Function at 0x140035030
Capabilities:
Inspect section memory permissions
Query environment variable

Disassembly:
mov eax, 1
jmp 0x140035040
push rdx
push rcx
push rbx
push r8
push r9
push r10
push r11
push r15
push rbp
sub rsp, 0xb0
mov ebp, eax
movups xmmword [rsp + 0x50], xmm0
xor r15b, r15b
movups xmmword [rsp + 0x40], xmm5
pxor xmm0, xmm0
movups xmmword [rsp + 0x70], xmm4
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x80], xmm2
movups xmmword [rsp + 0x90], xmm1
movdqu xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
xor eax, eax
cpuid
mov dword [rsp + 0xa0], eax
mov dword [rsp + 0xa4], ebx
mov dword [rsp + 0xa8], ecx
mov dword [rsp + 0xac], edx
cmp dword [rsp + 0xa0], 0
je 0x140035b41
cmp ebp, 1
je 0x140035ba4
mov eax, 1
cpuid
mov r8d, ecx
test dl, 1
je 0x140035102
mov ecx, 2
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test edx, 0x8000
je 0x140035121
mov ecx, 3
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test edx, 0x800000
je 0x140035140
mov ecx, 4
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test edx, 0x1000000
jne 0x14003515a
test r8d, 0x40000000
jne 0x1400352ed
jmp 0x140035309
mov ecx, 5
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test edx, 0x2000000
je 0x140035190
mov ecx, 6
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test edx, 0x4000000
je 0x1400351af
mov ecx, 7
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 1
je 0x1400351cf
mov ecx, 8
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x200
je 0x1400351ef
mov ecx, 9
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x400000
je 0x14003520f
mov ecx, 0xc
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x80000
je 0x14003522f
mov ecx, 0xa
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x100000
je 0x14003524f
mov ecx, 0xb
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x800000
je 0x14003526f
mov ecx, 0xd
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 2
je 0x14003528f
mov ecx, 0xe
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x2000000
je 0x1400352af
mov ecx, 0xf
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 7
xor ecx, ecx
cpuid
mov r15b, 1
mov r11d, ebx
mov r9d, edx
mov r10d, ecx
test r11d, 0x20000000
je 0x1400352e4
mov ecx, 0x24
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x40000000
je 0x14003531b
mov ecx, 0x12
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r15b, r15b
jne 0x14003531b
mov eax, 7
xor ecx, ecx
cpuid
mov r9d, edx
mov r10d, ecx
mov r11d, ebx
mov eax, r11d
and eax, 0x108
cmp eax, 0x108
jne 0x140035341
mov ecx, 0x14
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 4
je 0x140035361
mov ecx, 0x36
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x10
je 0x140035381
mov ecx, 0x16
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x800
je 0x1400353a1
mov ecx, 0x17
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x80000
je 0x1400353c1
mov ecx, 0x1d
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x40000
je 0x1400353e1
mov ecx, 0x1e
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x1000000
je 0x140035401
mov ecx, 0x32
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 0x80000001
cpuid
test cl, 0x20
je 0x140035424
mov ecx, 0x15
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 0x80000008
cpuid
test ebx, 0x200
je 0x14003544a
mov ecx, 0x37
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x20
je 0x14003546a
mov ecx, 0x3e
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x80
je 0x14003548a
mov ecx, 0x35
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x100
je 0x1400354aa
mov ecx, 0x2e
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x400000
je 0x1400354ca
mov ecx, 0x33
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x1000000
je 0x1400354ea
mov ecx, 0x3b
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x8000000
je 0x14003550a
mov ecx, 0x3c
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x10000000
je 0x14003552a
mov ecx, 0x3d
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x20000000
je 0x14003554a
mov ecx, 0x40
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x100000
je 0x14003556a
mov ecx, 0x34
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x40000
je 0x14003558a
mov ecx, 0x38
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 0x14
xor ecx, ecx
cpuid
test bl, 0x10
je 0x1400355af
mov ecx, 0x1b
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x800000
je 0x140035610
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 0x19
xor ecx, ecx
cpuid
test bl, 1
je 0x1400355f4
mov ecx, 0x45
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test bl, 4
je 0x140035610
mov ecx, 0x46
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x8000000
je 0x140035aa9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
xor ecx, ecx
xgetbv
mov r15d, eax
mov edx, r15d
and edx, 0x60000
cmp edx, 0x60000
jne 0x1400356c4
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x1000000
je 0x140035684
mov ecx, 0x42
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x2000000
je 0x1400356a4
mov ecx, 0x43
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x400000
je 0x1400356c4
mov ecx, 0x44
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, r15d
and eax, 6
cmp eax, 6
jne 0x140035aa9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x10000000
je 0x14003574a
mov ecx, 0x10
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x200
je 0x14003572a
mov ecx, 0x2f
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x400
je 0x14003574a
mov ecx, 0x30
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x20000000
je 0x14003576a
mov ecx, 0x11
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x20
je 0x14003578a
mov ecx, 0x18
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r8d, 0x1000
je 0x1400357aa
mov ecx, 0x13
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, r15d
and eax, 0x18
cmp eax, 0x18
jne 0x1400357ec
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x4000
je 0x1400357ec
mov ecx, 0x25
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, 7
mov ecx, 1
cpuid
mov edx, eax
test dl, 0x10
je 0x140035816
mov ecx, 0x41
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
and r15d, 0xe0
cmp r15d, 0xe0
jne 0x140035aa9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x10000
je 0x140035861
mov ecx, 0x19
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x10000000
je 0x140035881
mov ecx, 0x23
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x8000000
je 0x1400358a1
mov ecx, 0x21
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x4000000
je 0x1400358c1
mov ecx, 0x22
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x20000
je 0x1400358e1
mov ecx, 0x1a
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x40000000
je 0x140035901
mov ecx, 0x26
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
mov eax, r11d
and eax, 0x80000000
cmp eax, 0x80000000
jne 0x140035927
mov ecx, 0x27
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r11d, 0x200000
je 0x140035947
mov ecx, 0x1f
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 2
je 0x140035967
mov ecx, 0x28
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x4000
je 0x140035987
mov ecx, 0x2b
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 4
je 0x1400359a7
mov ecx, 0x2a
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 8
je 0x1400359c7
mov ecx, 0x29
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x1000
je 0x1400359e7
mov ecx, 0x2c
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x40
je 0x140035a03
mov ecx, 0x2d
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r10d, 0x800
je 0x140035a1f
mov ecx, 0x31
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test dl, 0x20
je 0x140035a37
mov ecx, 0x3f
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x800000
je 0x140035a53
mov ecx, 0x3a
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
jne 0x140035a6f
test r9d, 0x100
je 0x140035aa9
mov ecx, 0x39
lea rax, [rsp + 0x20]
call fcn.140034540
test eax, eax
je 0x140035aa9
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rcx, str.INTEL_ISA_DISABLE
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
mov rbx, rax
call sub.api_ms_win_crt_runtime_l1_1_0.dll__errno
mov dword [rax], 0
test rbx, rbx
je 0x140035aeb
mov rcx, rbx
lea rdx, [rsp + 0x30]
call fcn.1400342c0
test eax, eax
jle 0x140035aeb
movdqu xmm0, xmmword [rsp + 0x30]
pandn xmm0, xmmword [rsp + 0x20]
movdqu xmmword [rsp + 0x20], xmm0
cmp ebp, 1
je 0x140035b8e
lea rax, [0x1400565f8]
lea rcx, [rsp + 0x20]
call fcn.140034520
movups xmm0, xmmword [rsp + 0x50]
xor eax, eax
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rax, [0x1400565e8]
lea rcx, [rsp + 0x20]
call fcn.140034520
movups xmm0, xmmword [rsp + 0x50]
xor eax, eax
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rax, [0x1400565e8]
lea rcx, [rsp + 0x20]
call fcn.140034520
jmp 0x140035af4
cmp dword [rsp + 0xa4], 0x756e6547
jne 0x140035b41
cmp dword [rsp + 0xac], 0x49656e69
jne 0x140035b41
cmp dword [rsp + 0xa8], 0x6c65746e
jne 0x140035b41
jmp 0x1400350dc