Function at 0x140009140
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov qword [rbp - 0x69], 0xfffffffffffffffe
mov qword [rsp + 0xf0], rbx
mov rax, qword [0x14003e050]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, r8
mov rdi, rdx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x51], xmm1
xor r15d, r15d
mov word [rbp - 0x61], r15w
call fcn.140017490
mov r14, rax
mov rcx, rax
call fcn.140017720
test al, al
jne 0x1400091b4
mov rdx, rdi
mov rcx, r14
call fcn.1400177a0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400093e7
lea rdx, [0x140034fb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400093e7
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rbp - 1]
cmp ax, 9
je 0x140009201
cmp ax, 6
jne 0x1400093e7
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8d, 0x14
lea rdx, str.2345ImageThumb64.dll
lea rcx, [rbp - 0x21]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140009260
mov rdx, rbx
lea rcx, [rbp - 0x41]
call fcn.140002380
nop
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 1]
call fcn.1400082b0
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x1400092bd
lea rcx, [rbp - 0x61]
call fcn.140002310
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400092fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400099f2
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x14000934f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000934a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400099f8
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400093a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000939c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400099fe
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
lea rcx, [rbp - 0x61]
call fcn.140006e20
test al, al
je 0x1400095be
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017440
test al, al
jne 0x1400095be
jmp 0x14000995c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x12
lea rdx, str.2345ImageThumb.dll
lea rcx, [rbp - 0x41]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140009440
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002380
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.1400082b0
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x14000949d
lea rcx, [rbp - 0x61]
call fcn.140002310
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400094dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a04
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000952f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000952a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a0a
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140009581
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000957c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a10
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006e20
test al, al
je 0x1400095be
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017440
test al, al
je 0x14000995c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0xd
lea rdx, str.FreeImage.dll
lea rcx, [rbp - 0x41]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140009610
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002380
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.1400082b0
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x14000966d
lea rcx, [rbp - 0x61]
call fcn.140002310
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400096ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400096a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a16
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400096ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400096fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a1c
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140009751
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000974c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a22
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006e20
test al, al
je 0x14000978e
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017440
test al, al
je 0x14000995c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x11
lea rdx, str.FreeImagePlus.dll
lea rcx, [rbp - 0x41]
call fcn.140002380
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
nop dword [rax]
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x1400097e0
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002380
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.1400082b0
mov rbx, rax
lea rax, [rbp - 0x61]
cmp rax, rbx
je 0x14000983f
lea rcx, [rbp - 0x61]
call fcn.140002310
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000987f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000987a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a28
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400098d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400098cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a2e
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140009923
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000991e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a34
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006e20
test al, al
je 0x140009976
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017440
test al, al
jne 0x140009976
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400177f0
xor bl, bl
jmp 0x140009978
mov bl, 1
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x1400099b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400099ec
call fcn.140018630
movdqa xmm0, xmmword [0x140035db0]
movdqu xmmword [rbp - 0x51], xmm0
mov word [rbp - 0x61], r15w
movzx eax, bl
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400185d0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
nop
call fcn.14001c854
int3