Function at 0x4a9de0
Capabilities:
Get system information on windows

Disassembly:
push 0xffffffffffffffff
push 0x5420e6
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x463df0]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
call fcn.00478640
mov ebp, dword [esp + 0xe4]
xor ebx, ebx
mov esi, eax
cmp ebp, ebx
je 0x4aa1e6
mov edi, 0x465788
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x40], bl
mov dword [esp + 0xd0], ebx
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov byte [esp + 0x54], bl
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0xd4], 1
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esi + 0x28]
sub eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
je 0x4aa1a2
mov edx, dword [esp + 0xe8]
mov eax, dword [esp + 0xe0]
push 1
push edx
push ebp
push eax
call fcn.004a9bc0
mov ebp, eax
mov esi, dword [ebp + 0xc]
add esp, 0x10
mov dword [esp + 0x5c], ebp
cmp esi, dword [ebp + 0x10]
jbe 0x4a9ebc
call fcn.00526bf6
mov edi, dword [ebp]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x17], 0
mov ebx, dword [ebp + 0x10]
cmp dword [ebp + 0xc], ebx
jbe 0x4a9ee1
call fcn.00526bf6
mov ebp, dword [ebp]
test edi, edi
je 0x4a9eec
cmp edi, ebp
je 0x4a9ef1
call fcn.00526bf6
cmp esi, ebx
je 0x4aa19d
test edi, edi
jne 0x4a9fb2
call fcn.00526bf6
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4a9f12
call fcn.00526bf6
mov cx, word [esi]
shr cx, 0xc
movzx edx, cx
mov dword [esp + 0x58], edx
test edi, edi
jne 0x4a9fb9
call fcn.00526bf6
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4a9f39
call fcn.00526bf6
mov ax, word [esi]
mov ecx, 0xfff
and ax, cx
movzx ebp, ax
test edi, edi
jne 0x4a9fc0
call fcn.00526bf6
cmp esi, dword [edi + 0x10]
jb 0x4a9f5a
call fcn.00526bf6
mov edx, dword [esi]
mov eax, dword [esi + 4]
shrd edx, eax, 4
movzx eax, bp
mov esi, edx
cdq
and esi, 0xfffff000
xor ebx, ebx
mov ebp, eax
add ebp, esi
mov edi, edx
adc edi, ebx
cmp esi, dword [esp + 0x18]
jne 0x4a9f85
cmp ebx, dword [esp + 0x1c]
je 0x4a9fc4
lea ecx, [esp + 0x30]
call fcn.004ac810
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebx
call fcn.00478640
mov eax, dword [eax + 0x28]
mov ebx, dword [esp + 0x2c]
lea ecx, [esi + eax]
push ebx
push ecx
lea ecx, [esp + 0x38]
call fcn.004ac7c0
jmp 0x4a9fc8
mov eax, dword [edi]
jmp 0x4a9f08
mov eax, dword [edi]
jmp 0x4a9f2f
mov edi, dword [edi]
jmp 0x4a9f50
mov ebx, dword [esp + 0x2c]
xor eax, eax
mov edx, ebx
add edx, dword [esp + 0x18]
mov ecx, ebp
adc eax, dword [esp + 0x1c]
add ecx, 4
adc edi, 0
cmp edi, eax
jb 0x4aa002
ja 0x4a9fe6
cmp ecx, edx
jbe 0x4aa002
call fcn.00478640
mov eax, dword [eax + 0x28]
add esi, eax
push ebx
add esi, ebx
push esi
lea ecx, [esp + 0x4c]
call fcn.004ac7c0
mov byte [esp + 0x17], 1
movzx eax, word [esp + 0x58]
cmp eax, 0xa
ja case.0x4aa017.5
movzx edx, byte [eax + 0x4aa214]
jmp dword [edx*4 + 0x4aa204]
call fcn.00478640
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x28]
add eax, ebp
add dword [eax], ecx
jmp case.0x4aa017.0
call fcn.00478640
mov eax, dword [eax + 0x28]
mov edx, dword [esp + 0x28]
add eax, ebp
add dword [eax], edx
adc dword [eax + 4], 0
cmp byte [esp + 0x17], 0
je 0x4aa059
lea ecx, [esp + 0x44]
call fcn.004ac810
mov byte [esp + 0x17], 0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4aa08c
call fcn.00526bf6
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x10]
jb 0x4aa076
call fcn.00526bf6
add dword [esp + 0x24], 8
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x24]
jmp 0x4a9ed4
mov eax, dword [eax]
jmp 0x4aa068
mov edx, dword [0x55ce9c]
lea eax, [edx + 0x589f24]
push eax
lea ecx, [esp + 0x68]
call fcn.0047ae40
mov ecx, dword [0x55cec4]
lea edx, [ecx + 0x589f24]
push edx
lea ecx, [esp + 0x88]
mov byte [esp + 0xd4], 2
call fcn.0047ae40
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x68]
push edx
mov byte [esp + 0xdc], 3
call fcn.0049a100
mov esi, 0x10
add esp, 0xc
mov edi, 0x469080
mov dword [esp + 0x84], edi
cmp dword [esp + 0xa0], esi
jb 0x4aa113
mov eax, dword [esp + 0x8c]
push eax
call fcn.005265f5
add esp, 4
xor ebx, ebx
mov ebp, 0xf
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
mov dword [esp + 0x64], edi
cmp dword [esp + 0x80], esi
jb 0x4aa149
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.005265f5
add esp, 4
cmp byte [esp + 0x54], 0
mov esi, 0x465788
mov dword [esp + 0x80], ebp
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], 0
mov byte [esp + 0xd0], 0
mov dword [esp + 0x44], esi
je 0x4aa17a
lea ecx, [esp + 0x44]
call fcn.004ac810
cmp byte [esp + 0x40], 0
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0x30], esi
je 0x4aa199
lea ecx, [esp + 0x30]
call fcn.004ac810
xor al, al
jmp 0x4aa1e8
mov edi, 0x465788
lea ecx, [esp + 0x30]
call fcn.004ac810
cmp byte [esp + 0x54], 0
mov byte [esp + 0xd0], 0
mov dword [esp + 0x44], edi
je 0x4aa1c7
lea ecx, [esp + 0x44]
call fcn.004ac810
cmp byte [esp + 0x40], 0
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0x30], edi
je 0x4aa1e6
lea ecx, [esp + 0x30]
call fcn.004ac810
mov al, 1
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc0
ret 0x14