Function at 0x40163c
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1024
call fcn.00402f10
push ebx
push esi
push edi
mov esi, ecx
call fcn.004015f9
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0xc]
push eax
xor edi, edi
push 0x20019
push edi
push str.SoftwareOpera_Software
push 0x80000001
call ebx
test eax, eax
jne 0x401733
push 0x400
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 4], eax
lea ecx, [ebp - 8]
mov dword [ebp - 8], 0x400
push ecx
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push edi
push str.Plugin_Path
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x401721
push 0x4067e0
push dword [ebp - 4]
call sub.MSVCRT.dll_strcat
push dword [ebp - 4]
lea eax, [ebp - 0x824]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x824]
push 0x406c64
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x18
cmp dword [esi + 0x68], edi
jne 0x4016fb
lea eax, [ebp - 0x824]
push edi
push eax
call dword [sym.imp.MSVCRT.dll__access]
pop ecx
cmp eax, 0xffffffff
pop ecx
je 0x401721
lea ecx, [esi + 0x1198]
push str.Opera
call fcn.00402a48
push dword [ebp - 4]
lea ecx, [esi + 0x1198]
push dword [esi + 0x60]
call fcn.004029ed
inc dword [esi + 0x60]
jmp 0x40172a
push dword [ebp - 4]
call sub.MFC42.DLL_operatordelete
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
push 0x20019
push edi
push str.SoftwareMozilla
push 0x80000002
call ebx
cmp eax, edi
jne 0x4018ad
mov dword [ebp - 0x10], edi
lea eax, [ebp - 0x24]
mov dword [ebp - 8], 0x800
push eax
push edi
push edi
lea eax, [ebp - 8]
push edi
push eax
lea eax, [ebp - 0x1024]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, edi
mov dword [ebp - 0x1c], eax
jne 0x401898
lea eax, [ebp - 0x824]
push str.SoftwareMozilla_
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x1024]
push eax
lea eax, [ebp - 0x824]
push eax
call sub.MSVCRT.dll_strcat
lea eax, [ebp - 0x824]
push str.Extensions
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push 0x20019
lea eax, [ebp - 0x824]
push edi
push eax
push 0x80000002
call ebx
test eax, eax
jne 0x401898
push 0x400
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 4], eax
lea ecx, [ebp - 8]
mov dword [ebp - 8], 0x400
push ecx
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push edi
push str.Plugins
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x401886
push 0x4067e0
push dword [ebp - 4]
call sub.MSVCRT.dll_strcat
push dword [ebp - 4]
lea eax, [ebp - 0x824]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x824]
push 0x406c64
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x18
cmp dword [esi + 0x68], edi
jne 0x40185e
lea eax, [ebp - 0x824]
push edi
push eax
call dword [sym.imp.MSVCRT.dll__access]
pop ecx
cmp eax, 0xffffffff
pop ecx
je 0x401886
lea eax, [ebp - 0x1024]
lea ecx, [esi + 0x1198]
push eax
call fcn.00402a48
push dword [ebp - 4]
lea ecx, [esi + 0x1198]
push dword [esi + 0x60]
call fcn.004029ed
inc dword [esi + 0x60]
jmp 0x40188f
push dword [ebp - 4]
call sub.MFC42.DLL_operatordelete
pop ecx
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x1c], edi
je 0x401754
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esi + 0x60]
cmp eax, edi
jne 0x4018f0
cmp dword [esi + 0x68], edi
je 0x4018cd
mov eax, dword [0x406020]
add esi, 0x1198
push dword [eax*4 + 0x406024]
jmp 0x4018df
mov eax, dword [0x406020]
add esi, 0x1198
push dword [eax*4 + 0x4060cc]
mov ecx, esi
call fcn.00402a48
push edi
mov ecx, esi
call sub.MFC42.DLL_CWnd::EnableWindow
jmp 0x4018ff
push eax
push edi
push 1
lea ecx, [esi + 0x1198]
call fcn.00402a72
pop edi
pop esi
pop ebx
leave
ret