Function at 0x411300
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4334b9
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x443080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x444ce4]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x50], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x1c], edx
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x444b28]
cmp eax, dword [ecx + 4]
jg 0x411592
jmp 0x41135b
mov edx, dword [ebp - 0x1c]
mov edi, dword [0x444b1c]
mov eax, dword [0x444b20]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], eax
cmp edi, eax
je 0x411575
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x54], eax
mov eax, dword [edi]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, 0x7ffffffe
sub eax, ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x48], ecx
cmp eax, 0x34
jb 0x4116cc
cmp dword [edx + 0x14], 7
mov dword [ebp - 0x3c], edx
jbe 0x4113ac
mov eax, dword [edx]
mov dword [ebp - 0x3c], eax
lea esi, [ecx + 0x34]
mov dword [ebp - 0x24], 0
mov ecx, 7
mov dword [ebp - 0x20], 0
lea eax, [ebp - 0x34]
xorps xmm0, xmm0
mov dword [ebp - 0x14], eax
movups xmmword [ebp - 0x34], xmm0
cmp esi, ecx
jbe 0x41140c
mov eax, esi
or eax, ecx
cmp eax, 0x7ffffffe
jbe 0x4113e5
mov eax, 0x7ffffffe
jmp 0x4113f0
cmp eax, 0xa
mov ecx, 0xa
cmovb eax, ecx
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00409e10
mov ecx, dword [ebp - 0x38]
add esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], esi
mov edi, eax
mov dword [ebp - 0x20], ecx
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall_
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x48]
lea ecx, [eax + 0x68]
lea eax, [esi + esi]
push eax
push dword [ebp - 0x3c]
push ecx
call fcn.004162f0
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov edi, dword [ebp - 0x40]
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov word [eax + esi*2 + 0x68], cx
lea ecx, [ebp - 0x14]
cmp dword [ebp - 0x20], 7
lea eax, [ebp - 0x34]
push ecx
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x34]
push 0
push eax
push dword [edi + 4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, dword [ebp - 0x20]
mov esi, eax
mov eax, dword [ebp - 0x18]
test esi, esi
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp ecx, 7
jbe 0x4114af
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4114a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411657
push ecx
push edx
call fcn.00414794
mov eax, dword [ebp - 0x18]
add esp, 8
test esi, esi
je 0x411517
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x411504
cmp eax, 0x80000001
je 0x411504
cmp eax, 0x80000002
je 0x411504
cmp eax, 0x80000000
je 0x411504
cmp eax, 0x80000005
je 0x411504
cmp eax, 0x80000007
je 0x411504
cmp eax, 0x80000004
je 0x411504
cmp eax, 0x80000060
je 0x411504
cmp eax, 0x80000050
je 0x411504
cmp eax, 0x80000003
je 0x411504
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
add edi, 8
mov dword [ebp - 0x40], edi
cmp edi, dword [ebp - 0x44]
je 0x411575
mov edx, dword [ebp - 0x1c]
jmp 0x411374
mov edx, dword [ebp - 0x50]
test edx, edx
je 0x411524
mov ecx, eax
mov eax, dword [edx]
mov dword [edx], ecx
test eax, eax
je 0x41156e
cmp eax, 0x80000001
je 0x41156e
cmp eax, 0x80000002
je 0x41156e
cmp eax, 0x80000000
je 0x41156e
cmp eax, 0x80000005
je 0x41156e
cmp eax, 0x80000007
je 0x41156e
cmp eax, 0x80000004
je 0x41156e
cmp eax, 0x80000060
je 0x41156e
cmp eax, 0x80000050
je 0x41156e
cmp eax, 0x80000003
je 0x41156e
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
jmp 0x411577
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00414ae1
mov esp, ebp
pop ebp
ret
push 0x444b28
call fcn.00414a7d
add esp, 4
cmp dword [0x444b28], 0xffffffff
jne 0x411358
lea esi, [ebp - 0x34]
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x34], 0x20219
sub eax, esi
mov dword [ebp - 0x30], 0x80000002
sar eax, 3
mov dword [ebp - 0x2c], 0x20119
mov dword [ebp - 0x28], 0x80000002
mov dword [ebp - 0x24], 0x20019
mov dword [ebp - 0x20], 0x80000001
mov dword [0x444b1c], 0
mov dword [0x444b20], 0
mov dword [0x444b24], 0
test eax, eax
je 0x4116a9
cmp eax, 0x1fffffff
jbe 0x41161a
call fcn.00404bf0
lea edi, [eax*8]
test edi, edi
jne 0x411629
xor eax, eax
jmp 0x411667
cmp edi, 0x1000
jb 0x41165c
lea eax, [edi + 0x23]
cmp eax, edi
ja 0x41163d
call fcn.00401190
push eax
call fcn.00414764
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x411657
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x411667
call fcn.0041829f
push edi
call fcn.00414764
add esp, 4
jmp 0x411667
lea ecx, [edi + eax]
mov dword [0x444b1c], eax
lea edi, [ebp - 0x1c]
mov dword [0x444b20], eax
mov dword [0x444b24], ecx
cmp esi, edi
je 0x4116a2
lea edx, [esi + 4]
sub esi, eax
jmp 0x411688
mov ecx, dword [eax + esi]
lea edx, [edx + 8]
mov dword [eax], ecx
mov ecx, dword [edx - 8]
mov dword [eax + 4], ecx
add eax, 8
lea ecx, [esi + eax]
cmp ecx, edi
jne 0x411688
jmp 0x4116a2
mov dword [0x444b20], eax
jmp 0x4116a9
push 0x4338f0
call fcn.004149ec
push 0x444b28
mov dword [ebp - 4], 0xffffffff
call fcn.00414a2c
add esp, 8
jmp 0x411358
call fcn.00401230
int3