Function at 0x736dbdf9
Capabilities:
Get system information on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
cmp dword [ebx + 0x5dc], edi
mov esi, 0x42c
jne 0x736dbe23
push esi
call fcn.736d134f
pop ecx
mov dword [ebx + 0x5dc], eax
cmp dword [ebx + 0x5e0], edi
jne 0x736dbe38
push esi
call fcn.736d134f
pop ecx
mov dword [ebx + 0x5e0], eax
cmp dword [ebx + 0x5dc], edi
je 0x736dc0db
cmp dword [ebx + 0x5e0], edi
je 0x736dc0db
cmp dword [0x73710094], edi
jne 0x736dbe87
lea eax, [ebp - 0x24]
push eax
mov dword [0x737100a8], edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x24]
mov word [0x73710804], ax
mov eax, dword [ebp - 0xc]
mov dword [0x73710800], eax
call fcn.736d9cef
test eax, eax
jl 0x736dc0db
inc dword [0x73710094]
test byte [ebx + 6], 0x80
mov dword [ebx + 0x198], 1
je 0x736e2595
lea eax, [ebx + 0x618]
push eax
call fcn.736d8cce
push dword [ebx + 0x5dc]
mov esi, eax
push esi
call fcn.736dc0e4
push dword [ebx + 0x5e0]
push esi
call fcn.736dc0e4
push esi
call fcn.736dc25c
mov esi, 0x100
add esp, 0x18
test dword [ebx + 4], esi
jne 0x736e2589
mov eax, 0x200
mov ecx, 0x3fce3
mov edx, 0xf4c08241
mov dword [ebx + 0x1a0], ecx
mov dword [ebx + 0x7bc], eax
mov dword [ebx + 0x19c], eax
mov dword [ebx + 0x244], ecx
mov dword [ebx + 0x270], ecx
mov dword [ebx + 0x29c], ecx
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x26c], eax
mov dword [ebx + 0x298], eax
mov dword [ebx + 0x194], edx
mov dword [ebx + 0x1a8], 0x347
mov dword [ebx + 0x214], 0xc21350
mov dword [ebx + 0x7c0], edi
mov dword [ebx + 0x7c4], edi
mov dword [ebx + 0x23c], edx
mov dword [ebx + 0x268], edx
mov dword [ebx + 0x294], edx
mov dword [ebx + 0x1c8], 0x400
mov ecx, 0x737100b8
lea eax, [ebx + 0x248]
mov edx, dword [ecx]
mov dword [eax - 0x54], edx
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx]
mov dword [eax + 0x2c], edx
mov edx, dword [ecx]
mov dword [eax + 0x58], edx
add ecx, 4
add eax, 4
cmp ecx, 0x737100d8
jl 0x736dbf70
mov edi, dword [ebx + 0x170]
add edi, esi
push 0xc
pop ecx
mov esi, 0x73710018
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
add edi, 0x130
push 0x10
pop ecx
mov esi, 0x737100e8
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
add edi, 0x170
mov esi, 0x737100d8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
push 7
add edi, 0x1b8
pop ecx
mov esi, 0x73710128
rep movsd dword es:[edi], dword [esi]
mov esi, 0x73710144
mov edi, dword [ebx + 0x170]
push 6
add edi, 0x354
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x5f8]
test eax, eax
je 0x736dc059
mov ecx, dword [ebx + 0x194]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x5f8]
mov ecx, dword [ebx + 0x198]
mov dword [eax + 8], ecx
mov eax, dword [ebx + 0x5f8]
mov ecx, dword [ebx + 0x1a0]
mov dword [eax + 0x10], ecx
mov eax, dword [ebx + 0x5f8]
mov ecx, dword [ebx + 0x19c]
mov dword [eax + 0xc], ecx
push 0x14
pop ecx
lea eax, [ebx + 0x1f4]
mov esi, dword [eax]
mov edx, dword [ebx + 0x5f8]
mov dword [ecx + edx], esi
add ecx, 4
add eax, 4
cmp ecx, 0x34
jl 0x736dc043
cmp dword [ebx + 0x7b4], 0
push 0x24
pop esi
je 0x736e2688
mov eax, dword [ebx + 0x7b4]
mov dword [eax], esi
mov eax, dword [ebx + 0x7b4]
mov dword [eax + 4], 0x1cf
mov eax, dword [ebx + 0x7b4]
mov dword [eax + 0x14], 7
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax + 4]
mov dword [eax + 8], ecx
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax + 4]
mov dword [eax + 0xc], ecx
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax + 4]
mov dword [eax + 0x10], ecx
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax + 0x14]
mov dword [eax + 0x18], ecx
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax + 0x14]
mov dword [eax + 0x1c], ecx
mov ebx, dword [ebx + 0x7b4]
mov eax, dword [ebx + 0x14]
mov dword [ebx + 0x20], eax
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret
xor eax, eax
jmp 0x736dc0d6
push ebx
call fcn.736f25df
pop ecx
jmp 0x736dbede
push 8
mov dword [ebx + 0x194], edi
mov dword [ebx + 0x1a8], edi
mov dword [ebx + 0x1a0], edi
mov dword [ebx + 0x214], 0xc21040
mov dword [ebx + 0x7bc], 0x200
mov dword [ebx + 0x7c0], edi
mov dword [ebx + 0x7c4], edi
mov dword [ebx + 0x19c], edi
mov dword [ebx + 0x23c], edi
mov dword [ebx + 0x268], edi
mov dword [ebx + 0x294], edi
mov dword [ebx + 0x244], edi
mov dword [ebx + 0x270], edi
mov dword [ebx + 0x29c], edi
mov dword [ebx + 0x240], edi
mov dword [ebx + 0x26c], edi
mov dword [ebx + 0x298], edi
mov dword [ebx + 0x1c8], 0x400
lea eax, [ebx + 0x248]
pop ecx
mov dword [eax - 0x54], edi
mov dword [eax], edi
mov dword [eax + 0x2c], edi
mov dword [eax + 0x58], edi
add eax, 4
dec ecx
jne 0x736e2616
mov edi, dword [ebx + 0x170]
add edi, 0x100
push 0xc
pop ecx
mov esi, 0x73710048
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
add edi, 0x130
push 0x10
pop ecx
mov esi, 0x737113d8
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
add edi, 0x170
mov esi, 0x737113c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x170]
push 7
add edi, 0x1b8
pop ecx
mov esi, 0x73711418
rep movsd dword es:[edi], dword [esi]
mov esi, 0x73711434
jmp 0x736dbfe9
push esi
call fcn.736d134f
test eax, eax
pop ecx
mov dword [ebx + 0x7b4], eax
jne 0x736dc069
jmp 0x736dc0db