Function at 0x48dab0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x134
mov eax, dword [0x5254a4]
push ebx
mov ebx, dword [0x54ac58]
mov dword [esp + 0xc8], eax
mov eax, dword [0x5254a8]
push esi
mov dword [esp + 0xd0], eax
mov eax, dword [0x5254ac]
push edi
mov dword [esp + 0xd8], eax
mov eax, dword [0x5254b0]
push 0x2e
mov dword [esp + 0xe0], eax
lea eax, [esp + 0xe4]
push 0
push eax
call fcn.004dce30
fld dword [0x54bed4]
add esp, 4
fadd dword [0x54bed0]
fmul qword [0x538030]
fstp qword [esp]
push str._.2f__
call fcn.00401400
add esp, 0xc
mov esi, dword [eax + 4]
push 0x515
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48db4a
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ac70], 0
je 0x48db91
cmp dword [0x54abd4], 0
je 0x48db91
lea ecx, [esp + 0x20]
call fcn.0048e110
test al, al
je 0x48db91
mov eax, dword [0x54ac5c]
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
test eax, eax
jns 0x48db83
fadd qword [0x538078]
fstp qword [esp + 0x18]
fld qword [esp + 0x18]
fmul qword [esp + 0x20]
jmp 0x48dbb3
mov eax, dword [0x54ac5c]
mov eax, dword [eax + 8]
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
test eax, eax
jns 0x48dbab
fadd qword [0x538078]
fstp qword [esp + 0x18]
fld qword [esp + 0x18]
mov eax, dword [0x54ac5c]
fld qword [0x538050]
fdiv st(1), st(0)
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
test eax, eax
jns 0x48dbd5
fadd qword [0x538078]
fstp qword [esp + 0x18]
fdivr qword [esp + 0x18]
sub esp, 0x10
fstp qword [esp + 8]
fstp qword [esp]
push str._.2f____.2f_GHz
call fcn.00401400
add esp, 0x14
mov esi, dword [eax + 4]
push 0x516
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dc13
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x54c018]
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10009
mov dword [esp + 0x48], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x517
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dc5f
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x54bfa8]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x518
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dcab
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x54bff4]
push 0
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x5c]
push 1
push eax
mov dword [esp + 0x64], 0x10009
mov dword [esp + 0x78], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x4ab
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dcf7
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x30
lea eax, [esp + 0x118]
push eax
push 3
call dword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x48ddaa
mov edi, dword [esp + 0x118]
sub edi, dword [esp + 0x110]
mov esi, dword [esp + 0x11c]
sbb esi, dword [esp + 0x114]
push 0
push 0x989680
push esi
push edi
call fcn.004fcd60
push 0
push 0x3c
push edx
push eax
call fcn.004fcdd0
push edx
push eax
push 0
push 0x23c34600
push esi
push edi
call fcn.004fcd60
push 0
push 0x3c
push edx
push eax
call fcn.004fcdd0
push edx
push eax
push 8
push 0x61c46800
push esi
push edi
call fcn.004fcd60
push 0
push 0x18
push edx
push eax
call fcn.004fcdd0
push edx
push eax
push 0xc9
push 0x2a69c000
push esi
push edi
call fcn.004fcd60
push edx
push eax
push str._I64u:_02I64u:_02I64u:_02I64u
lea eax, [esp + 0xf4]
push 0x1e
push eax
call fcn.004a4d00
add esp, 0x2c
push 0x53d
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48ddcd
lea ecx, [esp + 0xd0]
push ecx
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ac48], 1
jbe 0x48de1f
mov eax, dword [0x54ac54]
push 0
mov dword [esp + 0x84], eax
lea eax, [esp + 0x74]
push 1
push eax
mov dword [esp + 0x7c], 0x10009
mov dword [esp + 0x90], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x51b
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48de3f
push esi
jmp 0x48de34
push 0x51b
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48de3f
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ac48], 1
jbe 0x48de97
mov eax, dword [0x54abd0]
push 0
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x8c]
push 1
push eax
mov dword [esp + 0x94], 0x10009
mov dword [esp + 0xa8], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x51c
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48deb7
push esi
jmp 0x48deac
push 0x51c
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48deb7
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ac48], 1
jbe 0x48df10
mov eax, dword [0x54ac98]
mov dword [esp + 0xb0], eax
mov eax, dword [0x54ac9c]
push 0
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xa4]
push 1
push eax
mov dword [esp + 0xac], 0x10009
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x51d
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48df30
push esi
jmp 0x48df25
push 0x51d
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48df30
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ac48], 1
jbe 0x48df98
mov eax, dword [0x54ac6c]
push 0
mov dword [esp + 0xcc], eax
lea eax, [esp + 0xbc]
push 1
push eax
mov dword [esp + 0xc4], 0x10009
mov dword [esp + 0xd8], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x51e
push ebx
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dfb8
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x51e
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x48dfb8
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret