Function at 0x46fee0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d87e4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
call fcn.0044f580
xor ebx, ebx
xor eax, eax
xor ecx, ecx
mov dword [ebp - 4], ebx
mov dword [esi + 0x12604], ebx
mov dword [esi + 0x1260c], ebx
mov dword [esi + 0x12608], ebx
mov dword [esi + 0x12610], 0xffffffff
mov word [esi + 0x12614], ax
mov word [esi + 0x12718], cx
mov dword [esi + 0x12714], ebx
lea edi, [esi + 0x12b2c]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ebx
mov dword [edi + 0x3c], ebx
mov dword [esi + 0x12b6c], ebx
mov dword [esi + 0x12b70], ebx
mov dword [esi + 0xf36e8], ebx
mov dword [esi + 0xf36d8], 0x25c
mov dword [esi + 0xf36dc], ebx
mov dword [esi + 0xf36e0], ebx
mov dword [esi + 0xf36e4], 0xcccccccc
mov ecx, esi
mov byte [ebp - 4], 2
mov dword [0x52fe34], esi
mov dword [0x52fe30], esi
call fcn.00458850
push 0x5c
lea edx, [esi + 0x12090]
push ebx
push edx
mov byte [esi + 0x11c7c], bl
mov byte [esi + 0x11c7d], bl
mov byte [esi + 0x11c7e], bl
mov byte [esi + 0x11c7f], bl
mov byte [esi + 0x125fa], bl
mov dword [esi + 0x125fc], ebx
mov dword [esi + 0x12600], ebx
mov byte [esi + 0x12088], bl
mov dword [esi + 0x1208c], 0x3e8
call fcn.004c9b50
push 0x5c
lea eax, [esi + 0x120ec]
push ebx
push eax
call fcn.004c9b50
or eax, 0xffffffff
mov dword [esi + 0x12158], ebx
mov dword [esi + 0x12150], ebx
mov dword [esi + 0x12154], 0x10
mov dword [esi + 0x12360], ebx
mov dword [esi + 0x1235c], ebx
mov dword [esi + 0x1214c], eax
mov dword [esi + 0x12148], eax
mov byte [esi + 0x125f9], bl
mov eax, dword [0x52fe5c]
add esp, 0x18
cmp eax, 6
jae 0x47006b
cmp eax, 5
jne 0x470067
cmp dword [0x52fe60], 1
jae 0x47006b
xor eax, eax
jmp 0x470070
mov eax, 1
lea edx, [esi + 0x11894]
xor ecx, ecx
push str.SoftwareConEmu.Vanilla
push edx
mov byte [esi + 0xf36f0], al
mov byte [esi + 0x125f8], bl
mov word [esi + 0xf3072], cx
call fcn.00405470
add esp, 8
xor eax, eax
push 0x4e5850
mov ecx, esi
mov word [esi + 0x11a9c], ax
mov dword [esi + 0x125ac], ebx
mov byte [esi + 0x125b0], bl
call fcn.0046a5e0
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.ConEmuViewSetMapping._u
lea ecx, [esi + 0x12604]
call fcn.00417d90
push 0xffffffffffffffff
push 1
push 1
lea ecx, [esi + 0x12604]
call fcn.0046bbe0
test eax, eax
jne 0x4700fd
push 1
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x12718]
push 0x40
push ecx
call fcn.004262f0
add esp, 0x14
mov ecx, dword [0x52fe30]
call fcn.00450a60
mov dword [esi + 0x12080], ebx
mov dword [esi + 0x12084], ebx
mov dword [esi + 0xf36ec], ebx
mov dword [esi + 0xf34c0], ebx
mov dword [esi + 0xf34c4], 1
mov edx, dword [0x52fe30]
push 0x70
lea eax, [esi + 0xf2b74]
push ebx
mov dword [edx + 0x1208], ebx
push eax
mov dword [esi + 0xf36cc], ebx
call fcn.004c9b50
xor ecx, ecx
add esp, 0xc
mov dword [esi + 0xf2be4], ebx
mov dword [esi + 0xf3684], ebx
mov dword [esi + 0xf3688], ebx
mov byte [esi + 0xf3071], bl
mov byte [esi + 0xf3070], bl
mov dword [esi + 0xf3030], ebx
mov dword [esi + 0xf3038], ebx
mov dword [esi + 0xf2be8], ebx
mov word [esi + 0xf2bf0], cx
mov dword [esi + 0xf2bec], ebx
cmp byte [0x52fe55], bl
je 0x4701ab
lea edx, [esi + 0xf2ff0]
push str.Lucida_Console
push edx
call fcn.00401a00
add esp, 8
jmp 0x4701b4
xor eax, eax
mov word [esi + 0xf2ff0], ax
lea ecx, [esi + 0xf34c8]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor eax, eax
mov dword [esi + 0xf3620], eax
mov dword [esi + 0xf3624], eax
mov dword [esi + 0xf3628], eax
mov dword [esi + 0xf362c], eax
mov dword [esi + 0xf3630], eax
mov dword [esi + 0xf3634], eax
mov dword [esi + 0xf3638], eax
mov dword [esi + 0xf363c], eax
mov dword [esi + 0xf3640], eax
mov dword [esi + 0xf3644], eax
mov dword [esi + 0xf3648], eax
mov dword [esi + 0xf364c], eax
mov dword [esi + 0xf3650], eax
mov dword [esi + 0xf3654], eax
mov dword [esi + 0xf3658], eax
mov dword [esi + 0xf365c], eax
mov dword [esi + 0xf3660], eax
push 0xa0
mov dword [esi + 0xf3664], eax
lea edx, [esi + 0xf34d0]
push ebx
mov dword [esi + 0xf3668], eax
push edx
mov dword [esi + 0xf366c], eax
call fcn.004c9b50
push 0xa0
lea eax, [esi + 0xf3578]
push ebx
push eax
mov dword [esi + 0xf3570], ebx
call fcn.004c9b50
xor eax, eax
mov dword [esi + 0xf3618], ebx
mov dword [esi + 0xf3670], eax
mov dword [esi + 0xf3674], eax
mov dword [esi + 0xf3678], eax
push 0x40
mov dword [esi + 0xf367c], eax
push ebx
mov dword [esi + 0xf3680], eax
push edi
mov dword [esi + 0x12b28], ebx
call fcn.004c9b50
xor ecx, ecx
push 0x1e0
mov dword [esi + 0x12b70], ecx
lea ecx, [esi + 0x1215c]
mov eax, 1
push ebx
push ecx
mov dword [esi + 0x12b6c], eax
call fcn.004c9b50
xor eax, eax
mov dword [esi + 0x1233c], eax
mov dword [esi + 0x12340], eax
mov dword [esi + 0x12344], eax
mov dword [esi + 0x12348], eax
mov dword [esi + 0x1234c], eax
push 0x20000
mov dword [esi + 0x12350], eax
lea edx, [esi + 0x12b74]
push ebx
mov dword [esi + 0x12354], eax
push edx
mov dword [esi + 0x12358], eax
call fcn.004c9b50
push 0xc0000
lea eax, [esi + 0x32b74]
push ebx
push eax
call fcn.004c9b50
add esp, 0x48
push 0x44
lea edi, [esi + 0x125b4]
push ebx
push edi
call fcn.004c9b50
push 0x30
lea edx, [esi + 0xf368c]
xor ecx, ecx
push ebx
push edx
mov dword [edi], 0x44
mov word [esi + 0x11c80], cx
mov dword [esi + 0xf3034], ebx
call fcn.004c9b50
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov edi, dword [sym.imp.USER32.dll_RegisterWindowMessageW]
xor eax, eax
push str.ConEmuSettings::Counter
mov dword [ebp - 4], 2
mov word [esi + 0xf36d4], ax
call edi
push str.Settings::RecreateFont
mov dword [esi + 0xf36bc], eax
mov dword [esi + 0xf36c0], ebx
call edi
push str.Settings::LoadFontNames
mov dword [esi + 0xf36c4], eax
call edi
push str.Settings::ActivateTab
mov dword [esi + 0xf36c8], eax
call edi
push 4
mov dword [esi + 0xf3474], eax
mov dword [esi + 0xf36d0], ebx
mov dword [esi + 0xf347c], ebx
call fcn.0044c4d0
add esp, 4
cmp eax, ebx
je 0x4703c3
mov dword [eax], ebx
jmp 0x4703c5
xor eax, eax
lea edi, [esi + 0xf36f4]
mov ecx, esi
mov dword [esi + 0xf3700], eax
mov dword [edi], ebx
mov dword [esi + 0xf36f8], ebx
mov dword [esi + 0xf36fc], ebx
call fcn.004588d0
push edi
call fcn.0043bcb0
add esp, 4
mov ecx, esi
mov dword [esi + 0xf36f8], eax
mov dword [esi + 0xf36fc], ebx
mov dword [esi + 0xf3704], ebx
call fcn.004590c0
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret