Function at 0x40bf5e
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x5025d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], bl
call fcn.004a8c80
xor eax, eax
mov dword [ebp - 0x244], ebx
lea edi, [ebp - 0x240]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push ebx
stosd dword es:[edi], eax
lea eax, [ebp - 0x244]
push eax
push ebx
xor esi, esi
push 0x30
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x228], ebx
inc esi
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test eax, eax
jne 0x40bfde
mov dword [ebp - 0x224], 0xf
jmp 0x40c0c2
mov edi, dword [ebp - 0x23c]
sub edi, dword [ebp - 0x244]
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x240]
cmp edi, ebx
mov dword [ebp - 0x22c], edi
mov dword [ebp - 0x224], eax
jne 0x40c00f
xor edi, edi
inc edi
mov dword [ebp - 0x22c], edi
cmp eax, ebx
jne 0x40c01c
xor eax, eax
inc eax
mov dword [ebp - 0x224], eax
fild dword [ebp - 0x224]
xor ecx, ecx
cmp edi, eax
setle cl
fstp dword [ebp - 0x224]
fild dword [ebp - 0x22c]
fstp dword [ebp - 0x22c]
fld dword [ebp - 0x224]
fdiv dword [ebp - 0x22c]
dec ecx
and ecx, 0xfffffff9
add ecx, 0xe
mov dword [ebp - 0x234], ecx
fcomp qword [0x4fe658]
fnstsw ax
test ah, 5
jp 0x40c06b
mov dword [ebp - 0x234], 1
fld dword [ebp - 0x224]
fmul qword [0x4fe650]
fadd qword [0x4fe648]
fld dword [ebp - 0x22c]
fdiv dword [ebp - 0x224]
fsubr qword [0x4fe640]
fimul dword [ebp - 0x234]
fsubp st(1)
call fcn.004c1226
cmp eax, 0xe
mov dword [ebp - 0x224], eax
jae 0x40c0ae
inc eax
mov dword [ebp - 0x224], eax
push 9
pop ecx
cmp eax, ecx
jb 0x40c0bc
push 0x1c
pop ecx
cmp eax, ecx
jbe 0x40c0c2
mov dword [ebp - 0x224], ecx
mov edx, dword [ebp - 0x230]
call fcn.00477a16
test eax, eax
je 0x40c12c
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push ebx
lea eax, [ebp - 0x220]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str..DEFAULTConsole
push SysStringLen
call edi
test eax, eax
je 0x40c0ff
xor eax, eax
jmp 0x40c4b3
push ebx
lea eax, [ebp - 0x228]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.Console
push 0x80000001
call edi
test eax, eax
je 0x40c1a6
mov dword [ebp - 0x228], ebx
jmp 0x40c1a6
push 0x103
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [ebp - 0x21c], bl
call fcn.004a8c80
push dword [ebp - 0x230]
mov edi, 0x104
mov ecx, edi
lea eax, [ebp - 0x114]
call fcn.00477a48
push 0x5f
push 0x5c
call fcn.004783d0
push eax
push str.Console_s
lea eax, [ebp - 0x21c]
push edi
push eax
call fcn.00478fcf
add esp, 0x28
push ebx
lea eax, [ebp - 0x220]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40c0f8
cmp dword [ebp - 0x220], ebx
je 0x40c49d
mov eax, dword [ebp - 0x224]
shl eax, 0x10
mov dword [ebp - 0x230], eax
mov edi, str.FontWeight
push ebx
push str.ColorTable00
push dword [ebp - 0x220]
call fcn.0040c5ea
push 0x800000
push str.ColorTable01
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x8000
push str.ColorTable02
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x808000
push str.ColorTable03
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x80
push str.ColorTable04
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x800080
push str.ColorTable05
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
add esp, 0x48
push 0x8080
push str.ColorTable06
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xc0c0c0
push str.ColorTable07
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x808080
push str.ColorTable08
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xff0000
push str.ColorTable09
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xff00
push str.ColorTable10
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xffff00
push str.ColorTable11
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
add esp, 0x48
push 0xff
push str.ColorTable12
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xff00ff
push str.ColorTable13
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xffff
push str.ColorTable14
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xffffff
push str.ColorTable15
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
or esi, eax
lea eax, [ebp - 0x114]
push 0x4c8b64
push eax
call fcn.004a8050
lea eax, [ebp - 0x114]
push eax
call fcn.004a7f30
add esp, 0x3c
inc eax
push eax
lea eax, [ebp - 0x114]
push eax
push 1
push ebx
push str.FaceName
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x19
push str.CursorSize
push dword [ebp - 0x220]
call fcn.0040c5ea
push 0x36
push str.FontFamily
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push dword [ebp - 0x230]
or esi, eax
push str.FontSize
push dword [ebp - 0x220]
call fcn.0040c5ea
add esp, 0x24
or esi, eax
cmp dword [ebp - 0x224], 0x10
jae 0x40c3c8
push 0x190
jmp 0x40c3cd
push 0x2bc
push edi
push dword [ebp - 0x220]
call fcn.0040c5ea
add esp, 0xc
push ebx
push str.FullScreen
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0x32
push str.HistoryBufferSize
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 1
push str.InsertMode
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 4
push str.NumberOfHistoryBuffers
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push 0xf5
push str.PopupColors
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
push ebx
push str.QuickEdit
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
add esp, 0x48
push 7
push str.ScreenColors
push dword [ebp - 0x220]
or esi, eax
call fcn.0040c5ea
add esp, 0xc
push dword [ebp - 0x220]
or esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x228]
cmp eax, ebx
je 0x40c4b1
cmp eax, ebx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x228], ebx
jne 0x40c1c6
jmp 0x40c4b1
cmp dword [ebp - 0x228], ebx
je 0x40c4b1
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8565
leave
ret