Function at 0x4c00a9
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
xor edi, edi
mov esi, ecx
xor ebx, ebx
inc edi
lock xadd dword [0x5c9070], edi
push ebx
push ebx
push ebx
push 0xffffffffffffffff
call sub.kernel32.dll_CreateIoCompletionPort
test eax, eax
je 0x4c03f3
mov ecx, 0x100
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], esi
call fcn.0046f09f
mov dword [ebp - 0x14], eax
mov ebx, edx
mov ecx, 0x24
mov edx, 4
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c0520
mov ecx, eax
inc edi
xor eax, eax
xor esi, esi
mov edx, 4
inc eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 8], edi
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 0x10], esi
mov byte [ecx + 0x14], 0
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], ebx
mov dword [ecx + 0x20], esi
mov ecx, 0x20
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c0514
mov dword [eax + 0x14], esi
mov dword [eax + 4], esi
mov dword [eax], esi
mov dword [eax + 0xc], esi
mov dword [eax + 8], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0x19], esi
mov dword [ebp - 0x14], eax
mov dword [eax + 0x15], esi
mov ecx, 0x20
mov edx, 4
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c0514
xor ebx, ebx
mov edi, eax
mov ecx, 0x20
mov edx, 4
mov dword [eax + 0x14], ebx
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x19], ebx
mov dword [eax + 0x15], ebx
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c0514
mov dword [eax + 0x14], ebx
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x19], ebx
mov dword [eax + 0x15], ebx
mov esi, eax
mov ecx, 0x2c
mov edx, 4
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c052c
mov ecx, dword [ebp - 0x14]
mov ebx, eax
xor eax, eax
inc eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
xor eax, eax
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x24], ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebp - 0x10]
lock inc dword [ecx]
jle 0x4c0538
mov edi, ebx
add edi, 0x14
push edi
call sub.kernel32.dll_AcquireSRWLockExclusive
mov eax, dword [0x5c91e0]
test eax, 0x7fffffff
jne 0x4c0508
xor eax, eax
mov cl, byte [ebx + 0x18]
test cl, cl
jne 0x4c053c
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
je 0x4c0261
lock dec dword [ecx]
jne 0x4c0261
mov ecx, dword [ebx + 0x1c]
mov esi, eax
call fcn.0046ec34
mov eax, esi
mov esi, dword [ebp - 0x10]
movzx edx, al
mov ecx, edi
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], 0xffffffff
call fcn.004bee2a
lea edx, [ebp - 0x30]
xor ecx, ecx
lea edi, [ebp - 0x6c]
movzx eax, word [edx]
mov dword [edi + 0xc], ecx
mov byte [edi + 0x10], 0
mov word [ebp - 0x20], ax
mov word [edi + 0x11], ax
mov al, byte [edx + 2]
mov byte [edi + 0x13], al
mov dword [edi + 0x14], ecx
mov dword [edi], esi
mov dword [edi + 8], ecx
mov dword [edi + 4], ebx
mov byte [ebp - 0x1e], al
call fcn.0046f1c0
mov ebx, eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x10], edx
mov dword [ecx], ebx
mov dword [ecx + 4], edx
mov edx, ecx
lea ecx, [ebp - 0x54]
push 2
push 1
push 0x3fffff
push edi
mov edi, ecx
call fcn.0046f20e
add esp, 0x10
cmp byte [edi], 4
jne 0x4c0405
mov dword [ebp - 0x14], ebx
mov ecx, 0x4000
mov edx, 4
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c056a
mov ebx, eax
mov eax, 0xffffc010
xor ecx, ecx
mov dword [ebx + eax + 0x3ff4], ecx
mov dword [ebx + eax + 0x3ff0], ecx
mov dword [ebx + eax + 0x3ffc], ecx
mov dword [ebx + eax + 0x3ff8], ecx
add eax, 0x10
jne 0x4c0302
xor ecx, ecx
mov edx, 4
mov dword [ebx + eax + 0x3ff4], ecx
mov dword [ebx + eax + 0x3ff0], ecx
mov dword [ebx + eax + 0x3ffc], ecx
mov dword [ebx + eax + 0x3ff8], ecx
mov ecx, 0x2000
mov al, byte [0x5c91e8]
call fcn.0041aa20
test eax, eax
je 0x4c0576
mov esi, eax
mov al, byte [0x5c91e8]
mov ecx, 0x54
mov edx, 4
call fcn.0041aa20
test eax, eax
mov dword [ebp - 0x28], eax
je 0x4c0582
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
movups xmmword [ebp - 0x54], xmm0
push edi
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], esi
lea ecx, [eax - 1]
bsr ecx, ecx
xor edi, edi
dec edi
not ecx
shr edi, cl
mov ecx, 1
inc edi
cmp eax, 2
cmovb edi, ecx
test edi, edi
je 0x4c044b
xor edx, edx
cmp edi, 0x2000000
setb al
jae 0x4c0563
mov esi, edi
mov dl, al
shl esi, 6
shl edx, 6
test esi, esi
js 0x4c0563
mov dword [ebp - 0x18], edx
je 0x4c0456
mov al, byte [0x5c91e8]
mov ecx, esi
call fcn.0041aa20
jmp 0x4c0458
call sub.kernel32.dll_GetLastError
mov dword [esi + 8], eax
mov dword [esi + 4], ebx
mov dword [esi], ebx
jmp 0x4c0500
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x1c]
cmp al, 4
je 0x4c02da
je 0x4c02da
mov ecx, dword [ebp - 0x50]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov ecx, ebx
mov dword [edx], 0
call fcn.0046f3f4
mov ecx, ebx
call fcn.0046eb9f
mov ecx, dword [ebp - 0x10]
call fcn.0046eb9f
lea ecx, [ebp - 0x6c]
call fcn.004be9b6
jmp 0x4c0500
xor esi, esi
mov dword [ebp - 0x18], 0x40
jmp 0x4c0473
mov eax, edx
test eax, eax
je 0x4c059a
mov ecx, edi
mov dword [ebp - 0x18], eax
mov dword [eax], 0
add eax, 0x40
dec ecx
jne 0x4c0465
mov esi, edi
mov al, byte [0x5c91e8]
mov ecx, 0x48
mov edx, 4
call fcn.0041aa20
test eax, eax
je 0x4c058e
xor ecx, ecx
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
movsd xmm0, qword [ebp - 0x6c]
movsd xmm1, qword [ebp - 0x64]
movsd qword [eax + 8], xmm0
movsd qword [eax + 0x10], xmm1
movsd xmm0, qword [ebp - 0x5c]
movsd qword [eax + 0x18], xmm0
mov dword [eax + 0x20], edx
mov dword [eax + 0x24], edi
mov edi, dword [ebp - 0x28]
mov dword [eax + 0x28], esi
mov esi, dword [ebp - 0x10]
mov dword [eax + 0x2c], edi
mov dword [eax + 0x30], ecx
xor ecx, ecx
mov edi, dword [ebp - 0x24]
mov dword [eax + 0x38], ecx
mov dword [eax + 0x34], ecx
mov dword [eax + 0x40], ecx
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x44], esi
mov esi, dword [ebp - 0x1c]
mov dword [esi], ebx
mov ebx, 0x400
mov dword [esi + 4], ebx
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov ecx, dword [ebp - 0x14]
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ecx
add esp, 0x60
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00487de0
xor al, 1
jmp 0x4c023e
mov ecx, 4
mov edx, 0x20
jmp 0x4c059f
mov ecx, 4
mov edx, 0x24
jmp 0x4c059f
mov ecx, 4
mov edx, 0x2c
jmp 0x4c059f
ud2
lea esi, [ebp - 0x54]
mov ecx, str.called__Result::unwrap____on_an__Err__value
mov edx, 0x2b
mov dword [esi], edi
mov byte [esi + 4], al
push 0x5679bc
push 0x567758
push esi
call fcn.00447310
add esp, 0xc
ud2
call fcn.0041b180
ud2
mov ecx, 4
mov edx, 0x4000
jmp 0x4c059f
mov ecx, 4
mov edx, 0x2000
jmp 0x4c059f
mov ecx, 4
mov edx, 0x54
jmp 0x4c059f
mov ecx, 4
mov edx, 0x48
jmp 0x4c059f
mov ecx, dword [ebp - 0x18]
mov edx, esi
call fcn.0041b1c0
ud2