Function at 0x10084b80
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100b7c3c
push eax
mov dword fs:[0], esp
sub esp, 0x11c
push ebp
push esi
push edi
mov ebp, ecx
call fcn.10084e80
mov eax, dword [esp + 0x13c]
test eax, eax
je 0x10084e5d
cmp byte [eax], 0
je 0x10084e5d
mov esi, dword [esp + 0x140]
test esi, esi
je 0x10084e5d
cmp byte [esi], 0
je 0x10084e5d
mov ecx, dword [esp + 0x144]
test ecx, ecx
je 0x10084e5d
mov edi, dword [esp + 0x148]
test edi, edi
jle 0x10084e5d
push ebx
lea ebx, [ebp + 0xc]
push eax
mov ecx, ebx
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp + 0x10]
push esi
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [esp + 0x150]
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x38], eax
lea eax, [edi*8]
sub eax, edi
lea ecx, [eax + eax*4]
lea edx, [edi + ecx*8]
shl edx, 2
push edx
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov edx, dword [ebp + 0x18]
mov esi, dword [esp + 0x148]
mov edi, eax
mov dword [ebp + 0x14], eax
lea ecx, [edx*8]
mov eax, dword [esp + 0x13c]
sub ecx, edx
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*8]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test eax, eax
mov dword [ebp + 8], eax
je 0x10084c71
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
push edx
push eax
lea ecx, [ebp + 0x1c]
call dword [sym.imp.OOLAPLib.dll_public:_long_int___thiscall_CMapStringToHierarchyProperties::Create_struct___MIDL___MIDL_itf_OpenMD_0000_0007___long_int_]
mov ecx, ebp
call fcn.10085960
test eax, eax
je 0x10084e58
test byte [ebp + 0x38], 1
je 0x10084e58
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov dword [esp + 0x134], 0
call sub.MFC42.DLL_CString::CString
push str.Translate_
lea ecx, [esp + 0x28]
mov byte [esp + 0x138], 1
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x1c]
mov byte [esp + 0x134], 2
push ecx
push 0x20019
push 0
push str.SOFTWAREOpen_Executive_4
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10084db6
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov byte [esp + 0x28], al
lea edx, [esp + 0x20]
lea eax, [esp + 0x28]
push edx
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push str.OLAP_TranslateFolder
push edx
mov dword [esp + 0x28], 1
mov dword [esp + 0x38], 0x104
call esi
test eax, eax
jne 0x10084d43
lea eax, [esp + 0x28]
lea ecx, [esp + 0x18]
push eax
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push str.OLAP_TranslateLanguage
push ecx
mov byte [esp + 0x40], 0
call esi
test eax, eax
jne 0x10084d77
lea edx, [esp + 0x28]
lea ecx, [esp + 0x14]
push edx
call sub.MFC42.DLL_CString::operator_1
lea eax, [esp + 0x20]
lea ecx, [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push str.OLAP_TranslatePrefix
push eax
mov byte [esp + 0x40], 0
call esi
test eax, eax
jne 0x10084dab
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::operator_1
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x10084e22
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x10084e22
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
mov edx, dword [ebp + 0x10]
mov eax, dword [ebx]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push str._s_s_s__s.xml
push eax
mov byte [esp + 0x14c], 3
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
add esp, 0x18
push ecx
push edx
mov ecx, ebp
call fcn.10085e80
lea ecx, [esp + 0x10]
mov byte [esp + 0x134], 2
call fcn.100ae920
lea ecx, [esp + 0x24]
mov byte [esp + 0x134], 1
call fcn.100ae920
lea ecx, [esp + 0x14]
mov byte [esp + 0x134], 0
call fcn.100ae920
lea ecx, [esp + 0x18]
mov dword [esp + 0x134], 0xffffffff
call fcn.100ae920
xor eax, eax
pop ebx
jmp 0x10084e62
mov eax, 0x80070057
mov ecx, dword [esp + 0x128]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x128
ret 0x18