Function at 0x10004770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10016b76
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [0x1001b1c0]
xor eax, esp
mov dword [esp + 0xf0], eax
push ebx
push esi
push edi
mov eax, dword [0x1001b1c0]
xor eax, esp
push eax
lea eax, [esp + 0x108]
mov dword fs:[0], eax
xor ebx, ebx
mov eax, 0xf
mov esi, ecx
mov dword [esp + 0xfc], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0xe8], bl
mov dword [esp + 0x110], ebx
mov dword [esp + 0x18], 0x100012d0
mov dword [esp + 0x1c], 0x10001350
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
push 0x100051e0
push 0x100051d0
push 5
push 0x10
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x124], 2
call fcn.10007db2
mov edx, esi
lea edi, [esp + 0xa4]
mov byte [esp + 0x110], 3
call fcn.10005e50
push eax
mov edi, 0x10018d74
lea esi, [esp + 0x8c]
mov byte [esp + 0x114], 4
call fcn.10005da0
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xf0]
mov byte [esp + 0x11c], 5
call fcn.10005470
mov edi, 0x10
cmp dword [esp + 0xa0], edi
jb 0x1000489d
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.100077d7
add esp, 4
mov byte [esp + 0x110], 3
cmp dword [esp + 0xbc], edi
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
jb 0x100048d7
mov edx, dword [esp + 0xa8]
push edx
call fcn.100077d7
add esp, 4
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x100048ee
lea eax, [esp + 0xe8]
push 0x10018d80
push eax
call fcn.10007c30
add esp, 8
cmp eax, ebx
jne 0x1000494f
push 0x100051e0
push 5
push edi
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x120], 2
call fcn.1000776f
lea ecx, [esp + 0xc0]
push ecx
mov byte [esp + 0x114], 1
call fcn.100063d0
cmp dword [esp + 0xfc], edi
jb 0x10004948
mov edx, dword [esp + 0xe8]
push edx
call fcn.100077d7
add esp, 4
xor al, al
jmp 0x10004c42
push eax
call fcn.10007af0
add esp, 4
lea esi, [esp + 0x18]
call fcn.10006310
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x10004900
cmp dword [esp + 0xfc], edi
mov ecx, dword [esp + 0xe8]
jae 0x10004980
lea ecx, [esp + 0xe8]
lea eax, [esp + 0xc0]
push eax
call fcn.10006470
push 1
push str.Root
mov edx, str.System
lea ecx, [esp + 0xc8]
call fcn.10001e00
push 2
push str.Root
mov edx, str.BIOS
lea ecx, [esp + 0xd0]
call fcn.10001e00
push 3
push str.Root
mov edx, 0x10018cb0
lea ecx, [esp + 0xd8]
call fcn.10001e00
push 4
push str.Root
mov edx, str.Memory
lea ecx, [esp + 0xe0]
call fcn.10001e00
push 4
lea ecx, [esp + 0x38]
push 0x10018c34
push ecx
call fcn.10007c43
mov eax, dword [esp + 0xf0]
add esp, 0x2c
cmp dword [esp + 0xd8], edi
jae 0x10004a18
lea eax, [esp + 0xc4]
push eax
lea edx, [esp + 0x18]
push edx
push str.Count
push str.Root
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edi, dword [esp + 0x28]
mov al, byte [edi]
cmp al, 0x7f
je 0x10004adb
movzx ecx, word [esi + 0x16]
add ecx, dword [esp + 0x24]
cmp edi, ecx
jae 0x10004adb
movzx eax, al
cmp eax, 0x11
ja case.0x10004a5b.2
movzx edx, byte [eax + 0x10004c80]
jmp dword [edx*4 + 0x10004c68]
lea esi, [esp + 0x34]
jmp 0x10004a7e
lea esi, [esp + 0x44]
jmp 0x10004a7e
lea esi, [esp + 0x54]
jmp 0x10004a7e
lea esi, [esp + 0x64]
jmp 0x10004a7e
lea esi, [esp + 0x74]
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], edi
call fcn.10005230
xor ebx, ebx
movzx eax, byte [edi + 1]
add eax, edi
cmp byte [eax], bl
je 0x10004aae
add eax, 1
cmp byte [eax], bl
je 0x10004aa7
mov edi, edi
add eax, 1
cmp byte [eax], bl
jne 0x10004aa0
add eax, 1
cmp byte [eax], bl
jne 0x10004a97
mov cl, byte [edi]
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
cmp cl, 0x7f
je 0x10004ad0
movzx edi, word [esi + 0x16]
add edi, edx
cmp eax, edi
jae 0x10004ad0
cmp byte [eax], bl
jne 0x10004ad0
add eax, 1
jmp 0x10004ab8
mov edi, eax
mov dword [esp + 0x28], edi
jmp 0x10004a32
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x10004aee
mov ecx, dword [esp + 0x3c]
sub ecx, eax
sar ecx, 2
jne 0x10004af7
call fcn.10007a6e
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2c], edx
call fcn.10001f80
mov eax, dword [esp + 0x4c]
add esp, 4
cmp eax, ebx
je 0x10004b24
mov ecx, dword [esp + 0x4c]
sub ecx, eax
sar ecx, 2
jne 0x10004b2d
call fcn.10007a6e
mov eax, dword [esp + 0x48]
mov edx, dword [eax]
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2c], edx
call fcn.100022f0
lea ecx, [esp + 0xc4]
add esp, 4
push ecx
lea ecx, [esp + 0x58]
lea edx, [esp + 0x1c]
call fcn.10002910
mov eax, dword [esp + 0x7c]
add esp, 4
cmp eax, ebx
je 0x10004b89
mov edx, dword [esp + 0x7c]
sub edx, eax
sar edx, 2
je 0x10004b89
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x78]
lea edx, [esp + 0x1c]
call fcn.10003560
jmp 0x10004b9e
lea ecx, [esp + 0xc0]
push ecx
lea ecx, [esp + 0x68]
lea edx, [esp + 0x1c]
call fcn.100031f0
add esp, 4
lea eax, [esp + 0xc0]
call fcn.10006520
mov esi, dword [esp + 0x20]
cmp esi, ebx
mov edi, dword [esp + 0x1c]
je 0x10004bdb
push esi
call edi
mov edx, dword [esp + 0x30]
add esp, 4
push edx
call edi
add esp, 4
xor esi, esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
push 0x100051e0
push 5
push 0x10
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x120], 2
call fcn.1000776f
lea ecx, [esp + 0xc0]
push ecx
mov byte [esp + 0x114], 1
call fcn.100063d0
cmp esi, ebx
mov byte [esp + 0x110], bl
je 0x10004c26
push esi
call edi
mov edx, dword [esp + 0x30]
add esp, 4
push edx
call edi
add esp, 4
cmp dword [esp + 0xfc], 0x10
jb 0x10004c40
mov eax, dword [esp + 0xe8]
push eax
call fcn.100077d7
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x108]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xf0]
xor ecx, esp
call fcn.100078da
mov esp, ebp
pop ebp
ret