Function at 0x408390
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x430
push ebx
push ebp
push edi
xor ebx, ebx
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x2d]
mov byte [esp + 0x2c], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x235]
mov byte [esp + 0x234], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x131]
mov byte [esp + 0x130], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ebp, dword [sym.imp.MSVCRT.dll__snprintf]
lea ecx, [esp + 0x130]
stosb byte es:[edi], al
mov eax, dword [esp + 0x440]
mov dword [esp + 0x10], ebx
push eax
push str.SOFTWARESangforSSLSCache
push 0x447870
push 0x103
push ecx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x20], ebx
call ebp
add esp, 0x14
lea edx, [esp + 0x10]
lea eax, [esp + 0x130]
push edx
push 0x20019
push ebx
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x408471
lea ecx, [esp + 0x130]
push eax
push ecx
push str.RegOpenKeyEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
xor eax, eax
pop edi
pop ebp
pop ebx
add esp, 0x430
ret
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xc]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [esp + 0x20]
push edx
push eax
push ebx
push ebx
push str.EnableCache
push ecx
mov dword [esp + 0x28], 4
call esi
cmp eax, ebx
je 0x4084b4
push eax
push str.EnableCache
push str.RegQueryValueEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
jmp 0x408678
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push edx
push eax
push ebx
push ebx
push str.IsCustomizedSetting
push ecx
call esi
cmp eax, ebx
je 0x4084e8
push eax
push str.IsCustomizedSetting
push str.RegQueryValueEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
jmp 0x408678
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push ebx
push ebx
push str.CacheSize
push ecx
call esi
cmp eax, ebx
je 0x40851c
push eax
push str.CacheSize
push str.RegQueryValueEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
jmp 0x408678
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
push ebx
push ebx
push str.CacheValidTime
push ecx
call esi
cmp eax, ebx
je 0x408550
push eax
push str.CacheValidTime
push str.RegQueryValueEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
jmp 0x408678
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x10]
lea eax, [esp + 0x30]
push edx
push eax
push ebx
push ebx
push str.CachePath
push ecx
mov dword [esp + 0x28], 0x104
call esi
cmp eax, ebx
je 0x40858c
push eax
push str.CachePath
push str.RegQueryValueEx_failed__key___s__err___d
call fcn.00411930
add esp, 0xc
jmp 0x408678
mov edx, dword [esp + 0x10]
mov cl, byte [esp + edx + 0x2f]
lea eax, [esp + edx + 0x2f]
cmp cl, 0x5c
jne 0x40859f
mov byte [eax], bl
lea eax, [esp + 0x30]
push 0x5c
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
add esp, 8
inc eax
je 0x4085b4
mov byte [eax], bl
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x34]
push edx
push eax
call fcn.00418e50
add esp, 0xc
test eax, eax
je 0x408613
cmp dword [esp + 0x2c], ebx
jbe 0x408613
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x238]
push 0x207
push ecx
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
call fcn.00407230
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp eax, ebx
je 0x40863c
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [esp + 0x18], ebx
jmp 0x40863c
lea edi, [esp + 0x30]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x238]
repne scasb al, byte es:[edi]
not ecx
push 0x207
dec ecx
push edx
lea eax, [esp + 0x38]
push ecx
push eax
call fcn.00407230
add esp, 0x10
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x23c]
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x458]
push ecx
mov ecx, dword [esp + 0x458]
push edx
dec eax
push str.cacheEnable_damp_customSetting_damp_cachePath_samp_cacheSize_damp_cacheValidTime_d
push eax
push ecx
call ebp
add esp, 0x20
mov ebx, 1
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop edi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x430
ret