Function at 0x479a00
Capabilities:
Get common file path
Get program files directory
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x495ef8
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x4a93dc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x206
mov dword [ebp - 0x2ac], ecx
xor esi, esi
mov dword [ebp - 0x2b0], eax
lea ecx, [ebp - 0x216]
xor eax, eax
push esi
push ecx
mov dword [ebp - 0x2b4], edx
mov word [ebp - 0x218], ax
call fcn.00489020
mov eax, 7
xor edx, edx
add esp, 0xc
mov dword [ebp - 0x2b8], 0x208
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x294], esi
mov word [ebp - 0x2a4], dx
mov dword [ebp - 4], esi
xor ecx, ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x224], esi
mov word [ebp - 0x234], cx
mov byte [ebp - 4], 1
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x240], esi
push 0x33
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea esi, [ebp - 0x250]
mov word [ebp - 0x250], dx
call fcn.00401d90
mov eax, esi
lea ebx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.004791a0
push eax
mov eax, str.MintCastNetworks_updater
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 3
call fcn.00478670
add esp, 4
mov edi, eax
lea esi, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.00401a30
mov esi, 8
cmp dword [ebp - 0x274], esi
jb 0x479b1e
mov eax, dword [ebp - 0x288]
push eax
call fcn.00480641
add esp, 4
xor edi, edi
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], edi
mov word [ebp - 0x288], cx
cmp dword [ebp - 0x258], esi
jb 0x479b51
mov edx, dword [ebp - 0x26c]
push edx
call fcn.00480641
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], edi
mov word [ebp - 0x26c], ax
cmp dword [ebp - 0x23c], esi
jb 0x479b81
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.00480641
add esp, 4
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], esi
jae 0x479b95
lea eax, [ebp - 0x234]
lea edx, [ebp - 0x2a8]
push edx
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x479cab
mov edx, dword [ebp - 0x2a8]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x218]
push ecx
push edi
push edi
push str.Install_Location
push edx
call ebx
mov edi, eax
test edi, edi
jne 0x479c5d
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479be7
mov esi, dword [ebp - 0x2b0]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
call fcn.00401d90
mov edx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0
push 0
push str.StartSubDir
push edx
call ebx
mov edi, eax
test edi, edi
jne 0x479c58
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479c37
mov esi, dword [ebp - 0x2ac]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
call fcn.00401d90
mov esi, 8
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x479ca6
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x479c77
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
lea esi, [ebp - 0x2a4]
call fcn.00401d90
mov ecx, dword [ebp - 0x2b4]
mov byte [ecx], 1
jmp 0x479e32
xor edi, edi
lea ebx, [edi + 7]
mov edx, dword [ebp - 0x2b4]
cmp byte [edx], 0
jne 0x479e3e
mov ecx, dword [0x4acac8]
push edi
push 0x26
lea eax, [ebp - 0x218]
push eax
push ecx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x479d22
cmp dword [ebp - 0x220], esi
jb 0x479cec
mov edx, dword [ebp - 0x234]
push edx
call fcn.00480641
add esp, 4
xor eax, eax
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], edi
mov word [ebp - 0x234], ax
cmp dword [ebp - 0x290], esi
jb 0x479d18
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.00480641
add esp, 4
mov eax, 1
jmp 0x479e83
xor edx, edx
lea eax, [ebp - 0x218]
mov word [ebp - 0x250], dx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x240], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x479d40
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
lea esi, [ebp - 0x250]
call fcn.00401d90
mov eax, esi
push eax
mov eax, 0x49a334
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 5
call fcn.00478670
push eax
mov eax, str.MintCastNetworks_updater
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 6
call fcn.00478670
add esp, 8
mov esi, dword [ebp - 0x2b0]
mov edi, eax
mov byte [ebp - 4], 7
call fcn.00401a30
mov esi, 8
cmp dword [ebp - 0x258], esi
jb 0x479dbd
mov ecx, dword [ebp - 0x26c]
push ecx
call fcn.00480641
add esp, 4
xor ebx, ebx
xor edx, edx
mov edi, 7
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x25c], ebx
mov word [ebp - 0x26c], dx
cmp dword [ebp - 0x274], esi
jb 0x479df0
mov eax, dword [ebp - 0x288]
push eax
call fcn.00480641
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 1
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x278], ebx
mov word [ebp - 0x288], cx
cmp dword [ebp - 0x23c], esi
jb 0x479e20
mov edx, dword [ebp - 0x250]
push edx
call fcn.00480641
add esp, 4
mov esi, dword [ebp - 0x2ac]
push 0x18
mov eax, str.MintCastNetworks_updater
call fcn.00401d90
mov ebx, 7
xor edi, edi
mov esi, 8
cmp dword [ebp - 0x220], esi
jb 0x479e55
mov eax, dword [ebp - 0x234]
push eax
call fcn.00480641
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], edi
mov word [ebp - 0x234], cx
cmp dword [ebp - 0x290], esi
jb 0x479e81
mov edx, dword [ebp - 0x2a4]
push edx
call fcn.00480641
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048014c
mov esp, ebp
pop ebp
ret