http_port_
push ecx
call fcn.00407070
add esp, 8
mov dword [0x437a08], eax
mov ebp, 1
push esi
call fcn.0041f737
jmp 0x406fdb
push str.Microsoft_IE
push 0x437968
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x18]
push ebx
push edx
push str.ProxyEnable
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
mov dword [esp + 0x2c], ebx
call fcn.00410440
mov eax, dword [esp + 0x2c]
add esp, 0x14
cmp eax, ebx
je 0x406fde
lea eax, [esp + 0x14]
push ebx
push eax
push str.ProxyServer
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
mov dword [esp + 0x28], ebx
call fcn.004102c0
mov esi, dword [esp + 0x28]
add esp, 0x14
cmp esi, ebx
je 0x406fde
push esi
call fcn.00429866
push str.http
push esi
call fcn.0041e940
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x406f8e
push str.http
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add edi, eax
cmp byte [edi], bl
je 0x406fd1
push 0x3b
push edi
call fcn.0041e9e0
add esp, 8
cmp eax, ebx
je 0x406f8c
mov byte [eax], bl
mov esi, edi
cmp esi, ebx
je 0x406fd1
push 0x3a
push esi
call fcn.0041e9e0
add esp, 8
cmp eax, ebx
je 0x406fb4
mov byte [eax], bl
inc eax
push eax
call fcn.0041f689
add esp, 4
mov dword [0x437a08], eax
jmp 0x406fbe
mov dword [0x437a08], 0x50
push 0x50
push esi
push 0x4379b8
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ebp, 1
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0041e9c0
add esp, 4
mov edx, dword [esp + 0x10]
push edx
call fcn.0041e9c0
add esp, 4
cmp ebp, ebx
pop edi
je 0x40705f
push 1
push str.Enabled
push str.softwareGator.comGatordynProxy
push reloc.WSOCK32.dll_bind
mov dword [0x437964], 1
call fcn.00410550
push 0x437968
push str.Browser
push str.softwareGator.comGatordynProxy
push reloc.WSOCK32.dll_bind
call fcn.004104d0
push 0x4379b8
push str.Server
push str.softwareGator.comGatordynProxy
push reloc.WSOCK32.dll_bind
call fcn.004104d0
mov eax, dword [0x437a08]
push eax
push str.Port
push str.softwareGator.comGatordynProxy
push reloc.WSOCK32.dll_bind
call fcn.00410550
add esp, 0x40
pop esi
pop ebp
pop ebx
add esp, 0x20a8
ret