Function at 0x5807d0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xd4
mov esi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [0x7a9040]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ecx + 8], ebx
mov eax, dword [0x7c07c4]
mov ecx, dword [0x7ad2c4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x580b00
mov ecx, dword [0x7c07c0]
test ecx, ecx
je 0x5808ec
lea edi, [ebp - 0xdc]
mov dword [edi], 0xffffffff
call dword [0x7a29f4]
push edi
push ebx
call ecx
test eax, eax
je 0x5808a5
cmp dword [ebp - 0xdc], 0
setne byte [esi + 0x75]
je 0x5808f0
mov byte [esi + 0x74], 0
lea eax, [esi + 0x20]
lea ecx, [esi + 0x18]
push eax
push ecx
push esi
push 0
push ebx
call fcn.006dd130
add esp, 0x14
test al, al
jne 0x58097e
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x580963
lea esi, [ebp - 0xb0]
mov ecx, esi
push 2
push 0x222
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.0053b2e0
lea eax, [ebp - 0xa8]
push 0x21
push str.GetProcessBasicInformation_failed
jmp 0x580953
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x5808ec
call fcn.006a5890
lea edi, [ebp - 0xb0]
mov ecx, edi
push eax
push 2
push 0x4e
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.006a5a40
lea eax, [ebp - 0xa8]
push 0xe
push 0x78f7be
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, edi
call fcn.006a5aa0
mov byte [esi + 0x75], 0
pcmpeqd xmm0, xmm0
lea edi, [ebp - 0xb0]
movdqu xmmword [edi + 0x10], xmm0
movdqu xmmword [edi], xmm0
mov dword [edi + 0x20], 0xffffffff
push edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [edi], 9
sete byte [esi + 0x74]
jne 0x58084c
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x580963
lea esi, [ebp - 0xb0]
mov ecx, esi
push 2
push 0x214
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.0053b2e0
lea eax, [ebp - 0xa8]
push 0x32
push str.Reading_x64_process_from_x86_process_not_supported
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, esi
call fcn.0053b7a0
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00650d60
mov eax, ebx
add esp, 0xd4
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
cmp byte [esi + 0x74], 1
je 0x580995
push esi
push ecx
push eax
push ebx
call fcn.006dd930
jmp 0x58099e
push esi
push ecx
push eax
push ebx
call fcn.006dd300
add esp, 0x10
test al, al
jne 0x5809de
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x580963
lea esi, [ebp - 0xb0]
mov ecx, esi
push 2
push 0x22b
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.0053b2e0
lea eax, [ebp - 0xa8]
push 0x16
push str.ReadProcessData_failed
jmp 0x580953
movzx eax, byte [esi + 0x74]
push esi
push eax
push ebx
call fcn.006dc730
add esp, 0xc
test al, al
jne 0x580a2e
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x580963
lea esi, [ebp - 0xb0]
mov ecx, esi
push 2
push 0x230
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.0053b2e0
lea eax, [ebp - 0xa8]
push 0x15
push str.ReadMemoryInfo_failed
jmp 0x580953
pxor xmm0, xmm0
lea eax, [ebp - 0xb0]
movq qword [eax + 0x24], xmm0
pxor xmm0, xmm0
movdqu xmmword [eax + 0x14], xmm0
movdqu xmmword [eax + 4], xmm0
mov ecx, 0x2c
mov dword [eax], ecx
push ecx
push eax
push ebx
call sub.KERNEL32.dll_K32GetProcessMemoryInfo
test eax, eax
je 0x580aaa
mov eax, dword [ebp - 0x88]
cmp byte [esi + 0x50], 0
jne 0x580a6e
mov byte [esi + 0x50], 1
mov dword [esi + 0x4c], eax
mov eax, dword [ebp - 0x8c]
cmp byte [esi + 0x58], 0
jne 0x580a81
mov byte [esi + 0x58], 1
mov dword [esi + 0x54], eax
mov eax, dword [ebp - 0xa4]
cmp byte [esi + 0x60], 0
jne 0x580a94
mov byte [esi + 0x60], 1
mov dword [esi + 0x5c], eax
mov eax, dword [ebp - 0xa8]
mov dword [esi + 0x64], eax
cmp byte [esi + 0x68], 0
jne 0x580aaa
mov byte [esi + 0x68], 1
pcmpeqd xmm0, xmm0
lea eax, [ebp - 0xdc]
movdqu xmmword [eax + 0x1c], xmm0
movdqu xmmword [eax + 0x10], xmm0
movdqu xmmword [eax], xmm0
lea edi, [ebp - 0xe0]
mov dword [edi], 0xffffffff
mov ecx, dword [esi + 8]
mov edx, 3
push edi
push 0x2c
push eax
call fcn.006ddfb0
add esp, 0xc
test eax, eax
js 0x580af9
mov eax, dword [ebp - 0xd8]
mov dword [esi + 0x6c], eax
cmp byte [esi + 0x70], 0
jne 0x580af9
mov byte [esi + 0x70], 1
mov bl, 1
jmp 0x580965
push 0x7c07c4
call fcn.00650831
add esp, 4
cmp dword [0x7c07c4], 0xffffffff
jne 0x58080f
push 0
push str.::IsWow64Process
push 0x74c634
call fcn.005816c0
add esp, 0xc
mov dword [0x7c07c0], eax
push 0x7c07c4
call fcn.006508ab
add esp, 4
jmp 0x58080f