Function at 0x14000bed0
Capabilities:
Execute command
Get memory capacity

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x298
lea rbp, [rsp + 0x80]
vmovaps xmmword [rbp + 0x200], xmm6
and rsp, 0xffffffffffffffe0
movabs r14, 0x218711a00
lea rdi, [rsp + 0x240]
mov rbx, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
vmovss xmm6, dword [0x1400a4dd8]
lea r12, [rsp + 0x120]
jmp 0x14000bf5f
movabs rcx, 0xeed1f417d9296b4d
imul rcx
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x1a
add rax, rdx
add rax, 8
mov qword [rsp + 0x120], rax
mov rcx, r12
call fcn.14000db50
call sub.MSVCP140.dll__Query_perf_frequency
mov rsi, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rsi, 0x989680
jne 0x14000da5e
imul rsi, rcx, 0x64
mov rax, rsi
sub rax, qword [0x1401146a0]
cmp rax, r14
jl 0x14000bf30
mov dword [rsp + 0x240], 0x40
mov rcx, rdi
call rbx
mov edx, dword [rsp + 0x244]
mov rax, qword [0x1401145b0]
cmp edx, dword [rax + 0x264]
jl 0x14000da52
cmp byte [rax + 0x260], 0
mov rax, qword [0x140114660]
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x1e8], rax
movabs rax, 0xef15bc29acffcbbf
je 0x14000c202
mov qword [rsp + 0x120], rax
movabs rax, 0x89514e02207ae43e
mov qword [rsp + 0x128], rax
movabs rax, 0xfbde7e1924975bf7
mov qword [rsp + 0x130], rax
movabs rax, 0xfc5935330ceee011
mov qword [rsp + 0x138], rax
movabs rax, 0x664d026634a63de2
mov qword [rsp + 0x140], rax
movabs r8, 0x2d95411f45fd67b4
mov qword [rsp + 0x148], r8
movabs r12, 0x9b7bd94ade9abb9f
mov qword [rsp + 0xa0], r12
movabs rsi, 0xe0253c635429c410
mov qword [rsp + 0xa8], rsi
movabs r15, 0xd6b10a6c45b73c99
mov qword [rsp + 0xb0], r15
movabs rdi, 0x9b375c5d6d8b8c72
mov qword [rsp + 0xb8], rdi
movabs rax, 0x664d026634a63dc3
mov qword [rsp + 0x228], rax
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x230], r8
mov qword [rsp + 0xc8], r8
lea rbx, [rsp + 0xa0]
mov rax, rbx
vmovaps ymm0, ymmword [rsp + 0x120]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x120], ymm0
vmovaps xmm0, xmmword [rsp + 0x140]
vxorps xmm0, xmm0, xmmword [rax + 0x20]
vmovaps xmmword [rsp + 0x140], xmm0
lea r14, [rsp + 0x80]
mov rcx, r14
vzeroupper
call fcn.14000df30
movabs rax, 0xf61eb46aacefd4c6
mov qword [rsp + 0x200], rax
movabs rax, 0xc0565d0b7450b67f
mov qword [rsp + 0x208], rax
movabs rax, 0xf6d56f0426d659eb
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rdi
mov qword [rsp + 0x238], r12
mov qword [rsp + 0xa0], r12
mov r13, rsi
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x1f8], r15
mov qword [rsp + 0xb0], r15
lea r15, [rsp + 0x200]
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0xb8], rdi
mov rax, rbx
vmovaps ymm0, ymmword [rsp + 0x200]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x200], ymm0
mov rcx, r15
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbx, rax
mov r8, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
mov rcx, rax
sub rcx, r8
cmp rcx, rbx
jae 0x14000c50e
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, rbx
xor r9d, r9d
call fcn.14000dd80
lea r15, [rsp + 0x40]
lea r12, [rsp + 0x120]
mov rdi, r13
mov rsi, qword [rsp + 0x238]
jmp 0x14000c5ae
mov qword [rsp + 0xa0], rax
movabs rax, 0xc009480a3940a830
mov qword [rsp + 0xa8], rax
movabs rax, 0xb5916f1f24d250e9
mov qword [rsp + 0xb0], rax
movabs rax, 0xbb43357d03eae91e
mov qword [rsp + 0xb8], rax
movabs rax, 0x1f216e0741c85cae
mov qword [rsp + 0xc0], rax
movabs rax, 0xae02e66658e0694
mov qword [rsp + 0xc8], rax
movabs rax, 0xf5ea68271ce60aab
mov qword [rsp + 0xd0], rax
movabs rax, 0xfba1c0dc8ae97b59
mov qword [rsp + 0xd8], rax
movabs rax, 0x3ccd5a21ceabf992
mov qword [rsp + 0xe0], rax
movabs rax, 0xd0838fcf1bf33476
mov qword [rsp + 0xe8], rax
movabs rax, 0xc569ef44a554ba40
mov qword [rsp + 0xf0], rax
movabs rax, 0xbf7a4255d3a9bd7a
movabs rsi, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x120], rsi
movabs rdi, 0xe0253c635429c410
mov qword [rsp + 0x128], rdi
movabs rbx, 0xd6b10a6c45b73c99
mov qword [rsp + 0x130], rbx
movabs r14, 0x9b375c5d6d8b8c72
mov qword [rsp + 0x138], r14
movabs r15, 0x664d026634a63dc3
mov qword [rsp + 0x140], r15
movabs r12, 0x2d95411f45fd67b4
mov qword [rsp + 0x148], r12
movabs rcx, 0x81ca1c4872c66fdd
mov qword [rsp + 0x150], rcx
movabs rcx, 0x9a81a4b9e68e1c36
mov qword [rsp + 0x158], rcx
movabs rcx, 0x5da83642e3c48de7
mov qword [rsp + 0x160], rcx
movabs rcx, 0xbeece6bb6b9c1418
mov qword [rsp + 0x168], rcx
movabs rcx, 0xc569ef44a554ba61
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
vmovaps ymm0, ymmword [rsp + 0xc0]
vxorps ymm0, ymm0, ymmword [rax + 0x20]
vmovaps ymmword [rsp + 0xc0], ymm0
vmovaps ymm0, ymmword [rsp + 0xe0]
vxorps ymm0, ymm0, ymmword [rax + 0x40]
vmovaps ymmword [rsp + 0xe0], ymm0
lea r13, [rsp + 0x200]
mov rcx, r13
vzeroupper
call fcn.14000df30
movabs rax, 0xba1cb723b0e8dac8
mov qword [rsp + 0x120], rax
movabs rax, 0xa1771c1121469d30
mov qword [rsp + 0x128], rax
movabs rax, 0xa4de6709089f1cd4
mov qword [rsp + 0x130], rax
movabs rax, 0xfe503d2e18aba50b
mov qword [rsp + 0x138], rax
movabs rax, 0x728704647c755e3
mov qword [rsp + 0x140], rax
movabs rax, 0x2d95413f21980fd7
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r15
lea r15, [rsp + 0x40]
mov qword [rsp + 0x68], r12
lea r12, [rsp + 0x120]
mov rax, r15
vmovaps ymm0, ymmword [rsp + 0x120]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x120], ymm0
vmovaps xmm0, xmmword [rsp + 0x140]
vxorps xmm0, xmm0, xmmword [rax + 0x20]
vmovaps xmmword [rsp + 0x140], xmm0
mov rcx, r12
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbx, rax
mov r8, qword [rsp + 0x210]
mov rax, qword [rsp + 0x218]
mov rcx, rax
sub rcx, r8
cmp rcx, rbx
jae 0x14000c73b
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
mov rcx, r13
mov rdx, rbx
xor r9d, r9d
call fcn.14000dd80
jmp 0x14000c7e0
lea rcx, [r8 + rbx]
mov qword [rsp + 0x90], rcx
mov r12, r14
cmp rax, 0x10
jb 0x14000c52b
mov r12, qword [rsp + 0x80]
lea r14, [rsp + rbx]
add r14, 0x200
lea rax, [r12 + r8]
cmp rax, r15
setb al
cmp r14, r12
mov rdi, r13
mov rsi, qword [rsp + 0x238]
mov r13, r15
mov r15, rbx
jbe 0x14000c565
test al, al
jne 0x14000c565
mov r15, r12
sub r15, r13
ja 0x14000c565
xor r15d, r15d
inc r8
lea rcx, [r12 + rbx]
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov rcx, r12
mov rdx, r13
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
sub rbx, r15
add r14, r15
add r12, r15
mov rcx, r12
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x80]
lea r12, [rsp + 0x120]
lea r15, [rsp + 0x40]
vmovups ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x40], ymm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, r12
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, rdx
sub r8, rcx
cmp r8, rax
lea r13, [rsp + 0x1c0]
jae 0x14000c608
mov qword [rsp + 0x20], rax
mov rcx, r15
mov rdx, rax
mov r9, r12
call fcn.1400079a0
jmp 0x14000c637
mov rbx, rax
add rbx, rcx
mov qword [rsp + 0x50], rbx
mov r14, r15
cmp rdx, 0x10
jb 0x14000c621
mov r14, qword [rsp + 0x40]
add rcx, r14
mov rdx, r12
mov r8, rax
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], 0
mov rax, r15
vmovups ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
movabs r15, 0x9b7bd93eacffd7de
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rdi
mov rax, r13
vmovaps xmm0, xmmword [rsp + 0x1b0]
vxorps xmm0, xmm0, xmmword [rax]
vmovaps xmmword [rsp + 0x1b0], xmm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x1c0], ymm0
lea rcx, [rsp + 0x1b0]
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000c6ff
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], 0xf
mov rcx, r13
lea rdx, [rsp + 0x1b0]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0x1c0
jmp 0x14000c9e7
mov r12, rbx
or r12, 0xf
cmp r12, 0x17
mov eax, 0x16
cmovb r12, rax
cmp r12, 0xfff
jb 0x14000c9a4
lea rcx, [r12 + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000c9b1
lea rcx, [r8 + rbx]
mov qword [rsp + 0x210], rcx
mov r12, r13
cmp rax, 0x10
jb 0x14000c758
mov r12, qword [rsp + 0x200]
lea r14, [rsp + rbx]
add r14, 0x120
lea rax, [r12 + r8]
lea rcx, [rsp + 0x120]
cmp rax, rcx
setb al
mov r15, rbx
cmp r14, r12
jbe 0x14000c794
test al, al
jne 0x14000c794
mov r15, r12
lea rax, [rsp + 0x120]
sub r15, rax
ja 0x14000c794
xor r15d, r15d
inc r8
lea rcx, [r12 + rbx]
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov rcx, r12
lea r13, [rsp + 0x120]
mov rdx, r13
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
sub rbx, r15
add r14, r15
add r12, r15
mov rcx, r12
mov r12, r13
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x200]
lea r15, [rsp + 0x40]
lea r13, [rsp + 0x1c0]
vmovups ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x80], ymm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rbx, [rsp + 0xa0]
mov rcx, rbx
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x14000c850
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x80]
mov rdx, rax
mov r9, rbx
call fcn.1400079a0
jmp 0x14000c89a
mov rbx, rax
add rbx, rcx
mov qword [rsp + 0x90], rbx
lea r13, [rsp + 0x80]
mov r14, r13
cmp rdx, 0x10
jb 0x14000c877
mov r14, qword [rsp + 0x80]
add rcx, r14
lea rdx, [rsp + 0xa0]
mov r8, rax
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], 0
mov rax, r13
lea r13, [rsp + 0x1c0]
movabs r14, 0x218711a00
vmovups ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x40], ymm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
movabs rax, 0x9b1cb723b0e8dac8
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rdi
mov rax, r13
vmovaps xmm0, xmmword [rsp + 0x1b0]
vxorps xmm0, xmm0, xmmword [rax]
vmovaps xmmword [rsp + 0x1b0], xmm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x1c0], ymm0
lea rcx, [rsp + 0x1b0]
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000c969
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], 0xf
mov rcx, r13
lea rdx, [rsp + 0x1b0]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0x1c0
jmp 0x14000d510
mov rsi, rbx
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
jb 0x14000d4cc
lea rcx, [rsi + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000d4d8
lea rcx, [r12 + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], r12
mov rcx, r14
lea rdx, [rsp + 0x1b0]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
lea r12, [rsp + 0x120]
mov byte [rbx], 0
mov rcx, qword [rsp + 0x1e8]
mov rdx, r13
lea r8, [rsp + 0xa0]
vmovaps xmm3, xmm6
call fcn.140042980
mov rax, qword [rsp + 0x1d8]
cmp rax, 0x10
jb 0x14000ca4d
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000ca48
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov rax, qword [rsp + 0xb8]
cmp rax, 0x10
jb 0x14000ca94
mov rcx, qword [rsp + 0xa0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000ca8f
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x14000caf5
mov rcx, qword [rsp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000caf0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x98]
cmp rax, 0x10
jb 0x14000cb53
mov rcx, qword [rsp + 0x80]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000cb4e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
movabs rbx, 0xe810ab25a9c681dc
mov qword [rsp + 0x40], rbx
movabs r14, 0xad646e3f314aa560
mov qword [rsp + 0x48], r14
movabs rax, 0xd6d472096be77dd4
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x1f0]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rcx
mov rax, r12
vmovaps ymm0, ymmword [rsp + 0x40]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x40], ymm0
lea r13, [rsp + 0x40]
mov rcx, r13
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rax
call fcn.1400a2460
lea r13, [rsp + 0xa0]
mov rcx, r13
mov edx, eax
mov r8, r12
call fcn.140008310
cmp qword [rsp + 0xb8], 8
jb 0x14000cc15
mov r13, qword [rsp + 0xa0]
mov rcx, r13
mov rdx, r12
mov r8d, 3
mov r9d, 0xffffffff
call fcn.1400a2138
xor r12d, r12d
cmp eax, 0x34
jg 0x14000cc49
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x14000cc57
test eax, eax
jne 0x14000db15
mov r12b, 1
jmp 0x14000cc57
cmp eax, 0x35
je 0x14000cc57
cmp eax, 0x7b
jne 0x14000db15
mov rax, qword [rsp + 0xb8]
cmp rax, 8
jb 0x14000cca5
mov rcx, qword [rsp + 0xa0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x14000cca0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
test r12b, r12b
je 0x14000d14b
mov qword [rsp + 0x1e8], r15
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r14
movabs r12, 0xf6d472096be77dd4
mov qword [rsp + 0xb0], r12
movabs rax, 0x9b375c5d6dfcc95f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x130], rax
mov r15, rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0xa0]
mov r13, rdi
mov rdi, rsi
mov rsi, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
vzeroupper
call rsi
mov rdx, rsi
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r12
movabs rax, 0x9b375c5d6df8c95f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], r15
mov rsi, qword [rsp + 0x1f0]
mov qword [rsp + 0x138], rsi
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0xa0]
vzeroupper
call rdx
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r12
movabs rax, 0x9b375c5d6de6c95f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x138], rsi
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r12
movabs rax, 0x9b375c5d6dffc95f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x138], rsi
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0xa0]
mov r15, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
vzeroupper
call r15
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r12
lea rcx, [rsp + 0x120]
movabs rax, 0x9b375c5d6dbbc95f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], r13
mov rbx, qword [rsp + 0x1f8]
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rsi
mov rax, rcx
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0xa0]
vzeroupper
call r15
mov r14, rdi
movabs rax, 0xec14b52cacffcdd0
mov qword [rsp + 0x120], rax
movabs rax, 0x9957530e3144e47e
mov qword [rsp + 0x128], rax
movabs rax, 0xb3d4684c36d654b9
mov qword [rsp + 0x130], rax
movabs rax, 0xe8523f3e18f8ac1c
mov qword [rsp + 0x138], rax
movabs rax, 0x132c221f58d35bb0
mov qword [rsp + 0x140], rax
movabs rax, 0x48f9223f68dd08c0
mov qword [rsp + 0x148], rax
movabs rax, 0xeeb87a6816a301bc
mov qword [rsp + 0x150], rax
movabs rax, 0xefe384dc8efa3c5b
mov qword [rsp + 0x158], rax
movabs rax, 0x5da8366c91a1eb81
mov qword [rsp + 0x160], rax
mov qword [rsp + 0xa0], rdi
mov r12, r13
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rsi
lea rdi, [rsp + 0xa0]
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0xc0], rax
movabs rax, 0xbeece6bb6b9c1418
mov rcx, qword [rsp + 0x230]
mov qword [rsp + 0xc8], rcx
movabs rcx, 0x81ca1c4872c66fdd
mov qword [rsp + 0xd0], rcx
movabs rcx, 0x9a81a4b9e68e1c36
mov qword [rsp + 0xd8], rcx
movabs rcx, 0x5da83642e3c48de7
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0x168], rax
mov qword [rsp + 0xe8], rax
mov rax, rdi
vmovaps ymm0, ymmword [rsp + 0x120]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0x120], ymm0
vmovaps ymm0, ymmword [rsp + 0x140]
vxorps ymm0, ymm0, ymmword [rax + 0x20]
vmovaps ymmword [rsp + 0x140], ymm0
vmovaps xmm0, xmmword [rsp + 0x160]
vxorps xmm0, xmm0, xmmword [rax + 0x40]
mov r13, qword [0x140114660]
vmovaps xmmword [rsp + 0x160], xmm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0xa0], ymm0
lea rcx, [rsp + 0x120]
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000d446
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], 0xf
mov rcx, rdi
lea rdx, [rsp + 0x120]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0xa0
mov r15, qword [rsp + 0x1e8]
jmp 0x14000d6ab
movabs rax, 0xec5ba92b93d7facd
mov qword [rsp + 0xa0], rax
movabs rax, 0x8605480c3a09b771
mov qword [rsp + 0xa8], rax
movabs rax, 0xf6df634c21d949f6
mov qword [rsp + 0xb0], rax
movabs rax, 0xe85c2e321aa4b631
mov qword [rsp + 0xb8], rax
movabs rax, 0xa22644651c55cb3
mov qword [rsp + 0xc0], rax
movabs rax, 0x48fd353f698f02d0
mov qword [rsp + 0xc8], rax
movabs rax, 0xe0a5702605a90bfd
mov qword [rsp + 0xd0], rax
movabs rax, 0xfbe984c087e33c52
mov qword [rsp + 0xd8], rax
movabs rax, 0x7dc6532781e4e891
mov qword [rsp + 0xe0], rax
movabs rax, 0x929896ce19ee7b7b
mov qword [rsp + 0xe8], rax
movabs rax, 0xe50c9c25c038ca41
mov qword [rsp + 0xf0], rax
movabs rax, 0xcb136230b0c8d10a
mov qword [rsp + 0xf8], rax
movabs rax, 0x22c2e84b428f81ab
mov qword [rsp + 0x100], rax
movabs rax, 0x7e7029b7719cb825
mov qword [rsp + 0x108], rax
movabs rax, 0x1b2b2e03a22f506c
mov qword [rsp + 0x110], rax
mov r13, rsi
mov qword [rsp + 0x120], rsi
mov rsi, rdi
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x140], rax
movabs rax, 0x19173b110181ccfe
mov rcx, qword [rsp + 0x230]
mov qword [rsp + 0x148], rcx
movabs rcx, 0x81ca1c4872c66fdd
mov qword [rsp + 0x150], rcx
movabs rcx, 0x9a81a4b9e68e1c36
mov qword [rsp + 0x158], rcx
movabs rcx, 0x5da83642e3c48de7
mov qword [rsp + 0x160], rcx
movabs rcx, 0xbeece6bb6b9c1418
mov qword [rsp + 0x168], rcx
movabs rcx, 0xc569ef44a554ba61
mov qword [rsp + 0x170], rcx
movabs rcx, 0xbf7a4255d3a9bd7a
mov qword [rsp + 0x178], rcx
movabs rcx, 0x4eae893e2ceeec8b
mov qword [rsp + 0x180], rcx
movabs rcx, 0x53155b9703f3985c
mov qword [rsp + 0x188], rcx
movabs rcx, 0x1b055a60c7453e05
mov qword [rsp + 0x190], rcx
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x120]
vmovaps ymm0, ymmword [rsp + 0xa0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xa0], ymm0
vmovaps ymm0, ymmword [rsp + 0xc0]
vxorps ymm0, ymm0, ymmword [rax + 0x20]
vmovaps ymmword [rsp + 0xc0], ymm0
vmovaps ymm0, ymmword [rsp + 0xe0]
vxorps ymm0, ymm0, ymmword [rax + 0x40]
vmovaps ymmword [rsp + 0xe0], ymm0
vmovaps ymm0, ymmword [rsp + 0x100]
vxorps ymm0, ymm0, ymmword [rax + 0x60]
mov r12, qword [0x140114660]
vmovaps ymmword [rsp + 0x100], ymm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x120], ymm0
lea rdi, [rsp + 0xa0]
mov rcx, rdi
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000d48c
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], 0xf
lea rcx, [rsp + 0x120]
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0x120
lea r15, [rsp + 0x40]
jmp 0x14000d7c2
mov rsi, r14
mov rdi, rbx
or rdi, 0xf
cmp rdi, 0x17
mov eax, 0x16
cmovb rdi, rax
cmp rdi, 0xfff
mov r15, qword [rsp + 0x1e8]
jb 0x14000d666
lea rcx, [rdi + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000d672
mov rdi, rbx
or rdi, 0xf
cmp rdi, 0x17
mov eax, 0x16
cmovb rdi, rax
cmp rdi, 0xfff
lea r15, [rsp + 0x40]
jb 0x14000d788
lea rcx, [rdi + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000d794
lea rcx, [rsi + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rsi
mov rcx, r14
lea rdx, [rsp + 0x1b0]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
movabs r14, 0x218711a00
mov byte [rbx], 0
mov rcx, qword [rsp + 0x1e8]
mov rdx, r13
mov r8, r15
vmovaps xmm3, xmm6
call fcn.140042980
mov rax, qword [rsp + 0x1d8]
cmp rax, 0x10
lea rdi, [rsp + 0x240]
mov rbx, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rsi, qword [rsp + 0x220]
jb 0x14000d588
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000d583
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x14000d5c9
mov rcx, qword [rsp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000d5c4
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x98]
cmp rax, 0x10
jb 0x14000d627
mov rcx, qword [rsp + 0x80]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000d622
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 0xf
mov byte [rsp + 0x80], 0
mov rax, qword [rsp + 0x218]
cmp rax, 0x10
jb 0x14000da52
mov rcx, qword [rsp + 0x200]
jmp 0x14000da21
lea rcx, [rdi + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rdi
mov rcx, r14
lea rdx, [rsp + 0x120]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
lea rdi, [rsp + 0xa0]
mov r14, rsi
mov byte [rbx], 0
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r12
lea r15, [rsp + 0x40]
mov rax, r15
vmovaps xmm0, xmmword [rsp + 0x80]
vxorps xmm0, xmm0, xmmword [rax]
vmovaps xmmword [rsp + 0x80], xmm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x40], ymm0
lea rsi, [rsp + 0x80]
mov rcx, rsi
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000d745
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0x40
lea r12, [rsp + 0x120]
jmp 0x14000d8c5
mov rsi, rbx
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
lea r12, [rsp + 0x120]
jb 0x14000d894
lea rcx, [rsi + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000d8a0
lea rcx, [rdi + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0x120], r14
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rdi
mov rcx, r14
lea rdx, [rsp + 0xa0]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
mov byte [rbx], 0
movabs rax, 0x9b7bd938b1e8c9da
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], rsi
mov rax, r15
vmovaps xmm0, xmmword [rsp + 0x80]
vxorps xmm0, xmm0, xmmword [rax]
vmovaps xmmword [rsp + 0x80], xmm0
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x40], ymm0
lea rsi, [rsp + 0x80]
mov rcx, rsi
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14000db0a
mov rbx, rax
cmp rax, 0xf
ja 0x14000d859
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rsp
add rbx, 0x40
jmp 0x14000d98c
mov rsi, rbx
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
jb 0x14000d95b
lea rcx, [rsi + 0x28]
call fcn.1400a1c64
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000d967
lea rcx, [rsi + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rsi
mov rcx, r14
lea rdx, [rsp + 0x80]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
mov byte [rbx], 0
mov rcx, r13
mov rdx, r15
mov r8, rdi
vmovaps xmm3, xmm6
call fcn.140042980
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
movabs r14, 0x218711a00
lea rdi, [rsp + 0x240]
mov rbx, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rsi, qword [rsp + 0x220]
jb 0x14000d93c
mov rcx, qword [rsp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000d937
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov rax, qword [rsp + 0xb8]
cmp rax, 0x10
jb 0x14000da52
mov rcx, qword [rsp + 0xa0]
jmp 0x14000da21
lea rcx, [rsi + 1]
call fcn.1400a1c64
mov r14, rax
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rsi
mov rcx, r14
lea rdx, [rsp + 0x80]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
mov byte [rbx], 0
mov rcx, r12
mov rdx, r15
lea r12, [rsp + 0x120]
mov r8, r12
vmovaps xmm3, xmm6
call fcn.140042980
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
movabs r14, 0x218711a00
lea rdi, [rsp + 0x240]
mov rbx, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rsi, qword [rsp + 0x220]
jb 0x14000da0b
mov rcx, qword [rsp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000da06
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov rax, qword [rsp + 0x138]
cmp rax, 0x10
jb 0x14000da52
mov rcx, qword [rsp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000da4d
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000db0f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
mov qword [0x1401146a0], rsi
jmp 0x14000bf5f
mov rax, rcx
cmp rsi, 0x16e3600
jne 0x14000dabf
movabs r9, 0xb2f4fc0794908cf3
imul r9
mov r8, rdx
add r8, rcx
mov rax, r8
shr rax, 0x3f
sar r8, 0x18
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rcx
imul r9
mov rsi, rdx
imul rax, r8, 0x3b9aca00
add rsi, rcx
mov rcx, rsi
shr rcx, 0x3f
sar rsi, 0x18
add rsi, rcx
jmp 0x14000db02
or rax, rsi
shr rax, 0x20
je 0x14000dad5
mov rax, rcx
cqo
idiv rsi
mov rcx, rax
jmp 0x14000dadd
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
imul rax, rdx, 0x3b9aca00
mov rdx, rsi
or rdx, rax
shr rdx, 0x20
je 0x14000daf7
cqo
idiv rsi
jmp 0x14000dafb
xor edx, edx
div esi
imul rsi, rcx, 0x3b9aca00
add rsi, rax
jmp 0x14000bf80
call fcn.140006a40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [rsp + 0x120], eax
lea rax, str.xC_n_
mov qword [rsp + 0x128], rax
lea rcx, str.exists
lea rdx, [rsp + 0x120]
lea r8, [rsp + 0xa0]
call fcn.140006a60
int3