Function at 0x43e067
Capabilities:
Get proxy
Set registry value

Disassembly:
mov eax, 0x4fc2f4
call fcn.004c13fc
sub esp, 0x18
push ebx
push esi
mov esi, ecx
push 1
call fcn.004d96d8
lea eax, [ebp - 0x14]
xor ebx, ebx
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push reloc.WSOCK32.dll_accept
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x43e384
cmp dword [esi + 0x8c], ebx
push 4
sete al
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 4
push ebx
push str.ProxyEnable
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp dword [esi + 0x8c], ebx
jne 0x43e34d
mov eax, dword [0x542d10]
mov dword [ebp - 0x10], eax
cmp dword [esi + 0x5c], ebx
mov dword [ebp - 4], ebx
je 0x43e0f0
push dword [esi + 0x6c]
lea eax, [ebp - 0x10]
push dword [esi + 0x80]
push str._s:_s
push eax
call fcn.004d261f
add esp, 0x10
jmp 0x43e31e
mov ecx, dword [esi + 0x80]
lea eax, [esi + 0x80]
cmp dword [ecx - 8], ebx
je 0x43e162
push eax
lea eax, [ebp - 0x24]
push 0x53ac18
push eax
call fcn.004db11b
push 0x3a
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 1
push eax
call fcn.004d1c84
lea ecx, [esi + 0x6c]
mov byte [ebp - 4], 2
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004db041
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.004db22a
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.004dae12
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.004dae12
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.004dae12
mov ecx, dword [esi + 0x84]
lea eax, [esi + 0x84]
cmp dword [ecx - 8], ebx
je 0x43e1d4
push eax
lea eax, [ebp - 0x1c]
push str._https
push eax
call fcn.004db11b
push 0x3a
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 4
push eax
call fcn.004d1c84
lea ecx, [esi + 0x70]
mov byte [ebp - 4], 5
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004db041
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.004db22a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.004dae12
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.004dae12
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.004dae12
mov ecx, dword [esi + 0x78]
lea eax, [esi + 0x78]
cmp dword [ecx - 8], ebx
je 0x43e240
push eax
lea eax, [ebp - 0x1c]
push str._ftp
push eax
call fcn.004db11b
push 0x3a
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 7
push eax
call fcn.004d1c84
lea ecx, [esi + 0x64]
mov byte [ebp - 4], 8
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004db041
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.004db22a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.004dae12
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.004dae12
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.004dae12
mov ecx, dword [esi + 0x7c]
lea eax, [esi + 0x7c]
cmp dword [ecx - 8], ebx
je 0x43e2ac
push eax
lea eax, [ebp - 0x1c]
push str._gopher
push eax
call fcn.004db11b
push 0x3a
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xa
push eax
call fcn.004d1c84
lea ecx, [esi + 0x68]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004db041
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call fcn.004db22a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
call fcn.004dae12
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.004dae12
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.004dae12
mov ecx, dword [esi + 0x88]
lea eax, [esi + 0x88]
cmp dword [ecx - 8], ebx
je 0x43e31e
push eax
lea eax, [ebp - 0x1c]
push str._socks
push eax
call fcn.004db11b
push 0x3a
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xd
push eax
call fcn.004d1c84
lea ecx, [esi + 0x74]
mov byte [ebp - 4], 0xe
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004db041
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xf
call fcn.004db22a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe
call fcn.004dae12
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.004dae12
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.004dae12
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
mov eax, dword [eax - 8]
inc eax
push eax
push ebx
call fcn.004db242
push eax
push 1
push ebx
push str.ProxyServer
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004dae12
mov eax, dword [esi + 0x60]
lea ecx, [esi + 0x60]
mov eax, dword [eax - 8]
inc eax
push eax
push ebx
call fcn.004db242
push eax
push 1
push ebx
push str.ProxyOverride
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
push ebx
push 0x27
push ebx
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret