Function at 0x1002e330
Capabilities:
Get installed programs
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10077328
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x1008e418]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1008e418]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x18]
push ecx
push edx
xor edi, edi
push edi
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x48], eax
mov dword [esp + 0x2c], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1002e540
push 4
call fcn.10056628
add esp, 4
cmp eax, edi
je 0x1002e3a9
lea ecx, [esp + 0x1c]
mov dword [eax], ecx
jmp 0x1002e3ab
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
push 8
lea edx, [esp + 0x20]
push edx
push 0x1002e0c0
push edi
mov dword [esp + 0x78], 1
mov eax, dword [esp + 0x28]
push 0x1007f0d8
push eax
call fcn.1002e160
xor ecx, ecx
add esp, 0x18
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], edi
mov word [esp + 0x44], cx
mov byte [esp + 0x68], 2
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
mov ecx, ebx
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1002e4d2
xor ebp, ebp
cmp edi, eax
jb 0x1002e42e
call fcn.10055ff2
mov esi, dword [esp + 0x28]
push 0xffffffffffffffff
push 0
lea eax, [esi + ebp]
lea ecx, [esp + 0x48]
call fcn.10008c70
push 8
mov eax, str.Patches
lea ecx, [esp + 0x44]
call fcn.100120d0
cmp dword [esp + 0x58], 8
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x38], edx
jae 0x1002e46d
lea eax, [esp + 0x44]
mov edx, dword [esp + 0x18]
push 8
lea ecx, [esp + 0x3c]
push ecx
push 0x1002dc90
push 0
push eax
push edx
call fcn.1002e160
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
mov ecx, ebx
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add esp, 0x18
add ebp, 0x1c
cmp edi, eax
jb 0x1002e42e
cmp dword [esp + 0x58], 8
jb 0x1002e4d0
mov eax, dword [esp + 0x44]
push eax
call fcn.10056169
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x2c]
add esp, 4
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], edi
mov word [esp + 0x44], cx
cmp esi, edi
je 0x1002e527
cmp esi, ebx
je 0x1002e51e
add esi, 0x18
cmp dword [esi], 8
jb 0x1002e501
mov edx, dword [esi - 0x14]
push edx
call fcn.10056169
add esp, 4
xor eax, eax
mov dword [esi], 7
mov dword [esi - 4], edi
mov word [esi - 0x14], ax
add esi, 0x1c
lea ecx, [esi - 0x18]
cmp ecx, ebx
jne 0x1002e4f0
mov esi, dword [esp + 0x28]
push esi
call fcn.10056169
add esp, 4
mov edx, dword [esp + 0x1c]
push edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
call fcn.10056169
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10055232
add esp, 0x58
ret