Function at 0x4061e3
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x469e34
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x48e190]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x48e190]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
push dword [ebp + 8]
xor ebx, ebx
lea eax, [esp + 0x28]
push eax
mov edi, ecx
mov ecx, dword [edi + 0x164]
push ebx
push str.RobloxProxy.zip
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x3c], bl
call fcn.0043f311
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
cmp byte [ebp + 8], bl
je 0x4065b8
mov al, byte [edi + 0x59]
cmp al, bl
jne 0x4062b7
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.SoftwareClasses
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x18]
mov dword [esp + 0xb8], ebx
call fcn.0040cb4d
test eax, eax
jl 0x4062a6
lea eax, [edi + 0x1ac]
push eax
push 1
push dword [esp + 0x18]
lea ecx, [edi + 0x434]
call fcn.00429a6a
or dword [esp + 0xb0], 0xffffffff
lea esi, [esp + 0x10]
call fcn.0040cb8b
mov eax, dword [edi]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
lea esi, [edi + 0x1ac]
call dword [eax + 0xa0]
lea eax, [edi + 0x168]
push eax
lea ecx, [edi + 0x434]
mov edx, esi
call fcn.00428fef
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
xor ecx, ecx
mov dword [esp + 0xb0], 1
mov al, byte [edi + 0x59]
cmp al, bl
sete cl
push str.Failed_to_create_64_bits_HKSoftwareClasses
push str.SoftwareClasses
mov eax, 0x2011f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x3c]
call fcn.0040ca9e
push eax
call fcn.00429da4
pop ecx
pop ecx
mov eax, str.HKEY_CURRENT_USER
cmp byte [edi + 0x59], bl
jne 0x406338
mov eax, str.HKEY_LOCAL_MACHINE
push eax
push str.classesKey64___sSoftwareClasses
call fcn.00409019
mov eax, dword [edi]
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
call dword [eax + 0xa0]
lea eax, [esp + 0x4c]
push eax
lea ecx, [edi + 0x568]
mov edx, esi
call fcn.00428fef
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.76D50904_6780_4c8b_8986_1A7EE0B1716D
push str.SoftwareMicrosoftWindowsCurrentVersionExtStats_siexplore
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.0042ca5a
pop ecx
pop ecx
mov byte [esp + 0xb0], 3
cmp dword [eax + 0x18], 8
jb 0x4063a1
mov eax, dword [eax + 4]
jmp 0x4063a4
add eax, 4
push str.Failed_to_create_key_for_iexplorer_stats
push eax
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x1c]
call fcn.0040ca9e
push eax
call fcn.00429da4
pop ecx
pop ecx
push ebx
push 1
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.00409732
push 4
pop eax
push eax
lea ecx, [esp + 0x20]
push ecx
push eax
push ebx
push str.Flags
push dword [esp + 0x24]
mov dword [esp + 0x34], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ebx
push ebx
push str.AllowedDomains
push dword [esp + 0x1c]
lea eax, [esp + 0x34]
push eax
call fcn.00429f86
add esp, 0x14
push ebx
push ebx
push str.vex.ct8.pl
mov byte [esp + 0xbc], 4
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.00429f86
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040cb8b
push ebx
push ebx
push str.robloxlabs.com
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.00429f86
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040cb8b
lea esi, [esp + 0x24]
call fcn.0040cb8b
lea esi, [esp + 0x10]
call fcn.0040cb8b
lea eax, [esp + 0x54]
call fcn.00428016
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 5
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xa0]
push str.RobloxProxy.dll
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0xbc], 6
call fcn.0040b558
add esp, 0xc
mov byte [esp + 0xb0], 8
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00409732
lea eax, [esp + 0x84]
lea ecx, [esp + 0x54]
call fcn.004280dd
test eax, eax
je 0x406597
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004284b7
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 0xa
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xb0]
cmp dword [eax + 0x18], 8
jb 0x40650e
mov ecx, dword [eax + 4]
jmp 0x406511
lea ecx, [eax + 4]
mov al, byte [edi + 0x59]
push ecx
xor ecx, ecx
cmp al, bl
sete cl
mov eax, 0x2001f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x18]
call fcn.0040cb4d
test eax, eax
setge byte [esp + 0x1b]
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x40]
call fcn.00409732
cmp byte [esp + 0x1b], bl
je 0x406583
lea edx, [esp + 0x68]
lea ecx, [esp + 0x38]
call fcn.0042c73d
cmp dword [eax + 0x18], 8
jb 0x406564
mov eax, dword [eax + 4]
jmp 0x406567
add eax, 4
push edi
push eax
push str.Plug_in_version
lea eax, [esp + 0x1c]
push eax
call fcn.0040ca68
push ebx
push edi
lea esi, [esp + 0x40]
call fcn.00409732
lea esi, [esp + 0x10]
call fcn.0040cb8b
push ebx
push edi
lea ecx, [esp + 0x70]
call fcn.0040949a
push ebx
push 1
lea esi, [esp + 0x8c]
call fcn.00409732
lea esi, [esp + 0x54]
call fcn.00428038
lea esi, [esp + 0x30]
call fcn.0040cb8b
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00447c3d
mov esp, ebp
pop ebp
ret 4