Function at 0x4050f0
Capabilities:
Delete registry key

Disassembly:
push 0x44
mov eax, 0x4ab348
call fcn.0046ac73
mov edi, ecx
mov dword [ebp - 0x48], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0040caf0
push ebx
lea esi, [edi + 0x590]
push str._dUI
mov ecx, esi
call main
xor edx, edx
mov ecx, esi
cmp eax, 0xffffffff
push ebx
setne dl
push str._mUI
mov dword [edi + 0x27c], edx
call main
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [edi + 0xd8], ecx
je 0x40514f
mov dword [edi + 0x27c], ebx
cmp dword [edi + 0xf4], ebx
je 0x405162
xor ebx, ebx
inc ebx
mov dword [edi + 0x27c], ebx
jmp 0x405165
xor ebx, ebx
inc ebx
call fcn.00450db1
push eax
lea ecx, [ebp - 0x20]
call main
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
push ecx
lea ecx, [edi + 0x58c]
call fcn.0041a012
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
jne 0x405242
cmp dword [edi + 0x27c], 0
jne 0x40520e
call fcn.00450db1
push eax
lea ecx, [ebp - 0x1c]
call main
push 0x4cc81c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d2ec
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call main
push 0
push 0x4cbbd0
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
pop ecx
call fcn.004174f1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4c
jmp 0x405b62
cmp dword [edi + 0xf4], 0
je 0x4052f1
push 0x4cc898
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x44]
push 0x4cead0
push eax
call fcn.004023f1
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call main
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0
push 0x200
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
test eax, eax
je 0x4052e3
cmp eax, 2
je 0x4052e3
push str.failed_to_cleanup_leftover_registry:
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 7
push eax
push 2
lea edx, [ebp - 0x28]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [edi + 0x1c0], 0
lea eax, [ebp - 0x44]
and dword [ebp - 0x24], 0
mov edx, 0x4cc898
and dword [ebp - 0x44], 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x24]
mov dword [edi + 0x230], ebx
push eax
push str.iTestDisablePings
call main
add esp, 0xc
test eax, eax
jne 0x405361
cmp dword [ebp - 0x24], ebx
jne 0x405361
and dword [edi + 0x230], eax
lea ecx, [ebp - 0x28]
push str.Pings_disabled_in_ARM_registry_by_iTestDisablePings
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 8
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [edi + 0x58c]
call fcn.00403251
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4053b9
push eax
call main
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], edx
mov dword [esp], str.iStartTime
call fcn.00402829
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x44]
push 0
call fcn.0044ceef
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0xa
call dword [sym.imp.kernel32.dll_Sleep]
mov eax, dword [ebp - 0x18]
mov ecx, 0x30d42
mov byte [ebp - 0x11], 0
test eax, eax
lea edx, [ecx + 2]
cmovne ecx, edx
lea edx, [ebp - 0x11]
call fcn.0044cc8b
call fcn.004450f3
test eax, eax
je 0x40540f
push str.Will_not_continue_for_Guest_User
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
pop ecx
call fcn.004174f1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4a
jmp 0x405b62
cmp dword [ebp - 0x18], 0
jne 0x40545b
cmp dword [edi + 0xf8], 0
jne 0x40545b
lea edx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ecx, 0x30d46
call fcn.0044cc8b
push str.iStandardUser
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
mov edx, ebx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.0044ceef
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [edi + 0x27c], 0
mov eax, 0xcc
lea ecx, [eax + 3]
cmovne eax, ecx
lea ecx, [edi + 0x574]
push eax
call fcn.00416b12
test eax, eax
je 0x4054b1
push str.cannot_continue__another_ARM_instance_is_in_use
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
pop ecx
call fcn.004174f1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x1d524
jmp 0x405b62
call fcn.00445026
cmp dword [ebp - 0x18], 0
mov dword [ebp - 0x3c], eax
je 0x4055a7
test eax, eax
jne 0x4055a7
lea ecx, [ebp - 0x28]
push str.Not_elevated_for_OnDemand_installation_after_relaunch
cmp dword [edi + 0x27c], eax
jne 0x40557b
call fcn.00402829
mov byte [ebp - 4], 0xd
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1d4c0
lea ecx, [edi + 0x558]
call fcn.00415683
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
call fcn.00450db1
push eax
lea ecx, [ebp - 0x1c]
call main
push 0x4cc81c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d2ec
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Not_elevated_after_relaunch
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call main
push 0
push 0x4cbbd0
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1c]
jmp 0x405595
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
pop ecx
call fcn.004174f1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4e
jmp 0x405b62
mov ecx, edi
mov dword [edi + 0x120], ebx
mov dword [edi + 0xd4], ebx
call fcn.00404675
test eax, eax
jne 0x4055eb
push str.continue_without_listener
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [ebp - 0x18], 0
mov eax, ebx
push 8
pop ecx
cmovne eax, ecx
cmp dword [edi + 0x27c], 0
mov dword [edi + 0x11c], eax
jne 0x40561b
mov ecx, edi
call fcn.0040c032
test eax, eax
jne 0x40561b
mov ebx, 0x23f
jmp 0x405b62
lea ecx, [edi + 0x2cc]
call fcn.00420c14
test eax, eax
jne 0x40565d
push str.unable_to_initialize_download
lea ecx, [ebp - 0x28]
call fcn.00402829
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
push 0x1b38c
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
mov ebx, eax
call fcn.00402e64
jmp 0x405b62
cmp dword [ebp - 0x18], 0
jne 0x405670
lea ecx, [edi + 0x2cc]
call fcn.004268f2
jmp 0x405672
mov eax, ebx
cmp dword [edi + 0xe8], 0
je 0x4056a1
push str.User_canceled_manifest_download
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
push eax
push 0x187cc
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x1c]
jmp 0x40564e
test eax, eax
jne 0x4056cb
push str.unable_to_download_OnDemand_manifest
lea ecx, [ebp - 0x18]
call fcn.00402829
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x14
push eax
push 0x2240c
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x18]
jmp 0x40564e
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], vtable.CManifest.0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.0042feca
test eax, eax
je 0x40570f
push str.Process_OnDemand_Manifest_error
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
push eax
push 0x1fc34
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x2c]
jmp 0x405a49
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40574a
push str.sProductCode
lea ecx, [ebp - 0x2c]
call fcn.00402829
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2c]
push dword [edi + 0x1ac]
xor edx, edx
call fcn.0044ceef
pop ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], ebx
jne 0x405756
and dword [edi + 0x230], 0
test eax, eax
jne 0x4057a8
cmp dword [edi + 0xf8], eax
jne 0x4057a8
cmp dword [edi + 0x280], eax
je 0x4057a8
push str.Standard_User_not_allowed
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
push eax
push 0x1d4c0
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042f542
mov ebx, 0x30d48
jmp 0x405b62
cmp dword [edi + 0x13c], ebx
jge 0x4057d9
push str.No_files_in_Session
lea ecx, [ebp - 0x30]
call fcn.00402829
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x19
push eax
push 0x1fcfc
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x30]
jmp 0x405a49
call fcn.00450db1
push eax
lea ecx, [ebp - 0x1c]
call main
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
and dword [ebp - 0x44], 0
mov edx, 0x4cc898
push eax
lea eax, [ebp - 0x1c]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
push str.OnDemandBaseURL
call main
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp dword [eax - 0xc], 0
je 0x4058b8
push str.Will_use_registered_OnDemandBaseURL:
lea ecx, [ebp - 0x30]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
push eax
push 2
lea edx, [ebp - 0x30]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
xor eax, eax
lea ecx, [edi + 0x134]
mov dword [ebp - 0x30], eax
cmp eax, dword [ecx + 8]
jge 0x4058b5
push eax
call main
mov dword [ebp - 0x44], eax
mov eax, dword [eax]
test eax, eax
je 0x4058af
mov eax, dword [eax + 0xc]
sub eax, 0x10
push eax
call main
add eax, 0x10
pop ecx
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c]
call fcn.0041802b
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ecx + 0xc]
call main
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x30]
inc eax
jmp 0x405850
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0x15
call fcn.00402e64
cmp dword [edi + 0xe8], 0
je 0x4058f6
push str.User_canceled
lea ecx, [ebp - 0x34]
call fcn.00402829
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
push eax
push 0x187cc
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x34]
jmp 0x405a49
cmp dword [ebp - 0x18], 0
jne 0x4059ae
push ecx
push 6
mov ecx, edi
call main
mov ecx, edi
call fcn.0040716e
cmp dword [edi + 0xe8], 0
je 0x405943
push str.User_canceled_download_payload
lea ecx, [ebp - 0x38]
call fcn.00402829
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push eax
push 0x187cc
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x38]
jmp 0x405a49
test eax, eax
jne 0x405970
push str.unable_to_download_payload
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
push eax
push 0x2240c
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x3c]
jmp 0x405a49
call fcn.004483e8
test eax, eax
je 0x4059ae
mov ebx, 0x652
push ebx
call dword [sym.imp.kernel32.dll_SetLastError]
push 0x4cead4
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x20
push eax
push 0x249f0
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x3c]
jmp 0x405a4b
mov ecx, edi
call fcn.004072d8
test eax, eax
jne 0x4059d5
push str.unable_to_initialize_installation
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
push 0x2bf84
jmp 0x405a3f
cmp dword [ebp - 0x18], 0
jne 0x405aa6
cmp dword [edi + 0x27c], 0
jne 0x405a58
cmp dword [edi + 0x598], 0
jne 0x4059fe
lea ecx, [ebp - 0x50]
call fcn.0042f542
jmp 0x405611
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], bl
call fcn.00411108
call fcn.004388bb
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ebx, eax
call fcn.00411108
cmp ebx, 2
jne 0x405aa6
push str.User_canceled_Files_In_Use
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x22
push eax
push 0x187cc
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x44]
mov ebx, eax
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x405b5a
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
push eax
lea edx, [ebp - 0x38]
mov ecx, 0x3e8
call fcn.00438bc5
pop ecx
cmp eax, 3
jne 0x405aa6
push str.Aborting__not_ignorable_file_is_in_use
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
pop ecx
call fcn.004174f1
pop ecx
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov edi, 0x30d52
jmp 0x405b9a
cmp dword [ebp - 0x3c], 0
je 0x405afa
and dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
mov ecx, edi
call fcn.0040759a
test eax, eax
jne 0x405ae8
push str.ExecuteInstalls_failed
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x24
push eax
push 0x249f0
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x44]
jmp 0x405b90
mov ebx, dword [edi + 0xdc]
neg ebx
sbb ebx, ebx
and ebx, 0xbc2
jmp 0x405b4d
push ecx
push 7
mov ecx, edi
call main
push ecx
mov ecx, edi
call fcn.00408255
test eax, eax
jne 0x405b1e
mov ecx, edi
call fcn.0040ca50
mov edi, 0xbc3
jmp 0x405b9a
cmp eax, 5
jne 0x405b6c
cmp dword [edi + 0xd8], 0
mov ebx, 0x30d50
je 0x405b4d
mov ecx, dword [edi + 0x598]
test ecx, ecx
je 0x405b4d
call fcn.00413b22
mov ecx, dword [edi + 0x598]
push 1
call fcn.00414546
push dword [edi + 0x11c]
mov ecx, edi
call fcn.0040c28a
lea ecx, [ebp - 0x50]
call fcn.0042f542
lea ecx, [esi - 0x10]
call fcn.00402e64
jmp 0x405bc6
push str.Relaunch_failed
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
push eax
push 0x271c8
mov ecx, edi
call fcn.004096cb
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
mov edi, eax
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042f542
lea ecx, [esi - 0x10]
call fcn.00402e64
mov eax, edi
jmp 0x405bc8
mov eax, ebx
call fcn.0046abd1
ret