Function at 0x452bf0
Capabilities:
Get installed programs
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x8d
push 0
push 0
dec ecx
jne 0x452bf9
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov edi, edx
mov esi, eax
xor eax, eax
push ebp
push 0x452fad
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.004059a8
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push edi
push esi
call sub.advapi32.dll_RegOpenKeyExW
test eax, eax
jne 0x452eff
xor esi, esi
mov dword [ebp - 4], 0x412
lea eax, [ebp - 0x41a]
xor ecx, ecx
mov edx, 0x412
call fcn.0040396c
jmp 0x452ece
push dword [ebx]
push 0x452fc4
push 0x452fcc
lea eax, [ebp - 0x420]
push eax
push 0x452fec
lea eax, [ebp - 0x42c]
lea edx, [ebp - 0x41a]
mov ecx, 0x209
call fcn.004054bc
push dword [ebp - 0x42c]
push 0x45302c
lea eax, [ebp - 0x428]
mov edx, 3
call fcn.004055e4
mov edx, dword [ebp - 0x428]
lea eax, [ebp - 0x424]
call fcn.00405b54
mov edx, dword [ebp - 0x424]
mov ecx, 1
mov eax, 0x80000002
call fcn.00452b14
push dword [ebp - 0x420]
push 0x453034
push 0x45303c
lea eax, [ebp - 0x430]
push eax
push 0x452fec
lea eax, [ebp - 0x43c]
lea edx, [ebp - 0x41a]
mov ecx, 0x209
call fcn.004054bc
push dword [ebp - 0x43c]
push 0x45302c
lea eax, [ebp - 0x438]
mov edx, 3
call fcn.004055e4
mov edx, dword [ebp - 0x438]
lea eax, [ebp - 0x434]
call fcn.00405b54
mov edx, dword [ebp - 0x434]
mov ecx, 1
mov eax, 0x80000002
call fcn.00452b14
push dword [ebp - 0x430]
push 0x453034
push 0x453060
lea eax, [ebp - 0x440]
push eax
push 0x452fec
lea eax, [ebp - 0x44c]
lea edx, [ebp - 0x41a]
mov ecx, 0x209
call fcn.004054bc
push dword [ebp - 0x44c]
push 0x45302c
lea eax, [ebp - 0x448]
mov edx, 3
call fcn.004055e4
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x444]
call fcn.00405b54
mov edx, dword [ebp - 0x444]
mov ecx, 1
mov eax, 0x80000002
call fcn.00452b14
push dword [ebp - 0x440]
push 0x453034
push 0x453078
lea eax, [ebp - 0x450]
push eax
push 0x452fec
lea eax, [ebp - 0x45c]
lea edx, [ebp - 0x41a]
mov ecx, 0x209
call fcn.004054bc
push dword [ebp - 0x45c]
push 0x45302c
lea eax, [ebp - 0x458]
mov edx, 3
call fcn.004055e4
mov edx, dword [ebp - 0x458]
lea eax, [ebp - 0x454]
call fcn.00405b54
mov edx, dword [ebp - 0x454]
mov ecx, 1
mov eax, 0x80000002
call fcn.00452b14
push dword [ebp - 0x450]
push 0x453034
push 0x45309c
lea eax, [ebp - 0x460]
push eax
push 0x452fec
lea eax, [ebp - 0x46c]
lea edx, [ebp - 0x41a]
mov ecx, 0x209
call fcn.004054bc
push dword [ebp - 0x46c]
push 0x45302c
lea eax, [ebp - 0x468]
mov edx, 3
call fcn.004055e4
mov edx, dword [ebp - 0x468]
lea eax, [ebp - 0x464]
call fcn.00405b54
mov edx, dword [ebp - 0x464]
mov ecx, 1
mov eax, 0x80000002
call fcn.00452b14
push dword [ebp - 0x460]
mov eax, ebx
mov edx, 0xb
call fcn.00405c50
mov eax, ebx
mov edx, 0x453034
call fcn.00405b80
lea eax, [ebp - 0x41a]
xor ecx, ecx
mov edx, 0x412
call fcn.0040396c
mov dword [ebp - 4], 0x412
inc esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x41a]
push eax
push esi
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegEnumKeyExW
cmp eax, 0x103
jne 0x452c5b
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegCloseKey
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x452fb7
lea eax, [ebp - 0x46c]
mov edx, 2
call fcn.00405258
lea eax, [ebp - 0x464]
mov edx, 2
call fcn.004059c0
lea eax, [ebp - 0x45c]
mov edx, 2
call fcn.00405258
lea eax, [ebp - 0x454]
mov edx, 2
call fcn.004059c0
lea eax, [ebp - 0x44c]
mov edx, 2
call fcn.00405258
lea eax, [ebp - 0x444]
mov edx, 2
call fcn.004059c0
lea eax, [ebp - 0x43c]
mov edx, 2
call fcn.00405258
lea eax, [ebp - 0x434]
mov edx, 2
call fcn.004059c0
lea eax, [ebp - 0x42c]
mov edx, 2
call fcn.00405258
lea eax, [ebp - 0x424]
mov edx, 2
call fcn.004059c0
ret