Function at 0x5335d0
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ac4f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
push esi
mov esi, ecx
push edi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x10], esp
mov ecx, dword [esi + 0x60]
mov byte [esi + 0x30e2], 1
mov byte [esi + 0x30e3], 1
xor edi, edi
mov edx, dword [ecx + 0x38]
mov ecx, dword [esi + 0x30c4]
xor ebx, ebx
push eax
push edx
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], edi
mov byte [ebp - 0x11], bl
call fcn.00535980
test eax, eax
je 0x533681
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov ebx, eax
add ebx, ecx
mov ecx, dword [ebp - 0x38]
adc edi, edx
add ebx, 0xf
adc edi, 0
cmp eax, 0xc350
mov byte [ebp - 0x11], 1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], edi
mov dword [esi + 0x98], ecx
jbe 0x533662
mov eax, 0xc350
mov dword [esi + 0x46b4], eax
mov eax, dword [esi + 0x46b0]
test eax, eax
je 0x5336ab
push eax
mov byte [ebp - 4], 1
call fcn.00582ef5
add esp, 4
jmp 0x5336a0
mov eax, dword [esi + 0x60]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
ja 0x533798
jmp 0x533668
xor eax, eax
mov dword [ebp - 4], eax
mov dword [esi + 0x46b0], eax
mov eax, dword [esi + 0x98]
test eax, eax
jne 0x5336c3
mov edx, dword [esi + 0x30c4]
mov eax, dword [esi + 0x60]
cmp eax, dword [edx + 0x68]
je 0x5336ce
mov al, byte [ebp - 0x11]
test al, al
jne 0x5337a9
push str.OnRtmpResume__ts0__this_is_first_part__n
mov ecx, esi
mov dword [esi + 0x98], 0
call fcn.004f73c0
mov ecx, dword [esi + 0x60]
lea eax, [ebp - 0x30]
mov edx, dword [ecx + 0x38]
push edx
push str._dkf
push eax
call fcn.0056b4da
mov edx, dword [esi + 0x30c4]
add esp, 0xc
lea ecx, [ebp - 0x30]
mov eax, dword [edx + 0xbc]
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [esi + 0x60]
mov edx, dword [ecx + 0x10]
lea ecx, [esi + 0x10]
push edx
call fcn.004fa890
mov eax, dword [esi + 0x64]
mov ecx, dword [esi + 0x38]
mov byte [esi + 0x30d9], 1
mov byte [esi + 0x30db], 0
mov edx, dword [eax]
sub edx, ecx
mov dword [eax], edx
mov edx, dword [esi + 0x3c]
mov ecx, dword [eax + 4]
sbb ecx, edx
mov dword [eax + 4], ecx
xor eax, eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x30c8], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x30cc], eax
mov dword [esi + 0x24], eax
mov byte [esi + 0x30dd], al
mov byte [esi + 0x30de], al
mov dword [esi + 0x46b8], eax
mov dword [esi + 0x46bc], eax
mov byte [esi + 0x30d5], al
mov byte [esi + 0x30d4], al
mov dword [esi + 0x310c], eax
mov byte [esi + 0x30e1], al
mov byte [esi + 0x30e0], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x46b4]
push eax
call fcn.00582ecc
xor ecx, ecx
add esp, 4
cmp eax, ecx
mov dword [esi + 0x46b0], eax
je 0x533798
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
lea ecx, [esi + 0x10]
push edx
call fcn.004face0
test eax, eax
je 0x53380d
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
cmp eax, ecx
jg 0x53380d
jl 0x5337f0
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
jae 0x53380d
push str.OnRtmpResume_err_3042_n
mov ecx, esi
call fcn.004f73c0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esi + 0x46b4]
mov ecx, dword [ebp - 0x34]
lea eax, [esi + 0x30dd]
add ecx, 0xb
push eax
mov eax, dword [esi + 0x46b0]
push edx
mov edx, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x40]
push ecx
push edx
push eax
lea ecx, [esi + 0x10]
call fcn.004faba0
xor ecx, ecx
cmp eax, ecx
jne 0x533798
mov edx, dword [esi + 0x98]
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
fild qword [ebp - 0x20]
mov dword [esi + 0x46b8], ecx
mov ecx, dword [esi + 0x20]
cmp eax, edi
fstp qword [esi + 0x30c8]
jl 0x533889
jg 0x53386e
cmp ecx, ebx
jbe 0x533889
mov edx, dword [esi + 0x64]
mov dword [ebp - 0x18], edx
mov edx, ebx
sub edx, ecx
mov ecx, edi
sbb ecx, eax
mov eax, dword [ebp - 0x18]
add dword [eax], edx
mov edx, dword [eax + 4]
adc edx, ecx
mov dword [eax + 4], edx
mov al, byte [esi + 0x30dd]
mov dword [esi + 0x38], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x3c], edi
test al, al
mov dword [esi + 0x24], edi
mov byte [esi + 0x30db], 1
je 0x5338ad
mov byte [esi + 0x30df], 1
mov edx, dword [esi + 0x80]
fld qword [edx + 0x2e0]
fcomp qword [0x5b9340]
fnstsw ax
test ah, 0x41
je 0x533791
mov ecx, dword [esi + 0x30c4]
call fcn.00536a10
jmp 0x533791