Function at 0x6d1d50
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xac
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [0x808040]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ecx + 8], edi
mov eax, dword [0x81c400]
mov ecx, dword [0x80d580]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x6d1fae
mov ecx, dword [0x81c3fc]
test ecx, ecx
je 0x6d1e66
lea ebx, [ebp - 0x14]
mov dword [ebx], 0xffffffff
call dword [0x8010bc]
push ebx
push edi
call ecx
test eax, eax
je 0x6d1e1f
cmp dword [ebp - 0x14], 0
setne byte [esi + 0x4d]
je 0x6d1e6a
mov byte [esi + 0x4c], 0
lea eax, [esi + 0x20]
lea ecx, [esi + 0x18]
push eax
push ecx
push esi
push 0
push edi
call fcn.006d2000
add esp, 0x14
test al, al
jne 0x6d1ef8
push 2
call fcn.0055f440
add esp, 4
test al, al
je 0x6d1edd
lea esi, [ebp - 0xb8]
mov ecx, esi
push 2
push 0x221
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.004ba430
lea eax, [ebp - 0xb0]
push 0x21
push str.GetProcessBasicInformation_failed
jmp 0x6d1ecd
push 2
call fcn.0055f440
add esp, 4
test al, al
je 0x6d1e66
call fcn.00642ea0
lea ebx, [ebp - 0xb8]
mov ecx, ebx
push eax
push 2
push 0x4d
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.00642eb0
lea eax, [ebp - 0xb0]
push 0xe
push 0x799acc
push eax
call fcn.00533f70
add esp, 0xc
mov ecx, ebx
call fcn.00642f10
mov byte [esi + 0x4d], 0
pcmpeqd xmm0, xmm0
lea ebx, [ebp - 0xb8]
movdqu xmmword [ebx + 0x10], xmm0
movdqu xmmword [ebx], xmm0
mov dword [ebx + 0x20], 0xffffffff
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [ebx], 9
sete byte [esi + 0x4c]
jne 0x6d1dc6
push 2
call fcn.0055f440
add esp, 4
test al, al
je 0x6d1edd
lea esi, [ebp - 0xb8]
mov ecx, esi
push 2
push 0x213
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.004ba430
lea eax, [ebp - 0xb0]
push 0x32
push str.Reading_x64_process_from_x86_process_not_supported
push eax
call fcn.00533f70
add esp, 0xc
mov ecx, esi
call fcn.004ba910
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6b46
mov eax, ebx
add esp, 0xac
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
cmp byte [esi + 0x4c], 1
je 0x6d1f0f
push esi
push ecx
push eax
push edi
call fcn.006d2800
jmp 0x6d1f18
push esi
push ecx
push eax
push edi
call fcn.006d21d0
add esp, 0x10
test al, al
jne 0x6d1f58
push 2
call fcn.0055f440
add esp, 4
test al, al
je 0x6d1edd
lea esi, [ebp - 0xb8]
mov ecx, esi
push 2
push 0x22a
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.004ba430
lea eax, [ebp - 0xb0]
push 0x16
push str.ReadProcessData_failed
jmp 0x6d1ecd
movzx eax, byte [esi + 0x4c]
mov bl, 1
push esi
push eax
push edi
call fcn.006d1370
add esp, 0xc
test al, al
jne 0x6d1edf
push 2
call fcn.0055f440
add esp, 4
test al, al
je 0x6d1edd
lea esi, [ebp - 0xb8]
mov ecx, esi
push 2
push 0x22f
push str....._third_partycrashpadcrashpadutilwinprocess_info.cc
call fcn.004ba430
lea eax, [ebp - 0xb0]
push 0x15
push str.ReadMemoryInfo_failed
jmp 0x6d1ecd
push 0x81c400
call fcn.005c580d
add esp, 4
cmp dword [0x81c400], 0xffffffff
jne 0x6d1d8f
push 0
push str.::IsWow64Process
push 0x77caae
call fcn.004f87a0
add esp, 0xc
mov dword [0x81c3fc], eax
push 0x81c400
call fcn.005c5887
add esp, 4
jmp 0x6d1d8f