Function at 0x403da0
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x428
push ebx
push ebp
push esi
push edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor eax, eax
xor ebx, ebx
mov byte [esp + 0x38], bl
mov ecx, 0xff
lea edi, [esp + 0x39]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x29], eax
push 0x2001f
mov dword [esp + 0x31], eax
push ebx
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
xor ebp, ebp
push SysReAllocString
mov dword [esp + 0x24], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x49], al
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x403ee1
mov edx, dword [esp + 0x14]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x14]
push eax
push str.DisPlayVersion
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0x400
call fcn.00403c70
test eax, eax
jne 0x403ed6
lea edi, [esp + 0x38]
mov edx, edi
push 0x41f784
push edx
call fcn.0040e0b0
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x403eb3
lea ebp, [esp + 0x24]
lea esp, [esp]
cmp ebx, 3
jge 0x403eaf
cmp edi, esi
je 0x403e8a
mov eax, edi
mov ecx, ebp
lea ecx, [ecx]
mov dl, byte [eax]
mov byte [ecx], dl
inc ecx
inc eax
cmp eax, esi
jne 0x403e80
push ebp
call fcn.0040d984
lea edi, [esi + 1]
push 0x41f784
push edi
mov dword [esp + ebx*4 + 0x24], eax
call fcn.0040e0b0
add esp, 0xc
mov esi, eax
inc ebx
add ebp, 6
test esi, esi
jne 0x403e70
mov ebp, dword [esp + 0x18]
cmp ebp, 6
jne 0x403ed6
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x403ed6
cmp dword [esp + 0x20], 0x1d8
jge 0x403ed6
mov dword [esp + 0x18], 5
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
test eax, eax
jmp 0x403fde
lea eax, [esp + 0x14]
push eax
push 0x2001f
push ebx
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallChromium
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x403f0d
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
jmp 0x403e23
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x1c]
call fcn.00402f90
test eax, eax
je 0x403f49
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallChromium
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x1c]
call fcn.00402f90
test eax, eax
jne 0x403fd8
lea edx, [esp + 0x14]
push edx
push str.DisPlayVersion
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0x400
call fcn.00403c70
test eax, eax
jne 0x403ed6
lea edi, [esp + 0x38]
mov ecx, edi
push 0x41f784
push ecx
call fcn.0040e0b0
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x403eb3
lea ebp, [esp + 0x24]
cmp ebx, 3
jge 0x403eaf
cmp edi, esi
je 0x403fae
mov eax, edi
mov ecx, ebp
mov dl, byte [eax]
mov byte [ecx], dl
inc ecx
inc eax
cmp eax, esi
jne 0x403fa4
push ebp
call fcn.0040d984
lea edi, [esi + 1]
push 0x41f784
push edi
mov dword [esp + ebx*4 + 0x24], eax
call fcn.0040e0b0
add esp, 0xc
mov esi, eax
inc ebx
add ebp, 6
test esi, esi
jne 0x403f93
jmp 0x403eaf
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x403fe7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret