Function at 0x4061f0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46a6bd
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x48f190]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x48f190]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
push dword [ebp + 8]
xor ebx, ebx
lea eax, [esp + 0x28]
push eax
mov edi, ecx
mov ecx, dword [edi + 0x164]
push ebx
push str.RobloxProxy.zip
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x3c], bl
call fcn.0043f8a9
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
cmp byte [ebp + 8], bl
je 0x4065c5
mov al, byte [edi + 0x59]
cmp al, bl
jne 0x4062c4
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.SoftwareClasses
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x18]
mov dword [esp + 0xb8], ebx
call fcn.0040cb62
test eax, eax
jl 0x4062b3
lea eax, [edi + 0x1ac]
push eax
push 1
push dword [esp + 0x18]
lea ecx, [edi + 0x438]
call fcn.00429b02
or dword [esp + 0xb0], 0xffffffff
lea esi, [esp + 0x10]
call fcn.0040cba0
mov eax, dword [edi]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
lea esi, [edi + 0x1ac]
call dword [eax + 0xa8]
lea eax, [edi + 0x168]
push eax
lea ecx, [edi + 0x438]
mov edx, esi
call fcn.00429087
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
xor ecx, ecx
mov dword [esp + 0xb0], 1
mov al, byte [edi + 0x59]
cmp al, bl
sete cl
push str.Failed_to_create_64_bits_HKSoftwareClasses
push str.SoftwareClasses
mov eax, 0x2011f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x3c]
call fcn.0040cab3
push eax
call fcn.00429e3c
pop ecx
pop ecx
mov eax, str.HKEY_CURRENT_USER
cmp byte [edi + 0x59], bl
jne 0x406345
mov eax, str.HKEY_LOCAL_MACHINE
push eax
push str.classesKey64___sSoftwareClasses
call fcn.0040900c
mov eax, dword [edi]
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, edi
call dword [eax + 0xa8]
lea eax, [esp + 0x4c]
push eax
lea ecx, [edi + 0x56c]
mov edx, esi
call fcn.00429087
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
push str.76D50904_6780_4c8b_8986_1A7EE0B1716D
push str.SoftwareMicrosoftWindowsCurrentVersionExtStats_siexplore
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.0042caf2
pop ecx
pop ecx
mov byte [esp + 0xb0], 3
cmp dword [eax + 0x18], 8
jb 0x4063ae
mov eax, dword [eax + 4]
jmp 0x4063b1
add eax, 4
push str.Failed_to_create_key_for_iexplorer_stats
push eax
push closesocket
mov eax, 0x2001f
lea ecx, [esp + 0x1c]
call fcn.0040cab3
push eax
call fcn.00429e3c
pop ecx
pop ecx
push ebx
push 1
lea esi, [esp + 0x70]
mov byte [esp + 0xb8], 2
call fcn.0040971e
push 4
pop eax
push eax
lea ecx, [esp + 0x20]
push ecx
push eax
push ebx
push str.Flags
push dword [esp + 0x24]
mov dword [esp + 0x34], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ebx
push ebx
push str.AllowedDomains
push dword [esp + 0x1c]
lea eax, [esp + 0x34]
push eax
call fcn.0042a01e
add esp, 0x14
push ebx
push ebx
push str.eminem.xyz
mov byte [esp + 0xbc], 4
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.0042a01e
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040cba0
push ebx
push ebx
push str.robloxlabs.com
push dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
call fcn.0042a01e
add esp, 0x14
lea esi, [esp + 0x1c]
call fcn.0040cba0
lea esi, [esp + 0x24]
call fcn.0040cba0
lea esi, [esp + 0x10]
call fcn.0040cba0
lea eax, [esp + 0x54]
call fcn.00428096
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 5
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xa8]
push str.RobloxProxy.dll
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0xbc], 6
call fcn.0040b577
add esp, 0xc
mov byte [esp + 0xb0], 8
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.0040971e
lea eax, [esp + 0x84]
lea ecx, [esp + 0x54]
call fcn.0042815d
test eax, eax
je 0x4065a4
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.0042854f
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0xb0], 0xa
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0xb8]
cmp dword [eax + 0x18], 8
jb 0x40651b
mov ecx, dword [eax + 4]
jmp 0x40651e
lea ecx, [eax + 4]
mov al, byte [edi + 0x59]
push ecx
xor ecx, ecx
cmp al, bl
sete cl
mov eax, 0x2001f
add ecx, 0x80000001
push ecx
lea ecx, [esp + 0x18]
call fcn.0040cb62
test eax, eax
setge byte [esp + 0x1b]
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x40]
call fcn.0040971e
cmp byte [esp + 0x1b], bl
je 0x406590
lea edx, [esp + 0x68]
lea ecx, [esp + 0x38]
call fcn.0042c7d5
cmp dword [eax + 0x18], 8
jb 0x406571
mov eax, dword [eax + 4]
jmp 0x406574
add eax, 4
push edi
push eax
push str.Plug_in_version
lea eax, [esp + 0x1c]
push eax
call fcn.0040ca7d
push ebx
push edi
lea esi, [esp + 0x40]
call fcn.0040971e
lea esi, [esp + 0x10]
call fcn.0040cba0
push ebx
push edi
lea ecx, [esp + 0x70]
call fcn.00409486
push ebx
push 1
lea esi, [esp + 0x8c]
call fcn.0040971e
lea esi, [esp + 0x54]
call fcn.004280b8
lea esi, [esp + 0x30]
call fcn.0040cba0
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.004483ed
mov esp, ebp
pop ebp
ret 4