Function at 0x403550
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x408840
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor ebx, ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x2c], 1
mov dword [esp + 0x20], 0xff
call sub.MFC42.DLL_CString::CString
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x30]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x10]
mov byte [esp + 0x13c], 1
push eax
push 0x20019
push ebx
push str.SOFTWAREORACLEKEY_OraClient11g_home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push ebx
push str.SOFTWAREORACLEKEY_OraDb10g_home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea edx, [esp + 0x10]
push edx
push 0x20019
push ebx
push str.SOFTWAREORACLEKEY_Home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea eax, [esp + 0x10]
push eax
push 0x20019
push ebx
push str.SOFTWAREORACLEHOME0
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
cmp dword [ebp + 4], 1
jne 0x4038a6
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push ebx
push str.SOFTWAREWow6432NodeORACLEKEY_OraClient11g_home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea edx, [esp + 0x10]
push edx
push 0x20019
push ebx
push str.SOFTWAREWow6432NodeORACLEKEY_OraDb10g_home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea eax, [esp + 0x10]
push eax
push 0x20019
push ebx
push str.SOFTWAREWow6432NodeORACLEKEY_Home1
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x4036a0
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push ebx
push str.SOFTWAREWow6432NodeORACLEHOME0
push reloc.WS2_32.dll_bind
call esi
test eax, eax
jne 0x4038a6
lea edx, [esp + 0x20]
lea eax, [esp + 0x30]
push edx
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x30]
push eax
push ecx
push ebx
push str.ORACLE_HOME
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x40371d
lea eax, [esp + 0x144]
lea ecx, [esp + 0x18]
push eax
push 0x40b7f8
push ecx
call sub.MFC42.DLL_operator_2
push 0x40b7ec
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0x148], 3
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push ebx
push str.Error
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x14]
call fcn.0040830c
mov byte [esp + 0x13c], 1
lea ecx, [esp + 0x18]
jmp 0x4038fa
cmp byte [esp + 0x30], bl
jne 0x40377c
lea eax, [esp + 0x144]
lea ecx, [esp + 0x14]
push eax
push 0x40b7e4
push ecx
call sub.MFC42.DLL_operator_2
push 0x40b7d4
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 4
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push ebx
push str.Error
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x18]
call fcn.0040830c
mov byte [esp + 0x13c], 1
lea ecx, [esp + 0x14]
jmp 0x4038fa
mov eax, dword [esp + 0x144]
push str.oemapp
push eax
call dword [sym.imp.MSVCRT.dll__mbsicmp]
add esp, 8
test eax, eax
jne 0x403804
lea ecx, [esp + 0x144]
lea edx, [esp + 0x14]
push ecx
push str._sBIN_
push edx
call sub.MFC42.DLL_operator_2
push str..bat
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0x144], 5
push eax
call sub.MFC42.DLL_operator
mov eax, dword [eax]
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x30]
mov byte [esp + 0x13c], 6
push ecx
push eax
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x13c], 5
call fcn.0040830c
mov byte [esp + 0x13c], 1
lea ecx, [esp + 0x14]
jmp 0x403870
lea eax, [esp + 0x144]
lea ecx, [esp + 0x28]
push eax
push str._sBIN_
push ecx
call sub.MFC42.DLL_operator_2
push str..exe
lea edx, [esp + 0x28]
push eax
push edx
mov byte [esp + 0x148], 7
call sub.MFC42.DLL_operator
mov eax, dword [eax]
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x30]
mov byte [esp + 0x13c], 8
push ecx
push eax
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x13c], 7
call fcn.0040830c
mov byte [esp + 0x13c], 1
lea ecx, [esp + 0x28]
call fcn.0040830c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x13c], bl
call fcn.0040830c
lea ecx, [esp + 0x144]
mov dword [esp + 0x13c], 0xffffffff
call fcn.0040830c
mov eax, 1
jmp 0x403928
lea eax, [esp + 0x144]
lea ecx, [esp + 0x14]
push eax
push 0x40b7f8
push ecx
call sub.MFC42.DLL_operator_2
push 0x40b7ec
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 2
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push ebx
push str.Error
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x18]
call fcn.0040830c
mov byte [esp + 0x13c], 1
lea ecx, [esp + 0x14]
call fcn.0040830c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x13c], bl
call fcn.0040830c
lea ecx, [esp + 0x144]
mov dword [esp + 0x13c], 0xffffffff
call fcn.0040830c
xor eax, eax
mov ecx, dword [esp + 0x134]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x130
ret 8