Function at 0x42ea00
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x436df4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esi + 0x1394]
mov dword [esp + 0x14], esi
mov dword [esi], 0x440878
call fcn.00403dd0
mov edi, dword [sym.imp.WHImage.dll_public:_void___thiscall_CPngImage::constructor_void_]
xor ebx, ebx
lea ecx, [esi + 0x13c4]
mov dword [esp + 0x20], ebx
call edi
lea ecx, [esi + 0x15d4]
mov byte [esp + 0x20], 1
call edi
lea ecx, [esi + 0x17e4]
mov byte [esp + 0x20], 2
call edi
mov ebp, dword [sym.imp.WHImage.dll_public:_void___thiscall_CBitImage::constructor_void_]
lea ecx, [esi + 0x19f4]
mov byte [esp + 0x20], 3
call ebp
lea ecx, [esi + 0x1c2c]
mov byte [esp + 0x20], 4
call edi
lea ecx, [esi + 0x1e3c]
mov byte [esp + 0x20], 5
call edi
lea ecx, [esi + 0x204c]
mov byte [esp + 0x20], 6
call edi
lea ecx, [esi + 0x225c]
mov byte [esp + 0x20], 7
call edi
lea ecx, [esi + 0x246c]
mov byte [esp + 0x20], 8
call edi
lea ecx, [esi + 0x267c]
mov byte [esp + 0x20], 9
call ebp
mov byte [esi + 0x1c], 1
mov byte [esi + 0x1e], 1
mov byte [esi + 0x1f], 1
mov byte [esi + 0x20], 1
mov byte [esi + 0x1d], bl
mov byte [esi + 0x21], bl
mov byte [esi + 0x22], 1
mov byte [esi + 0x23], 1
mov word [esi + 0x24], bx
mov word [esi + 0x26], bx
mov word [esi + 0x28], bx
mov word [esi + 0x2a], bx
mov word [esi + 0x2c], bx
mov dword [esi + 0xfe8], ebx
mov dword [esi + 0xfec], ebx
mov dword [esi + 0xff0], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov byte [esp + 0x20], 0xa
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
lea ebp, [esi + 0x9a8]
lea edi, [esi + 0x48]
mov dword [esp + 0x10], 0x64
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x640]
push eax
mov dword [edi], ebx
mov dword [edi + 4], ebx
call dword [sym.imp.USER32.dll_SetRect]
push ebx
push ebx
push ebx
push ebx
push ebp
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0x10]
add edi, 8
add ebp, 0x10
dec eax
mov dword [esp + 0x10], eax
jne 0x42eb40
xor eax, eax
mov ecx, 0x64
lea edi, [esi + 0xff4]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esi + 0x1184]
rep stosd dword es:[edi], eax
mov dword [esi + 0x138c], ebx
mov dword [esi + 0x1390], ebx
call sub.MFC71U.DLL_AfxGetModuleShortFileName
mov eax, dword [eax + 8]
mov edi, dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::LoadImageW_struct_HINSTANCE_____wchar_t_const__]
push str.TABLE_READY
push eax
lea ecx, [esi + 0x1e3c]
call edi
call sub.MFC71U.DLL_AfxGetModuleShortFileName
mov eax, dword [eax + 8]
push str.TABLE_LOCKER
push eax
lea ecx, [esi + 0x204c]
call edi
call sub.MFC71U.DLL_AfxGetModuleShortFileName
mov eax, dword [eax + 8]
push 0x440824
push eax
lea ecx, [esi + 0x246c]
call edi
call sub.MFC71U.DLL_AfxGetModuleShortFileName
mov eax, dword [eax + 8]
push 0x440804
push eax
lea ecx, [esi + 0x225c]
call edi
mov ecx, dword [esp + 0x18]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret