Function at 0x4846f4
Capabilities:
Get system information on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe94
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x484c45
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2c]
mov edx, 0x24
call fcn.00407a24
lea eax, [ebp - 0x2c]
push eax
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x14], edx
mov dl, 1
mov eax, dword [0x4373a8]
call fcn.00437478
mov dword [ebp - 8], eax
mov edx, 0x80000002
mov eax, dword [ebp - 8]
call fcn.00437518
mov edx, 0x484c5c
mov eax, dword [ebp - 8]
call fcn.004376a0
test al, al
je 0x484842
lea ecx, [ebp - 0x40]
mov edx, 0x484c94
mov eax, dword [ebp - 8]
call fcn.00437aec
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
add eax, 0xc
call fcn.00404adc
lea ecx, [ebp - 0x44]
mov edx, 0x484cb0
mov eax, dword [ebp - 8]
call fcn.00437aec
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
add eax, 0x10
call fcn.00404adc
xor eax, eax
push ebp
push 0x4847f8
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x48]
mov edx, 0x484cc4
mov eax, dword [ebp - 8]
call fcn.00437aec
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
add eax, 0x8c
call fcn.00404adc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484802
xor eax, eax
push ebp
push 0x484830
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x484ce0
mov eax, dword [ebp - 8]
call fcn.00437b64
mov edx, dword [ebp - 4]
mov dword [edx + 0x90], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48483a
mov eax, dword [ebp - 8]
call fcn.004374e8
mov eax, dword [ebp - 8]
call fcn.00403cbc
lea eax, [ebp - 0x58]
call fcn.0048375c
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
mov eax, dword [0x4aa168]
mov dword [0x4abc70], eax
lea eax, [ebp - 0x3c]
call fcn.0048342c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 0x88], edx
mov eax, dword [0x4aa154]
mov dword [0x4abc70], eax
lea eax, [ebp - 0x3c]
call fcn.0048342c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 0x2c], edx
mov eax, dword [0x4aa15c]
mov dword [0x4abc70], eax
lea eax, [ebp - 0x3c]
call fcn.0048342c
mov eax, dword [ebp - 4]
lea edi, [eax + 0x55]
lea esi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3c]
mov edx, eax
shr edx, 0xc
and edx, 3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x28], edx
mov edx, eax
shr edx, 8
and edx, 0xf
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x18], edx
mov edx, eax
shr edx, 4
and edx, 0xf
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x20], edx
and eax, 0xf
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c], eax
xor eax, eax
mov al, byte [ebp - 0x38]
mov edx, dword [ebp - 4]
mov dword [edx + 0x44], eax
mov eax, dword [0x4aa16c]
mov dword [0x4abc70], eax
lea eax, [ebp - 0x3c]
call fcn.0048342c
mov eax, dword [ebp - 4]
lea edi, [eax + 0x78]
lea esi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3c]
mov edx, eax
shr edx, 8
and edx, 0xf
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x6c], edx
mov edx, eax
shr edx, 4
and edx, 0xf
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x68], edx
and eax, 0xf
mov edx, dword [ebp - 4]
mov dword [edx + 0x74], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x18], 6
jg 0x484956
mov eax, dword [ebp - 4]
cmp dword [eax + 0x18], 6
jne 0x484999
mov eax, dword [ebp - 4]
cmp dword [eax + 0x20], 7
jle 0x484999
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
dec eax
je 0x48496c
dec eax
je 0x484975
dec eax
je 0x48497e
sub eax, 5
je 0x484987
jmp 0x484990
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 1
jmp 0x4849a0
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 2
jmp 0x4849a0
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 3
jmp 0x4849a0
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 4
jmp 0x4849a0
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 0
jmp 0x4849a0
mov eax, dword [ebp - 4]
mov byte [eax + 0x70], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
dec eax
je 0x4849b1
dec eax
je 0x4849ba
dec eax
je 0x4849c3
jmp 0x4849cc
mov eax, dword [ebp - 4]
mov byte [eax + 0x72], 1
jmp 0x4849d3
mov eax, dword [ebp - 4]
mov byte [eax + 0x72], 2
jmp 0x4849d3
mov eax, dword [ebp - 4]
mov byte [eax + 0x72], 3
jmp 0x4849d3
mov eax, dword [ebp - 4]
mov byte [eax + 0x72], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
cmp eax, 0xf
ja case.0x4849e8.0
mov al, byte [eax + 0x4849ef]
jmp dword [eax*4 + 0x4849ff]
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 1
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 2
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 3
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 4
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 5
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 6
jmp 0x484a79
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c]
sub eax, 1
jae 0x484a69
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 7
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 0
jmp 0x484a79
mov eax, dword [ebp - 4]
mov byte [eax + 0x71], 0
lea eax, [ebp - 0x5c]
call fcn.004839cc
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 4]
add eax, 0x3c
call fcn.00404adc
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x48], edx
mov esi, 1
mov ebx, 0x4aa1d4
mov edi, 0x4aa184
mov eax, dword [ebx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x3c]
call fcn.00404eb0
jne 0x484aca
mov eax, dword [ebp - 4]
mov dword [eax + 0x48], esi
mov eax, dword [ebp - 4]
add eax, 0x50
mov edx, dword [edi]
call fcn.00404adc
jmp 0x484ad6
inc esi
add edi, 4
add ebx, 4
cmp esi, 9
jne 0x484aa6
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 8]
push ebx
push 0x483a98
lea edx, [ebp - 0x160]
mov eax, dword [ebx]
call fcn.00403c0c
lea edx, [ebp - 0x160]
lea eax, [ebp - 0x60]
call fcn.00404cec
lea eax, [ebp - 0x60]
mov edx, 0x484cf0
call fcn.00404d6c
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 4]
mov dl, byte [edx + 0x54]
call fcn.0047dd1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
cmp byte [eax + 0x17], 0
je 0x484b40
lea eax, [ebp - 0x164]
call fcn.004835dc
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 4]
add eax, 0x34
call fcn.00404adc
lea eax, [ebp - 0x168]
call fcn.00483a08
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 4]
add eax, 0x40
call fcn.00404adc
call fcn.00483a6c
mov edx, dword [ebp - 4]
mov byte [edx + 0x38], al
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x30]
push ebx
push 0x4851a0
lea edx, [ebp - 0x160]
mov eax, dword [ebx]
call fcn.00403c0c
lea edx, [ebp - 0x160]
lea eax, [ebp - 0x16c]
call fcn.00404cec
lea eax, [ebp - 0x16c]
mov edx, 0x484cf0
call fcn.00404d6c
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 4]
mov cl, byte [eax + 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
call fcn.0047de6c
mov eax, dword [ebp - 4]
add eax, 0x24
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
call fcn.00404adc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
add eax, 0x4c
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
call fcn.0048335c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x484c4c
lea eax, [ebp - 0x16c]
mov edx, 3
call fcn.00404aac
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00404aac
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00404aac
ret