Function at 0x401150
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x58c0b4
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x62d414]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push esi
push edi
mov eax, dword [0x62d414]
xor eax, esp
push eax
lea eax, [esp + 0x184]
mov dword fs:[0], eax
mov eax, dword [0x680b30]
mov ecx, dword [eax + 0x80]
mov dword [esp + 0x50], ecx
mov edx, dword [eax + 0x84]
mov dword [esp + 0x54], edx
mov ecx, dword [eax + 0x88]
mov dword [esp + 0x58], ecx
mov edx, dword [eax + 0x8c]
push 0x80
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x58]
push ecx
mov dword [esp + 0x68], edx
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea ecx, [esp + 0x60]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
xor ebx, ebx
mov dword [esp + 0x18c], ebx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.0051dd50
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x24]
push 0x5d17b4
push edx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov byte [esp + 0x1a0], 1
push str.Options_
push eax
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
add esp, 0x20
mov byte [esp + 0x18c], 2
push eax
lea ecx, [esp + 0x64]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov byte [esp + 0x18c], 1
lea ecx, [esp + 0x34]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov byte [esp + 0x18c], bl
lea ecx, [esp + 0x18]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
jae 0x40126e
lea eax, [esp + 0x64]
push ebx
lea ecx, [esp + 0x18]
push ecx
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x401374
mov edx, dword [esp + 0x14]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push ebx
push ebx
push ebx
push ebx
push str.AliasesBranchName
push edx
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x4012d0
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x14]
push eax
push 1
push ebx
push str.AliasesBranchName
push ecx
mov byte [esp + 0x28], 1
mov byte [esp + 0x29], bl
call esi
mov edx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push str.HideAliasesBranch
push edx
call edi
test eax, eax
je 0x401303
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x14]
push eax
push 1
push ebx
push str.HideAliasesBranch
push ecx
mov byte [esp + 0x28], 0x31
mov byte [esp + 0x29], bl
call esi
mov edx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push str.GetRemoteStatus
push edx
call edi
test eax, eax
je 0x401336
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x14]
push eax
push 1
push ebx
push str.GetRemoteStatus
push ecx
mov byte [esp + 0x28], 0x31
mov byte [esp + 0x29], bl
call esi
mov edx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push str.GetRemoteStatusBlocking
push edx
call edi
test eax, eax
je 0x401369
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x14]
push eax
push 1
push ebx
push str.GetRemoteStatusBlocking
push ecx
mov byte [esp + 0x28], 0x30
mov byte [esp + 0x29], bl
call esi
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0x60]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov ecx, dword [esp + 0x184]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.0051ed00
add esp, 0x180
ret