Function at 0x140009380
Capabilities:
Inspect section memory permissions
Query environment variable

Disassembly:
mov eax, 1
jmp 0x140009380
push rdx
push rcx
push rbx
push r8
push r9
push r10
push r11
push r15
push rbp
sub rsp, 0xb0
mov ebp, eax
movups xmmword [rsp + 0x50], xmm0
xor r15b, r15b
movups xmmword [rsp + 0x40], xmm5
pxor xmm0, xmm0
movups xmmword [rsp + 0x70], xmm4
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x80], xmm2
movups xmmword [rsp + 0x90], xmm1
movdqu xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
xor eax, eax
cpuid
mov dword [rsp + 0xa0], eax
mov dword [rsp + 0xa4], ebx
mov dword [rsp + 0xa8], ecx
mov dword [rsp + 0xac], edx
cmp dword [rsp + 0xa0], 0
je 0x140009e81
cmp ebp, 1
je 0x140009ee4
mov eax, 1
cpuid
mov r8d, ecx
test dl, 1
je 0x140009442
mov ecx, 2
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test edx, 0x8000
je 0x140009461
mov ecx, 3
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test edx, 0x800000
je 0x140009480
mov ecx, 4
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test edx, 0x1000000
jne 0x14000949a
test r8d, 0x40000000
jne 0x14000962d
jmp 0x140009649
mov ecx, 5
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test edx, 0x2000000
je 0x1400094d0
mov ecx, 6
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test edx, 0x4000000
je 0x1400094ef
mov ecx, 7
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 1
je 0x14000950f
mov ecx, 8
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x200
je 0x14000952f
mov ecx, 9
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x400000
je 0x14000954f
mov ecx, 0xc
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x80000
je 0x14000956f
mov ecx, 0xa
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x100000
je 0x14000958f
mov ecx, 0xb
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x800000
je 0x1400095af
mov ecx, 0xd
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 2
je 0x1400095cf
mov ecx, 0xe
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x2000000
je 0x1400095ef
mov ecx, 0xf
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 7
xor ecx, ecx
cpuid
mov r15b, 1
mov r11d, ebx
mov r9d, edx
mov r10d, ecx
test r11d, 0x20000000
je 0x140009624
mov ecx, 0x24
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x40000000
je 0x14000965b
mov ecx, 0x12
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r15b, r15b
jne 0x14000965b
mov eax, 7
xor ecx, ecx
cpuid
mov r9d, edx
mov r10d, ecx
mov r11d, ebx
mov eax, r11d
and eax, 0x108
cmp eax, 0x108
jne 0x140009681
mov ecx, 0x14
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 4
je 0x1400096a1
mov ecx, 0x36
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x10
je 0x1400096c1
mov ecx, 0x16
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x800
je 0x1400096e1
mov ecx, 0x17
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x80000
je 0x140009701
mov ecx, 0x1d
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x40000
je 0x140009721
mov ecx, 0x1e
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x1000000
je 0x140009741
mov ecx, 0x32
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 0x80000001
cpuid
test cl, 0x20
je 0x140009764
mov ecx, 0x15
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 0x80000008
cpuid
test ebx, 0x200
je 0x14000978a
mov ecx, 0x37
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x20
je 0x1400097aa
mov ecx, 0x3e
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x80
je 0x1400097ca
mov ecx, 0x35
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x100
je 0x1400097ea
mov ecx, 0x2e
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x400000
je 0x14000980a
mov ecx, 0x33
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x1000000
je 0x14000982a
mov ecx, 0x3b
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x8000000
je 0x14000984a
mov ecx, 0x3c
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x10000000
je 0x14000986a
mov ecx, 0x3d
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x20000000
je 0x14000988a
mov ecx, 0x40
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x100000
je 0x1400098aa
mov ecx, 0x34
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x40000
je 0x1400098ca
mov ecx, 0x38
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 0x14
xor ecx, ecx
cpuid
test bl, 0x10
je 0x1400098ef
mov ecx, 0x1b
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x800000
je 0x140009950
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 0x19
xor ecx, ecx
cpuid
test bl, 1
je 0x140009934
mov ecx, 0x45
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test bl, 4
je 0x140009950
mov ecx, 0x46
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x8000000
je 0x140009de9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
xor ecx, ecx
xgetbv
mov r15d, eax
mov edx, r15d
and edx, 0x60000
cmp edx, 0x60000
jne 0x140009a04
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x1000000
je 0x1400099c4
mov ecx, 0x42
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x2000000
je 0x1400099e4
mov ecx, 0x43
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x400000
je 0x140009a04
mov ecx, 0x44
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, r15d
and eax, 6
cmp eax, 6
jne 0x140009de9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x10000000
je 0x140009a8a
mov ecx, 0x10
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x200
je 0x140009a6a
mov ecx, 0x2f
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x400
je 0x140009a8a
mov ecx, 0x30
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x20000000
je 0x140009aaa
mov ecx, 0x11
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x20
je 0x140009aca
mov ecx, 0x18
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r8d, 0x1000
je 0x140009aea
mov ecx, 0x13
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, r15d
and eax, 0x18
cmp eax, 0x18
jne 0x140009b2c
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x4000
je 0x140009b2c
mov ecx, 0x25
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, 7
mov ecx, 1
cpuid
mov edx, eax
test dl, 0x10
je 0x140009b56
mov ecx, 0x41
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
and r15d, 0xe0
cmp r15d, 0xe0
jne 0x140009de9
mov ecx, 1
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x10000
je 0x140009ba1
mov ecx, 0x19
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x10000000
je 0x140009bc1
mov ecx, 0x23
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x8000000
je 0x140009be1
mov ecx, 0x21
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x4000000
je 0x140009c01
mov ecx, 0x22
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x20000
je 0x140009c21
mov ecx, 0x1a
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x40000000
je 0x140009c41
mov ecx, 0x26
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
mov eax, r11d
and eax, 0x80000000
cmp eax, 0x80000000
jne 0x140009c67
mov ecx, 0x27
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r11d, 0x200000
je 0x140009c87
mov ecx, 0x1f
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 2
je 0x140009ca7
mov ecx, 0x28
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x4000
je 0x140009cc7
mov ecx, 0x2b
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 4
je 0x140009ce7
mov ecx, 0x2a
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 8
je 0x140009d07
mov ecx, 0x29
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x1000
je 0x140009d27
mov ecx, 0x2c
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x40
je 0x140009d43
mov ecx, 0x2d
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r10d, 0x800
je 0x140009d5f
mov ecx, 0x31
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test dl, 0x20
je 0x140009d77
mov ecx, 0x3f
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x800000
je 0x140009d93
mov ecx, 0x3a
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
jne 0x140009daf
test r9d, 0x100
je 0x140009de9
mov ecx, 0x39
lea rax, [rsp + 0x20]
call fcn.140008880
test eax, eax
je 0x140009de9
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rcx, str.INTEL_ISA_DISABLE
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
mov rbx, rax
call sub.api_ms_win_crt_runtime_l1_1_0.dll__errno
mov dword [rax], 0
test rbx, rbx
je 0x140009e2b
mov rcx, rbx
lea rdx, [rsp + 0x30]
call fcn.140008680
test eax, eax
jle 0x140009e2b
movdqu xmm0, xmmword [rsp + 0x30]
pandn xmm0, xmmword [rsp + 0x20]
movdqu xmmword [rsp + 0x20], xmm0
cmp ebp, 1
je 0x140009ece
lea rax, [0x140012218]
lea rcx, [rsp + 0x20]
call fcn.140008860
movups xmm0, xmmword [rsp + 0x50]
xor eax, eax
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rax, [0x140012208]
lea rcx, [rsp + 0x20]
call fcn.140008860
movups xmm0, xmmword [rsp + 0x50]
xor eax, eax
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0x80]
movups xmm3, xmmword [rsp + 0x60]
movups xmm4, xmmword [rsp + 0x70]
movups xmm5, xmmword [rsp + 0x40]
add rsp, 0xb0
pop rbp
pop r15
pop r11
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
ret
lea rax, [0x140012208]
lea rcx, [rsp + 0x20]
call fcn.140008860
jmp 0x140009e34
cmp dword [rsp + 0xa4], 0x756e6547
jne 0x140009e81
cmp dword [rsp + 0xac], 0x49656e69
jne 0x140009e81
cmp dword [rsp + 0xa8], 0x6c65746e
jne 0x140009e81
jmp 0x14000941c