Function at 0x40b950
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44d9a0
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x468cb0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x2c]
push 0x45b844
push eax
mov dword [ebp - 0x2c], str.CRegInfo::Win7_ShowEmptyDrives
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], 1
call fcn.0040a3d0
mov dword [ebp - 4], 0
mov eax, dword [0x46d77c]
push dword [eax + 0x14]
push dword [eax + 0x10]
lea eax, [ebp - 0x2c]
push str.OS_Version:__d__d_n
push eax
call fcn.0040a3d0
mov eax, dword [0x46d77c]
add esp, 0x18
cmp dword [eax + 0x10], 6
jb 0x40bb61
cmp dword [eax + 0x14], 1
jb 0x40bb61
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.00401c90
mov byte [ebp - 4], 2
mov eax, dword [0x46d77c]
push dword [ebp - 0x10]
cmp dword [eax], 0
lea eax, [ebp - 0x2c]
mov ecx, 0xf013f
push str.SetDWORDValue1:__s_n
mov esi, 0xf003f
push eax
cmovne esi, ecx
call fcn.0040a3d0
add esp, 0xc
lea ecx, [ebp - 0x20]
push 0
push 0
push esi
push 0
push 0
push dword [ebp - 0x10]
push SysReAllocStringLen
call fcn.0040bd60
test eax, eax
jne 0x40baae
push dword [ebp - 0x10]
lea eax, [ebp - 0x2c]
push str.SetDWORDValue4:__s_n
push eax
call fcn.0040a3d0
mov edi, dword [ebp - 0x20]
add esp, 0xc
cmp dword [ebp + 8], 1
push 4
lea eax, [ebp - 0x14]
push eax
push 4
push 0
push str.HideDrivesWithNoMedia
push edi
mov dword [ebp - 0x14], 0
je 0x40ba82
mov dword [ebp - 0x14], 1
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov esi, eax
test esi, esi
jne 0x40ba95
push edi
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
test edi, edi
je 0x40baa5
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], 0
jmp 0x40bab4
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp + 8]
or ebx, 0xffffffff
test esi, esi
jne 0x40bb38
call fcn.0040e738
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x40bad7
push 0x80004005
call fcn.00401b40
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp + 8], 1
mov byte [ebp - 4], 3
lea eax, [ebp - 0x14]
jne 0x40baf8
push str.Set_Show_Empty_Drives_OK_n
jmp 0x40bafd
push str.Set_Hide_Empty_Drives_OK_n
push eax
call fcn.00404280
mov esi, dword [ebp - 0x14]
add esp, 8
lea eax, [ebp - 0x2c]
push esi
push 0x45b934
push eax
call fcn.0040a3d0
add esi, 0xfffffff0
add esp, 0xc
mov byte [ebp - 4], 2
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40bb38
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x40bb56
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test edi, edi
je 0x40bb61
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x2c]
push str.EXIT________n
push eax
call fcn.0040a3d0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4