Function at 0x14001e2f0
Capabilities:
Get memory capacity

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xa0
mov rax, qword [0x14002a010]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rax, qword [rcx + 8]
mov rbx, rcx
mov rsi, r9
mov qword [rsp + 0x28], r9
mov r14d, r8d
mov byte [rsp + 0x20], 1
mov r12, rdx
mov qword [rsp + 0x98], r15
mov ecx, dword [rax + 0x10]
mov ebp, dword [rax + 0xc]
sar rsi, cl
and ebp, r9d
mov dword [rsp + 0x40], 0x40
nop word [rax + rax]
mov rax, qword [rbx + 8]
cmp rsi, qword [rax + 0x18]
jb 0x14001e36c
movsxd rdx, r14d
mov rcx, rbx
add rdx, r9
call fcn.14001e0e0
mov rax, qword [rbx + 8]
mov eax, dword [rax + 8]
lea edi, [r14 + rbp]
cmp edi, eax
mov rcx, r12
cmovge edi, eax
sub edi, ebp
mov edx, edi
call qword [0x14002aad8]
mov rcx, qword [rbx + 8]
movzx r13d, al
mov rax, qword [rcx + 0x28]
cmp byte [rsi + rax], 0
je 0x14001e473
mov rdx, qword [rcx + 0x38]
mov rax, qword [rcx + 0x40]
mov r8, rdx
mov rcx, qword [rcx + 0x20]
imul r8, rsi
lea r8, [rax + r8*8]
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
mov rax, qword [rbx + 8]
movsxd r15, ebp
mov rcx, qword [rax + 0x20]
test r13b, r13b
je 0x14001e3db
movsxd r8, edi
add rcx, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14001e543
mov edx, ebp
call qword [0x14002aad8]
test al, al
jne 0x14001e459
mov rcx, qword [rbx + 8]
movsxd rax, edi
mov edx, dword [rcx + 8]
mov rcx, qword [rcx + 0x20]
sub edx, edi
add rcx, rax
sub edx, ebp
add rcx, r15
call qword [0x14002aad8]
test al, al
jne 0x14001e459
mov rcx, qword [rbx + 8]
mov rdx, rsi
mov rax, qword [rcx + 0x38]
mov qword [rsp + 0x30], rax
imul rdx, qword [rcx + 0x38]
mov rax, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x30]
lea r8, [rax + rdx*8]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeUserPhysicalPages]
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x28]
mov byte [rsi + rcx], 0
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x48]
mov rax, qword [rbx + 8]
dec rcx
mov qword [rax + 0x48], rcx
jmp 0x14001e543
mov rax, qword [rbx + 8]
xor edx, edx
movsxd r8, edi
mov rcx, qword [rax + 0x20]
add rcx, r15
call sub.VCRUNTIME140.dll_memset
jmp 0x14001e543
test r13b, r13b
je 0x14001e543
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
cmp qword [rsp + 0x60], 0x6400000
jae 0x14001e49d
xor dl, dl
mov byte [rsp + 0x20], dl
jmp 0x14001e548
mov rcx, qword [rbx + 8]
mov rdx, rsi
mov rax, qword [rcx + 0x38]
mov qword [rsp + 0x30], rax
imul rdx, qword [rcx + 0x38]
mov rax, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x30]
lea r15, [rax + rdx*8]
mov r8, r15
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
test eax, eax
jne 0x14001e4d8
xor dl, dl
mov byte [rsp + 0x20], dl
jmp 0x14001e548
mov rcx, qword [rbx + 8]
mov r8, r15
mov rdx, qword [rcx + 0x38]
cmp qword [rsp + 0x30], rdx
je 0x14001e501
mov rcx, qword [rcx + 0x30]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeUserPhysicalPages]
xor dl, dl
mov byte [rsp + 0x20], dl
jmp 0x14001e548
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
mov rax, qword [rbx + 8]
movsxd rdx, ebp
movsxd r8, edi
mov rcx, qword [rax + 0x20]
add rcx, rdx
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x28]
mov byte [rsi + rcx], 1
mov rax, qword [rbx + 8]
mov rdx, qword [rax + 0x48]
mov rcx, qword [rbx + 8]
inc rdx
mov qword [rcx + 0x48], rdx
movzx edx, byte [rsp + 0x20]
mov r9, qword [rsp + 0x28]
xor ebp, ebp
movsxd rcx, edi
inc rsi
add r12, rcx
sub r14d, edi
test r14d, r14d
jg 0x14001e350
mov r15, qword [rsp + 0x98]
movzx eax, dl
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.14001ef00
add rsp, 0xa0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret