Function at 0x403df0
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x428
push ebx
push ebp
push esi
push edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor eax, eax
xor ebx, ebx
mov byte [esp + 0x38], bl
mov ecx, 0xff
lea edi, [esp + 0x39]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x29], eax
push 0x2001f
mov dword [esp + 0x31], eax
push ebx
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
xor ebp, ebp
push 0x80000001
mov dword [esp + 0x24], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x49], al
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x403f31
mov edx, dword [esp + 0x14]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x14]
push eax
push str.DisPlayVersion
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0x400
call fcn.00403cc0
test eax, eax
jne 0x403f26
lea edi, [esp + 0x38]
mov edx, edi
push 0x4207a4
push edx
call fcn.0040e260
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x403f03
lea ebp, [esp + 0x24]
lea esp, [esp]
cmp ebx, 3
jge 0x403eff
cmp edi, esi
je 0x403eda
mov eax, edi
mov ecx, ebp
lea ecx, [ecx]
mov dl, byte [eax]
mov byte [ecx], dl
inc ecx
inc eax
cmp eax, esi
jne 0x403ed0
push ebp
call fcn.0040db34
lea edi, [esi + 1]
push 0x4207a4
push edi
mov dword [esp + ebx*4 + 0x24], eax
call fcn.0040e260
add esp, 0xc
mov esi, eax
inc ebx
add ebp, 6
test esi, esi
jne 0x403ec0
mov ebp, dword [esp + 0x18]
cmp ebp, 6
jne 0x403f26
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x403f26
cmp dword [esp + 0x20], 0x1d8
jge 0x403f26
mov dword [esp + 0x18], 5
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
test eax, eax
jmp 0x40402e
lea eax, [esp + 0x14]
push eax
push 0x2001f
push ebx
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallChromium
push 0x80000001
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x403f5d
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
jmp 0x403e73
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
push 0x80000002
lea ecx, [esp + 0x1c]
call fcn.00402fe0
test eax, eax
je 0x403f99
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallChromium
push 0x80000002
lea ecx, [esp + 0x1c]
call fcn.00402fe0
test eax, eax
jne 0x404028
lea edx, [esp + 0x14]
push edx
push str.DisPlayVersion
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0x400
call fcn.00403cc0
test eax, eax
jne 0x403f26
lea edi, [esp + 0x38]
mov ecx, edi
push 0x4207a4
push ecx
call fcn.0040e260
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x403f03
lea ebp, [esp + 0x24]
cmp ebx, 3
jge 0x403eff
cmp edi, esi
je 0x403ffe
mov eax, edi
mov ecx, ebp
mov dl, byte [eax]
mov byte [ecx], dl
inc ecx
inc eax
cmp eax, esi
jne 0x403ff4
push ebp
call fcn.0040db34
lea edi, [esi + 1]
push 0x4207a4
push edi
mov dword [esp + ebx*4 + 0x24], eax
call fcn.0040e260
add esp, 0xc
mov esi, eax
inc ebx
add ebp, 6
test esi, esi
jne 0x403fe3
jmp 0x403eff
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x404037
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret