Function at 0x661427c0
Capabilities:
Get memory capacity
Get system information on windows

Disassembly:
push rbp
sub rsp, 0xd0
lea rbp, [rsp + 0x80]
mov dword [rbp - 0x7c], 0x44bd882a
mov eax, dword [rbp - 0x7c]
mov dword [rbp - 0x80], eax
sub eax, 0x885019e1
je 0x66143134
jmp 0x661427ed
mov eax, dword [rbp - 0x80]
sub eax, 0x8bc51a24
je 0x66142e1f
jmp 0x66142800
mov eax, dword [rbp - 0x80]
sub eax, 0xa4554441
je 0x66142ba0
jmp 0x66142813
mov eax, dword [rbp - 0x80]
sub eax, 0xa5f3bd52
je 0x66142b87
jmp 0x66142826
mov eax, dword [rbp - 0x80]
sub eax, 0xa74157a0
je 0x66142bbf
jmp 0x66142839
mov eax, dword [rbp - 0x80]
sub eax, 0xb2be79d6
je 0x66142ea0
jmp 0x6614284c
mov eax, dword [rbp - 0x80]
sub eax, 0xbe6fbe4c
je 0x66142f57
jmp 0x6614285f
mov eax, dword [rbp - 0x80]
sub eax, 0xc26a55c8
je 0x6614316f
jmp 0x66142872
mov eax, dword [rbp - 0x80]
sub eax, 0xd6570f5e
je 0x66142bb3
jmp 0x66142885
mov eax, dword [rbp - 0x80]
sub eax, 0xdc8318f4
je 0x66142d8f
jmp 0x66142898
mov eax, dword [rbp - 0x80]
sub eax, 0xdcec863e
je 0x66142c21
jmp 0x661428ab
mov eax, dword [rbp - 0x80]
sub eax, 0xe0f77766
je 0x66142f85
jmp 0x661428be
mov eax, dword [rbp - 0x80]
sub eax, 0xe516f405
je 0x66143063
jmp 0x661428d1
mov eax, dword [rbp - 0x80]
sub eax, 0xecc9e30f
je 0x66142cb1
jmp 0x661428e4
mov eax, dword [rbp - 0x80]
sub eax, 0xee660e68
je 0x66142db9
jmp 0x661428f7
mov eax, dword [rbp - 0x80]
sub eax, 0xef042c63
je 0x66142f91
jmp 0x6614290a
mov eax, dword [rbp - 0x80]
sub eax, 0xf7bab16d
je 0x66142c89
jmp 0x6614291d
mov eax, dword [rbp - 0x80]
sub eax, 0xfc5c578a
je 0x66142cfb
jmp 0x66142930
mov eax, dword [rbp - 0x80]
sub eax, 0xb184116
je 0x66143182
jmp 0x66142943
mov eax, dword [rbp - 0x80]
sub eax, 0x11478c5a
je 0x66142c7d
jmp 0x66142956
mov eax, dword [rbp - 0x80]
sub eax, 0x1aecbe28
je 0x66142fdb
jmp 0x66142969
mov eax, dword [rbp - 0x80]
sub eax, 0x201a0c37
je 0x66142bd2
jmp 0x6614297c
mov eax, dword [rbp - 0x80]
sub eax, 0x22ed1129
je 0x6614312b
jmp 0x6614298f
mov eax, dword [rbp - 0x80]
sub eax, 0x2da4bf66
je 0x6614306f
jmp 0x661429a2
mov eax, dword [rbp - 0x80]
sub eax, 0x32a4c977
je 0x661430be
jmp 0x661429b5
mov eax, dword [rbp - 0x80]
sub eax, 0x3d04bf47
je 0x6614310d
jmp 0x661429c8
mov eax, dword [rbp - 0x80]
sub eax, 0x3db9403c
je 0x66142b7b
jmp 0x661429db
mov eax, dword [rbp - 0x80]
sub eax, 0x426641a0
je 0x66142d83
jmp 0x661429ee
mov eax, dword [rbp - 0x80]
sub eax, 0x44bd882a
je 0x66142a8b
jmp 0x66142a01
mov eax, dword [rbp - 0x80]
sub eax, 0x4505cd7e
je 0x66143119
jmp 0x66142a14
mov eax, dword [rbp - 0x80]
sub eax, 0x4e8f335a
je 0x66142d9b
jmp 0x66142a27
mov eax, dword [rbp - 0x80]
sub eax, 0x51797196
je 0x66143192
jmp 0x66142a3a
mov eax, dword [rbp - 0x80]
sub eax, 0x540db2ac
je 0x66142b0c
jmp 0x66142a4d
mov eax, dword [rbp - 0x80]
sub eax, 0x69f705a9
je 0x66142f72
jmp 0x66142a60
mov eax, dword [rbp - 0x80]
sub eax, 0x6c66728a
je 0x66143151
jmp 0x66142a73
mov eax, dword [rbp - 0x80]
sub eax, 0x74d970db
je 0x661431a5
jmp 0x66142a86
jmp 0x661431ac
mov ecx, dword [sym.some4.dll_x.62]
mov eax, dword [sym.some4.dll_y.63]
mov edx, ecx
add edx, 0xa5743ee1
sub edx, 1
sub edx, 0xa5743ee1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x885019e1
mov ecx, 0x540db2ac
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov eax, 0x10
call fcn.66182470
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x38], rax
mov rcx, rbp
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x885019e1
mov ecx, 0x3db9403c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp - 0x7c], 0xa5f3bd52
jmp 0x661431ac
mov eax, 0xa74157a0
mov ecx, 0xa4554441
cmp dword [rbp + 0x20], 2
cmovb eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp + 0x34], 1
mov dword [rbp - 0x7c], 0xd6570f5e
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x4505cd7e
jmp 0x661431ac
mov dword [rbp - 0x40], 0x40
mov dword [rbp - 0x7c], 0x201a0c37
jmp 0x661431ac
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
mov edx, eax
sub edx, 0xcfe3acf7
sub edx, 1
add edx, 0xcfe3acf7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c66728a
mov ecx, 0xdcec863e
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
lea rcx, [rbp - 0x40]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
add rsp, 0x20
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c66728a
mov ecx, 0x11478c5a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp - 0x7c], 0xf7bab16d
jmp 0x661431ac
mov rdx, qword [rbp - 0x38]
shr rdx, 0xa
shr rdx, 0xa
mov eax, 0x4e8f335a
mov ecx, 0xecc9e30f
cmp rdx, 0x800
cmovb eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc26a55c8
mov ecx, 0xfc5c578a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp + 0x34], 1
mov ecx, dword [sym.some4.dll_x.62]
mov eax, dword [sym.some4.dll_y.63]
mov edx, ecx
add edx, 0xb4a9653b
sub edx, 1
sub edx, 0xb4a9653b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc26a55c8
mov ecx, 0x426641a0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp - 0x7c], 0xdc8318f4
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x4505cd7e
jmp 0x661431ac
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rsp, 0x20
mov qword [rbp + 0x40], rax
mov dword [rbp - 0x7c], 0xee660e68
jmp 0x661431ac
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x50], 0xffffffffdc3cba00
lea rcx, [rbp - 0x70]
lea rdx, [rbp - 0x78]
sub rsp, 0x20
call fcn.661431c0
add rsp, 0x20
lea rcx, [rbp - 0x70]
sub rsp, 0x20
call method.int_safe_print_skc.skCrypter_26___char_49___char_51__char____skc::skCrypter_26___char_49___char_51__char__
add rsp, 0x20
xor ecx, ecx
lea rdx, [rbp - 0x50]
sub rsp, 0x20
call qword [sym.some4.dll_RYRsHoOHbsmCjtMYlWt]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x38]
mov qword [rax], rcx
mov dword [rbp - 0x7c], 0x8bc51a24
jmp 0x661431ac
mov ecx, dword [sym.some4.dll_x.62]
mov eax, dword [sym.some4.dll_y.63]
mov edx, ecx
add edx, 0x86224d74
sub edx, 1
sub edx, 0x86224d74
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb184116
mov ecx, 0xb2be79d6
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov rax, qword [rbp + 0x38]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x48]
movabs rdx, 0x17e40884c10d5121
add rax, rdx
sub rax, rcx
movabs rcx, 0x17e40884c10d5121
sub rax, rcx
cmp rax, 0xea60
setb al
and al, 1
mov byte [rbp + 0x4b], al
mov ecx, dword [sym.some4.dll_x.62]
mov eax, dword [sym.some4.dll_y.63]
mov edx, ecx
add edx, 0xc5895361
sub edx, 1
sub edx, 0xc5895361
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb184116
mov ecx, 0xbe6fbe4c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dl, byte [rbp + 0x4b]
mov eax, 0xef042c63
mov ecx, 0x69f705a9
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp + 0x34], 1
mov dword [rbp - 0x7c], 0xe0f77766
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x4505cd7e
jmp 0x661431ac
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51797196
mov ecx, 0x1aecbe28
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp + 0x34], 0
mov ecx, dword [sym.some4.dll_x.62]
mov eax, dword [sym.some4.dll_y.63]
mov edx, ecx
sub edx, 0xd04d92dc
sub edx, 1
add edx, 0xd04d92dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x51797196
mov ecx, 0xe516f405
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x2da4bf66
jmp 0x661431ac
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
mov edx, eax
add edx, 0x78235556
sub edx, 1
sub edx, 0x78235556
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74d970db
mov ecx, 0x32a4c977
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov eax, dword [sym.some4.dll_x.62]
mov ecx, dword [sym.some4.dll_y.63]
mov edx, eax
add edx, 0xa34a9894
sub edx, 1
sub edx, 0xa34a9894
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74d970db
mov ecx, 0x3d04bf47
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x4505cd7e
jmp 0x661431ac
mov eax, dword [rbp + 0x34]
mov dword [rbp + 0x4c], eax
mov dword [rbp - 0x7c], 0x22ed1129
jmp 0x661431ac
mov eax, dword [rbp + 0x4c]
lea rsp, [rbp + 0x50]
pop rbp
ret
mov rcx, rbp
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
mov dword [rbp - 0x7c], 0x540db2ac
jmp 0x661431ac
lea rcx, [rbp - 0x40]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
add rsp, 0x20
mov dword [rbp - 0x7c], 0xdcec863e
jmp 0x661431ac
mov dword [rbp + 0x34], 1
mov dword [rbp - 0x7c], 0xfc5c578a
jmp 0x661431ac
mov rax, qword [rbp + 0x38]
mov dword [rbp - 0x7c], 0xb2be79d6
jmp 0x661431ac
mov dword [rbp + 0x34], 0
mov dword [rbp - 0x7c], 0x1aecbe28
jmp 0x661431ac
mov dword [rbp - 0x7c], 0x32a4c977
jmp 0x661427d7