Function at 0x140003880
Capabilities:
Accept command line arguments
Get common file path
Get memory capacity
Get system information on windows
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c0
movaps xmmword [rsp + 0x2b0], xmm6
mov rdi, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ecx, ecx
call rdi
mov qword [rsp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
xor ecx, ecx
call rdi
lea rdi, [rsp + 0x40]
mov rcx, rax
mov rdx, rdi
mov r8d, 0x100
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
call fcn.1400027a0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
mov edx, 0xd2
mov r8d, 0xb4
call fcn.1400027a0
cmp ebx, esi
jl 0x140003a20
add edi, eax
cmp edi, esi
jg 0x140003a20
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [rsp + 0x160]
mov ecx, 2
mov r8d, 0x1e
mov edx, esi
call fcn.1400027a0
cmp esi, eax
jb 0x140003a20
mov ecx, 0x40
mov edx, 0x6e
call fcn.1400027a0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov esi, eax
mov rbx, qword [rsp + 0x48]
movabs rcx, 0xfffff80000000
mov r8d, 0x33
mov r9d, 0x99
mov edx, eax
call fcn.1400027a0
mov rdi, rax
and rdi, rbx
mov edx, 0xc
xor ecx, ecx
mov r8d, esi
mov r9d, esi
call fcn.1400027a0
cmp rdi, rax
je 0x140003a20
mov rcx, qword [rsp + 0x38]
call fcn.140002e30
mov ecx, 0x3e8
mov edx, 0x26
mov r8d, 0x76
call fcn.1400027a0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140005039]
lea r8, str.5vL95_b98r3z_Opp6nr58
lea r14, [rsp + 0x240]
mov rcx, r14
call qword [sym.imp.USER32.dll_wsprintfA]
mov esi, eax
mov ecx, 4
mov r9d, 0xde
mov edx, eax
mov r8d, eax
call fcn.1400027a0
mov rbx, rax
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400027a0
mov rdi, rax
mov ecx, 0x1000
mov edx, esi
call fcn.1400027a0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, ebx
mov r9d, edi
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x30], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [rsp + 0x30]
mov ecx, 0xb7
mov edx, esi
call fcn.1400027a0
test rbx, rbx
je 0x140003caf
cmp edi, eax
je 0x140003caf
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x160]
mov ecx, 2
mov edx, 0x14
mov r9d, 0x65
mov r8d, esi
call fcn.1400027a0
cmp edi, eax
jb 0x140003cba
mov ecx, 0x40
mov edx, 0xc5ceaa
mov r8d, 0x82
mov r9d, 0x63
call fcn.1400027a0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov esi, eax
mov rbx, qword [rsp + 0x48]
movabs rcx, 0xfffff80000000
call fcn.1400027a0
mov rdi, rax
and rdi, rbx
mov r8d, 0x8d
xor ecx, ecx
mov edx, esi
call fcn.1400027a0
cmp rdi, rax
je 0x140003cba
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm6, xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
mov ecx, 0x100
mov edx, 0x34
call fcn.1400027a0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ebp, eax
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
mov r8d, 0x63
mov edx, ebp
mov r9d, ebp
call fcn.1400027a0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
mov edx, ebp
mov r8d, ebp
call fcn.1400027a0
cmp ebx, esi
jl 0x140003cda
add edi, eax
cmp edi, esi
jg 0x140003cda
mov ecx, 1
mov edx, 0x41
mov r8d, 0x87
call fcn.1400027a0
and al, 1
mov ecx, eax
call fcn.140003510
mov edx, 0x2e
mov r8d, 0xcd
xor ecx, ecx
call fcn.1400027a0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x7d
mov r8d, 0xd3
mov r9d, 0x92
xor ecx, ecx
call fcn.1400027a0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov ecx, 0x100
call fcn.1400027a0
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, 0x100
mov edx, eax
mov r8d, eax
mov r9d, eax
call fcn.1400027a0
lea rdx, [rsp + 0x140]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
movaps xmm3, xmmword [rsp + 0x70]
movups xmmword [0x14000614c], xmm0
movups xmmword [0x14000615c], xmm1
movups xmmword [0x14000616c], xmm2
movups xmmword [0x14000617c], xmm3
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [0x14000618c], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [0x14000619c], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [0x1400061ac], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
movups xmmword [0x1400061bc], xmm0
mov ecx, 0x3e8
call fcn.1400027a0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x38]
call fcn.140002980
jmp 0x140003cba