Function at 0x42b6c0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x44a018
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
mov eax, dword [esi + 8]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42b96c
mov eax, dword [esi + 4]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42b96c
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx - 0xc]
test edx, edx
je 0x42b96c
mov edx, dword [esi + 0x14]
mov ecx, dword [edx - 0xc]
test ecx, ecx
je 0x42b96c
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx - 0xc]
test edx, edx
je 0x42b96c
mov edx, dword [esi + 0x18]
mov ecx, dword [edx - 0xc]
test ecx, ecx
je 0x42b96c
push eax
lea eax, [esi + 0x1c]
push str._sINA.DAT
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x20]
push str._sINN.DAT
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x24]
push str._sINK.DAT
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea eax, [esi + 0x28]
push str._sSTA.DLL
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x2c]
push str._sSTU.DLL
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x30]
push str._sSTU.DLL
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
add esp, 0x48
push eax
lea eax, [esi + 0x34]
push str._sSWA.BIN
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x38]
push str._sSWN.EXE
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x3c]
push str._sSWK.EXE
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea eax, [esi + 0x40]
push str._sMU.DLL
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x44]
push str._sMU.DLL
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x48]
push str._sMUI.DLL
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
add esp, 0x48
push eax
lea eax, [esi + 0x4c]
push str._sLMA.DLL
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x50]
push str._sLMN.DLL
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x54]
push str._sLMK.DLL
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea eax, [esi + 0x58]
push str.SOFTWARECanon_s
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x5c]
push str._s_Monitor
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x60]
push str.Canon_sus9.inf
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
add esp, 0x48
push eax
lea eax, [esi + 0x64]
push str.Canon_susm.inf
push eax
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x68]
push str.PSW_sWindowClass
push ecx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea edx, [esi + 0x6c]
push str._slaunch_notifyicon
push edx
call fcn.00401d20
add esp, 0x24
lea ecx, [esp + 4]
call fcn.00401540
push 0x452
lea ecx, [esp + 8]
mov dword [esp + 0x14], 0
call fcn.00401d40
mov eax, dword [esi + 8]
push eax
push 0x104
lea ecx, [esp + 0xc]
call fcn.004017b0
push eax
lea eax, [esi + 0x70]
push eax
call fcn.00401d20
mov ecx, dword [esi + 4]
push ecx
lea edx, [esi + 0x74]
push str._sLMA.DLL
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
lea ecx, [esi + 0x78]
push str._sEMA.DLL
push ecx
call fcn.00401d20
mov edx, dword [esi + 4]
push edx
push str._sSMA.DLL
lea eax, [esi + 0x7c]
push eax
call fcn.00401d20
mov ecx, dword [esi + 4]
push ecx
lea edx, [esi + 0x80]
push str._sPMA.DLL
push edx
call fcn.00401d20
mov eax, dword [esi + 4]
push eax
push str._sPTA.DLL
add esi, 0x84
push esi
call fcn.00401d20
add esp, 0x48
lea ecx, [esp + 4]
call fcn.00401400
mov eax, 1
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov ecx, dword [esp + 8]
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret