Function at 0x18009bc90
Capabilities:
Get system firmware table

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1804be628]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rcx
call fcn.1802f28f0
mov rdx, rax
xorps xmm6, xmm6
test rax, rax
js 0x18009bcdf
cvtsi2sd xmm6, rax
jmp 0x18009bcf1
shr rax, 1
and edx, 1
or rax, rdx
cvtsi2sd xmm6, rax
addsd xmm6, xmm6
call fcn.1802f2940
mov rcx, rax
xorps xmm3, xmm3
test rax, rax
js 0x18009bd08
cvtsi2sd xmm3, rax
jmp 0x18009bd1a
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm3, rax
addsd xmm3, xmm3
movaps xmm2, xmm3
subsd xmm2, xmm6
xorps xmm0, xmm0
comisd xmm6, xmm0
jbe 0x18009bd3b
movaps xmm1, xmm2
divsd xmm1, xmm3
mulsd xmm1, qword [0x1804876e0]
jmp 0x18009bd43
movsd xmm1, qword [0x1804876e0]
mulsd xmm3, qword [0x180487658]
mulsd xmm2, qword [0x180487658]
movsd qword [rsp + 0x20], xmm1
movq r9, xmm3
movq r8, xmm2
lea rdx, str.MEMORY
lea rcx, str.e_1_32m__e_0me_1_37m__13se_0me_1_36m_.1f__.1fe_0me_0_36m_GBe_0me_1_30m___.0f___e_0m
call fcn.180025bd0
mov rax, qword [rbx + 0x140]
cmp byte [rax + 0x1c4], 0
je 0x18009bef1
xor esi, esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x52534d42
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
lea edx, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
movabs r13, 0x6db6db6db6db6db7
test rax, rax
je 0x18009be2f
mov r9d, edi
mov r8, rax
xor edx, edx
mov ecx, 0x52534d42
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
cmp eax, edi
je 0x18009bf23
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x78]
test rdi, rdi
je 0x18009bec9
cmp rdi, rsi
je 0x18009be89
lea rbx, [rdi + 0x30]
nop dword [rax]
mov rcx, qword [rbx + 0x10]
call fcn.18031ee0c
mov rcx, qword [rbx]
call fcn.18031ee0c
mov rcx, qword [rbx - 0x10]
call fcn.18031ee0c
mov rcx, qword [rbx - 0x20]
call fcn.18031ee0c
mov rcx, qword [rbx - 0x30]
call fcn.18031ee0c
lea rbx, [rbx + 0x70]
lea rax, [rbx - 0x30]
cmp rax, rsi
jne 0x18009be50
mov rax, qword [rbp - 0x70]
sub rax, rdi
sar rax, 4
imul rax, r13
imul rdx, rax, 0x70
mov rax, rdi
cmp rdx, 0x1000
jb 0x18009bec1
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009c0ee
mov rcx, rdi
call fcn.18031ee0c
mov rcx, qword [rsp + 0x70]
call fcn.18031ee0c
mov rcx, qword [rsp + 0x60]
call fcn.18031ee0c
mov rcx, qword [rsp + 0x50]
call fcn.18031ee0c
mov rcx, qword [rsp + 0x40]
call fcn.18031ee0c
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18031edb0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movzx ecx, byte [rbx + 1]
shl ecx, 0x10
movzx eax, byte [rbx + 2]
shl eax, 8
add ecx, eax
movzx eax, byte [rbx + 3]
add ecx, eax
mov dword [rbp - 0x64], ecx
mov eax, dword [rbx + 4]
mov dword [rbp - 0x68], eax
lea rax, [0x180485b10]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rbx
lea rax, [rbp - 0x50]
mov qword [rbp - 0x18], rax
lea rdx, [rbx + 8]
lea r8, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.18009d4c0
movzx ebx, al
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18009bf8c
mov r8, qword [rcx]
lea rax, [rbp - 0x50]
cmp rcx, rax
setne dl
call qword [r8 + 0x20]
mov qword [rbp - 0x18], rsi
mov rsi, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x80]
test bl, bl
je 0x18009be37
mov r14, rsi
sub r14, rdi
sar r14, 4
imul r14, r13
cmp rdi, rsi
je 0x18009c077
lea rbx, [rdi + 0x6a]
lea r15, str.Other
movabs r12, 0x431bde82d7b634db
nop dword [rax + rax]
cmp qword [rbx - 0x32], 0
je 0x18009c066
mov r9, qword [rbx - 0x12]
test r9, r9
je 0x18009c040
movzx ecx, byte [rbx]
lea eax, [rcx - 1]
cmp al, 0x22
ja 0x18009bff5
mov rcx, qword [r15 + rcx*8 - 8]
jmp 0x18009bffc
mov rcx, qword [str.Unknown]
mov r8, qword [rbx - 0x5a]
test r8, r8
jne 0x18009c009
mov r8, qword [rbx - 0x3a]
mov rax, r12
mul qword [rbx - 0xa]
shr rdx, 0x12
shr r9, 0x1e
mov rax, qword [rbx - 0x4a]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rdx, [0x18047b2d0]
lea rcx, str.e_1_37m_____13se_0m_s:_e_1_36m_llue_0me_0_36m_GB_e_0me_1_37m_s____llu_MHz_e_0me_1_30m_se_0m
call fcn.180025bd0
jmp 0x18009c066
cmp r14, 8
ja 0x18009c066
mov r8, qword [rbx - 0x5a]
test r8, r8
jne 0x18009c053
mov r8, qword [rbx - 0x3a]
lea rdx, [0x18047b2d0]
lea rcx, str.e_1_37m_____13se_0m_s:_e_1_30m_empty_e_0m
call fcn.180025bd0
add rbx, 0x70
lea rax, [rbx - 0x6a]
cmp rax, rsi
jne 0x18009bfd0
mov rcx, qword [0x18075ba88]
test rcx, rcx
jne 0x18009c0a3
mov ecx, 0x110
call fcn.18031edd0
mov qword [rbp - 0x60], rax
mov rcx, rax
call fcn.180064f50
mov rcx, rax
mov qword [0x18075ba88], rax
mov rax, qword [rcx]
call qword [rax + 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rsp + 0x40]
test al, al
cmove r8, rcx
cmp qword [r8 + 8], 0
je 0x18009be37
cmp qword [r8 + 0x18], 0
je 0x18009be37
mov r9, qword [r8]
mov r8, qword [r8 + 0x10]
lea rdx, str.MOTHERBOARD
lea rcx, str.e_1_32m__e_0me_1_37m__13se_0me_1_37m_se_0m___e_1_37m_se_0m
call fcn.180025bd0
jmp 0x18009be37
call fcn.180325e9c
int3