Function at 0x14036d790
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r14
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword gs:[0x58]
xor ebx, ebx
mov dword [rbp + 0x90], ebx
mov rdi, rcx
mov r8d, dword [0x140465358]
mov rsi, rdx
mov qword [rcx + 8], rdx
mov ecx, 8
mov r8, qword [rax + r8*8]
mov eax, dword [rcx + r8]
cmp dword [0x140467880], eax
jg 0x14036d9e8
mov rax, qword [0x140467878]
mov r12d, 2
test rax, rax
jne 0x14036d801
xor al, al
jmp 0x14036d872
lea rdx, [rbp + 0x90]
mov rcx, rsi
call rax
test eax, eax
jne 0x14036d869
mov ecx, r12d
call fcn.14001ea00
test al, al
je 0x14036d855
call sub.KERNEL32.dll_GetLastError
mov r9d, r12d
mov dword [rsp + 0x20], eax
mov r8d, 0x4b
lea rdx, str..._.._third_party_crashpad_crashpad_util_win_process_info.cc
lea rcx, [rsp + 0x60]
call fcn.14001d3a0
lea rdx, [0x1403b17d8]
lea rcx, [rax + 0x10]
call fcn.14000c340
mov ebx, 8
test bl, 8
je 0x14036d7fd
and ebx, 0xfffffff7
lea rcx, [rsp + 0x60]
call fcn.14001d920
jmp 0x14036d7fd
cmp dword [rbp + 0x90], ebx
setne al
mov byte [rdi + 0x89], al
test al, al
je 0x14036d885
mov byte [rdi + 0x88], 0
jmp 0x14036d89f
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [rsp + 0x30], 9
sete al
mov byte [rdi + 0x88], al
mov dl, byte [rdi + 0x89]
lea rax, [rdi + 0x38]
lea r14, [rdi + 0x30]
mov qword [rsp + 0x20], rax
mov r9, r14
mov r8, rdi
mov rcx, rsi
call fcn.14036b9f0
test al, al
jne 0x14036d913
mov ecx, r12d
call fcn.14001ea00
test al, al
je 0x14036d8fd
mov r9d, r12d
lea rdx, str..._.._third_party_crashpad_crashpad_util_win_process_info.cc
mov r8d, 0x22d
lea rcx, [rsp + 0x60]
or ebx, 1
call fcn.14001d270
lea rdx, str.GetProcessBasicInformation_failed
lea rcx, [rax + 8]
call fcn.14000c340
test bl, 1
je 0x14036d90c
lea rcx, [rsp + 0x60]
call fcn.14001d4f0
xor al, al
jmp 0x14036d9cb
cmp byte [rdi + 0x88], 0
mov r8, rdi
mov rdx, qword [r14]
mov rcx, rsi
je 0x14036d92c
call fcn.14036be80
jmp 0x14036d931
call fcn.14036bc20
test al, al
jne 0x14036d973
mov ecx, r12d
call fcn.14001ea00
test al, al
je 0x14036d96e
mov r9d, r12d
lea rdx, str..._.._third_party_crashpad_crashpad_util_win_process_info.cc
mov r8d, 0x236
lea rcx, [rsp + 0x60]
or ebx, r12d
call fcn.14001d270
lea rdx, str.ReadProcessData_failed
lea rcx, [rax + 8]
call fcn.14000c340
test r12b, bl
jmp 0x14036d900
mov dl, byte [rdi + 0x88]
mov r8, rdi
mov rcx, rsi
call fcn.14036de70
test al, al
jne 0x14036d9c9
mov ecx, r12d
call fcn.14001ea00
test al, al
je 0x14036d9c1
mov r9d, r12d
lea rdx, str..._.._third_party_crashpad_crashpad_util_win_process_info.cc
mov r8d, 0x23b
lea rcx, [rsp + 0x60]
or ebx, 4
call fcn.14001d270
lea rdx, str.ReadMemoryInfo_failed
lea rcx, [rax + 8]
call fcn.14000c340
test bl, 4
jmp 0x14036d900
mov al, 1
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r12
pop rbp
ret
lea rcx, [0x140467880]
call fcn.1402dff10
cmp dword [0x140467880], 0xffffffff
jne 0x14036d7eb
xor r8d, r8d
lea rdx, str.::IsWow64Process
lea rcx, [0x1403b1738]
call fcn.14033ab20
lea rcx, [0x140467880]
mov qword [0x140467878], rax
call fcn.1402dfeb0
jmp 0x14036d7eb