Function at 0x405210
Capabilities:
Delete registry key

Disassembly:
push 0x44
mov eax, 0x4aa4e8
call fcn.00469db3
mov edi, ecx
mov dword [ebp - 0x48], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0040cf10
push ebx
lea esi, [edi + 0x594]
push str._dUI
mov ecx, esi
call fcn.00409bee
xor edx, edx
mov ecx, esi
cmp eax, 0xffffffff
push ebx
setne dl
push str._mUI
mov dword [edi + 0x280], edx
call fcn.00409bee
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [edi + 0xd8], ecx
je 0x40526f
mov dword [edi + 0x280], ebx
cmp dword [edi + 0xf4], ebx
je 0x405282
xor ebx, ebx
inc ebx
mov dword [edi + 0x280], ebx
jmp 0x405285
xor ebx, ebx
inc ebx
call fcn.0044ff01
push eax
lea ecx, [ebp - 0x20]
call fcn.00402899
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
push ecx
lea ecx, [edi + 0x590]
call fcn.00417956
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
jne 0x405362
cmp dword [edi + 0x280], 0
jne 0x40532e
call fcn.0044ff01
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4cb224
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d70c
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.00409c28
push 0
push 0x4cac64
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Empty_OnDemand_ID_value
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
pop ecx
call fcn.00414da1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4c
jmp 0x405c7b
cmp dword [edi + 0xf4], 0
je 0x405411
push 0x4cb968
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x44]
push 0x4cdd40
push eax
call fcn.004023f1
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.004025c6
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0
push 0x200
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyExW]
test eax, eax
je 0x405403
cmp eax, 2
je 0x405403
push str.failed_to_cleanup_leftover_registry:
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 7
push eax
push 2
lea edx, [ebp - 0x28]
pop ecx
call fcn.00414670
pop ecx
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x44]
and dword [ebp - 0x44], 0
mov edx, 0x4cb968
push eax
lea eax, [ebp - 0x24]
mov dword [edi + 0x230], ebx
push eax
push str.iTestDisablePings
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004446b6
add esp, 0xc
test eax, eax
jne 0x40547a
cmp dword [ebp - 0x24], ebx
jne 0x40547a
and dword [edi + 0x230], eax
lea ecx, [ebp - 0x28]
push str.Pings_disabled_in_ARM_registry_by_iTestDisablePings
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 8
pop ecx
call fcn.00414da1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [edi + 0x590]
call fcn.00403251
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4054d2
push eax
call fcn.0048852e
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], edx
mov dword [esp], str.iStartTime
call fcn.00402829
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x44]
push 0
call fcn.0044d73f
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
mov ecx, 0x30d42
mov byte [ebp - 0x11], 0
test eax, eax
lea edx, [ecx + 2]
cmovne ecx, edx
lea edx, [ebp - 0x11]
call fcn.0044d4db
call fcn.004454c5
test eax, eax
je 0x405528
push str.Will_not_continue_for_Guest_User
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
pop ecx
call fcn.00414da1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4a
jmp 0x405c7b
cmp dword [ebp - 0x18], 0
jne 0x405574
cmp dword [edi + 0xf8], 0
jne 0x405574
lea edx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ecx, 0x30d46
call fcn.0044d4db
push str.iStandardUser
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
mov edx, ebx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.0044d73f
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [edi + 0x280], 0
mov eax, 0xcc
lea ecx, [eax + 3]
cmovne eax, ecx
lea ecx, [edi + 0x578]
push eax
call fcn.004143c2
test eax, eax
je 0x4055ca
push str.cannot_continue__another_ARM_instance_is_in_use
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
pop ecx
call fcn.00414da1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x1d524
jmp 0x405c7b
call fcn.004453f8
cmp dword [ebp - 0x18], 0
mov dword [ebp - 0x3c], eax
je 0x4056c0
test eax, eax
jne 0x4056c0
lea ecx, [ebp - 0x28]
push str.Not_elevated_for_OnDemand_installation_after_relaunch
cmp dword [edi + 0x280], eax
jne 0x405694
call fcn.00402829
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1d4c0
lea ecx, [edi + 0x55c]
call fcn.00412f33
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
call fcn.0044ff01
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
push 0x4cb224
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0040d70c
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Not_elevated_after_relaunch
push str._ERRORCODE_
lea ecx, [ebp - 0x1c]
call fcn.00409c28
push 0
push 0x4cac64
push dword [ebp - 0x1c]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1c]
jmp 0x4056ae
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
pop ecx
call fcn.00414da1
pop ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, 0x30d4e
jmp 0x405c7b
mov ecx, edi
mov dword [edi + 0x120], ebx
mov dword [edi + 0xd4], ebx
call fcn.004049c0
test eax, eax
jne 0x405704
push str.continue_without_listener
lea ecx, [ebp - 0x28]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
pop ecx
call fcn.00414da1
pop ecx
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [ebp - 0x18], 0
mov eax, ebx
push 8
pop ecx
cmovne eax, ecx
cmp dword [edi + 0x280], 0
mov dword [edi + 0x11c], eax
jne 0x405734
mov ecx, edi
call fcn.0040c44b
test eax, eax
jne 0x405734
mov ebx, 0x23f
jmp 0x405c7b
lea ecx, [edi + 0x2d0]
call fcn.0041e554
test eax, eax
jne 0x405776
push str.unable_to_initialize_download
lea ecx, [ebp - 0x28]
call fcn.00402829
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
push 0x1b38c
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
mov ebx, eax
call fcn.00402e64
jmp 0x405c7b
cmp dword [ebp - 0x18], 0
jne 0x405789
lea ecx, [edi + 0x2d0]
call fcn.00423f9b
jmp 0x40578b
mov eax, ebx
cmp dword [edi + 0xe8], 0
je 0x4057ba
push str.User_canceled_manifest_download
lea ecx, [ebp - 0x1c]
call fcn.00402829
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
push eax
push 0x187cc
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x1c]
jmp 0x405767
test eax, eax
jne 0x4057e4
push str.unable_to_download_OnDemand_manifest
lea ecx, [ebp - 0x18]
call fcn.00402829
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x14
push eax
push 0x2240c
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x18]
jmp 0x405767
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], vtable.CManifest.0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.0043039c
test eax, eax
je 0x405828
push str.Process_OnDemand_Manifest_error
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
push eax
push 0x1fc34
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x2c]
jmp 0x405b62
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x405863
push str.sProductCode
lea ecx, [ebp - 0x2c]
call fcn.00402829
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2c]
push dword [edi + 0x1ac]
xor edx, edx
call fcn.0044d73f
pop ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], ebx
jne 0x40586f
and dword [edi + 0x230], 0
test eax, eax
jne 0x4058c1
cmp dword [edi + 0xf8], eax
jne 0x4058c1
cmp dword [edi + 0x284], eax
je 0x4058c1
push str.Standard_User_not_allowed
lea ecx, [ebp - 0x2c]
call fcn.00402829
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
push eax
push 0x1d4c0
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042fac2
mov ebx, 0x30d48
jmp 0x405c7b
cmp dword [edi + 0x13c], ebx
jge 0x4058f2
push str.No_files_in_Session
lea ecx, [ebp - 0x30]
call fcn.00402829
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x19
push eax
push 0x1fcfc
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x30]
jmp 0x405b62
call fcn.0044ff01
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
and dword [ebp - 0x44], 0
mov edx, 0x4cb968
push eax
lea eax, [ebp - 0x1c]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
push str.OnDemandBaseURL
call fcn.004445f7
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp dword [eax - 0xc], 0
je 0x4059d1
push str.Will_use_registered_OnDemandBaseURL:
lea ecx, [ebp - 0x30]
call fcn.00402829
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
push eax
push 2
lea edx, [ebp - 0x30]
pop ecx
call fcn.00414670
pop ecx
pop ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
xor eax, eax
lea ecx, [edi + 0x134]
mov dword [ebp - 0x30], eax
cmp eax, dword [ecx + 8]
jge 0x4059ce
push eax
call fcn.0040a17f
mov dword [ebp - 0x44], eax
mov eax, dword [eax]
test eax, eax
je 0x4059c8
mov eax, dword [eax + 0xc]
sub eax, 0x10
push eax
call fcn.00402d9f
add eax, 0x10
pop ecx
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c]
call fcn.004158db
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ecx + 0xc]
call fcn.00402e14
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [ebp - 0x30]
inc eax
jmp 0x405969
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 0x10]
mov byte [ebp - 4], 0x15
call fcn.00402e64
cmp dword [edi + 0xe8], 0
je 0x405a0f
push str.User_canceled
lea ecx, [ebp - 0x34]
call fcn.00402829
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
push eax
push 0x187cc
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x34]
jmp 0x405b62
cmp dword [ebp - 0x18], 0
jne 0x405ac7
push ecx
push 6
mov ecx, edi
call fcn.0040cec1
mov ecx, edi
call fcn.004074a0
cmp dword [edi + 0xe8], 0
je 0x405a5c
push str.User_canceled_download_payload
lea ecx, [ebp - 0x38]
call fcn.00402829
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push eax
push 0x187cc
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x38]
jmp 0x405b62
test eax, eax
jne 0x405a89
push str.unable_to_download_payload
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
push eax
push 0x2240c
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x3c]
jmp 0x405b62
call fcn.00448782
test eax, eax
je 0x405ac7
mov ebx, 0x652
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x4cdd44
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x20
push eax
push 0x249f0
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x3c]
jmp 0x405b64
mov ecx, edi
call fcn.0040760a
test eax, eax
jne 0x405aee
push str.unable_to_initialize_installation
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
push 0x2bf84
jmp 0x405b58
cmp dword [ebp - 0x18], 0
jne 0x405bbf
cmp dword [edi + 0x280], 0
jne 0x405b71
cmp dword [edi + 0x59c], 0
jne 0x405b17
lea ecx, [ebp - 0x50]
call fcn.0042fac2
jmp 0x40572a
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], bl
call fcn.0040e9b8
call fcn.00438e0b
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], 0
mov ebx, eax
call fcn.0040e9b8
cmp ebx, 2
jne 0x405bbf
push str.User_canceled_Files_In_Use
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x22
push eax
push 0x187cc
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x44]
mov ebx, eax
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x405c73
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
push eax
lea edx, [ebp - 0x38]
mov ecx, 0x3e8
call fcn.00439174
pop ecx
cmp eax, 3
jne 0x405bbf
push str.Aborting__not_ignorable_file_is_in_use
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
pop ecx
call fcn.00414da1
pop ecx
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov edi, 0x30d52
jmp 0x405cb3
cmp dword [ebp - 0x3c], 0
je 0x405c13
and dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
mov ecx, edi
call fcn.004078cc
test eax, eax
jne 0x405c01
push str.ExecuteInstalls_failed
lea ecx, [ebp - 0x44]
call fcn.00402829
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x24
push eax
push 0x249f0
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x44]
jmp 0x405ca9
mov ebx, dword [edi + 0xdc]
neg ebx
sbb ebx, ebx
and ebx, 0xbc2
jmp 0x405c66
push ecx
push 7
mov ecx, edi
call fcn.0040cec1
push ecx
mov ecx, edi
call fcn.00408587
test eax, eax
jne 0x405c37
mov ecx, edi
call fcn.0040ce69
mov edi, 0xbc3
jmp 0x405cb3
cmp eax, 5
jne 0x405c85
cmp dword [edi + 0xd8], 0
mov ebx, 0x30d50
je 0x405c66
mov ecx, dword [edi + 0x59c]
test ecx, ecx
je 0x405c66
call fcn.004113e2
mov ecx, dword [edi + 0x59c]
push 1
call fcn.00411df6
push dword [edi + 0x11c]
mov ecx, edi
call fcn.0040c6a3
lea ecx, [ebp - 0x50]
call fcn.0042fac2
lea ecx, [esi - 0x10]
call fcn.00402e64
jmp 0x405cdf
push str.Relaunch_failed
lea ecx, [ebp - 0x3c]
call fcn.00402829
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
push eax
push 0x271c8
mov ecx, edi
call fcn.004099fb
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
mov edi, eax
call fcn.00402e64
lea ecx, [ebp - 0x50]
call fcn.0042fac2
lea ecx, [esi - 0x10]
call fcn.00402e64
mov eax, edi
jmp 0x405ce1
mov eax, ebx
call fcn.00469d11
ret