Function at 0x417a4e
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
and dword [ebp - 4], 0
and dword [ebp - 8], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push dword [edi + 8]
call fcn.0041a209
push eax
push dword [ebp + 0x18]
call fcn.0041a209
push eax
push dword [ebp + 0x10]
call fcn.0041aeed
push eax
push dword [edi + 0x4c]
push 0x20000173
push 2
call fcn.00408119
mov ebx, dword [ebp + 0xc]
add esp, 0x18
test ebx, ebx
je 0x417af4
push dword [ebp + 0x10]
push str.Resume
push ebx
call fcn.0045d7a9
mov esi, eax
test esi, esi
jns 0x417ac5
push str.Failed_to_write_Resume_value.
push esi
push 0x100
push 5
push 0x4f5
push str.d:_awixwix_src_burnengine_registration.cpp
jmp 0x417cbb
xor eax, eax
cmp dword [ebp + 0x14], 2
sete al
push eax
push str.Installed
push ebx
call fcn.0045d7a9
mov esi, eax
test esi, esi
jns 0x417af4
push str.Failed_to_write_Installed_value.
push esi
push 0x100
push 5
push 0x4f9
jmp 0x417abb
cmp dword [ebp + 0x10], 1
je 0x417b04
cmp dword [ebp + 0x18], 0
je 0x417bd6
cmp dword [edi + 8], 0
jne 0x417bd6
push str.burn.runonce
push str.burn.clean.room
push dword [edi + 0x50]
lea eax, [ebp - 8]
push str.__ls____ls___ls
push eax
call fcn.00402acf
mov esi, eax
add esp, 0x14
test esi, esi
jns 0x417b49
push str.Failed_to_format_resume_command_line_for_RunOnce.
push esi
push 0x100
push 5
push 0x505
jmp 0x417abb
lea eax, [ebp - 4]
push eax
push 0x20006
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push dword [edi + 0x48]
call fcn.0045c4fb
mov esi, eax
test esi, esi
jns 0x417b7c
push str.Failed_to_create_run_key.
push esi
push 0x100
push 5
push 0x509
jmp 0x417abb
push dword [ebp - 8]
push dword [edi + 0x14]
push dword [ebp - 4]
call fcn.0045d81e
mov esi, eax
test esi, esi
jns 0x417ba7
push str.Failed_to_write_run_key_value.
push esi
push 0x100
push 5
push 0x50c
jmp 0x417abb
push dword [edi + 0x54]
push str.BundleResumeCommandLine
push ebx
call fcn.0045d81e
mov esi, eax
test esi, esi
jns 0x417cc3
push str.Failed_to_write_resume_command_line_value.
push esi
push 0x100
push 5
push 0x50f
jmp 0x417abb
lea eax, [ebp - 4]
push eax
push 0x20006
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push dword [edi + 0x48]
call fcn.0045cbc8
mov esi, eax
cmp esi, 0x80070002
je 0x417c63
cmp esi, 0x80070003
je 0x417c63
test esi, esi
jns 0x417c19
push str.Failed_to_open_run_key.
push esi
push 0x100
push 5
push 0x51a
jmp 0x417abb
push dword [edi + 0x14]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x417c65
test ecx, ecx
jg 0x417c38
mov esi, ecx
jmp 0x417c41
movzx esi, cx
or esi, 0x80070000
test esi, esi
js 0x417c4a
mov esi, 0x80004005
push esi
mov ebx, 0x521
mov edi, str.d:_awixwix_src_burnengine_registration.cpp
push ebx
push edi
call fcn.00401225
push str.Failed_to_delete_run_key_value.
jmp 0x417cb1
xor esi, esi
test ebx, ebx
je 0x417cc3
push str.BundleResumeCommandLine
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x417cc3
test ecx, ecx
jg 0x417c88
mov esi, ecx
jmp 0x417c91
movzx esi, cx
or esi, 0x80070000
test esi, esi
js 0x417c9a
mov esi, 0x80004005
push esi
mov ebx, 0x52b
mov edi, str.d:_awixwix_src_burnengine_registration.cpp
push ebx
push edi
call fcn.00401225
push str.Failed_to_delete_resume_command_line_value.
push esi
push 0x100
push 5
push ebx
push edi
call fcn.00401228
add esp, 0x18
cmp dword [ebp - 8], 0
je 0x417cd1
push dword [ebp - 8]
call fcn.0040367f
cmp dword [ebp - 4], 0
je 0x417ce0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x14