Function at 0x416f25
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
and dword [ebp - 4], 0
and dword [ebp - 8], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push dword [edi + 8]
call fcn.004196cb
push eax
push dword [ebp + 0x18]
call fcn.004196cb
push eax
push dword [ebp + 0x10]
call fcn.0041a39b
push eax
push dword [edi + 0x4c]
push 0x20000173
push 2
call fcn.00409885
mov ebx, dword [ebp + 0xc]
add esp, 0x18
test ebx, ebx
je 0x416fcb
push dword [ebp + 0x10]
push str.Resume
push ebx
call fcn.00468739
mov esi, eax
test esi, esi
jns 0x416f9c
push str.Failed_to_write_Resume_value.
push esi
push 0x100
push 5
push 0x4f5
push str.d:_awixwix_src_burnengine_registration.cpp
jmp 0x41718d
xor eax, eax
cmp dword [ebp + 0x14], 2
sete al
push eax
push str.Installed
push ebx
call fcn.00468739
mov esi, eax
test esi, esi
jns 0x416fcb
push str.Failed_to_write_Installed_value.
push esi
push 0x100
push 5
push 0x4f9
jmp 0x416f92
cmp dword [ebp + 0x10], 1
je 0x416fdb
cmp dword [ebp + 0x18], 0
je 0x4170a8
cmp dword [edi + 8], 0
jne 0x4170a8
push str.burn.runonce
push dword [edi + 0x50]
lea eax, [ebp - 8]
push str.__ls____ls
push eax
call fcn.00403578
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x41701b
push str.Failed_to_format_resume_command_line_for_RunOnce.
push esi
push 0x100
push 5
push 0x505
jmp 0x416f92
lea eax, [ebp - 4]
push eax
push 0x20006
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push dword [edi + 0x48]
call fcn.0046748b
mov esi, eax
test esi, esi
jns 0x41704e
push str.Failed_to_create_run_key.
push esi
push 0x100
push 5
push 0x509
jmp 0x416f92
push dword [ebp - 8]
push dword [edi + 0x14]
push dword [ebp - 4]
call fcn.004687ae
mov esi, eax
test esi, esi
jns 0x417079
push str.Failed_to_write_run_key_value.
push esi
push 0x100
push 5
push 0x50c
jmp 0x416f92
push dword [edi + 0x54]
push str.BundleResumeCommandLine
push ebx
call fcn.004687ae
mov esi, eax
test esi, esi
jns 0x417195
push str.Failed_to_write_resume_command_line_value.
push esi
push 0x100
push 5
push 0x50f
jmp 0x416f92
lea eax, [ebp - 4]
push eax
push 0x20006
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push dword [edi + 0x48]
call fcn.00467b58
mov esi, eax
cmp esi, 0x80070002
je 0x417135
cmp esi, 0x80070003
je 0x417135
test esi, esi
jns 0x4170eb
push str.Failed_to_open_run_key.
push esi
push 0x100
push 5
push 0x51a
jmp 0x416f92
push dword [edi + 0x14]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x417137
test ecx, ecx
jg 0x41710a
mov esi, ecx
jmp 0x417113
movzx esi, cx
or esi, 0x80070000
test esi, esi
js 0x41711c
mov esi, 0x80004005
push esi
mov ebx, 0x521
mov edi, str.d:_awixwix_src_burnengine_registration.cpp
push ebx
push edi
call fcn.0040129e
push str.Failed_to_delete_run_key_value.
jmp 0x417183
xor esi, esi
test ebx, ebx
je 0x417195
push str.BundleResumeCommandLine
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x417195
test ecx, ecx
jg 0x41715a
mov esi, ecx
jmp 0x417163
movzx esi, cx
or esi, 0x80070000
test esi, esi
js 0x41716c
mov esi, 0x80004005
push esi
mov ebx, 0x52b
mov edi, str.d:_awixwix_src_burnengine_registration.cpp
push ebx
push edi
call fcn.0040129e
push str.Failed_to_delete_resume_command_line_value.
push esi
push 0x100
push 5
push ebx
push edi
call fcn.004012a1
add esp, 0x18
cmp dword [ebp - 8], 0
je 0x4171a3
push dword [ebp - 8]
call fcn.00404128
cmp dword [ebp - 4], 0
je 0x4171b2
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x14