Function at 0x4ace5a
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x5092e4]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0x240], eax
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], bl
call fcn.00401f80
xor eax, eax
mov dword [ebp - 0x22c], ebx
lea edi, [ebp - 0x228]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push ebx
stosd dword es:[edi], eax
lea eax, [ebp - 0x22c]
push eax
push ebx
xor esi, esi
push 0x30
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x238], ebx
inc esi
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test eax, eax
jne 0x4aceda
mov dword [ebp - 0x234], 0xf
jmp 0x4acfbe
mov edi, dword [ebp - 0x224]
sub edi, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0x228]
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x234], eax
cmp edi, ebx
jne 0x4acf0b
xor edi, edi
inc edi
mov dword [ebp - 0x23c], edi
cmp eax, ebx
jne 0x4acf18
xor eax, eax
inc eax
mov dword [ebp - 0x234], eax
fild dword [ebp - 0x234]
xor ecx, ecx
cmp edi, eax
setle cl
fstp dword [ebp - 0x234]
fild dword [ebp - 0x23c]
fstp dword [ebp - 0x23c]
fld dword [ebp - 0x234]
fdiv dword [ebp - 0x23c]
dec ecx
and ecx, 0xfffffff9
add ecx, 0xe
mov dword [ebp - 0x244], ecx
fcomp qword [0x505718]
fnstsw ax
test ah, 5
jp 0x4acf67
mov dword [ebp - 0x244], 1
fld dword [ebp - 0x234]
fmul qword [0x505710]
fadd qword [0x505708]
fld dword [ebp - 0x23c]
fdiv dword [ebp - 0x234]
fsubr qword [0x505700]
fimul dword [ebp - 0x244]
fsubp st(1)
call fcn.004c69b6
mov dword [ebp - 0x234], eax
cmp eax, 0xe
jae 0x4acfaa
inc eax
mov dword [ebp - 0x234], eax
push 9
pop ecx
cmp eax, ecx
jb 0x4acfb8
push 0x1c
pop ecx
cmp eax, ecx
jbe 0x4acfbe
mov dword [ebp - 0x234], ecx
mov edx, dword [ebp - 0x240]
call fcn.00445b2f
test eax, eax
je 0x4ad028
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push ebx
lea eax, [ebp - 0x230]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str..DEFAULTConsole
push reloc.WSOCK32.dll_closesocket
call edi
test eax, eax
je 0x4acffb
xor eax, eax
jmp 0x4ad3af
push ebx
lea eax, [ebp - 0x238]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.Console
push connect
call edi
test eax, eax
je 0x4ad0a2
mov dword [ebp - 0x238], ebx
jmp 0x4ad0a2
push 0x103
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [ebp - 0x21c], bl
call fcn.00401f80
push dword [ebp - 0x240]
mov edi, 0x104
mov ecx, edi
lea eax, [ebp - 0x114]
call fcn.00444961
push 0x5f
push 0x5c
call fcn.004446be
push eax
push str.Console_s
lea eax, [ebp - 0x21c]
push edi
push eax
call fcn.004451a8
add esp, 0x28
push ebx
lea eax, [ebp - 0x230]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x4acff4
cmp dword [ebp - 0x230], ebx
je 0x4ad399
mov eax, dword [ebp - 0x234]
shl eax, 0x10
mov dword [ebp - 0x240], eax
mov edi, str.FontWeight
push ebx
push str.ColorTable00
push dword [ebp - 0x230]
call fcn.004ab9bc
push 0x800000
push str.ColorTable01
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x8000
push str.ColorTable02
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x808000
push str.ColorTable03
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x80
push str.ColorTable04
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x800080
push str.ColorTable05
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
add esp, 0x48
push 0x8080
push str.ColorTable06
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xc0c0c0
push str.ColorTable07
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x808080
push str.ColorTable08
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xff0000
push str.ColorTable09
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xff00
push str.ColorTable10
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xffff00
push str.ColorTable11
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
add esp, 0x48
push 0xff
push str.ColorTable12
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xff00ff
push str.ColorTable13
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xffff
push str.ColorTable14
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xffffff
push str.ColorTable15
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
or esi, eax
lea eax, [ebp - 0x114]
push 0x4ce084
push eax
call fcn.00401ba0
lea eax, [ebp - 0x114]
push eax
call fcn.00401a80
add esp, 0x3c
inc eax
push eax
lea eax, [ebp - 0x114]
push eax
push 1
push ebx
push str.FaceName
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x19
push str.CursorSize
push dword [ebp - 0x230]
call fcn.004ab9bc
push 0x36
push str.FontFamily
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push dword [ebp - 0x240]
or esi, eax
push str.FontSize
push dword [ebp - 0x230]
call fcn.004ab9bc
add esp, 0x24
or esi, eax
cmp dword [ebp - 0x234], 0x10
jae 0x4ad2c4
push 0x190
jmp 0x4ad2c9
push 0x2bc
push edi
push dword [ebp - 0x230]
call fcn.004ab9bc
add esp, 0xc
push ebx
push str.FullScreen
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0x32
push str.HistoryBufferSize
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 1
push str.InsertMode
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 4
push str.NumberOfHistoryBuffers
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push 0xf5
push str.PopupColors
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
push ebx
push str.QuickEdit
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
add esp, 0x48
push 7
push str.ScreenColors
push dword [ebp - 0x230]
or esi, eax
call fcn.004ab9bc
add esp, 0xc
push dword [ebp - 0x230]
or esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x238]
cmp eax, ebx
je 0x4ad3ad
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x238], ebx
cmp eax, ebx
jne 0x4ad0c2
jmp 0x4ad3ad
cmp dword [ebp - 0x238], ebx
je 0x4ad3ad
push dword [ebp - 0x238]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret