Function at 0x4094b7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x20b4
call fcn.0043cec0
push ebx
xor ebx, ebx
cmp dword [0x481190], ebx
push esi
push edi
mov dword [ebp - 8], ecx
jne 0x4097da
push ebx
mov edi, str.softwareGator.comGatordynProxy
push str.Enabled
mov esi, reloc.WSOCK32.dll_bind
push edi
push esi
mov dword [0x481190], 1
mov dword [ebp - 0x18], ebx
call fcn.0042a250
mov ecx, dword [ebp - 8]
add esp, 0x10
lea eax, [ebp - 4]
mov dword [0x481194], ebx
push eax
mov dword [ebp - 4], ebx
call fcn.00409426
cmp dword [ebp - 4], ebx
je 0x4097da
push dword [ebp - 4]
call fcn.0044a722
mov dword [esp], str.iexplore.exe
push dword [ebp - 4]
call fcn.0043bb10
pop ecx
test eax, eax
pop ecx
jne 0x409684
push str.aol.exe
push dword [ebp - 4]
call fcn.0043bb10
pop ecx
test eax, eax
pop ecx
jne 0x409684
push str.netscape.exe
push dword [ebp - 4]
call fcn.0043bb10
pop ecx
test eax, eax
pop ecx
je 0x409780
push str.Netscape
push 0x481198
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.004098a6
cmp eax, ebx
mov dword [ebp - 8], eax
je 0x409780
push eax
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 8]
call fcn.00450113
lea eax, [ebp - 0x170]
mov dword [esp], str.prefs.js
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x180
lea eax, [ebp - 0x170]
push ebx
push eax
call fcn.0043cbcd
add esp, 0xc
cmp eax, ebx
mov dword [ebp - 0xc], eax
jl 0x409780
push 0x1f41
lea eax, [ebp - 0x20b4]
push ebx
push eax
call fcn.0043bed0
lea eax, [ebp - 0x20b4]
push 0x1f40
push eax
push dword [ebp - 0xc]
call fcn.0043c98f
add esp, 0x18
test eax, eax
jle 0x409677
lea eax, [ebp - 0x20b4]
push eax
call fcn.0044a722
lea eax, [ebp - 0x20b4]
mov dword [esp], str.network.proxy.type_
push eax
call fcn.004097df
pop ecx
cmp eax, 1
pop ecx
jne 0x409677
lea eax, [ebp - 0x68]
push 0x50
push eax
lea eax, [ebp - 0x20b4]
push str.network.proxy.http_
push eax
call fcn.00409835
add esp, 0x10
test eax, eax
je 0x409677
lea eax, [ebp - 0x68]
push 0x50
push eax
push 0x4811e8
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp - 0x20b4]
push str.network.proxy.http_port_
push eax
call fcn.004097df
pop ecx
mov dword [0x481238], eax
pop ecx
mov dword [ebp - 0x18], 1
push dword [ebp - 0xc]
call fcn.0043c8af
jmp 0x40977f
push str.Microsoft_IE
push 0x481198
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 8]
mov dword [ebp - 8], ebx
push eax
push str.ProxyEnable
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
call fcn.0042a020
add esp, 0x10
cmp dword [ebp - 8], ebx
je 0x409780
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], ebx
push eax
push str.ProxyServer
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
call fcn.00429ef0
mov eax, dword [ebp - 0xc]
add esp, 0x10
cmp eax, ebx
je 0x409780
push eax
mov dword [ebp - 0x10], eax
call fcn.0044a722
mov dword [esp], str.http
push dword [ebp - 0x10]
call fcn.0043bb10
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x14], eax
je 0x409730
push str.http
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp byte [eax], bl
je 0x409777
push 0x3b
push eax
call fcn.0043c2e0
pop ecx
cmp eax, ebx
pop ecx
je 0x40972a
mov byte [eax], bl
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
je 0x409777
push 0x3a
push dword [ebp - 0x10]
call fcn.0043c2e0
pop ecx
cmp eax, ebx
pop ecx
je 0x409756
mov byte [eax], bl
inc eax
push eax
call fcn.0043c64b
pop ecx
mov dword [0x481238], eax
jmp 0x409760
mov dword [0x481238], 0x50
push 0x50
push dword [ebp - 0x10]
push 0x4811e8
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov dword [ebp - 0x18], 1
push dword [ebp - 0xc]
call fcn.00450113
pop ecx
push dword [ebp - 4]
call fcn.00450113
cmp dword [ebp - 0x18], ebx
pop ecx
je 0x4097da
push 1
pop eax
push eax
push str.Enabled
push edi
push esi
mov dword [0x481194], eax
call fcn.0042a250
push 0x481198
push str.Browser
push edi
push esi
call fcn.0042a1d0
push 0x4811e8
push str.Server
push edi
push esi
call fcn.0042a1d0
push dword [0x481238]
push str.Port
push edi
push esi
call fcn.0042a250
add esp, 0x40
pop edi
pop esi
pop ebx
leave
ret