Function at 0x1400042a0
Capabilities:
Accept command line arguments
Get common file path
Get memory capacity
Get system information on windows
Terminate process

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
movaps xmmword [rsp + 0x2b0], xmm6
mov rdi, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ecx, ecx
call rdi
mov qword [rsp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
xor ecx, ecx
call rdi
mov rdi, rax
mov ecx, 0x100
call fcn.140002ae0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ebp, eax
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
mov edx, 0x29
mov r8d, ebp
call fcn.140002ae0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
mov edx, ebp
mov r8d, ebp
mov r9d, ebp
call fcn.140002ae0
cmp ebx, esi
jl 0x140004459
add edi, eax
cmp edi, esi
jg 0x140004459
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [rsp + 0x160]
mov ecx, 2
mov edx, esi
call fcn.140002ae0
cmp esi, eax
jb 0x140004459
mov ecx, 0x40
mov edx, 0x70
mov r8d, 0xa6
call fcn.140002ae0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov esi, eax
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x20], 0x2b3e31
movabs rcx, 0xfffff80000000
mov r9d, 0x5b
mov edx, eax
mov r8d, eax
call fcn.140002ae0
mov rdi, rax
and rdi, rbx
mov dword [rsp + 0x20], esi
mov r9d, 0x1e
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.140002ae0
cmp rdi, rax
je 0x140004459
mov rcx, qword [rsp + 0x38]
call fcn.140003220
mov ecx, 0x3e8
mov edx, 0xe3
call fcn.140002ae0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400061b0]
lea r8, str.sbC9sbKuvbCyva6vsqmnr6evnw
lea rdi, [rsp + 0x240]
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
mov esi, eax
mov ecx, 4
mov r9d, 6
mov edx, eax
mov r8d, eax
call fcn.140002ae0
mov rbx, rax
xor ecx, ecx
mov edx, esi
call fcn.140002ae0
mov rbp, rax
mov ecx, 0x1000
mov edx, 0x36645f
mov r9d, 0xc0e35a
mov r8d, esi
call fcn.140002ae0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, ebx
mov r9d, ebp
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x30], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [rsp + 0x30]
mov ecx, 0xb7
mov edx, esi
call fcn.140002ae0
test rbx, rbx
je 0x1400046c6
cmp edi, eax
je 0x1400046c6
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x160]
mov dword [rsp + 0x20], esi
mov ecx, 2
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140002ae0
cmp edi, eax
jb 0x1400046d1
mov ecx, 0x40
mov edx, 0xdc
mov r8d, 0x73
call fcn.140002ae0
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rdi, qword [rsp + 0x48]
movabs rcx, 0xfffff80000000
call fcn.140002ae0
mov rsi, rax
and rsi, rdi
mov edx, 0x46
xor ecx, ecx
call fcn.140002ae0
cmp rsi, rax
je 0x1400046d1
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rsi, rax
xorps xmm6, xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
mov ecx, 0x100
mov edx, 0x8c
mov r8d, 0x2f970e7d
call fcn.140002ae0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov ecx, 5
call fcn.140002ae0
mov rbx, rax
add ebx, edi
mov ecx, 0xfffffffb
mov edx, 0xf9
call fcn.140002ae0
cmp ebx, esi
jl 0x1400046e5
add edi, eax
cmp edi, esi
jg 0x1400046e5
mov ecx, 1
mov edx, 0x26d87135
call fcn.140002ae0
and al, 1
mov ecx, eax
call fcn.140003e80
xor ecx, ecx
call fcn.140002ae0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x14eedc
xor ecx, ecx
call fcn.140002ae0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov ecx, 0x100
mov edx, 0xc5
call fcn.140002ae0
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, eax
mov ecx, 0x100
mov edx, 0xb4324c
mov r8d, eax
call fcn.140002ae0
lea rdx, [rsp + 0x140]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
movaps xmm3, xmmword [rsp + 0x70]
movups xmmword [0x14000714c], xmm0
movups xmmword [0x14000715c], xmm1
movups xmmword [0x14000716c], xmm2
movups xmmword [0x14000717c], xmm3
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [0x14000718c], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [0x14000719c], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [0x1400071ac], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
movups xmmword [0x1400071bc], xmm0
mov ecx, 0x3e8
mov edx, 0xe1
mov r9d, 0x10
mov r8d, esi
call fcn.140002ae0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x38]
call fcn.140002ce0
jmp 0x1400046d1