Function at 0x51ca90
Capabilities:
Manipulate safe mode programs

Disassembly:
push ebp
mov ebp, esp
cmp dword [ebp + 8], 0
je 0x51cb7e
push str.Service
push str.SystemCurrentControlSetControlSafeBootMinimalmfehidk
call fcn.0051ced0
add esp, 8
test eax, eax
je 0x51cb40
push str.Driver
push str.SystemCurrentControlSetControlSafeBootMinimal_swin.sys
call fcn.0051ced0
add esp, 8
test eax, eax
je 0x51cb40
push str.Service
push str.SystemCurrentControlSetControlSafeBootMinimal_scsrvc
call fcn.0051ced0
add esp, 8
test eax, eax
je 0x51cb40
push str.Driver
push str.SystemCurrentControlSetControlSafeBootNetwork_swin.sys
call fcn.0051ced0
add esp, 8
test eax, eax
je 0x51cb40
push str.Service
push str.SystemCurrentControlSetControlSafeBootNetwork_scsrvc
call fcn.0051ced0
add esp, 8
test eax, eax
je 0x51cb40
test byte [0x9538a8], 4
je 0x51cb3c
push str.MACC_and_MPT_drivers_enabled_to_run_on_Safe_Mode.Warning:_This_can_allow_other_McAfee_drivers_to_load_on_Safe_Mode
push 0x521
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_callback_safe_mode
push dword [0x7b0488]
push 4
call fcn.004f21c0
add esp, 0x18
xor eax, eax
pop ebp
ret
test byte [0x9538a8], 1
je 0x51cb6d
push str.Unable_to_change_Safe_Mode_registries_configuration__rolling_back
push 0x525
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_callback_safe_mode
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x18
push 0
call fcn.0051ca90
add esp, 4
mov eax, 1
pop ebp
ret
push edi
push str.SystemCurrentControlSetControlSafeBootMinimalmfehidk
push reloc.OLEAUT32.dll_SysReAllocString
xor edi, edi
call fcn.00507dc0
add esp, 8
test eax, eax
je 0x51cbd1
cmp eax, 2
je 0x51cbd1
test byte [0x9538a8], 1
je 0x51cbd6
push eax
push str.SystemCurrentControlSetControlSafeBootMinimalmfehidk
push str.Failed_to_remove_registry__s._err___d
push 0x250
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_delete_key
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x20
jmp 0x51cbd6
mov edi, 1
push esi
push str.SystemCurrentControlSetControlSafeBootMinimal_swin.sys
push reloc.OLEAUT32.dll_SysReAllocString
xor esi, esi
call fcn.00507dc0
add esp, 8
test eax, eax
je 0x51cc29
cmp eax, 2
je 0x51cc29
test byte [0x9538a8], 1
je 0x51cc2e
push eax
push str.SystemCurrentControlSetControlSafeBootMinimal_swin.sys
push str.Failed_to_remove_registry__s._err___d
push 0x250
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_delete_key
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x20
jmp 0x51cc2e
mov esi, 1
push str.SystemCurrentControlSetControlSafeBootMinimal_scsrvc
push reloc.OLEAUT32.dll_SysReAllocString
and esi, edi
call fcn.00507dc0
add esp, 8
test eax, eax
je 0x51cc80
cmp eax, 2
je 0x51cc80
test byte [0x9538a8], 1
je 0x51cc7e
push eax
push str.SystemCurrentControlSetControlSafeBootMinimal_scsrvc
push str.Failed_to_remove_registry__s._err___d
push 0x250
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_delete_key
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x20
xor esi, esi
push str.SystemCurrentControlSetControlSafeBootNetwork_swin.sys
push reloc.OLEAUT32.dll_SysReAllocString
xor edi, edi
call fcn.00507dc0
add esp, 8
test eax, eax
je 0x51ccd2
cmp eax, 2
je 0x51ccd2
test byte [0x9538a8], 1
je 0x51ccd7
push eax
push str.SystemCurrentControlSetControlSafeBootNetwork_swin.sys
push str.Failed_to_remove_registry__s._err___d
push 0x250
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_delete_key
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x20
jmp 0x51ccd7
mov edi, 1
push str.SystemCurrentControlSetControlSafeBootNetwork_scsrvc
push reloc.OLEAUT32.dll_SysReAllocString
and edi, esi
call fcn.00507dc0
add esp, 8
pop esi
test eax, eax
je 0x51cd5d
cmp eax, 2
je 0x51cd5d
test byte [0x9538a8], 1
je 0x51cd55
push eax
push str.SystemCurrentControlSetControlSafeBootNetwork_scsrvc
push str.Failed_to_remove_registry__s._err___d
push 0x250
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_delete_key
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x20
test byte [0x9538a8], 1
je 0x51cd55
push str.Unable_to_change_Safe_Mode_registries_configuration
push 0x538
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_callback_safe_mode
push dword [0x7b0488]
push 1
call fcn.004f21c0
add esp, 0x18
mov eax, 1
pop edi
pop ebp
ret
test edi, edi
je 0x51cd28
test byte [0x9538a8], 4
je 0x51cd8e
push str.MACC_and_MPT_drivers_disabled_to_run_on_Safe_Mode.
push 0x534
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cmd_cmd_features.c
push str.cmd_features_callback_safe_mode
push dword [0x7b0488]
push 4
call fcn.004f21c0
add esp, 0x18
xor eax, eax
pop edi
pop ebp
ret