Function at 0x4061c5
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4697ef
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x48e190]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x48e190]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
push dword [ebp + 8]
xor ebx, ebx
lea eax, [esp + 0x28]
push eax
mov edi, ecx
mov ecx, dword [edi + 0x164]
push ebx
push str.RobloxProxy.zip
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x3c], bl
call fcn.0043ed7d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
cmp byte [ebp + 8], bl
je 0x40659a
mov al, byte [edi + 0x59]
cmp al, bl
jne 0x406299
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.SoftwareClasses
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x18]
mov dword [esp + 0xb8], ebx
call fcn.0040c9e2
test eax, eax
jl 0x406288
lea eax, [edi + 0x1ac]
push eax
push 1
push dword [esp + 0x18]
lea ecx, [edi + 0x434]
call fcn.0042991a
or dword [esp + 0xb0], 0xffffffff
lea esi, [esp + 0x10]
call fcn.0040ca20
mov eax, dword [edi]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
lea esi, [edi + 0x1ac]
call dword [eax + 0xa0]
lea eax, [edi + 0x168]
push eax
lea ecx, [edi + 0x434]
mov edx, esi
call fcn.00428e9f
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
xor ecx, ecx
mov dword [esp + 0xb0], 1
mov al, byte [edi + 0x59]
cmp al, bl
sete cl
push str.Failed_to_create_64_bits_HKSoftwareClasses
push str.SoftwareClasses
mov eax, 0x2011f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x3c]
call fcn.0040c933
push eax
call fcn.00429c54
pop ecx
pop ecx
mov eax, str.HKEY_CURRENT_USER
cmp byte [edi + 0x59], bl
jne 0x40631a
mov eax, str.HKEY_LOCAL_MACHINE
push eax
push str.classesKey64___sSoftwareClasses
call fcn.00408ffd
mov eax, dword [edi]
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
call dword [eax + 0xa0]
lea eax, [esp + 0x4c]
push eax
lea ecx, [edi + 0x568]
mov edx, esi
call fcn.00428e9f
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.76D50904_6780_4c8b_8986_1A7EE0B1716D
push str.SoftwareMicrosoftWindowsCurrentVersionExtStats_siexplore
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.0042c90a
pop ecx
pop ecx
mov byte [esp + 0xb0], 3
cmp dword [eax + 0x18], 8
jb 0x406383
mov eax, dword [eax + 4]
jmp 0x406386
add eax, 4
push str.Failed_to_create_key_for_iexplorer_stats
push eax
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x1c]
call fcn.0040c933
push eax
call fcn.00429c54
pop ecx
pop ecx
push ebx
push 1
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.0040970f
push 4
pop eax
push eax
lea ecx, [esp + 0x20]
push ecx
push eax
push ebx
push str.Flags
push dword [esp + 0x24]
mov dword [esp + 0x34], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ebx
push ebx
push str.AllowedDomains
push dword [esp + 0x1c]
lea eax, [esp + 0x34]
push eax
call fcn.00429e36
add esp, 0x14
push ebx
push ebx
push str.bloxx16.se
mov byte [esp + 0xbc], 4
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.00429e36
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040ca20
push ebx
push ebx
push str.robloxlabs.com
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.00429e36
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040ca20
lea esi, [esp + 0x24]
call fcn.0040ca20
lea esi, [esp + 0x10]
call fcn.0040ca20
lea eax, [esp + 0x54]
call fcn.00427ec6
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 5
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xa0]
push str.RobloxProxy.dll
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0xbc], 6
call fcn.0040b48f
add esp, 0xc
mov byte [esp + 0xb0], 8
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.0040970f
lea eax, [esp + 0x84]
lea ecx, [esp + 0x54]
call fcn.00427f8d
test eax, eax
je 0x406579
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00428367
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 0xa
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xb0]
cmp dword [eax + 0x18], 8
jb 0x4064f0
mov ecx, dword [eax + 4]
jmp 0x4064f3
lea ecx, [eax + 4]
mov al, byte [edi + 0x59]
push ecx
xor ecx, ecx
cmp al, bl
sete cl
mov eax, 0x2001f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x18]
call fcn.0040c9e2
test eax, eax
setge byte [esp + 0x1b]
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x40]
call fcn.0040970f
cmp byte [esp + 0x1b], bl
je 0x406565
lea edx, [esp + 0x68]
lea ecx, [esp + 0x38]
call fcn.0042c5ed
cmp dword [eax + 0x18], 8
jb 0x406546
mov eax, dword [eax + 4]
jmp 0x406549
add eax, 4
push edi
push eax
push str.Plug_in_version
lea eax, [esp + 0x1c]
push eax
call fcn.0040c8fd
push ebx
push edi
lea esi, [esp + 0x40]
call fcn.0040970f
lea esi, [esp + 0x10]
call fcn.0040ca20
push ebx
push edi
lea ecx, [esp + 0x70]
call fcn.00409477
push ebx
push 1
lea esi, [esp + 0x8c]
call fcn.0040970f
lea esi, [esp + 0x54]
call fcn.00427ee8
lea esi, [esp + 0x30]
call fcn.0040ca20
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.0044763d
mov esp, ebp
pop ebp
ret 4