Function at 0x58cb40
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xf0
mov esi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [0x7aa024]
xor eax, ebp
mov dword [esp + 0xe8], eax
mov dword [ecx + 8], ebx
mov eax, dword [0x7be5a0]
mov ecx, dword [0x7ae174]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x58ce7c
mov ecx, dword [0x7be59c]
test ecx, ecx
je 0x58cbd1
lea edi, [esp + 0x10]
mov dword [edi], 0xffffffff
call dword [section..00cfg]
push edi
push ebx
call ecx
test eax, eax
je 0x58cbbf
cmp dword [esp + 0x10], 0
setne byte [esi + 0x89]
je 0x58cbd8
mov byte [esi + 0x88], 0
jmp 0x58cc2e
push 2
call fcn.005e42f0
add esp, 4
test al, al
jne 0x58cd69
mov byte [esi + 0x89], 0
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x40]
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov dword [edi + 0x20], 0xffffffff
push edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [edi], 9
sete byte [esi + 0x88]
jne 0x58cc2e
push 2
call fcn.005e42f0
add esp, 4
test al, al
jne 0x58cc60
xor ebx, ebx
mov ecx, dword [esp + 0xe8]
xor ecx, ebp
call fcn.0064d372
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
lea eax, [esi + 0x20]
lea ecx, [esi + 0x18]
push eax
push ecx
push esi
push 0
push ebx
call fcn.006e12c0
add esp, 0x14
test al, al
je 0x58cc97
cmp byte [esi + 0x88], 0
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
je 0x58cccd
push esi
push ecx
push eax
push ebx
call fcn.0058ced0
jmp 0x58ccd6
lea esi, [esp + 0x40]
mov ecx, esi
push 2
push 0x211
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.005417e0
lea eax, [esp + 0x48]
push 0x32
push str.Reading_x64_process_from_x86_process_not_supported
push eax
call fcn.0067fe70
add esp, 0xc
mov ecx, esi
call fcn.00541c20
jmp 0x58cc12
push 2
call fcn.005e42f0
add esp, 4
test al, al
je 0x58cc12
lea esi, [esp + 0x40]
mov ecx, esi
push 2
push 0x21f
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.005417e0
lea eax, [esp + 0x48]
push 0x21
push str.GetProcessBasicInformation_failed
jmp 0x58cc82
push esi
push ecx
push eax
push ebx
call fcn.0058d4e0
add esp, 0x10
test al, al
je 0x58cd30
movzx eax, byte [esi + 0x88]
push esi
push eax
push ebx
call fcn.0058c290
add esp, 0xc
test al, al
jne 0x58cda3
push 2
call fcn.005e42f0
add esp, 4
test al, al
je 0x58cc12
lea esi, [esp + 0x40]
mov ecx, esi
push 2
push 0x22d
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.005417e0
lea eax, [esp + 0x48]
push 0x15
push str.ReadMemoryInfo_failed
jmp 0x58cc82
push 2
call fcn.005e42f0
add esp, 4
test al, al
je 0x58cc12
lea esi, [esp + 0x40]
mov ecx, esi
push 2
push 0x228
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.005417e0
lea eax, [esp + 0x48]
push 0x16
push str.ReadProcessData_failed
jmp 0x58cc82
call fcn.006a2ff0
lea edi, [esp + 0x40]
mov ecx, edi
push eax
push 2
push 0x4c
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.006a3120
lea eax, [esp + 0x48]
push 0xe
push 0x7966e8
push eax
call fcn.0067fe70
add esp, 0xc
mov ecx, edi
call fcn.006a3180
jmp 0x58cbd1
xor eax, eax
lea ecx, [esp + 0x40]
mov dword [ecx + 0x28], eax
mov dword [ecx + 0x24], eax
pxor xmm0, xmm0
movdqu xmmword [ecx + 0x14], xmm0
movdqu xmmword [ecx + 4], xmm0
mov eax, 0x2c
mov dword [ecx], eax
push eax
push ecx
push ebx
call sub.KERNEL32.dll_K32GetProcessMemoryInfo
test eax, eax
je 0x58ce1d
cmp byte [esi + 0x4c], 0
mov eax, dword [esp + 0x68]
jne 0x58cdde
mov byte [esi + 0x4c], 1
mov dword [esi + 0x50], eax
cmp byte [esi + 0x58], 0
mov eax, dword [esp + 0x64]
jne 0x58cdef
mov byte [esi + 0x58], 1
mov dword [esi + 0x5c], eax
cmp byte [esi + 0x64], 0
mov eax, dword [esp + 0x4c]
jne 0x58ce00
mov byte [esi + 0x64], 1
mov dword [esi + 0x68], eax
cmp byte [esi + 0x70], 0
jne 0x58ce16
mov eax, dword [esp + 0x48]
mov dword [esi + 0x74], eax
mov byte [esi + 0x70], 1
jmp 0x58ce1d
mov eax, dword [esp + 0x48]
mov dword [esi + 0x74], eax
pcmpeqd xmm0, xmm0
lea eax, [esp + 0x10]
movdqu xmmword [eax + 0x1c], xmm0
movdqa xmmword [eax + 0x10], xmm0
movdqa xmmword [eax], xmm0
lea edi, [esp + 0xc]
mov dword [edi], 0xffffffff
mov ecx, dword [esi + 8]
mov edx, 3
push edi
push 0x2c
push eax
call fcn.006e14b0
add esp, 0xc
test eax, eax
js 0x58ce75
cmp byte [esi + 0x7c], 0
je 0x58ce67
mov eax, dword [esp + 0x14]
mov dword [esi + 0x80], eax
jmp 0x58ce75
mov eax, dword [esp + 0x14]
mov dword [esi + 0x80], eax
mov byte [esi + 0x7c], 1
mov bl, 1
jmp 0x58cc14
push 0x7be5a0
call fcn.0064cde7
add esp, 4
cmp dword [0x7be5a0], 0xffffffff
jne 0x58cb86
push 0
push str.::IsWow64Process
push 0x757f84
call fcn.0058eb00
add esp, 0xc
mov dword [0x7be59c], eax
push 0x7be5a0
call fcn.0064ce5d
add esp, 4
jmp 0x58cb86