Function at 0x93ea30
Capabilities:
Delete registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1a94
call fcn.00a91950
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x1a90], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x3ff
lea eax, [esp + 0x129d]
push ebx
push eax
mov byte [esp + 0x12a4], bl
call fcn.00a7ffb0
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x28]
push ebx
push ecx
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x30], ebx
call fcn.009691d0
call fcn.0094f490
push 0xb55508
lea edx, [esp + 0x16c]
push str._sAVPM.EXE
push edx
mov dword [esp + 0x44], eax
call fcn.00a78f30
add esp, 0x2c
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x150]
call fcn.0095a0f0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 8
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x1c], eax
push 0xb55508
lea eax, [esp + 0x44]
push eax
call edi
cmp byte [esp + 0x40], bl
je 0x93eb0b
lea eax, [esp + 0x40]
inc eax
cmp byte [eax], bl
jne 0x93eae5
lea ecx, [esp + 0x40]
sub eax, ecx
je 0x93eb0b
cmp byte [esp + eax + 0x3f], 0x5c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x93eb11
push 0xaa1564
mov edx, ecx
push edx
call esi
jmp 0x93eb11
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.eserv.ini
lea eax, [esp + 0x44]
push eax
call esi
push 0xb55508
lea ecx, [esp + 0x96c]
push ecx
call edi
cmp byte [esp + 0x968], bl
je 0x93eb64
lea eax, [esp + 0x968]
lea esp, [esp]
inc eax
cmp byte [eax], bl
jne 0x93eb40
lea edx, [esp + 0x968]
sub eax, edx
je 0x93eb64
cmp byte [esp + eax + 0x967], 0x5c
je 0x93eb64
push 0xaa1564
mov eax, edx
push eax
call esi
push str.eupdate.ini
lea ecx, [esp + 0x96c]
push ecx
call esi
cmp byte [0xb55509], 0x3a
jne 0x93eb89
movsx edx, byte [0xb55508]
mov dword [esp + 0x14], edx
jmp 0x93eb95
call fcn.00a7c1b5
add eax, 0x40
mov dword [esp + 0x14], eax
call fcn.00987cf0
xor ebx, ebx
lea esi, [esp + 0x1190]
mov edi, eax
call fcn.00985ed0
push edi
lea eax, [esp + 0x38]
push str.TM_u
push eax
call fcn.00a78f30
mov ecx, esi
add esp, 0xc
push ecx
lea eax, [esp + 0x44]
lea ecx, [esp + 0x38]
mov edi, str.Config
call fcn.009596b0
add esp, 4
push 0xaae0f8
lea eax, [esp + 0x44]
mov ecx, str.ShowAgentSetup
call fcn.009596b0
add esp, 4
push 0xac7298
lea eax, [esp + 0x44]
mov ecx, str.NoOfHostConnectionAllowed
call fcn.009596b0
add esp, 4
push str.10000
lea eax, [esp + 0x44]
mov ecx, str.TimeOutInterval
call fcn.009596b0
add esp, 4
push str.General
lea esi, [esp + 0x44]
mov eax, 0xaa1543
mov ebx, str.DefaultPassword
call fcn.009584b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.NormalView
mov edi, str.General
call fcn.009596b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.UpdateDBOnDownload
call fcn.009596b0
add esp, 4
push edi
mov eax, 0xaae0f8
mov ebx, str.ExportToExcel
call fcn.009584b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.RestartIfEservAutoShutDown
call fcn.009596b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.ForceHostLookup
call fcn.009596b0
add esp, 4
push str.Reports
mov eax, 0xaae0f8
mov ebx, str.NewReport
call fcn.009584b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.FTPMaxClients
call fcn.009596b0
add esp, 4
push 0xaae0f8
mov eax, esi
mov ecx, str.LogFlush
call fcn.009596b0
add esp, 4
push 0xaa1543
mov eax, esi
mov ecx, str.FTPConnectionsAllowedFromIP
call fcn.009596b0
add esp, 4
push 0xaa1543
mov eax, esi
mov ecx, str.FTPConnectionsDisallowedFromIP
call fcn.009596b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.FTPUploadAllowed
call fcn.009596b0
add esp, 4
push 0xae7110
mov eax, esi
mov ecx, str.UDPAnnounceInterval
call fcn.009596b0
add esp, 4
mov edx, esi
push edx
push 0x400
lea eax, [esp + 0x12a0]
push eax
push 0xaa1543
push str.ThisDomain
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [esp + 0x1298], 0
je 0x93ed6d
lea ecx, [esp + 0x1298]
push str.microworldsystems.com
push ecx
call fcn.00a88f66
add esp, 8
test eax, eax
jne 0x93ed88
push str.General
lea esi, [esp + 0x44]
mov eax, str.escanav.com
mov ebx, str.ThisDomain
call fcn.009584b0
add esp, 4
push 0xb55508
lea edx, [esp + 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.FTPTEMP
lea eax, [esp + 0x14c]
push eax
call edi
push str.General
lea esi, [esp + 0x44]
lea eax, [esp + 0x14c]
mov ebx, str.TempDir
call fcn.009584b0
add esp, 4
push 0xb55508
lea ecx, [esp + 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0xaade0c
lea edx, [esp + 0x14c]
push edx
call edi
push str.General
lea eax, [esp + 0x14c]
mov ebx, str.LogDir
call fcn.009584b0
mov bl, byte [esp + 0x18]
add esp, 4
push str.:SENDINFO
lea eax, [esp + 0x169c]
push eax
mov byte [esp + 0x16a0], bl
mov byte [esp + 0x16a1], 0
call edi
lea eax, [esp + 0x1698]
call fcn.0094dd20
mov ecx, 0xaa1543
lea esi, [esp + 0x1698]
call fcn.0095e7e0
push str.:PUB
lea ecx, [esp + 0x14c]
push ecx
mov byte [esp + 0x150], bl
mov byte [esp + 0x151], 0
call edi
lea eax, [esp + 0x148]
call fcn.0094dd20
mov ecx, 0xaa1543
lea esi, [esp + 0x148]
call fcn.0095e7e0
push str.LOG
mov edx, esi
push edx
call edi
mov eax, esi
call fcn.0094dd20
mov ecx, 0xaa1543
call fcn.0095e7e0
push str.General
lea esi, [esp + 0x44]
lea eax, [esp + 0x14c]
mov ebx, str.ClientLogDir
call fcn.009584b0
add esp, 4
push 0xac77b4
mov eax, esi
mov ecx, str.NoOfDaysToKeepLogs
mov edi, str.General
call fcn.009596b0
add esp, 4
push 0xaa1ac4
mov eax, esi
mov ecx, str.AdvanceDeploy
call fcn.009596b0
mov bl, byte [esp + 0x18]
add esp, 4
mov byte [esp + 0x148], bl
mov byte [esp + 0x149], 0
push str.:PUB
lea eax, [esp + 0x14c]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push eax
call edi
mov ecx, 0xaa1543
lea esi, [esp + 0x148]
call fcn.0095e7e0
push str.:PUB
mov ecx, esi
push ecx
mov byte [esp + 0x150], bl
mov byte [esp + 0x151], 0
call edi
mov eax, esi
call fcn.0094dd20
mov ecx, 0xaa1543
call fcn.0095e7e0
push str.UPDATE
mov edx, esi
push edx
call edi
mov eax, esi
call fcn.0094dd20
mov ecx, 0xaa1543
call fcn.0095e7e0
push 0
mov ecx, 0xae71a0
mov ebx, esi
call fcn.0095eb80
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ebx, 1
add esp, 4
cmp dword [esp + 0x10], ebx
jne 0x93eff8
lea eax, [esp + 0x10]
push eax
push str.SystemCurrentControlSetServicesLanmanServerShares
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x93efb7
mov ecx, dword [esp + 0x10]
push str.escanupd
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.nupd_
call fcn.009aeb10
add esp, 4
push 0xae71f0
call fcn.009aeb10
add esp, 4
push 0xae71f4
call fcn.009aeb10
add esp, 4
push 0xae71f8
call fcn.009aeb10
add esp, 4
push 0xae71fc
call fcn.009aeb10
add esp, 4
push 0x207
lea eax, [esp + 0xe85]
push 0
push eax
mov byte [esp + 0xe8c], 0
call fcn.00a7ffb0
add esp, 0xc
call fcn.0098b510
test eax, eax
je 0x93f0bc
push 0x208
lea ecx, [esp + 0xe84]
push ecx
push 0xaa1543
mov edx, str.AppName
mov ecx, 0xaa154c
call fcn.00958d30
add esp, 0xc
push 0
lea edx, [esp + 0xe84]
push 0xae7200
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x93f0bc
push 0
lea eax, [esp + 0xe84]
push 0xae7204
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x93f0bc
push 0
lea ecx, [esp + 0xe84]
push str.business
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x93f0bc
push 0
lea edx, [esp + 0xe84]
push str.pymes
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x93f198
xor eax, eax
push 0x103
push eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov word [esp + 0x39], ax
mov byte [esp + 0x3b], al
mov byte [esp + 0x868], al
lea eax, [esp + 0x869]
push eax
mov byte [esp + 0x2c], 0
call fcn.00a7ffb0
mov esi, dword [esp + 0x20]
add esp, 0xc
push esi
lea ecx, [esp + 0x14c]
push str._c:PUBUPDATE
push ecx
call fcn.00a78f30
mov edx, dword [str.escanupd_]
mov cx, word [0xae7228]
mov eax, dword [0xae7224]
mov dword [esp + 0x2c], edx
add esp, 0xc
lea edx, [esp + 0x20]
mov word [esp + 0x28], cx
push edx
lea ecx, [esp + 0x14c]
mov dword [esp + 0x28], eax
call fcn.009ae5c0
cmp dword [esp + 0x18], ebx
jne 0x93f2f4
push esi
lea eax, [esp + 0x864]
push str._c:PUBAVX
push eax
call fcn.00a78f30
mov ecx, dword [str.escanavx_]
mov edx, dword [0xae7254]
mov ax, word [0xae7258]
mov dword [esp + 0x2c], ecx
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x864]
mov dword [esp + 0x28], edx
mov word [esp + 0x2c], ax
call fcn.009ae5c0
jmp 0x93f2f4
lea edx, [esp + 0x10]
push edx
push 0xf003f
push 0
push str.SystemCurrentControlSetServicesLanmanServerShares
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x93f22c
mov eax, dword [esp + 0x10]
push str.escanupd
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanupd_
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escandep
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escandep_
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanlog
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanlog_
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escanavx
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanavx_
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x10]
push eax
push 0xf003f
push 0
push str.SystemCurrentControlSetServicesLanmanServerSharesSecurity
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x93f2c0
mov ecx, dword [esp + 0x10]
push str.escanupd
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanupd_
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escandep
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escandep_
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanlog
push edx
call esi
mov eax, dword [esp + 0x10]
push str.escanlog_
push eax
call esi
mov ecx, dword [esp + 0x10]
push str.escanavx
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.escanavx_
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.escanupd_
call fcn.009aeb10
add esp, 4
push str.escandep_
call fcn.009aeb10
add esp, 4
push str.escanlog_
call fcn.009aeb10
add esp, 4
push str.escanavx_
call fcn.009aeb10
add esp, 4
push str.General
lea esi, [esp + 0x44]
lea eax, [esp + 0x14c]
mov ebx, str.FTPDownloadDir
call fcn.009584b0
add esp, 4
cmp byte [esp + 0x148], 0
je 0x93f347
lea eax, [esp + 0x148]
inc eax
cmp byte [eax], 0
jne 0x93f322
lea ecx, [esp + 0x148]
sub eax, ecx
je 0x93f347
cmp byte [esp + eax + 0x147], 0x5c
je 0x93f347
push 0xaa1564
mov edx, ecx
push edx
call edi
push 0xb55508
lea eax, [esp + 0x654]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esp + 0x650], 0
je 0x93f395
lea eax, [esp + 0x650]
jmp 0x93f370
inc eax
cmp byte [eax], 0
jne 0x93f370
lea ecx, [esp + 0x650]
sub eax, ecx
je 0x93f395
cmp byte [esp + eax + 0x64f], 0x5c
je 0x93f395
push 0xaa1564
mov edx, ecx
push edx
call edi
push str.license.ini
lea eax, [esp + 0x654]
push eax
call edi
push 1
push 0
xor edx, edx
lea ecx, [esp + 0x658]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x93f3f4
lea edi, [esp + 0x650]
call fcn.00a6a3b0
test eax, eax
je 0x93f3ee
push 0
push 0
push 0
lea ecx, [esp + 0x154]
push ecx
push str.license.ini
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.General
lea esi, [esp + 0x44]
mov eax, 0xaa1ac4
mov ebx, str.DisableAnnouncement
call fcn.009584b0
add esp, 4
push str.General
mov eax, 0xaae0f8
mov ebx, str.StopAnnouncement
call fcn.009584b0
add esp, 4
push str.General
mov eax, 0xaae0f8
mov ebx, str.DisableFTPServer
call fcn.009584b0
add esp, 4
push str.General
mov eax, 0xaae0f8
mov ebx, str.DisableFTP
call fcn.009584b0
add esp, 4
push str.General
mov eax, 0xaa1ac4
mov ebx, str.DisableHTTPServer
call fcn.009584b0
add esp, 4
push str.General
mov eax, str.2021
mov ebx, str.FTPPort
call fcn.009584b0
add esp, 4
push str.General
mov eax, str.3333
mov ebx, str.HTTPPort
call fcn.009584b0
lea edx, [esp + 0x14c]
add esp, 4
push edx
mov ecx, 0xae71a0
call fcn.0093e770
mov esi, dword [esp + 0x1c]
add esp, 4
test esi, esi
jne 0x93f577
push 0x103
lea eax, [esp + 0x54d]
push esi
push eax
mov byte [esp + 0x554], 0
call fcn.00a7ffb0
add esp, 0xc
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0x54c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str..AVC
lea eax, [esp + 0x54c]
push eax
call edi
push 1
push esi
xor edx, edx
lea ecx, [esp + 0x550]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x93f58d
push eax
mov ecx, str..AVX
lea ebx, [esp + 0x14c]
call fcn.0095eb80
add esp, 4
push esi
mov ecx, str..AVS
call fcn.0095eb80
add esp, 4
push esi
mov ecx, str..AVC
call fcn.0095eb80
add esp, 4
push esi
mov ecx, str..SET
call fcn.0095eb80
add esp, 4
push esi
mov ecx, str..KLB
call fcn.0095eb80
add esp, 4
push esi
mov ecx, str..VND
call fcn.0095eb80
add esp, 4
mov ecx, str..DT
jmp 0x93f57c
mov ecx, str..AVS
push 0
lea ebx, [esp + 0x14c]
call fcn.0095eb80
add esp, 4
cmp dword [esp + 0x1c], 1
jne 0x93f9a5
test esi, esi
jne 0x93f6cb
push esi
push esi
push esi
lea ecx, [esp + 0x154]
push ecx
push str..AVX
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea edx, [esp + 0x154]
push edx
push str..AVS
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea eax, [esp + 0x154]
push eax
push str..AVC
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea ecx, [esp + 0x154]
push ecx
push str..SET
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push 1
lea edx, [esp + 0x154]
push edx
push str.avp.set
push 0xb55508
mov edx, str.avp_ext.set
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push 1
lea eax, [esp + 0x154]
push eax
push str.avp.set
push 0xb55508
mov edx, str.avp_x.set
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea ecx, [esp + 0x154]
push ecx
push str..KLB
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea edx, [esp + 0x154]
push edx
push str..VND
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea eax, [esp + 0x154]
push eax
push str..KEY
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push esi
push esi
push esi
lea ecx, [esp + 0x154]
push ecx
push str..DT
jmp 0x93f997
push 0x103
lea edx, [esp + 0x54d]
push 0
push edx
mov byte [esp + 0x554], 0
call fcn.00a7ffb0
add esp, 0xc
push 0x103
lea eax, [esp + 0x865]
push 0
push eax
mov byte [esp + 0x86c], 0
call fcn.00a7ffb0
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
lea edx, [esp + 0xc7c]
push str._c:PUBAVX
push edx
call fcn.00a78f30
add esp, 0xc
lea eax, [esp + 0xc78]
call fcn.0094dd20
mov ecx, 0xaa1543
lea esi, [esp + 0xc78]
call fcn.0095e7e0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, esi
push eax
lea ecx, [esp + 0x54c]
push ecx
call ebx
push str.PLUGINS
mov edx, esi
push edx
call edi
mov eax, esi
call fcn.0094dd20
mov ecx, 0xaa1543
call fcn.0095e7e0
mov eax, esi
push eax
lea ecx, [esp + 0x864]
push ecx
call ebx
lea edx, [esp + 0xa70]
push edx
xor edx, edx
mov ecx, 0xaa154c
call fcn.0094ffa0
cmp byte [esp + 0xa70], 0
je 0x93f984
xor ecx, ecx
lea edi, [esp + 0xa70]
call fcn.0095a6d0
test eax, eax
je 0x93f984
mov eax, edi
push eax
lea ecx, [esp + 0x75c]
push ecx
mov esi, ebx
call esi
lea ecx, [esp + 0x758]
call fcn.00960910
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.versions.dat.
lea edx, [esp + 0x75c]
push edx
call edi
push 1
push 0
xor edx, edx
lea ecx, [esp + 0x760]
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x93f824
push eax
push 1
push 1
lea eax, [esp + 0x554]
push eax
push str.versions.dat.
lea ecx, [esp + 0xa84]
push ecx
mov edx, str.versions.dat
xor ecx, ecx
call fcn.0095f0f0
jmp 0x93f89c
lea edx, [esp + 0xa70]
push edx
lea eax, [esp + 0x75c]
push eax
call esi
lea ecx, [esp + 0x758]
call fcn.00960910
push str.plugins
lea ecx, [esp + 0x75c]
push ecx
call edi
mov edi, str.versions.dat
lea ecx, [esp + 0x758]
call fcn.00959ba0
push 0
test eax, eax
jne 0x93f888
push 1
push 1
lea edx, [esp + 0x554]
push edx
push edi
lea eax, [esp + 0x76c]
push eax
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
jmp 0x93f89c
mov ecx, str.versions.dat
lea ebx, [esp + 0x54c]
call fcn.0095eb80
add esp, 4
mov ecx, 0x30
mov esi, str.avxdisk.dll_bdcore.dll_avc3_installer.st_avc3.hx_avc3_main.st_avc3.ic_update.bin_avc3.fr_settings.avc3_avc3.rd_avcuf64.dll_exploits.avc3_avcuf32.dll_bdcore.so.linux_x86_bdcore.so.linux_x86_wg
lea edi, [esp + 0x650]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x654]
push edx
mov bl, 0x2c
lea edi, [esp + 0x1090]
mov dword [esp + 0x1c], 0
call fcn.0095ae80
or esi, 0xffffffff
add esp, 8
cmp dword [esp + 0x14], esi
je 0x93f92b
mov edi, edi
push 0
push 1
push 1
lea eax, [esp + 0x554]
push eax
lea ecx, [esp + 0x1098]
push ecx
lea edx, [esp + 0xa84]
push edx
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x654]
push ecx
mov bl, 0x2c
lea edi, [esp + 0x1090]
call fcn.0095ae80
add esp, 8
cmp dword [esp + 0x14], esi
jne 0x93f8e0
lea ecx, [esp + 0xa70]
call fcn.00960910
push str.plugins
lea edx, [esp + 0xa74]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
push 1
push 1
lea eax, [esp + 0x86c]
push eax
push 0xaad5c4
lea ecx, [esp + 0xa84]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
push 0
mov ecx, str.cache.
lea ebx, [esp + 0x864]
call fcn.0095eb80
add esp, 4
push 0
push 0
push 0
lea edx, [esp + 0x154]
push edx
push str..AVS
push 0xb55508
xor edx, edx
xor ecx, ecx
call fcn.0095f0f0
mov ecx, dword [esp + 0x1a9c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret