Function at 0x40b4e9
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x5065d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], bl
call fcn.004ab5d0
xor eax, eax
mov dword [ebp - 0x244], ebx
lea edi, [ebp - 0x240]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push ebx
stosd dword es:[edi], eax
lea eax, [ebp - 0x244]
push eax
push ebx
xor esi, esi
push 0x30
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x228], ebx
inc esi
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test eax, eax
jne 0x40b569
mov dword [ebp - 0x224], 0xf
jmp 0x40b64d
mov edi, dword [ebp - 0x23c]
sub edi, dword [ebp - 0x244]
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x240]
cmp edi, ebx
mov dword [ebp - 0x22c], edi
mov dword [ebp - 0x224], eax
jne 0x40b59a
xor edi, edi
inc edi
mov dword [ebp - 0x22c], edi
cmp eax, ebx
jne 0x40b5a7
xor eax, eax
inc eax
mov dword [ebp - 0x224], eax
fild dword [ebp - 0x224]
xor ecx, ecx
cmp edi, eax
setle cl
fstp dword [ebp - 0x224]
fild dword [ebp - 0x22c]
fstp dword [ebp - 0x22c]
fld dword [ebp - 0x224]
fdiv dword [ebp - 0x22c]
dec ecx
and ecx, 0xfffffff9
add ecx, 0xe
mov dword [ebp - 0x234], ecx
fcomp qword [0x502d70]
fnstsw ax
test ah, 5
jp 0x40b5f6
mov dword [ebp - 0x234], 1
fld dword [ebp - 0x224]
fmul qword [0x502d68]
fadd qword [0x502d60]
fld dword [ebp - 0x22c]
fdiv dword [ebp - 0x224]
fsubr qword [0x502d58]
fimul dword [ebp - 0x234]
fsubp st(1)
call fcn.004c3a26
cmp eax, 0xe
mov dword [ebp - 0x224], eax
jae 0x40b639
inc eax
mov dword [ebp - 0x224], eax
push 9
pop ecx
cmp eax, ecx
jb 0x40b647
push 0x1c
pop ecx
cmp eax, ecx
jbe 0x40b64d
mov dword [ebp - 0x224], ecx
mov edx, dword [ebp - 0x230]
call fcn.00476b3a
test eax, eax
je 0x40b6b7
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push ebx
lea eax, [ebp - 0x220]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str..DEFAULTConsole
push reloc.WSOCK32.dll_closesocket
call edi
test eax, eax
je 0x40b68a
xor eax, eax
jmp 0x40ba3e
push ebx
lea eax, [ebp - 0x228]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.Console
push closesocket
call edi
test eax, eax
je 0x40b731
mov dword [ebp - 0x228], ebx
jmp 0x40b731
push 0x103
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [ebp - 0x21c], bl
call fcn.004ab5d0
push dword [ebp - 0x230]
mov edi, 0x104
mov ecx, edi
lea eax, [ebp - 0x114]
call fcn.00476b6c
push 0x5f
push 0x5c
call fcn.004775b2
push eax
push str.Console_s
lea eax, [ebp - 0x21c]
push edi
push eax
call fcn.004781b1
add esp, 0x28
push ebx
lea eax, [ebp - 0x220]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40b683
cmp dword [ebp - 0x220], ebx
je 0x40ba28
mov eax, dword [ebp - 0x224]
shl eax, 0x10
mov dword [ebp - 0x230], eax
mov edi, str.FontWeight
push ebx
push str.ColorTable00
push dword [ebp - 0x220]
call fcn.0040bb75
push 0x800000
push str.ColorTable01
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x8000
push str.ColorTable02
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x808000
push str.ColorTable03
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x80
push str.ColorTable04
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x800080
push str.ColorTable05
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
add esp, 0x48
push 0x8080
push str.ColorTable06
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xc0c0c0
push str.ColorTable07
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x808080
push str.ColorTable08
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xff0000
push str.ColorTable09
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xff00
push str.ColorTable10
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xffff00
push str.ColorTable11
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
add esp, 0x48
push 0xff
push str.ColorTable12
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xff00ff
push str.ColorTable13
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xffff
push str.ColorTable14
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xffffff
push str.ColorTable15
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
or esi, eax
lea eax, [ebp - 0x114]
push 0x4cab04
push eax
call fcn.004aa9a0
lea eax, [ebp - 0x114]
push eax
call fcn.004aa880
add esp, 0x3c
inc eax
push eax
lea eax, [ebp - 0x114]
push eax
push 1
push ebx
push str.FaceName
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x19
push str.CursorSize
push dword [ebp - 0x220]
call fcn.0040bb75
push 0x36
push str.FontFamily
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push dword [ebp - 0x230]
or esi, eax
push str.FontSize
push dword [ebp - 0x220]
call fcn.0040bb75
add esp, 0x24
or esi, eax
cmp dword [ebp - 0x224], 0x10
jae 0x40b953
push 0x190
jmp 0x40b958
push 0x2bc
push edi
push dword [ebp - 0x220]
call fcn.0040bb75
add esp, 0xc
push ebx
push str.FullScreen
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0x32
push str.HistoryBufferSize
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 1
push str.InsertMode
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 4
push str.NumberOfHistoryBuffers
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push 0xf5
push str.PopupColors
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
push ebx
push str.QuickEdit
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
add esp, 0x48
push 7
push str.ScreenColors
push dword [ebp - 0x220]
or esi, eax
call fcn.0040bb75
add esp, 0xc
push dword [ebp - 0x220]
or esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x228]
cmp eax, ebx
je 0x40ba3c
cmp eax, ebx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x228], ebx
jne 0x40b751
jmp 0x40ba3c
cmp dword [ebp - 0x228], ebx
je 0x40ba3c
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004aaeb5
leave
ret