Function at 0x5aa4d0
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6642e0
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x2c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
wait
mov dword [ebp - 0x34], ebx
xor edi, edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x25], bl
mov byte [esi + 0x321a], 1
mov byte [esi + 0x321b], 1
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [esi + 0xa8]
mov edx, dword [ecx + 0x60]
push edx
mov ecx, dword [esi + 0x31fc]
call fcn.005b2dc0
test eax, eax
je 0x5aa597
mov byte [ebp - 0x25], 1
mov ecx, dword [ebp - 0x38]
mov eax, ecx
add eax, dword [ebp - 0x44]
adc edi, dword [ebp - 0x40]
add eax, 0xf
mov dword [ebp - 0x34], eax
adc edi, ebx
mov dword [ebp - 0x30], edi
mov edx, dword [ebp - 0x3c]
mov dword [esi + 0xe8], edx
cmp ecx, 0xc350
jbe 0x5aa56f
mov ecx, 0xc350
mov dword [esi + 0x4a34], ecx
cmp dword [esi + 0x4a30], ebx
je 0x5aa5da
mov byte [ebp - 4], 1
wait
mov eax, dword [esi + 0x4a30]
push eax
call fcn.005f4432
add esp, 4
wait
mov dword [ebp - 4], ebx
jmp 0x5aa5d4
mov eax, dword [esi + 0xa8]
cmp dword [eax + 0x1c], ebx
jbe 0x5aa575
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0062016f
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x4a30], ebx
cmp dword [esi + 0xe8], ebx
jne 0x5aa5f6
mov eax, dword [esi + 0x31fc]
mov ecx, dword [esi + 0xa8]
cmp ecx, dword [eax + 0xb0]
je 0x5aa5ff
cmp byte [ebp - 0x25], bl
jne 0x5aa6d4
mov dword [esi + 0xe8], ebx
push str.OnRtmpResume__ts0__this_is_first_part__n
mov ecx, esi
call fcn.00561d20
mov edx, dword [esi + 0xa8]
mov eax, dword [edx + 0x60]
push eax
push str._dkf
lea ecx, [ebp - 0x24]
push ecx
call fcn.0062304b
add esp, 0xc
lea edx, [ebp - 0x24]
push edx
mov eax, dword [esi + 0x31fc]
mov ecx, dword [eax + 0x104]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov edx, dword [esi + 0xa8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.0056af80
mov byte [esi + 0x3211], 1
mov byte [esi + 0x3213], bl
mov eax, dword [esi + 0xac]
mov ecx, dword [esi + 0x80]
sub dword [eax], ecx
mov edx, dword [esi + 0x84]
sbb dword [eax + 4], edx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ebx
fldz
fstp qword [esi + 0x3200]
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
mov byte [esi + 0x3215], bl
mov byte [esi + 0x3216], bl
mov dword [esi + 0x4a38], ebx
mov dword [esi + 0x4a3c], ebx
mov dword [esi + 0xf0], ebx
mov byte [esi + 0x320d], bl
mov byte [esi + 0x320c], bl
mov dword [esi + 0x3248], ebx
mov byte [esi + 0x3219], bl
mov byte [esi + 0x3218], bl
jmp 0x5aa5a2
mov eax, dword [esi + 0x4a34]
push eax
call fcn.005f4427
add esp, 4
mov dword [esi + 0x4a30], eax
cmp eax, ebx
je 0x5aa5a2
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
lea ecx, [esi + 0x10]
lea edx, [ebp - 0x4c]
push edx
call fcn.0056b5b0
test eax, eax
je 0x5aa72a
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x40]
jg 0x5aa72a
jl 0x5aa719
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [ebp - 0x44]
jae 0x5aa72a
push str.OnRtmpResume_err_3042_n
mov ecx, esi
call fcn.00561d20
jmp 0x5aa5a2
lea eax, [esi + 0x3215]
push eax
mov edx, dword [esi + 0x4a34]
push edx
mov eax, dword [esi + 0x4a30]
push eax
mov ecx, dword [ebp - 0x38]
add ecx, 0xb
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [esi + 0x10]
call fcn.0056b250
test eax, eax
jne 0x5aa5a2
mov dword [esi + 0xf0], ebx
mov dword [esi + 0x4a3c], ebx
mov dword [esi + 0x4a38], ebx
mov ecx, dword [esi + 0xe8]
fild dword [esi + 0xe8]
test ecx, ecx
jge 0x5aa786
fadd qword [0x681408]
fstp qword [esi + 0x3200]
mov ecx, dword [esi + 0x60]
mov eax, dword [esi + 0x64]
cmp eax, edi
jl 0x5aa7b1
jg 0x5aa79d
cmp ecx, dword [ebp - 0x34]
jbe 0x5aa7b1
mov edx, dword [ebp - 0x34]
sub edx, ecx
mov ecx, edi
sbb ecx, eax
mov eax, dword [esi + 0xac]
add dword [eax], edx
adc dword [eax + 4], ecx
mov eax, dword [ebp - 0x34]
mov dword [esi + 0x80], eax
mov dword [esi + 0x84], edi
mov dword [esi + 0x60], eax
mov dword [esi + 0x64], edi
mov byte [esi + 0x3213], 1
cmp byte [esi + 0x3215], bl
je 0x5aa7dc
mov byte [esi + 0x3217], 1
mov edx, dword [esi + 0xc8]
fldz
fcomp qword [edx + 0x3b8]
fnstsw ax
test ah, 1
jne 0x5aa7fc
mov ecx, dword [esi + 0x31fc]
call fcn.005b4260
mov byte [esi + 0x3218], bl
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x5aa5a3