Function at 0x441549
Capabilities:
Delete registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82c
mov eax, dword [0x4c143c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x208
lea eax, [ebp - 0x414]
push edi
xor ebx, ebx
mov esi, ecx
push ebx
push eax
call fcn.0045b1d0
lea eax, [ebp - 0x414]
push edi
push eax
call fcn.0044318c
add esp, 0x14
test eax, eax
je 0x4418cb
push edi
lea eax, [ebp - 0x20c]
push ebx
push eax
call fcn.0045b1d0
push edi
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.0044437a
add esp, 0x18
test eax, eax
je 0x4418cb
push ebx
lea eax, [ebp - 0x828]
mov dword [ebp - 0x828], ebx
push eax
lea eax, [ebp - 0x20c]
push eax
push str.SharedModules
call fcn.00444e53
add esp, 0x10
test eax, eax
jne 0x4415f2
push dword [ebp - 0x828]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4418cb
push edi
lea eax, [ebp - 0x824]
push ebx
push eax
call fcn.0045b1d0
add esp, 0xc
lea eax, [ebp - 0x824]
push edi
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
test eax, eax
jne 0x441650
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi + 0x110]
test edx, edx
je 0x4418cb
cmp dword [0x4c12e0], ebx
je 0x4418cb
mov ecx, dword [edx]
push eax
push str...Unable_to_get_short_path.__Error:__d
push edx
call dword [ecx + 0x18]
add esp, 0xc
jmp 0x4418cb
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.004660fd
pop ecx
pop ecx
test eax, eax
jne 0x4416a1
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x4418cb
cmp dword [0x4c12e0], ebx
je 0x4418cb
cmp dword [0x4c3630], ebx
je 0x4418cb
mov eax, dword [ecx]
push str.Short_path_is_the_same_as_long_path__nothing_to_migrate
push ecx
call dword [eax + 0x10]
pop ecx
pop ecx
jmp 0x4418cb
push edi
lea eax, [ebp - 0x61c]
push ebx
push eax
call fcn.0045b1d0
push edi
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x824]
push eax
call fcn.0044437a
add esp, 0x18
test eax, eax
je 0x4418cb
push ebx
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], ebx
push eax
lea eax, [ebp - 0x61c]
mov edi, str.SharedModules
push eax
push edi
call fcn.00444e53
add esp, 0x10
test eax, eax
jne 0x4418cb
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x441727
cmp dword [0x4c12e0], ebx
je 0x441727
mov eax, dword [ecx]
lea edx, [ebp - 0x20c]
push edx
lea edx, [ebp - 0x61c]
push edx
push str.Migrating_shortpath_data_from__s_to__s
push ecx
call dword [eax + 0x18]
add esp, 0x10
push 1
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
call fcn.00444e53
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, eax
add esp, 0x10
test edx, edx
jne 0x441802
push dword [ebp - 0x828]
push ebx
push dword [ebp - 0x82c]
call dword [sym.imp.ADVAPI32.dll_RegCopyTreeA]
mov edx, eax
test edx, edx
je 0x441798
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x441798
cmp dword [0x4c12e0], ebx
je 0x441798
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x20c]
push edx
lea edx, [ebp - 0x61c]
push edx
push str.Failed_to_copy_registry_key_from__s_to__s__Error:__d
push ecx
call dword [eax + 0x14]
add esp, 0x14
lea eax, [ebp - 0x414]
push 0x208
push eax
call fcn.0045eddf
pop ecx
pop ecx
inc eax
push eax
lea eax, [ebp - 0x414]
push eax
push 1
push ebx
push ebx
push dword [ebp - 0x828]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, eax
test edx, edx
je 0x4417f2
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x4417f2
cmp dword [0x4c12e0], ebx
je 0x4417f2
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x20c]
push edx
push str.Failed_to_set_registry_value_for__s__Error:__d
push ecx
call dword [eax + 0x18]
add esp, 0x10
push dword [ebp - 0x828]
call edi
mov dword [ebp - 0x828], ebx
jmp 0x44182a
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x44182a
cmp dword [0x4c12e0], ebx
je 0x44182a
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x20c]
push edx
push str.Failed_to_create_registry_key_for__s__Error:__d
push ecx
call dword [eax + 0x14]
add esp, 0x10
push dword [ebp - 0x82c]
call edi
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], ebx
push eax
push 0xf003f
push ebx
mov ebx, str.SoftwareMcAfeeSharedModules
push ebx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edx, eax
test edx, edx
jne 0x4418a8
lea eax, [ebp - 0x61c]
push eax
push dword [ebp - 0x82c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
mov edx, eax
test edx, edx
je 0x44189e
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x44189e
cmp dword [0x4c12e0], 0
je 0x44189e
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x61c]
push edx
push str.Failed_to_delete_registry_key__s__Error:__d
push ecx
call dword [eax + 0x14]
add esp, 0x10
push dword [ebp - 0x82c]
call edi
jmp 0x4418cb
mov ecx, dword [esi + 0x110]
test ecx, ecx
je 0x4418cb
cmp dword [0x4c12e0], 0
je 0x4418cb
mov eax, dword [ecx]
push edx
push ebx
push str.Failed_to_open_registry_key_for__s__Error:__d
push ecx
call dword [eax + 0x14]
add esp, 0x10
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00458eeb
leave
ret