Function at 0x414a94
Capabilities:
Get installed programs
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5d8
lea eax, [ebp - 8]
push esi
push edi
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
push connect
mov esi, ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x414ad1
push 0x45962c
mov ecx, esi
call fcn.00403529
jmp 0x414d97
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0xc], 0x400
xor edi, edi
call fcn.004065a7
xor ecx, ecx
lea eax, [ebp - 0xc]
push ecx
push ecx
push ecx
push ecx
push eax
lea eax, [ebp - 0x5d8]
push eax
push ecx
jmp 0x414d67
test eax, eax
jne 0x414d4d
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x5d8]
push eax
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x414d55
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x24]
push str.DisplayName
call fcn.0040d13a
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0xb4]
mov dword [esp], str.Publisher
call fcn.0040d13a
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x9c]
mov dword [esp], str.DisplayVersion
call fcn.0040d13a
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x84]
mov dword [esp], str.InstallLocation
call fcn.0040d13a
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x6c]
mov dword [esp], str.InstallDate
call fcn.0040d13a
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x54]
mov dword [esp], str.UninstallString
call fcn.0040d13a
pop ecx
lea ecx, [ebp - 0x24]
call fcn.00406694
test al, al
jne 0x414d0b
push 0x459bd0
mov ecx, 0x45f170
lea eax, [ebp - 0x54]
push ecx
push eax
push ecx
lea eax, [ebp - 0x84]
push eax
push ecx
lea eax, [ebp - 0xb4]
push eax
push ecx
lea eax, [ebp - 0x6c]
push eax
push ecx
lea eax, [ebp - 0x9c]
push eax
push ecx
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x1d4]
call fcn.00406b7e
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1bc]
call fcn.0040944c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1a4]
call fcn.00407d3f
pop ecx
mov edx, eax
lea ecx, [ebp - 0x18c]
call fcn.0040944c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x174]
call fcn.00407d3f
pop ecx
mov edx, eax
lea ecx, [ebp - 0x15c]
call fcn.0040944c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x144]
call fcn.00407d3f
pop ecx
mov edx, eax
lea ecx, [ebp - 0x12c]
call fcn.0040944c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x114]
call fcn.00407d3f
pop ecx
mov edx, eax
lea ecx, [ebp - 0xfc]
call fcn.0040944c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe4]
call fcn.00407d3f
pop ecx
mov edx, eax
lea ecx, [ebp - 0xcc]
call fcn.00407d3f
pop ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.004064e2
lea ecx, [ebp - 0xcc]
call fcn.0040351f
lea ecx, [ebp - 0xe4]
call fcn.0040351f
lea ecx, [ebp - 0xfc]
call fcn.0040351f
lea ecx, [ebp - 0x114]
call fcn.0040351f
lea ecx, [ebp - 0x12c]
call fcn.0040351f
lea ecx, [ebp - 0x144]
call fcn.0040351f
lea ecx, [ebp - 0x15c]
call fcn.0040351f
lea ecx, [ebp - 0x174]
call fcn.0040351f
lea ecx, [ebp - 0x18c]
call fcn.0040351f
lea ecx, [ebp - 0x1a4]
call fcn.0040351f
lea ecx, [ebp - 0x1bc]
call fcn.0040351f
lea ecx, [ebp - 0x1d4]
call fcn.0040351f
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x54]
call fcn.0040351f
lea ecx, [ebp - 0x6c]
call fcn.0040351f
lea ecx, [ebp - 0x84]
call fcn.0040351f
lea ecx, [ebp - 0x9c]
call fcn.0040351f
lea ecx, [ebp - 0xb4]
call fcn.0040351f
lea ecx, [ebp - 0x24]
call fcn.0040351f
inc edi
mov dword [ebp - 0xc], 0x400
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5d8]
push eax
push edi
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
jne 0x414af9
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.00406567
lea ecx, [ebp - 0x3c]
call fcn.0040351f
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret