Function at 0x479aa0
Capabilities:
Get common file path
Get program files directory
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4961c8
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x4a93dc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x206
mov dword [ebp - 0x2ac], ecx
xor esi, esi
mov dword [ebp - 0x2b0], eax
lea ecx, [ebp - 0x216]
xor eax, eax
push esi
push ecx
mov dword [ebp - 0x2b4], edx
mov word [ebp - 0x218], ax
call fcn.00489270
mov eax, 7
xor edx, edx
add esp, 0xc
mov dword [ebp - 0x2b8], 0x208
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x294], esi
mov word [ebp - 0x2a4], dx
mov dword [ebp - 4], esi
xor ecx, ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x224], esi
mov word [ebp - 0x234], cx
mov byte [ebp - 4], 1
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x240], esi
push 0x33
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea esi, [ebp - 0x250]
mov word [ebp - 0x250], dx
call fcn.00401d40
mov eax, esi
lea ebx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00479240
push eax
mov eax, str.updater
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 3
call fcn.00478740
add esp, 4
mov edi, eax
lea esi, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.004019e0
mov esi, 8
cmp dword [ebp - 0x274], esi
jb 0x479bbe
mov eax, dword [ebp - 0x288]
push eax
call fcn.00480861
add esp, 4
xor edi, edi
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], edi
mov word [ebp - 0x288], cx
cmp dword [ebp - 0x258], esi
jb 0x479bf1
mov edx, dword [ebp - 0x26c]
push edx
call fcn.00480861
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], edi
mov word [ebp - 0x26c], ax
cmp dword [ebp - 0x23c], esi
jb 0x479c21
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.00480861
add esp, 4
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], esi
jae 0x479c35
lea eax, [ebp - 0x234]
lea edx, [ebp - 0x2a8]
push edx
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x479d52
mov edx, dword [ebp - 0x2a8]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x218]
push ecx
push edi
push edi
push str.Install_Location
push edx
call ebx
mov edi, eax
test edi, edi
jne 0x479cfd
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479c87
mov esi, dword [ebp - 0x2b0]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
call fcn.00401d40
mov edx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0
push 0
push str.StartSubDir
push edx
call ebx
mov edi, eax
test edi, edi
jne 0x479cf8
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479cd7
mov esi, dword [ebp - 0x2ac]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
call fcn.00401d40
mov esi, 8
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x479d4b
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479d17
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
lea esi, [ebp - 0x2a4]
call fcn.00401d40
mov ecx, dword [ebp - 0x2b4]
mov byte [ecx], 1
mov ebx, 7
jmp 0x479edb
mov ebx, 7
xor edi, edi
mov edx, dword [ebp - 0x2b4]
cmp byte [edx], 0
jne 0x479ee2
mov ecx, dword [0x4acac8]
push edi
push 0x26
lea eax, [ebp - 0x218]
push eax
push ecx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x479dc9
cmp dword [ebp - 0x220], esi
jb 0x479d93
mov edx, dword [ebp - 0x234]
push edx
call fcn.00480861
add esp, 4
xor eax, eax
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], edi
mov word [ebp - 0x234], ax
cmp dword [ebp - 0x290], esi
jb 0x479dbf
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.00480861
add esp, 4
mov eax, 1
jmp 0x479f27
xor edx, edx
lea eax, [ebp - 0x218]
mov word [ebp - 0x250], dx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x240], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x479de7
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
lea esi, [ebp - 0x250]
call fcn.00401d40
mov eax, esi
push eax
mov eax, 0x49a32c
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 5
call fcn.00478740
push eax
mov eax, str.SPDUpdater
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 6
call fcn.00478740
add esp, 8
mov esi, dword [ebp - 0x2b0]
mov edi, eax
mov byte [ebp - 4], 7
call fcn.004019e0
mov esi, 8
cmp dword [ebp - 0x258], esi
jb 0x479e64
mov ecx, dword [ebp - 0x26c]
push ecx
call fcn.00480861
add esp, 4
xor ebx, ebx
xor edx, edx
mov edi, 7
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x25c], ebx
mov word [ebp - 0x26c], dx
cmp dword [ebp - 0x274], esi
jb 0x479e97
mov eax, dword [ebp - 0x288]
push eax
call fcn.00480861
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 1
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x278], ebx
mov word [ebp - 0x288], cx
cmp dword [ebp - 0x23c], esi
jb 0x479ec7
mov edx, dword [ebp - 0x250]
push edx
call fcn.00480861
add esp, 4
mov esi, dword [ebp - 0x2ac]
push 0xa
mov eax, str.SPDUpdater
call fcn.00401d40
mov ebx, edi
xor edi, edi
mov esi, 8
cmp dword [ebp - 0x220], esi
jb 0x479ef9
mov eax, dword [ebp - 0x234]
push eax
call fcn.00480861
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], edi
mov word [ebp - 0x234], cx
cmp dword [ebp - 0x290], esi
jb 0x479f25
mov edx, dword [ebp - 0x2a4]
push edx
call fcn.00480861
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048036c
mov esp, ebp
pop ebp
ret