Function at 0x403730
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4279a1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x244
push ebx
push esi
push edi
lea ecx, [esp + 0x20]
call fcn.00401000
xor ebx, ebx
mov dword [esp + 0x258], ebx
call fcn.00405bc0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], eax
call fcn.0041ba70
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x260], 1
call fcn.0041bb03
mov al, byte [0x43796c]
mov ecx, 0x40
mov byte [esp + 0x48], al
xor eax, eax
lea edi, [esp + 0x49]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x2c]
push ecx
stosb byte es:[edi], al
call fcn.00405b00
mov edx, dword [esp + 0x264]
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x48]
push edx
push eax
push str._s_s
push ecx
call fcn.0040dd65
add esp, 0x10
lea ecx, [esp + 0x2c]
call fcn.0041c43b
push ebx
push str..inf
lea edx, [esp + 0x50]
push ebx
lea eax, [esp + 0x18]
push edx
push eax
call fcn.004022f0
mov eax, dword [esp + 0x28]
add esp, 0x14
mov esi, eax
cmp eax, ebx
mov dword [esp + 0x30], esi
jne 0x403824
lea ecx, [esp + 0xc]
mov byte [esp + 0x258], bl
call fcn.0041baa3
lea ecx, [esp + 0x20]
mov dword [esp + 0x258], 0xffffffff
call fcn.00401030
xor eax, eax
jmp 0x40398d
push ebp
lea ecx, [esp + 0x38]
call fcn.0041ba70
mov cl, byte [0x43796c]
xor eax, eax
mov byte [esp + 0x150], cl
mov ecx, 0x40
lea edi, [esp + 0x151]
mov byte [esp + 0x25c], 2
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor edi, edi
cmp esi, ebx
jle 0x403954
mov edx, dword [esp + 0x14]
lea ecx, [edx + edi*4]
call fcn.0041c828
mov eax, dword [esp + 0x14]
push str.CMHID
lea ecx, [eax + edi*4]
call fcn.0041b6a1
test eax, eax
jge 0x403947
mov ecx, dword [esp + 0x14]
push str.CMUSBC
lea ecx, [ecx + edi*4]
call fcn.0041b6a1
test eax, eax
jge 0x403947
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x40]
call fcn.0041bb03
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x4c]
mov eax, dword [edx + edi*4]
lea edx, [esp + 0x150]
push eax
push ecx
push str._s_s
push edx
call fcn.0040dd65
lea eax, [esp + 0x48]
lea ecx, [esp + 0x160]
push eax
push ecx
call fcn.004043a0
mov eax, dword [esp + 0x58]
add esp, 0x18
test eax, eax
mov ebp, eax
je 0x403947
xor esi, esi
test eax, eax
jle 0x403943
mov eax, dword [esp + 0x2c]
cmp eax, 5
je 0x4038fd
cmp eax, 6
jne 0x403910
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x24]
mov eax, dword [edx + esi*4]
push eax
call fcn.00401060
mov ebx, eax
test ebx, ebx
jne 0x40391b
inc esi
cmp esi, ebp
jl 0x4038ef
jmp 0x403947
mov eax, dword [esp + 0x3c]
lea ecx, [eax + esi*4]
push ecx
mov ecx, dword [esp + 0x26c]
call fcn.0041c574
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x26c]
lea eax, [edx + edi*4]
push eax
call fcn.0041c574
test ebx, ebx
jne 0x403954
mov eax, dword [esp + 0x34]
inc edi
cmp edi, eax
jl 0x403860
lea ecx, [esp + 0x38]
mov byte [esp + 0x25c], 1
call fcn.0041baa3
lea ecx, [esp + 0x10]
mov byte [esp + 0x25c], 0
call fcn.0041baa3
lea ecx, [esp + 0x24]
mov dword [esp + 0x25c], 0xffffffff
call fcn.00401030
mov eax, ebx
pop ebp
mov ecx, dword [esp + 0x250]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x250
ret