Function at 0x4cbf40
Capabilities:
Delete registry value
Read .ini file

Disassembly:
mov eax, 0x1a34
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x1a30], eax
mov eax, dword [esp + 0x1a40]
push ebx
push ebp
mov ebp, dword [esp + 0x1a44]
push esi
push edi
xor ebx, ebx
push 0x3ff
lea ecx, [esp + 0x1245]
push ebx
push ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x124c], bl
call fcn.005dfd60
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0x50]
push ebx
push edx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
call fcn.004d9f10
add esp, 0x38
cmp dword [esp + 0x1a48], ebx
je 0x4cbfea
push ebx
push 0x400
lea eax, [esp + 0x154]
push eax
push 0x60c81c
push 0x612990
push 0x60c810
call fcn.004edfd0
add esp, 0x18
cmp byte [esp + 0x14c], bl
je 0x4cbffb
mov dword [esp + 0x1c], 1
jmp 0x4cbffb
push 0x60c810
call fcn.00510770
add esp, 4
mov dword [esp + 0x1c], eax
push ebp
lea ecx, [esp + 0x150]
push str._sAVPM.EXE
push ecx
call fcn.005dfb23
push 1
push ebx
push ebx
push ebx
lea edx, [esp + 0x168]
push ebx
push edx
call fcn.004e8950
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0x24
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x24], eax
push ebp
lea eax, [esp + 0x4c]
push eax
call esi
lea ecx, [esp + 0x48]
push ecx
call fcn.004e24e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 4
push str.eserv.ini
lea edx, [esp + 0x4c]
push edx
call edi
push ebp
lea eax, [esp + 0xe34]
push eax
call esi
lea ecx, [esp + 0xe30]
push ecx
call fcn.004e24e0
add esp, 4
push str.eupdate.ini
lea edx, [esp + 0xe34]
push edx
call edi
cmp byte [ebp + 1], 0x3a
jne 0x4cc090
movsx eax, byte [ebp]
jmp 0x4cc098
call fcn.005e3c9f
add eax, 0x40
mov dword [esp + 0x18], eax
call fcn.004dd0c0
lea ecx, [esp + 0x113c]
push ebx
push ecx
mov esi, eax
call fcn.004f00d0
push esi
lea edx, [esp + 0x48]
push str.TM_u
push edx
call fcn.005dfb23
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x1154]
push ecx
lea edx, [esp + 0x58]
push edx
push 0x60da74
call fcn.004e0ed0
lea eax, [esp + 0x6c]
push eax
push 0x615678
push str.ShowAgentSetup
push 0x60da74
call fcn.004e0ed0
lea ecx, [esp + 0x7c]
push ecx
push 0x624ce0
push str.NoOfHostConnectionAllowed
push 0x60da74
call fcn.004e0ed0
add esp, 0x44
lea edx, [esp + 0x48]
push edx
push str.10000
push str.TimeOutInterval
push 0x60da74
call fcn.004e0ed0
lea eax, [esp + 0x58]
push eax
push 0x60c81c
push str.DefaultPassword
push str.General
call fcn.004e0cb0
lea ecx, [esp + 0x68]
push ecx
push 0x60cf3c
push str.NormalView
push str.General
call fcn.004e0ed0
lea edx, [esp + 0x78]
push edx
push 0x60cf3c
push str.UpdateDBOnDownload
push str.General
call fcn.004e0ed0
add esp, 0x40
lea eax, [esp + 0x48]
push eax
push 0x615678
push str.ExportToExcel
push str.General
call fcn.004e0cb0
lea ecx, [esp + 0x58]
push ecx
push 0x60cf3c
push str.RestartIfEservAutoShutDown
push str.General
call fcn.004e0ed0
lea edx, [esp + 0x68]
push edx
push 0x60cf3c
push str.ForceHostLookup
push str.General
call fcn.004e0ed0
lea eax, [esp + 0x78]
push eax
push 0x615678
push str.NewReport
push str.Reports
call fcn.004e0cb0
add esp, 0x40
lea ecx, [esp + 0x48]
push ecx
push 0x60cf3c
push str.FTPMaxClients
push str.General
call fcn.004e0ed0
lea edx, [esp + 0x58]
push edx
push 0x615678
push str.LogFlush
push str.General
call fcn.004e0ed0
lea eax, [esp + 0x68]
push eax
push 0x60c81c
push str.FTPConnectionsAllowedFromIP
push str.General
call fcn.004e0ed0
lea ecx, [esp + 0x78]
push ecx
push 0x60c81c
push str.FTPConnectionsDisallowedFromIP
push str.General
call fcn.004e0ed0
add esp, 0x40
cmp dword [esp + 0x1a48], ebx
je 0x4cc2e1
lea edx, [esp + 0x48]
push edx
push 0x615678
push str.FTPUploadAllowed
push str.General
call fcn.004e0ed0
lea eax, [esp + 0x58]
push eax
push 0x60cf3c
push str.WriteClientIPChangesToHostsFile
push str.General
call fcn.004e0ed0
push ebx
push 0x400
lea ecx, [esp + 0x174]
push ecx
push 0x60cf3c
push str.StandAlone
push 0x60c810
call fcn.004edfd0
add esp, 0x38
cmp byte [esp + 0x14c], 0x31
je 0x4cc2d0
cmp dword [esp + 0x1a54], 1
je 0x4cc2d0
lea edx, [esp + 0x48]
push edx
push 0x615678
push str.AddChildIfNotpresent
jmp 0x4cc2f0
lea eax, [esp + 0x48]
push eax
push 0x615678
push str.AddChildIfNotpresent
jmp 0x4cc2f0
lea ecx, [esp + 0x48]
push ecx
push 0x60cf3c
push str.FTPUploadAllowed
push str.General
call fcn.004e0ed0
add esp, 0x10
lea edx, [esp + 0x48]
push edx
push 0x64430c
push str.UDPAnnounceInterval
push str.General
call fcn.004e0ed0
add esp, 0x10
lea eax, [esp + 0x48]
push eax
push 0x400
lea ecx, [esp + 0x1248]
push ecx
push 0x60c81c
push str.ThisDomain
push str.General
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [esp + 0x1240], bl
je 0x4cc362
lea edx, [esp + 0x1240]
push str.microworldsystems.com
push edx
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x4cc37e
lea eax, [esp + 0x48]
push eax
push str.escanav.com
push str.ThisDomain
push str.General
call fcn.004e0cb0
add esp, 0x10
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
lea ecx, [esp + 0x150]
push ecx
call esi
push str.FTPTEMP
lea edx, [esp + 0x150]
push edx
call edi
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x150]
push ecx
push str.TempDir
push str.General
call fcn.004e0cb0
add esp, 0x10
push ebp
lea edx, [esp + 0x150]
push edx
call esi
push 0x61b02c
lea eax, [esp + 0x150]
push eax
call edi
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x150]
push edx
push str.LogDir
push str.General
call fcn.004e0cb0
mov al, byte [esp + 0x28]
add esp, 0x10
push str.:SENDINFO
lea ecx, [esp + 0x1644]
push ecx
mov byte [esp + 0x1648], al
mov byte [esp + 0x1649], bl
call edi
lea edx, [esp + 0x1640]
push edx
call fcn.004e0670
lea eax, [esp + 0x1644]
push 0x60c81c
push eax
call fcn.004e9050
mov cl, byte [esp + 0x24]
add esp, 0xc
push str.:PUB
lea edx, [esp + 0x150]
push edx
mov byte [esp + 0x154], cl
mov byte [esp + 0x155], bl
call edi
lea eax, [esp + 0x14c]
push eax
call fcn.004e0670
lea ecx, [esp + 0x150]
push 0x60c81c
push ecx
call fcn.004e9050
mov esi, dword [esp + 0x1a54]
add esp, 0xc
push str.LOG
cmp esi, ebx
je 0x4cc524
lea edx, [esp + 0x150]
push edx
call edi
lea eax, [esp + 0x14c]
push eax
call fcn.004e0670
lea ecx, [esp + 0x150]
push 0x60c81c
push ecx
call fcn.004e9050
lea edx, [esp + 0x158]
push ebx
push edx
call fcn.004e8c10
add esp, 0x14
cmp eax, 1
jne 0x4cc503
cmp dword [esp + 0x14], ebx
je 0x4cc4ea
push ebx
lea eax, [esp + 0x150]
push eax
push str.Removing_WIN.INI_from__s_Folder..._n
call dword [esp + 0x20]
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
push 1
push 0x6157e0
push ebx
lea ecx, [esp + 0x168]
push ecx
call fcn.0050c810
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x150]
push eax
push str.ClientLogDir
push str.General
call fcn.004e0cb0
add esp, 0x10
jmp 0x4cc56c
lea ecx, [esp + 0x150]
push ecx
call edi
lea edx, [esp + 0x14c]
push edx
call fcn.004e0670
lea eax, [esp + 0x150]
push 0x60c81c
push eax
call fcn.004e9050
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x15c]
push edx
push str.ClientLogDir
push str.General
call fcn.004e0cb0
add esp, 0x1c
lea eax, [esp + 0x48]
push eax
push 0x625124
push str.NoOfDaysToKeepLogs
push str.General
call fcn.004e0ed0
lea ecx, [esp + 0x58]
push ecx
push 0x60cf3c
push str.AdvanceDeploy
push str.General
call fcn.004e0ed0
mov dl, byte [esp + 0x38]
add esp, 0x20
push str.:PUB
lea eax, [esp + 0x150]
push eax
mov byte [esp + 0x154], dl
mov byte [esp + 0x155], bl
call edi
lea ecx, [esp + 0x14c]
push 0x60c81c
push ecx
call fcn.004e9050
add esp, 8
cmp esi, ebx
je 0x4cc628
push str.UPGRADE
lea edx, [esp + 0x150]
push edx
call edi
lea eax, [esp + 0x14c]
push eax
call fcn.004e0670
lea ecx, [esp + 0x150]
push 0x60c81c
push ecx
call fcn.004e9050
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x15c]
push eax
push str.UpgradeDir
push str.General
call fcn.004e0cb0
add esp, 0x1c
mov cl, byte [esp + 0x18]
push str.:PUB
lea edx, [esp + 0x150]
push edx
mov byte [esp + 0x154], cl
mov byte [esp + 0x155], bl
call edi
lea eax, [esp + 0x14c]
push eax
call fcn.004e0670
lea ecx, [esp + 0x150]
push 0x60c81c
push ecx
call fcn.004e9050
add esp, 0xc
push str.UPDATE
lea edx, [esp + 0x150]
push edx
call edi
lea eax, [esp + 0x14c]
push eax
call fcn.004e0670
lea ecx, [esp + 0x150]
push 0x60c81c
push ecx
call fcn.004e9050
add esp, 0xc
cmp dword [esp + 0x1a58], ebx
je 0x4cc6bc
push ebx
push ebx
lea edx, [esp + 0x154]
push 0x64423c
push edx
call fcn.00517250
add esp, 0x10
cmp esi, ebx
je 0x4cc76c
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x758]
push str._c:PUBDEPLOY
push ecx
call fcn.005dfb23
lea edx, [esp + 0x760]
push edx
call fcn.004e0670
lea eax, [esp + 0x764]
push 0x60c81c
push eax
call fcn.004e9050
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x770]
push str._c:PUBQUARANT
push edx
call fcn.005dfb23
lea eax, [esp + 0x778]
push eax
call fcn.004e0670
lea ecx, [esp + 0x77c]
push 0x60c81c
push ecx
call fcn.004e9050
mov edx, dword [esp + 0x48]
push edx
lea eax, [esp + 0x788]
push str._c:PUBAVXMIR
push eax
call fcn.005dfb23
lea ecx, [esp + 0x790]
push ecx
call fcn.004e0670
add esp, 0x40
lea edx, [esp + 0x754]
push 0x60c81c
push edx
call fcn.004e9050
add esp, 8
cmp dword [esp + 0x14], ebx
je 0x4cc780
push ebx
push ebx
push str.Created_all_Share_Folders..._n
call dword [esp + 0x20]
add esp, 0xc
cmp dword [esp + 0x20], 1
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jne 0x4cc7bd
lea eax, [esp + 0x10]
push eax
push str.SystemCurrentControlSetServicesLanmanServerShares
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x4cc7bd
mov ecx, dword [esp + 0x10]
push str.escanupd
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x14], ebx
je 0x4cc7d1
push ebx
push ebx
push 0x644184
call dword [esp + 0x20]
add esp, 0xc
cmp dword [esp + 0x20], 1
jne 0x4cc80d
push 0x644180
call fcn.0053b030
push 0x64417c
call fcn.0053b030
push 0x644178
call fcn.0053b030
push 0x644174
call fcn.0053b030
push str._dpun
call fcn.0053b030
add esp, 0x14
push 0x207
lea eax, [esp + 0xf39]
push ebx
push eax
mov byte [esp + 0xf40], bl
call fcn.005dfd60
add esp, 0xc
call fcn.004f0de0
test eax, eax
je 0x4cc8c9
push ebx
push 0x208
lea ecx, [esp + 0xf3c]
push ecx
push 0x60c81c
push 0x615660
push 0x60c810
call fcn.004edfd0
push ebx
lea edx, [esp + 0xf50]
push 0x64416c
push edx
call fcn.004f5880
add esp, 0x24
cmp eax, 0xffffffff
jne 0x4cc8c9
push ebx
lea eax, [esp + 0xf38]
push 0x644168
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4cc8c9
push ebx
lea ecx, [esp + 0xf38]
push str.business
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4cc8c9
push ebx
lea edx, [esp + 0xf38]
push str.pymes
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x4cca92
xor eax, eax
push 0x103
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
lea eax, [esp + 0x551]
push ebx
push eax
mov byte [esp + 0x34], bl
mov byte [esp + 0x558], bl
call fcn.005dfd60
mov esi, dword [esp + 0x20]
add esp, 0xc
cmp esi, ebx
je 0x4cc919
push ebx
push ebx
push str.Adding_Share_for_pubupdate..._n
call esi
add esp, 0xc
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x150]
push str._c:PUBUPDATE
push edx
call fcn.005dfb23
mov eax, dword [str.escanupd_]
mov ecx, dword [0x644128]
mov dx, word [0x64412c]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x38], ecx
push eax
lea ecx, [esp + 0x15c]
push ecx
mov word [esp + 0x44], dx
call fcn.0053b2b0
add esp, 0x14
cmp dword [esp + 0x1a48], ebx
je 0x4cca27
cmp esi, ebx
je 0x4cc981
push ebx
push ebx
push str.Adding_Share_for_pubdeploy..._n
call esi
add esp, 0xc
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x550]
push str._c:PUBDEPLOY
push eax
call fcn.005dfb23
mov ecx, dword [str.escandep_]
mov edx, dword [0x6440fc]
mov ax, word [0x644100]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x38], edx
push ecx
lea edx, [esp + 0x55c]
push edx
mov word [esp + 0x44], ax
call fcn.0053b2b0
add esp, 0x14
cmp esi, ebx
je 0x4cc9dc
push ebx
push ebx
push str.Adding_Share_for_publog..._n
call esi
add esp, 0xc
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x550]
push str._c:PUBLOG
push ecx
call fcn.005dfb23
mov edx, dword [str.escanlog_]
mov eax, dword [0x6440c4]
mov cx, word [0x6440c8]
mov dword [esp + 0x34], edx
lea edx, [esp + 0x34]
mov dword [esp + 0x38], eax
push edx
lea eax, [esp + 0x55c]
push eax
mov word [esp + 0x44], cx
call fcn.0053b2b0
add esp, 0x14
cmp dword [esp + 0x1c], 1
jne 0x4ccc21
cmp esi, ebx
je 0x4cca42
push ebx
push ebx
push str.Adding_Share_for_pub_avx..._n
call esi
add esp, 0xc
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x550]
push str._c:PUBAVX
push edx
call fcn.005dfb23
mov eax, dword [str.escanavx_]
mov ecx, dword [0x64408c]
mov dx, word [0x644090]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x38], ecx
push eax
lea ecx, [esp + 0x55c]
push ecx
mov word [esp + 0x44], dx
call fcn.0053b2b0
add esp, 0x14
jmp 0x4ccc21
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4ccaa6
push ebx
push ebx
push str.Not_creating_hidden_shares_as_its_Corp_Edition..._n
call eax
add esp, 0xc
push 1
lea edx, [esp + 0x14]
push edx
push str.SystemCurrentControlSetServicesLanmanServerShares
push reloc.OLEAUT32.dll_SysReAllocString
xor edi, edi
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x4ccb68
mov eax, dword [esp + 0x10]
push str.escanupd
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanupd_
push ecx
call esi
test eax, eax
jne 0x4ccae8
lea edi, [eax + 1]
mov edx, dword [esp + 0x10]
push str.escandep
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escandep_
push eax
call esi
test eax, eax
jne 0x4ccb07
lea edi, [eax + 1]
mov ecx, dword [esp + 0x10]
push str.escanlog
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanlog_
push edx
call esi
test eax, eax
jne 0x4ccb26
lea edi, [eax + 1]
mov eax, dword [esp + 0x10]
push str.escanavx
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanavx_
push ecx
call esi
test eax, eax
jne 0x4ccb45
lea edi, [eax + 1]
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp edi, ebx
je 0x4ccb68
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4ccb68
push ebx
push ebx
push str.Hidden_shares_removed..._n
call eax
add esp, 0xc
push 1
lea eax, [esp + 0x14]
push eax
push str.SystemCurrentControlSetServicesLanmanServerSharesSecurity
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004dc050
add esp, 0x10
test eax, eax
jne 0x4ccbf0
mov ecx, dword [esp + 0x10]
push str.escanupd
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanupd_
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escandep
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escandep_
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanlog
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escanlog_
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanavx
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanavx_
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.escanupd_
call fcn.0053b030
push str.escandep_
call fcn.0053b030
push str.escanlog_
call fcn.0053b030
push str.escanavx_
call fcn.0053b030
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 0x10
cmp dword [esp + 0x1a48], ebx
je 0x4ccc4c
lea ecx, [esp + 0xe30]
push ecx
lea edx, [esp + 0x150]
push edx
push str.DestDir
push 0x60da74
call fcn.004e0cb0
add esp, 0x10
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x150]
push ecx
push str.FTPDownloadDir
push str.General
call fcn.004e0cb0
lea edx, [esp + 0x15c]
push edx
call fcn.004e24e0
add esp, 0x14
cmp dword [esp + 0x1a48], ebx
jne 0x4ccdc7
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
lea eax, [esp + 0x654]
push eax
call esi
lea ecx, [esp + 0x650]
push ecx
call fcn.004e24e0
add esp, 4
push str.license.ini
lea edx, [esp + 0x654]
push edx
call edi
push 1
push ebx
push ebx
push ebx
lea eax, [esp + 0x660]
push ebx
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x4cccfc
lea ecx, [esp + 0x650]
push ecx
call fcn.005d9fd0
add esp, 4
test eax, eax
je 0x4cccfc
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0x164]
push edx
push str.license.ini
push ebp
call fcn.005017d0
lea eax, [esp + 0x48]
push eax
push 0x60cf3c
push str.DisableAnnouncement
push str.General
call fcn.004e0cb0
lea ecx, [esp + 0x58]
push ecx
push 0x615678
push str.StopAnnouncement
push str.General
call fcn.004e0cb0
lea edx, [esp + 0x68]
push edx
push 0x615678
push str.DisableFTPServer
push str.General
call fcn.004e0cb0
lea eax, [esp + 0x78]
push eax
push 0x615678
push str.DisableFTP
push str.General
call fcn.004e0cb0
add esp, 0x40
lea ecx, [esp + 0x48]
push ecx
push 0x60cf3c
push str.DisableHTTPServer
push str.General
call fcn.004e0cb0
lea edx, [esp + 0x58]
push edx
push str.2021
push str.FTPPort
push str.General
call fcn.004e0cb0
lea eax, [esp + 0x68]
push eax
push str.3333
push str.HTTPPort
push str.General
call fcn.004e0cb0
push ebx
lea ecx, [esp + 0x180]
push ecx
push 0x64423c
push ebp
call fcn.004cbc80
add esp, 0x40
jmp 0x4ccded
cmp dword [esp + 0x1a58], ebx
je 0x4ccde7
push ebx
lea edx, [esp + 0x150]
push edx
push 0x64423c
push ebp
call fcn.004cbc80
add esp, 0x10
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [esp + 0x1c], ebx
jne 0x4ccee7
push 0x103
lea eax, [esp + 0x655]
push ebx
push eax
mov byte [esp + 0x65c], bl
call fcn.005dfd60
add esp, 0xc
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x654]
push edx
call esi
push str..AVC
lea eax, [esp + 0x654]
push eax
call edi
push 1
push ebx
push ebx
push ebx
lea ecx, [esp + 0x660]
push ebx
push ecx
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x4ccefe
push ebx
push ebx
lea edx, [esp + 0x154]
push str..AVX
push edx
call fcn.00517250
push ebx
push ebx
lea eax, [esp + 0x164]
push str..AVS
push eax
call fcn.00517250
push ebx
push ebx
lea ecx, [esp + 0x174]
push str..AVC
push ecx
call fcn.00517250
push ebx
push ebx
lea edx, [esp + 0x184]
push str..SET
push edx
call fcn.00517250
add esp, 0x40
push ebx
push ebx
lea eax, [esp + 0x154]
push str..KLB
push eax
call fcn.00517250
push ebx
push ebx
lea ecx, [esp + 0x164]
push str..VND
push ecx
call fcn.00517250
push ebx
push ebx
lea edx, [esp + 0x174]
push str..DT
push edx
call fcn.00517250
add esp, 0x30
jmp 0x4ccefe
push ebx
push ebx
lea eax, [esp + 0x154]
push str..AVS
push eax
call fcn.00517250
add esp, 0x10
cmp dword [esp + 0x24], 1
jne 0x4cd332
cmp dword [esp + 0x1c], ebx
jne 0x4cd016
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x164]
push ecx
push str..AVX
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0x164]
push edx
push str..AVS
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x164]
push eax
push str..AVC
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x164]
push ecx
push str..SET
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push str.avp_ext.set
push ebx
push 1
lea edx, [esp + 0x164]
push edx
push str.avp.set
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push str.avp_x.set
push ebx
push 1
lea eax, [esp + 0x164]
push eax
push str.avp.set
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x164]
push ecx
push str..KLB
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0x164]
push edx
push str..VND
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x164]
push eax
push str..KEY
push ebp
call fcn.005017d0
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x164]
push ecx
push str..DT
jmp 0x4cd32c
push 0x103
lea edx, [esp + 0x655]
push ebx
push edx
mov byte [esp + 0x65c], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0xa75]
push ebx
push eax
mov byte [esp + 0xa7c], bl
call fcn.005dfd60
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0xb84]
push str._c:PUBAVX
push edx
call fcn.005dfb23
lea eax, [esp + 0xb8c]
push eax
call fcn.004e0670
lea ecx, [esp + 0xb90]
push 0x60c81c
push ecx
call fcn.004e9050
add esp, 0x30
lea edx, [esp + 0xb68]
push edx
lea eax, [esp + 0x654]
push eax
call esi
push str.PLUGINS
lea ecx, [esp + 0xb6c]
push ecx
call edi
lea edx, [esp + 0xb68]
push edx
call fcn.004e0670
lea eax, [esp + 0xb6c]
push 0x60c81c
push eax
call fcn.004e9050
add esp, 0xc
lea ecx, [esp + 0xb68]
push ecx
lea edx, [esp + 0xa68]
push edx
call esi
push ebx
lea eax, [esp + 0x860]
push eax
push 0x60c810
call fcn.0051dd80
cmp byte [esp + 0x85c], bl
je 0x4cd319
lea ecx, [esp + 0x85c]
push ebx
push ecx
call fcn.004e8c10
add esp, 8
test eax, eax
je 0x4cd319
cmp dword [esp + 0x14], ebx
je 0x4cd125
push ebx
push ebx
push str.Copying_Plugin_Contents..._n
call dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x85c]
push edx
lea eax, [esp + 0x550]
push eax
call esi
lea ecx, [esp + 0x54c]
push ecx
call fcn.004e24e0
add esp, 4
push str.versions.dat.
lea edx, [esp + 0x550]
push edx
call edi
push 1
push ebx
push ebx
push ebx
lea eax, [esp + 0x55c]
push ebx
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x4cd19f
mov ecx, dword [esp + 0x14]
push ecx
push ebx
push 1
push str.versions.dat
push ebx
push 1
lea edx, [esp + 0x668]
push edx
push str.versions.dat.
lea eax, [esp + 0x87c]
push eax
call fcn.005017d0
jmp 0x4cd228
lea ecx, [esp + 0x85c]
push ecx
lea edx, [esp + 0x550]
push edx
call esi
lea eax, [esp + 0x54c]
push eax
call fcn.004e24e0
add esp, 4
push str.plugins
lea ecx, [esp + 0x550]
push ecx
call edi
lea edx, [esp + 0x54c]
push str.versions.dat
push edx
call fcn.004ec4e0
add esp, 8
test eax, eax
jne 0x4cd211
mov eax, dword [esp + 0x14]
push eax
push ebx
push 1
push ebx
push ebx
push 1
lea ecx, [esp + 0x668]
push ecx
push str.versions.dat
lea edx, [esp + 0x56c]
push edx
call fcn.005017d0
jmp 0x4cd228
push ebx
push ebx
lea eax, [esp + 0x658]
push str.versions.dat
push eax
call fcn.00517250
add esp, 0x10
push 1
push ebx
mov ecx, 0x30
mov esi, str.avxdisk.dll_bdcore.dll_avc3_installer.st_avc3.hx_avc3_main.st_avc3.ic_update.bin_avc3.fr_settings.avc3_avc3.rd_avcuf64.dll_exploits.avc3_avcuf32.dll_bdcore.so.linux_x86_bdcore.so.linux_x86_wg
lea edi, [esp + 0xd78]
rep movsd dword es:[edi], dword [esi]
push 0x2c
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x764]
push edx
lea eax, [esp + 0xd84]
push eax
mov dword [esp + 0x34], ebx
call fcn.004e1380
mov esi, dword [esp + 0x2c]
add esp, 0x18
cmp dword [esp + 0x1c], 0xffffffff
je 0x4cd2bd
or edi, 0xffffffff
nop
push esi
push ebx
push 1
push ebx
push ebx
push 1
lea ecx, [esp + 0x668]
push ecx
lea edx, [esp + 0x770]
push edx
lea eax, [esp + 0x87c]
push eax
call fcn.005017d0
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x764]
push edx
lea eax, [esp + 0xd84]
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [esp + 0x1c], edi
jne 0x4cd270
lea ecx, [esp + 0x85c]
push ecx
call fcn.004e24e0
add esp, 4
push str.plugins
lea edx, [esp + 0x860]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push esi
push ebx
push 1
push ebx
push ebx
push 1
lea eax, [esp + 0xa7c]
push eax
push 0x66da58
lea ecx, [esp + 0x87c]
push ecx
call fcn.005017d0
push ebx
push ebx
lea edx, [esp + 0xa6c]
push str.cache.
push edx
call fcn.00517250
add esp, 0x10
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x164]
push eax
push str..AVS
push ebp
call fcn.005017d0
mov ecx, dword [esp + 0x1a40]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0x1a34
ret