Function at 0x405490
Capabilities:
Delete registry key

Disassembly:
push 0x44
mov eax, 0x4a9a78
call fcn.00469013
mov edi, ecx
mov dword [ebp - 0x48], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0040ba20
push ebx
lea esi, [edi + 0x580]
push str._dUI
mov ecx, esi
call fcn.0040944e
xor edx, edx
mov ecx, esi
cmp eax, 0xffffffff
push ebx
setne dl
push str._mUI
mov dword [edi + 0x260], edx
call fcn.0040944e
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [edi + 0xd8], ecx
je 0x4054ef
mov dword [edi + 0x260], ebx
cmp dword [edi + 0xf4], ebx
je 0x405502
xor ebx, ebx
inc ebx
mov dword [edi + 0x260], ebx
jmp 0x405505
xor ebx, ebx
inc ebx
call fcn.0044f181
push eax
lea ecx, [ebp - 0x20]
call fcn.00402899
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
push ecx
lea ecx, [edi + 0x57c]
call fcn.004163b2
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
jne 0x4055e2
cmp dword [edi + 0x260], 0
jne 0x4055ae
call fcn.0044f181
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4ca8ac
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040c21c
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.00409488
push 0
push 0x4c9c38
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
pop ecx
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4c
jmp 0x405f02
cmp dword [edi + 0xf4], 0
je 0x405691
push 0x4ca238
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x44]
push 0x4cc6b0
push eax
call fcn.004023f1
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.004025c6
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0
push 0x200
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
test eax, eax
je 0x405683
cmp eax, 2
je 0x405683
push str.failed_to_cleanup_leftover_registry:
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 7
push eax
push 2
lea edx, [ebp - 0x28]
pop ecx
call fcn.004130a0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [edi + 0x1b8], 0
lea eax, [ebp - 0x44]
and dword [ebp - 0x24], 0
mov edx, 0x4ca238
and dword [ebp - 0x44], 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x24]
mov dword [edi + 0x21c], ebx
push eax
push str.iTestDisablePings
call fcn.0043fc1c
add esp, 0xc
test eax, eax
jne 0x405701
cmp dword [ebp - 0x24], ebx
jne 0x405701
and dword [edi + 0x21c], eax
lea ecx, [ebp - 0x28]
push str.Pings_disabled_in_ARM_registry_by_iTestDisablePings
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 8
pop ecx
call fcn.004137d1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [edi + 0x57c]
call fcn.00403251
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x405759
push eax
call fcn.00487ace
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], edx
mov dword [esp], str.iStartTime
call fcn.00402829
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x44]
push 0
call fcn.00449e8a
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
mov ecx, 0x30d42
mov byte [ebp - 0x11], 0
test eax, eax
lea edx, [ecx + 2]
cmovne ecx, edx
lea edx, [ebp - 0x11]
call fcn.00449c26
call fcn.00440a2b
test eax, eax
je 0x4057af
push str.Will_not_continue_for_Guest_User
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
pop ecx
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4a
jmp 0x405f02
cmp dword [ebp - 0x18], 0
jne 0x4057fb
cmp dword [edi + 0xf8], 0
jne 0x4057fb
lea edx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ecx, 0x30d46
call fcn.00449c26
push str.iStandardUser
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
mov edx, ebx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00449e8a
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [edi + 0x260], 0
mov eax, 0xcc
lea ecx, [eax + 3]
cmovne eax, ecx
lea ecx, [edi + 0x564]
push eax
call fcn.00412db2
test eax, eax
je 0x405851
push str.cannot_continue__another_ARM_instance_is_in_use
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
pop ecx
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x1d524
jmp 0x405f02
call fcn.0044095e
cmp dword [ebp - 0x18], 0
mov dword [ebp - 0x3c], eax
je 0x405947
test eax, eax
jne 0x405947
lea ecx, [ebp - 0x28]
push str.Not_elevated_for_OnDemand_installation_after_relaunch
cmp dword [edi + 0x260], eax
jne 0x40591b
call fcn.00402829
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1d4c0
lea ecx, [edi + 0x548]
call fcn.00411723
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
call fcn.0044f181
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4ca8ac
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040c21c
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Not_elevated_after_relaunch
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.00409488
push 0
push 0x4c9c38
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1c]
jmp 0x405935
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
pop ecx
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4e
jmp 0x405f02
mov ecx, edi
mov dword [edi + 0x120], ebx
mov dword [edi + 0xd4], ebx
call fcn.00404b21
test eax, eax
jne 0x40598b
push str.continue_without_listener
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
pop ecx
call fcn.004137d1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [ebp - 0x18], 0
mov eax, ebx
push 8
pop ecx
cmovne eax, ecx
cmp dword [edi + 0x260], 0
mov dword [edi + 0x11c], eax
jne 0x4059bb
mov ecx, edi
call fcn.0040af5c
test eax, eax
jne 0x4059bb
mov ebx, 0x23f
jmp 0x405f02
lea ecx, [edi + 0x2bc]
call fcn.0041cf94
test eax, eax
jne 0x4059fd
push str.unable_to_initialize_download
lea ecx, [ebp - 0x28]
call fcn.00402829
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
push 0x1b38c
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
mov ebx, eax
call fcn.00402e64
jmp 0x405f02
cmp dword [ebp - 0x18], 0
jne 0x405a10
lea ecx, [edi + 0x2bc]
call fcn.004228c5
jmp 0x405a12
mov eax, ebx
cmp dword [edi + 0xe8], 0
je 0x405a41
push str.User_canceled_manifest_download
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
push eax
push 0x187cc
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x1c]
jmp 0x4059ee
test eax, eax
jne 0x405a6b
push str.unable_to_download_OnDemand_manifest
lea ecx, [ebp - 0x18]
call fcn.00402829
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x14
push eax
push 0x2240c
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x18]
jmp 0x4059ee
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], vtable.CManifest.0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.0042bbfc
test eax, eax
je 0x405aaf
push str.Process_OnDemand_Manifest_error
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
push eax
push 0x1fc34
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x2c]
jmp 0x405de9
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x405aea
push str.sProductCode
lea ecx, [ebp - 0x2c]
call fcn.00402829
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2c]
push dword [edi + 0x1a4]
xor edx, edx
call fcn.00449e8a
pop ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], ebx
jne 0x405af6
and dword [edi + 0x21c], 0
test eax, eax
jne 0x405b48
cmp dword [edi + 0xf8], eax
jne 0x405b48
cmp dword [edi + 0x264], eax
je 0x405b48
push str.Standard_User_not_allowed
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
push eax
push 0x1d4c0
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042b322
mov ebx, 0x30d48
jmp 0x405f02
cmp dword [edi + 0x13c], ebx
jge 0x405b79
push str.No_files_in_Session
lea ecx, [ebp - 0x30]
call fcn.00402829
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x19
push eax
push 0x1fcfc
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x30]
jmp 0x405de9
call fcn.0044f181
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
and dword [ebp - 0x44], 0
mov edx, 0x4ca238
push eax
lea eax, [ebp - 0x1c]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
push str.OnDemandBaseURL
call fcn.0043fb5d
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp dword [eax - 0xc], 0
je 0x405c58
push str.Will_use_registered_OnDemandBaseURL:
lea ecx, [ebp - 0x30]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
push eax
push 2
lea edx, [ebp - 0x30]
pop ecx
call fcn.004130a0
pop ecx
pop ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
xor eax, eax
lea ecx, [edi + 0x134]
mov dword [ebp - 0x30], eax
cmp eax, dword [ecx + 8]
jge 0x405c55
push eax
call fcn.004098b5
mov dword [ebp - 0x44], eax
mov eax, dword [eax]
test eax, eax
je 0x405c4f
mov eax, dword [eax + 0xc]
sub eax, 0x10
push eax
call fcn.00402d9f
add eax, 0x10
pop ecx
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c]
call fcn.004142d3
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ecx + 0xc]
call fcn.00402e14
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x30]
inc eax
jmp 0x405bf0
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0x15
call fcn.00402e64
cmp dword [edi + 0xe8], 0
je 0x405c96
push str.User_canceled
lea ecx, [ebp - 0x34]
call fcn.00402829
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
push eax
push 0x187cc
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x34]
jmp 0x405de9
cmp dword [ebp - 0x18], 0
jne 0x405d4e
push ecx
push 6
mov ecx, edi
call fcn.0040b9d2
mov ecx, edi
call fcn.0040757b
cmp dword [edi + 0xe8], 0
je 0x405ce3
push str.User_canceled_download_payload
lea ecx, [ebp - 0x38]
call fcn.00402829
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push eax
push 0x187cc
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x38]
jmp 0x405de9
test eax, eax
jne 0x405d10
push str.unable_to_download_payload
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
push eax
push 0x2240c
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x3c]
jmp 0x405de9
call fcn.00443bc5
test eax, eax
je 0x405d4e
mov ebx, 0x652
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x4cc6b4
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x20
push eax
push 0x249f0
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x3c]
jmp 0x405deb
mov ecx, edi
call fcn.0040767f
test eax, eax
jne 0x405d75
push str.unable_to_initialize_installation
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
push 0x2bf84
jmp 0x405ddf
cmp dword [ebp - 0x18], 0
jne 0x405e46
cmp dword [edi + 0x260], 0
jne 0x405df8
cmp dword [edi + 0x588], 0
jne 0x405d9e
lea ecx, [ebp - 0x50]
call fcn.0042b322
jmp 0x4059b1
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], bl
call fcn.0040d288
call fcn.004344eb
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ebx, eax
call fcn.0040d288
cmp ebx, 2
jne 0x405e46
push str.User_canceled_Files_In_Use
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x22
push eax
push 0x187cc
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x44]
mov ebx, eax
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x405efa
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
push eax
lea edx, [ebp - 0x38]
mov ecx, 0x3e8
call fcn.004347be
pop ecx
cmp eax, 3
jne 0x405e46
push str.Aborting__not_ignorable_file_is_in_use
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
pop ecx
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov edi, 0x30d52
jmp 0x405f3a
cmp dword [ebp - 0x3c], 0
je 0x405e9a
and dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
mov ecx, edi
call fcn.00407945
test eax, eax
jne 0x405e88
push str.ExecuteInstalls_failed
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x24
push eax
push 0x249f0
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x44]
jmp 0x405f30
mov ebx, dword [edi + 0xdc]
neg ebx
sbb ebx, ebx
and ebx, 0xbc2
jmp 0x405eed
push ecx
push 7
mov ecx, edi
call fcn.0040b9d2
push ecx
mov ecx, edi
call fcn.004085f2
test eax, eax
jne 0x405ebe
mov ecx, edi
call fcn.0040b97a
mov edi, 0xbc3
jmp 0x405f3a
cmp eax, 5
jne 0x405f0c
cmp dword [edi + 0xd8], 0
mov ebx, 0x30d50
je 0x405eed
mov ecx, dword [edi + 0x588]
test ecx, ecx
je 0x405eed
call fcn.0040fbe8
mov ecx, dword [edi + 0x588]
push 1
call fcn.00410606
push dword [edi + 0x11c]
mov ecx, edi
call fcn.0040b1b4
lea ecx, [ebp - 0x50]
call fcn.0042b322
lea ecx, [esi - 0x10]
call fcn.00402e64
jmp 0x405f66
push str.Relaunch_failed
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
push eax
push 0x271c8
mov ecx, edi
call fcn.00409257
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
mov edi, eax
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042b322
lea ecx, [esi - 0x10]
call fcn.00402e64
mov eax, edi
jmp 0x405f68
mov eax, ebx
call fcn.00468f71
ret