Function at 0x406200
Capabilities:
Delete registry key

Disassembly:
push 0x44
mov eax, 0x4ad1f8
call fcn.0046c483
mov edi, ecx
mov dword [ebp - 0x48], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0040cf80
push ebx
lea esi, [edi + 0x584]
push str._dUI
mov ecx, esi
call fcn.0040a9fe
xor edx, edx
mov ecx, esi
cmp eax, 0xffffffff
push ebx
setne dl
push str._mUI
mov dword [edi + 0x260], edx
call fcn.0040a9fe
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [edi + 0xd8], ecx
je 0x40625f
mov dword [edi + 0x260], ebx
cmp dword [edi + 0xf4], ebx
je 0x406272
xor ebx, ebx
inc ebx
mov dword [edi + 0x260], ebx
jmp 0x406275
xor ebx, ebx
inc ebx
call fcn.00452601
push eax
lea ecx, [ebp - 0x20]
call fcn.00402899
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
push ecx
lea ecx, [edi + 0x580]
call fcn.00417932
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
jne 0x406352
cmp dword [edi + 0x260], 0
jne 0x40631e
call fcn.00452601
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4cf0e4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d77c
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.0040aa38
push 0
push 0x4cdc88
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
pop ecx
call fcn.00414d4f
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4c
jmp 0x406c77
cmp dword [edi + 0xf4], 0
je 0x406401
push 0x4ce610
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x44]
push 0x4d1898
push eax
call fcn.004023f1
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.004025c6
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0
push 0x200
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
test eax, eax
je 0x4063f3
cmp eax, 2
je 0x4063f3
push str.failed_to_cleanup_leftover_registry:
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 7
push eax
push 2
lea edx, [ebp - 0x28]
pop ecx
call fcn.00414600
pop ecx
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [edi + 0x1b8], 0
lea eax, [ebp - 0x44]
and dword [ebp - 0x24], 0
mov edx, 0x4ce610
and dword [ebp - 0x44], 0
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x24]
mov dword [edi + 0x21c], ebx
push eax
push str.iTestDisablePings
call fcn.004418af
add esp, 0xc
test eax, eax
jne 0x406471
cmp dword [ebp - 0x24], ebx
jne 0x406471
and dword [edi + 0x21c], eax
lea ecx, [ebp - 0x28]
push str.Pings_disabled_in_ARM_registry_by_iTestDisablePings
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 8
pop ecx
call fcn.00414d4f
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [edi + 0x580]
call fcn.00403251
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4064c9
push eax
call fcn.0048af3e
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], edx
mov dword [esp], str.iStartTime
call fcn.00402829
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x44]
push 0
call fcn.0044be79
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
mov ecx, 0x30d42
mov byte [ebp - 0x11], 0
test eax, eax
lea edx, [ecx + 2]
cmovne ecx, edx
lea edx, [ebp - 0x11]
call fcn.0044bc15
call fcn.004426be
test eax, eax
je 0x40651f
push str.Will_not_continue_for_Guest_User
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
pop ecx
call fcn.00414d4f
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4a
jmp 0x406c77
cmp dword [ebp - 0x18], 0
jne 0x40656b
cmp dword [edi + 0xf8], 0
jne 0x40656b
lea edx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ecx, 0x30d46
call fcn.0044bc15
push str.iStandardUser
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
mov edx, ebx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.0044be79
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [edi + 0x260], 0
mov eax, 0xcc
lea ecx, [eax + 3]
cmovne eax, ecx
lea ecx, [edi + 0x568]
push eax
call fcn.00414312
test eax, eax
je 0x4065c1
push str.cannot_continue__another_ARM_instance_is_in_use
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
pop ecx
call fcn.00414d4f
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x1d524
jmp 0x406c77
call fcn.004425f1
cmp dword [ebp - 0x18], 0
mov dword [ebp - 0x3c], eax
je 0x4066b7
test eax, eax
jne 0x4066b7
lea ecx, [ebp - 0x28]
push str.Not_elevated_for_OnDemand_installation_after_relaunch
cmp dword [edi + 0x260], eax
jne 0x40668b
call fcn.00402829
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1d4c0
lea ecx, [edi + 0x548]
call fcn.00412c86
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
call fcn.00452601
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4cf0e4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d77c
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Not_elevated_after_relaunch
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.0040aa38
push 0
push 0x4cdc88
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1c]
jmp 0x4066a5
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
pop ecx
call fcn.00414d4f
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4e
jmp 0x406c77
mov ecx, edi
mov dword [edi + 0x120], ebx
mov dword [edi + 0xd4], ebx
call fcn.0040581a
test eax, eax
jne 0x4066fb
push str.continue_without_listener
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
pop ecx
call fcn.00414d4f
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [ebp - 0x18], 0
mov eax, ebx
push 8
pop ecx
cmovne eax, ecx
cmp dword [edi + 0x260], 0
mov dword [edi + 0x11c], eax
jne 0x40672b
mov ecx, edi
call fcn.0040c56e
test eax, eax
jne 0x40672b
mov ebx, 0x23f
jmp 0x406c77
lea ecx, [edi + 0x2bc]
call fcn.0041e514
test eax, eax
jne 0x40676d
push str.unable_to_initialize_download
lea ecx, [ebp - 0x28]
call fcn.00402829
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
push 0x1b38c
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
mov ebx, eax
call fcn.00402e64
jmp 0x406c77
cmp dword [ebp - 0x18], 0
jne 0x406780
lea ecx, [edi + 0x2bc]
call fcn.00423e75
jmp 0x406782
mov eax, ebx
cmp dword [edi + 0xe8], 0
je 0x4067b1
push str.User_canceled_manifest_download
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
push eax
push 0x187cc
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x1c]
jmp 0x40675e
test eax, eax
jne 0x4067db
push str.unable_to_download_OnDemand_manifest
lea ecx, [ebp - 0x18]
call fcn.00402829
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x14
push eax
push 0x2240c
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x18]
jmp 0x40675e
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], vtable.CManifest.0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.0042d33c
test eax, eax
je 0x40681f
push str.Process_OnDemand_Manifest_error
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
push eax
push 0x1fc34
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x2c]
jmp 0x406b5e
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40685a
push str.sProductCode
lea ecx, [ebp - 0x2c]
call fcn.00402829
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2c]
push dword [edi + 0x1a4]
xor edx, edx
call fcn.0044be79
pop ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], ebx
jne 0x406866
and dword [edi + 0x21c], 0
test eax, eax
jne 0x4068b8
cmp dword [edi + 0xf8], eax
jne 0x4068b8
cmp dword [edi + 0x264], eax
je 0x4068b8
push str.Standard_User_not_allowed
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
push eax
push 0x1d4c0
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042ca62
mov ebx, 0x30d48
jmp 0x406c77
cmp dword [edi + 0x13c], ebx
jge 0x4068e9
push str.No_files_in_Session
lea ecx, [ebp - 0x30]
call fcn.00402829
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x19
push eax
push 0x1fcfc
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x30]
jmp 0x406b5e
call fcn.00452601
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
and dword [ebp - 0x44], 0
mov edx, 0x4ce610
push eax
lea eax, [ebp - 0x1c]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
push str.OnDemandBaseURL
call fcn.004417f0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp dword [eax - 0xc], 0
je 0x4069c8
push str.Will_use_registered_OnDemandBaseURL:
lea ecx, [ebp - 0x30]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
push eax
push 2
lea edx, [ebp - 0x30]
pop ecx
call fcn.00414600
pop ecx
pop ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
xor eax, eax
lea ecx, [edi + 0x134]
mov dword [ebp - 0x30], eax
cmp eax, dword [ecx + 8]
jge 0x4069c5
push eax
call fcn.0040ae65
mov dword [ebp - 0x44], eax
mov eax, dword [eax]
test eax, eax
je 0x4069bf
mov eax, dword [eax + 0xc]
sub eax, 0x10
push eax
call fcn.00402d9f
add eax, 0x10
pop ecx
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c]
call fcn.00415851
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ecx + 0xc]
call fcn.00402e14
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x30]
inc eax
jmp 0x406960
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0x15
call fcn.00402e64
cmp dword [edi + 0xe8], 0
je 0x406a06
push str.User_canceled
lea ecx, [ebp - 0x34]
call fcn.00402829
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
push eax
push 0x187cc
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x34]
jmp 0x406b5e
cmp dword [ebp - 0x18], 0
jne 0x406abe
push ecx
push 6
mov ecx, edi
call fcn.0040cf31
mov ecx, edi
call fcn.0040883b
cmp dword [edi + 0xe8], 0
je 0x406a53
push str.User_canceled_download_payload
lea ecx, [ebp - 0x38]
call fcn.00402829
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push eax
push 0x187cc
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x38]
jmp 0x406b5e
test eax, eax
jne 0x406a80
push str.unable_to_download_payload
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
push eax
push 0x2240c
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x3c]
jmp 0x406b5e
call fcn.004458f6
test eax, eax
je 0x406abe
mov ebx, 0x652
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x4d189c
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x20
push eax
push 0x249f0
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x3c]
jmp 0x406b60
mov ecx, edi
call fcn.00408968
test eax, eax
jne 0x406ae5
push str.unable_to_initialize_installation
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
push 0x2bf84
jmp 0x406b54
cmp dword [ebp - 0x18], 0
jne 0x406bbb
call fcn.0043a9f5
cmp dword [edi + 0x260], 0
jne 0x406b6d
cmp dword [edi + 0x58c], 0
jne 0x406b13
lea ecx, [ebp - 0x50]
call fcn.0042ca62
jmp 0x406721
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], bl
call fcn.0040e7e8
call fcn.00435c3b
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ebx, eax
call fcn.0040e7e8
cmp ebx, 2
jne 0x406bbb
push str.User_canceled_Files_In_Use
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x22
push eax
push 0x187cc
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x44]
mov ebx, eax
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x406c6f
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
push eax
lea edx, [ebp - 0x38]
mov ecx, 0x3e8
call fcn.00435f11
pop ecx
cmp eax, 3
jne 0x406bbb
push str.Aborting__not_ignorable_file_is_in_use
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
pop ecx
call fcn.00414d4f
pop ecx
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov edi, 0x30d52
jmp 0x406caf
cmp dword [ebp - 0x3c], 0
je 0x406c0f
and dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
mov ecx, edi
call fcn.00408c65
test eax, eax
jne 0x406bfd
push str.ExecuteInstalls_failed
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x24
push eax
push 0x249f0
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x44]
jmp 0x406ca5
mov ebx, dword [edi + 0xdc]
neg ebx
sbb ebx, ebx
and ebx, 0xbc2
jmp 0x406c62
push ecx
push 7
mov ecx, edi
call fcn.0040cf31
push ecx
mov ecx, edi
call fcn.0040999e
test eax, eax
jne 0x406c33
mov ecx, edi
call fcn.0040ced9
mov edi, 0xbc3
jmp 0x406caf
cmp eax, 5
jne 0x406c81
cmp dword [edi + 0xd8], 0
mov ebx, 0x30d50
je 0x406c62
mov ecx, dword [edi + 0x58c]
test ecx, ecx
je 0x406c62
call fcn.0041114a
mov ecx, dword [edi + 0x58c]
push 1
call fcn.00411b66
push dword [edi + 0x11c]
mov ecx, edi
call fcn.0040c7c6
lea ecx, [ebp - 0x50]
call fcn.0042ca62
lea ecx, [esi - 0x10]
call fcn.00402e64
jmp 0x406cdb
push str.Relaunch_failed
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
push eax
push 0x271c8
mov ecx, edi
call fcn.0040a804
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
mov edi, eax
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042ca62
lea ecx, [esi - 0x10]
call fcn.00402e64
mov eax, edi
jmp 0x406cdd
mov eax, ebx
call fcn.0046c3e1
ret