Function at 0x4283dc
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov dword [ebp - 0x10], 0x204b3ed8
mov ebx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x28], eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x10]
cmp eax, 0x60ca633
jg 0x428486
cmp eax, 0xca7d9611
jg 0x4284f7
cmp eax, 0x99952f50
jle 0x4285c1
cmp eax, 0xae3215e2
jg 0x4286ed
cmp eax, 0xa53e1552
jg 0x4288d5
cmp eax, 0x99952f51
je 0x428af3
cmp eax, 0x9a29c658
jne 0x428407
push dword [ebp - 0x18]
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push 0x80000002
call edi
mov ecx, 0x5b1bebb4
test eax, eax
je 0x428473
mov ecx, 0x39b38a12
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
jmp 0x428407
cmp eax, 0x4616c897
jle 0x42854a
cmp eax, 0x614631ba
jle 0x428606
cmp eax, 0x6fa4c2e3
jg 0x428735
cmp eax, 0x66024f5c
jg 0x428909
cmp eax, 0x614631bb
je 0x428b0b
cmp eax, 0x615b110f
jne 0x428407
mov eax, dword [ebp - 0x14]
add eax, 0xffffffc4
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x75cb
dec edx
shr eax, 0x13
mov dword [ebp - 0x14], eax
mov eax, 0xbe8bd9a0
cmp edx, ecx
je 0x428e29
mov eax, 0xe7ed2c98
jmp 0x428e29
cmp eax, 0xe3a20263
jle 0x428644
cmp eax, 0xe8b92921
jg 0x428765
cmp eax, 0xe7ed2c97
jg 0x428955
cmp eax, 0xe3a20264
je 0x428b17
cmp eax, 0xe7685976
jne 0x428407
mov eax, dword [ebp - 0x18]
push dword [eax]
call esi
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x39b38a12
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x428407
cmp eax, 0x1ab0e90d
jle 0x4286a7
cmp eax, 0x359a4a83
jg 0x4287cb
cmp eax, 0x2154265b
jg 0x42897a
cmp eax, 0x1ab0e90e
je 0x428b35
cmp eax, 0x204b3ed8
jne 0x428407
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x17dbd9f7
jmp 0x428407
cmp eax, 0x8e8d4c6e
jle 0x4287f8
cmp eax, 0x937a5d67
jg 0x42899f
cmp eax, 0x8e8d4c6f
je 0x428b6d
cmp eax, 0x934be26f
jne 0x428407
cmp dword [ebp - 0x64], 0
mov eax, 0x79499e71
je 0x428e29
mov eax, 0xe183f7d2
jmp 0x428e29
cmp eax, 0x56fb1c8c
jle 0x428825
cmp eax, 0x5b1bebb3
jg 0x4289e8
cmp eax, 0x56fb1c8d
je 0x428b98
cmp eax, 0x59b82ec3
jne 0x428407
imul eax, dword [ebp - 0x14], 0x48c6
add eax, 0xffffff98
mov dword [ebp - 0x14], eax
jmp 0x428cfb
cmp eax, 0xd7df6f28
jle 0x428870
cmp eax, 0xdee81454
jg 0x428a0a
cmp eax, 0xd7df6f29
je 0x428bc6
cmp eax, 0xd91beb26
jne 0x428407
mov eax, dword [ebp - 0x14]
shr eax, 0xe
add eax, 0x24
mov ecx, eax
imul ecx, eax
shr eax, 0xd
imul edx, ecx, 0x8157
add eax, 0xffffff1e
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xca7d9612
cmp edx, ecx
je 0x428e29
mov eax, 0x2154265c
jmp 0x428e29
cmp eax, 0xeec6e14
jle 0x4288a8
cmp eax, 0x17dbd9f6
jg 0x428a2c
cmp eax, 0xeec6e15
je 0x428bd2
cmp eax, 0x16135bf7
jne 0x428407
push dword [ebp - 0x44]
call fcn.00419455
add esp, 4
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x615b110f
jmp 0x428407
cmp eax, 0xbe8bd99f
jg 0x428a5d
cmp eax, 0xae3215e3
je 0x428bfd
cmp eax, 0xb215b350
jne 0x428407
xor eax, eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x4c]
push dword [ebp - 0x60]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xd91beb26
jmp 0x428407
cmp eax, 0x71c5912d
jg 0x428a7f
cmp eax, 0x6fa4c2e4
je 0x428c1e
cmp eax, 0x709e7a25
jne 0x428407
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x5577d6d4
jmp 0x428407
cmp eax, 0xf46168c6
jg 0x428aba
cmp eax, 0xe8b92922
je 0x428c2a
cmp eax, 0xf2bf8b37
jne 0x428407
mov dword [ebp - 0x50], ebx
mov ebx, esi
mov esi, edi
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*8]
imul edx, edx
imul edi, edx, 0x5f57
lea eax, [eax + ecx*8]
add eax, 0x117
dec edi
shr eax, 6
mov dword [ebp - 0x14], eax
mov eax, 0xae3215e3
cmp edi, edx
je 0x4287bc
mov eax, 0x603edea5
mov dword [ebp - 0x10], eax
mov edi, esi
mov esi, ebx
mov ebx, dword [ebp - 0x50]
jmp 0x428407
cmp eax, 0x39b38a11
jg 0x428adc
cmp eax, 0x359a4a84
je 0x428c3e
cmp eax, 0x374a509b
jne 0x428407
mov dword [ebp - 0x10], 0x99952f51
jmp 0x428407
cmp eax, 0x852c33ef
je 0x428c56
cmp eax, 0x8a7477c9
je 0x428c69
cmp eax, 0x8dbaef5b
jne 0x428407
mov dword [ebp - 0x10], 0xfc8aaaee
jmp 0x428407
cmp eax, 0x4616c898
je 0x428c75
cmp eax, 0x4861e6c3
je 0x428c88
cmp eax, 0x5577d6d4
jne 0x428407
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x20]
push 2
push 0xc800
call fcn.0043ddca
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xc92049e7
jmp 0x428407
cmp eax, 0xca7d9612
je 0x428c9b
cmp eax, 0xcdfae9e1
je 0x428cb3
cmp eax, 0xd40623ca
jne 0x428407
push dword [ebp - 0x48]
call fcn.0043e5b4
add esp, 4
mov dword [ebp - 0x10], 0xe7685976
jmp 0x428407
cmp eax, 0x60ca634
je 0x428cbf
cmp eax, 0x64d2d51
je 0x428cf4
cmp eax, 0xda8ad0d
jne 0x428407
mov dword [ebp - 0x10], 0x614631bb
jmp 0x428407
cmp eax, 0xa53e1553
je 0x428d0e
cmp eax, 0xab26b6ce
jne 0x428407
push 0x18
push str.DisplayName
push dword [ebp - 0x3c]
call fcn.004333a0
add esp, 0xc
mov dword [ebp - 0x10], 0xe8b92922
jmp 0x428407
cmp eax, 0x66024f5d
je 0x428d3e
cmp eax, 0x6d604315
jne 0x428407
add ebx, 0xffffff67
shr ebx, 0x10
and ebx, 0xfffffff0
push ebx
call fcn.004283dc
add esp, 4
push ebx
call fcn.004283dc
add esp, 4
mov eax, 0x79499e71
cmp ebx, 0x3a
jb 0x428e29
mov eax, 0x9a29c658
jmp 0x428e29
cmp eax, 0xe7ed2c98
je 0x428d60
cmp eax, 0xe88c259a
jne 0x428407
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], 0xca7d9612
jmp 0x428407
cmp eax, 0x2154265c
je 0x428d6f
cmp eax, 0x23667d06
jne 0x428407
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0x852c33ef
jmp 0x428407
cmp eax, 0x937a5d68
je 0x428d7b
cmp eax, 0x945d5f9c
jne 0x428407
shl ebx, 5
add ebx, 0xffffff9d
push ebx
call fcn.004283dc
add esp, 4
push ebx
call fcn.004283dc
add esp, 4
mov eax, 0x17dbd9f7
cmp ebx, 0xfd
je 0x428e29
mov eax, 0x937a5d68
jmp 0x428e29
cmp eax, 0x5b1bebb4
je 0x428d93
cmp eax, 0x603edea5
jne 0x428407
mov dword [ebp - 0x10], 0xab26b6ce
jmp 0x428407
cmp eax, 0xdee81455
je 0x428da5
cmp eax, 0xe183f7d2
jne 0x428407
mov dword [ebp - 0x10], 0x16135bf7
jmp 0x428407
cmp eax, 0x17dbd9f7
je 0x428dda
cmp eax, 0x191d7f5e
jne 0x428407
imul eax, dword [ebp - 0x14], 0xb600
or eax, 0x91
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x66024f5d
jmp 0x428407
cmp eax, 0xbe8bd9a0
je 0x428dfc
cmp eax, 0xc92049e7
jne 0x428407
mov dword [ebp - 0x10], 0x71c5912e
jmp 0x428407
cmp eax, 0x71c5912e
je 0x428e19
cmp eax, 0x79499e71
jne 0x428407
push dword [ebp - 0x2c]
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push str._s_s
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xdee81455
jmp 0x428407
cmp eax, 0xf46168c7
je 0x428e31
cmp eax, 0xfc8aaaee
jne 0x428407
mov dword [ebp - 0x10], 0x56fb1c8d
jmp 0x428407
cmp eax, 0x435e3da1
jne 0x428e5d
mov dword [ebp - 0x10], 0x9a29c658
jmp 0x428407
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0xf2bf8b37
jmp 0x428407
mov dword [ebp - 0x10], 0xb215b350
jmp 0x428407
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x709e7a25
jmp 0x428407
imul eax, dword [ebp - 0x14], 0xa4
shr eax, 6
mov ecx, eax
imul ecx, eax
shl eax, 5
imul edx, ecx, 0x716d
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xe8b92922
cmp edx, ecx
je 0x428b5f
mov eax, 0x5b1bebb4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x28], eax
jmp 0x428407
push dword [ebp - 0x70]
push dword [ebp - 0x48]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.0041988d
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0043e5b4
add esp, 4
mov dword [ebp - 0x10], 0xd40623ca
jmp 0x428407
push dword [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x191d7f5e
test eax, eax
je 0x428dd2
mov ecx, 0x60ca634
jmp 0x428dd2
mov dword [ebp - 0x10], 0xe3a20264
jmp 0x428407
push dword [ebp - 0x1c]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call edi
mov ecx, 0x374a509b
test eax, eax
je 0x428dd2
mov ecx, 0x4616c898
jmp 0x428dd2
shr ebx, 4
add ebx, 0xfffffe73
mov eax, 0x934be26f
cmp ebx, 0x33
je 0x428e29
mov eax, 0xbe8bd9a0
jmp 0x428e29
mov dword [ebp - 0x10], 0xbe8bd9a0
jmp 0x428407
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x8dbaef5b
jmp 0x428407
mov eax, dword [ebp - 0x14]
shr eax, 0x13
and eax, 0x1f
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe88c259a
jmp 0x428407
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x1ab0e90e
jmp 0x428407
mov dword [ebp - 0x10], 0x435e3da1
jmp 0x428407
mov eax, dword [ebp - 0x1c]
push dword [eax]
call esi
mov dword [ebp - 0x10], 0x64d2d51
jmp 0x428407
mov eax, dword [ebp - 0x1c]
push dword [eax]
call esi
mov dword [ebp - 0x10], 0x23667d06
jmp 0x428407
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xd7df6f29
jmp 0x428407
mov dword [ebp - 0x10], 0xf46168c7
jmp 0x428407
mov eax, dword [ebp - 0x14]
shr eax, 4
lea ecx, [eax - 0x5e]
imul ecx, ecx
imul edx, ecx, 0x7b9d
shl eax, 0xf
dec edx
add eax, 0x460000
mov dword [ebp - 0x14], eax
mov eax, 0xab26b6ce
cmp edx, ecx
je 0x428e29
mov eax, 0x4861e6c3
jmp 0x428e29
mov eax, dword [ebp - 0x18]
push dword [eax]
call esi
mov dword [ebp - 0x10], 0x39b38a12
mov dword [ebp - 0x24], 0
jmp 0x428407
add ebx, 0xffffff26
push ebx
call fcn.004283dc
add esp, 4
push ebx
call fcn.004283dc
add esp, 4
mov eax, 0x5577d6d4
cmp ebx, 0x6e
je 0x428e29
mov eax, 0x17dbd9f7
jmp 0x428e29
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push str._s_s_n
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x4861e6c3
jmp 0x428407
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xcdfae9e1
jmp 0x428407
mov dword [ebp - 0x10], 0x934be26f
jmp 0x428407
imul ebx, ebx, 0xf3000
add ebx, 0x6da2800
mov dword [ebp - 0x10], 0xca7d9612
jmp 0x428407
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x6fa4c2e4
jmp 0x428407
imul eax, dword [ebp - 0x14], 0x72
shr eax, 0xc
add eax, 0xbd
imul ecx, eax, 0x6200
imul eax, eax
imul edx, eax, 0x554b
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0x6d604315
cmp eax, edx
je 0x428dd2
mov ecx, 0xeec6e15
mov dword [ebp - 0x10], ecx
jmp 0x428407
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x359a4a84
jmp 0x428407
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xda8ad0d
jmp 0x428407
cmp dword [ebp - 0x44], 0
mov eax, 0x59b82ec3
je 0x428e29
mov eax, 0x8a7477c9
mov dword [ebp - 0x10], eax
jmp 0x428407
push 0x1a
push str.Software.txt
push dword [ebp - 0x40]
call fcn.004333a0
add esp, 0xc
push dword [ebp - 0x48]
call fcn.0043eec0
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x8e8d4c6f
jmp 0x428407
cmp eax, 0x39b38a12
jne 0x428407
mov dword [ebp - 0x5c], ebx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret