Function at 0x4d6e33
Capabilities:
Get proxy
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512f39
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x22c
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
mov dword [ebp - 0x214], 0
push 0x5b78a4
push str._sSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x594fd4
push 0x44
push str.1001
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x594fe0
push 0x44
push str.1004
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b78a4
push 0x594fec
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.AutoConfigURL
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.GlobalUserOffline
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.MinLevel
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push 0x59505c
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.Security_RunActiveXControls
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.Security_RunScripts
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push str.High
push 0x54
push str.Trust_Warning_Level
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b78a4
push str._sSoftwareMicrosoftInternet_ExplorerSecurity
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.Query
push 0x54
push str.Safety_Warning_Level
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push str.Medium
push 0x54
push str.Sending_Security
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x595130
push 0x54
push str.Viewing_Security
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b78a4
push 0x595148
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x595188
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x218]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x228], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x228]
push edx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x218]
call sub.MFC42.DLL_CString::CString
push str.DWORD:_0x00000001
lea eax, [ebp - 0x10]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4d71d4
push 0x5951a8
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x21c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x22c], eax
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x230], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x230]
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x21c]
call sub.MFC42.DLL_CString::CString
push 0x5b79a4
push 0x5951b4
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
push str.Detectado_Proxy_Activo:__s_n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
cmp dword [0x5b851c], 0
jne 0x4d71d4
mov eax, dword [ebp - 0x10]
push eax
push str.Detectado_Proxy_Activo:__s_n_n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 4
lea ecx, [ebp - 0x210]
push ecx
push 0x5b6504
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x4d71d4
push 0x5b78a4
push 0x595210
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.ProxyServer
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push 0x59525c
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push 0x59526c
push 0x44
push str.ProxyEnable
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
mov edx, dword [ebp - 0x10]
push edx
push str.Eliminado_Proxy:__s_n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b78a4
push str._sSoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5952d4
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x220]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x238], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x238]
push edx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::MakeUpper
push str.HOT_SEARCHES.COM
lea ecx, [ebp - 0x10]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d727c
push str.LENDER_SEARCH.COM
lea ecx, [ebp - 0x10]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4d7293
push str.ProxyOverride
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
push 0x5b78a4
push 0x59531c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
push 0x20119
push 0
push 0x5b6504
push 0x80000003
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x4d72e1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
jmp 0x4d73d8
cmp dword [0x5b851c], 0
jne 0x4d73bc
push 0x800
push 0x5b6504
push 0
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x4d73bc
push 4
push 0x59536c
push str.Revise_la_Lista_de_Sitios_de_Confianza_del_IExplorer__n_Herramientas___Opciones_de_Internet___Seguridad__ny_elimine_aquellos_sitios_que_no_sean_de_su_confianza_no_tenga_dudas._n_n
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x4d73bc
push 0x5b78a4
push str._sSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZoneMapDomains
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
push 0x5b8e40
push 0x54
push 0x5954b4
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
push 0x5b78a4
push str._sSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZoneMapRanges
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
push 0x5b8e44
push 0x54
push 0x595508
push 0x5b6504
push 0x80000003
call fcn.00402bb9
add esp, 0x14
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret