Function at 0x140009600
Capabilities:
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rax, qword [0x14003e010]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdi, r8
mov rbx, rdx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x41], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x41], xmm1
xor r14d, r14d
mov word [rbp - 0x51], r14w
call fcn.1400091b0
cmp qword [rax], r14
jne 0x140009668
mov rdx, rbx
mov rcx, rax
call fcn.140009250
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400098a2
lea rdx, [0x140034d68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400098a2
lea rcx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rbp + 0xf]
cmp ax, 9
je 0x1400096b5
cmp ax, 6
jne 0x1400098a2
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov r8d, 0x14
lea rdx, str.2345ImageThumb64.dll
lea rcx, [rbp - 0x11]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x140009710
mov rdx, rdi
lea rcx, [rbp - 0x31]
call fcn.140002380
nop
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0xf]
call fcn.140008070
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x14000976d
lea rcx, [rbp - 0x51]
call fcn.140002310
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x1400097ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ecf
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400097ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ed5
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x140009851
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000984c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009edb
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
lea rcx, [rbp - 0x51]
call fcn.140006dd0
test al, al
je 0x140009a89
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.14000c800
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.14000c8f0
test al, al
jne 0x140009a89
jmp 0x140009e3b
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0x12
lea rdx, str.2345ImageThumb.dll
lea rcx, [rbp - 0x31]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x140009900
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140002380
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.140008070
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x14000995d
lea rcx, [rbp - 0x51]
call fcn.140002310
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14000999d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009998
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ee1
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x1400099ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ee7
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140009a41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009eed
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.140006dd0
test al, al
je 0x140009a89
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.14000c800
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.14000c8f0
test al, al
je 0x140009e3b
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0xd
lea rdx, str.FreeImage.dll
lea rcx, [rbp - 0x31]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x140009ae0
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140002380
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.140008070
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x140009b3d
lea rcx, [rbp - 0x51]
call fcn.140002310
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x140009b7d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ef3
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x140009bcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009bca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ef9
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140009c21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009eff
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.140006dd0
test al, al
je 0x140009c69
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.14000c800
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.14000c8f0
test al, al
je 0x140009e3b
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0x11
lea rdx, str.FreeImagePlus.dll
lea rcx, [rbp - 0x31]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
inc rsi
cmp word [rdi + rsi*2], 0
jne 0x140009cb4
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140002380
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.140008070
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x140009d13
lea rcx, [rbp - 0x51]
call fcn.140002310
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x140009d53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009f05
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x140009da5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009da0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009f0b
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140009df7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009df2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009f11
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.140006dd0
test al, al
je 0x140009e52
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.14000c800
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.14000c8f0
test al, al
jne 0x140009e52
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rdx, qword [rbp - 0x51]
call fcn.140009310
xor bl, bl
jmp 0x140009e54
mov bl, 1
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x140009e90
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009e8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ec9
call fcn.140018460
movdqa xmm0, xmmword [0x140035c00]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r14w
movzx eax, bl
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140018400
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
nop
call fcn.14001c594
int3