Function at 0x411c20
Capabilities:
Get memory capacity
Terminate process

Disassembly:
sub esp, 0x108
mov eax, dword [0x5fe940]
push ebp
mov ebp, ecx
push esi
lea esi, [ebp + 0x1c]
mov dword [esp + 0x10c], eax
cmp byte [esi], 0
jne 0x411c55
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x104]
call fcn.005900c7
add esp, 0x108
ret
lea edx, [esp + 0xc]
mov eax, esi
sub edx, esi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x411c60
mov edx, 0x624288
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x411c73
lea eax, [esp + 0xc]
mov byte [esi], cl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411c86
sub eax, edx
cmp eax, 0xc8
jbe 0x411cb0
pop esi
mov eax, 0x80004005
pop ebp
mov ecx, dword [esp + 0x104]
call fcn.005900c7
add esp, 0x108
ret
mov dword [0x60d18c], 0
mov dword [0x8c3144], 1
mov eax, dword [ebp + 0x10]
test eax, eax
push ebx
jne 0x411cd0
xor ebx, ebx
jmp 0x411cd8
mov ebx, dword [ebp + 0x14]
sub ebx, eax
sar ebx, 2
mov eax, dword [ebp + 4]
test eax, eax
mov dword [esp + 0xc], ebx
push edi
je 0x411df4
mov ecx, dword [ebp + 8]
test ecx, ecx
jne 0x411cf2
mov dword [ebp + 8], eax
push str._n_________________________________________________________________________________
call fcn.00412660
mov eax, dword [ebp + 4]
mov ecx, dword [ebp + 8]
add eax, 0x1f0
push eax
add ecx, 0x1f0
push ecx
push 0x5b717c
call fcn.00412660
push str.__________________________________________________________________________________n
call fcn.00412660
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1d4]
push 0x5b7120
shr eax, 0xa
push eax
push 0xe
push str.There_are__ld_free__sbytes_of_physical_memory._n
call fcn.00412660
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1dc]
push 0x5b7120
shr edx, 0xa
push edx
push 0xe
push str.There_are__ld_free__sbytes_of_paging_file._n
call fcn.00412660
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1e4]
push 0x5b7120
shr ecx, 0xa
push ecx
push 0xe
push str.There_are__ld_free__sbytes_of_virtual_memory._n
call fcn.00412660
add esp, 0x44
push str.__________________________________________________________________________________n
call fcn.00412660
mov ecx, dword [ebp + 4]
mov dword [ebp + 8], ecx
mov edx, dword [ecx]
add esp, 4
call dword [edx + 0xbc]
mov eax, dword [0x60d160]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp + 4], 0
xor edx, edx
test ebx, ebx
jbe 0x411e38
mov edi, dword [ebp + 0x10]
jmp 0x411dc0
mov eax, dword [edi]
lea esi, [esp + 0x14]
add eax, 0x1f0
jmp 0x411dd0
mov bl, byte [eax]
mov cl, bl
cmp bl, byte [esi]
jne 0x411e17
test cl, cl
je 0x411df0
mov bl, byte [eax + 1]
mov cl, bl
cmp bl, byte [esi + 1]
jne 0x411e17
add eax, 2
add esi, 2
test cl, cl
jne 0x411dd0
xor eax, eax
jmp 0x411e1c
mov al, byte [0x60d166]
test al, al
je 0x411dae
mov edi, str.Result_Frame
lea esi, [esp + 0x14]
mov ecx, 0xd
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x411dae
push edx
call fcn.00590fc6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x411e2e
mov eax, dword [esp + 0x10]
inc edx
add edi, 4
cmp edx, eax
jb 0x411dc0
jmp 0x411e38
mov eax, dword [ebp + 0x10]
mov esi, dword [eax + edx*4]
test esi, esi
jne 0x411e5a
lea eax, [esp + 0x14]
push eax
call fcn.00410f90
mov esi, eax
add esp, 4
test esi, esi
je 0x411ed5
push esi
mov ecx, 0x8170a8
call fcn.00411bc0
push 0xf2
push str.._source_ui_utilitiesFrameManager.cpp
push str.CFrameManager::ChangeFrame
push 0xc34f
push 0x3e8
mov ecx, 0x81d780
call fcn.00431ec0
mov ecx, 0x858120
call fcn.00432c50
xor edi, edi
mov dword [0x5ffc14], edi
mov dword [ebp + 4], esi
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xb8]
mov eax, dword [ebp + 4]
mov dword [eax + 0x3c], 1
mov ecx, dword [ebp + 4]
add ecx, 0x1c8
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov dword [0x8c3144], edi
pop edi
pop ebx
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x104]
call fcn.005900c7
add esp, 0x108
ret
lea edx, [esp + 0x14]
push edx
push 0x5b7030
push 0x5b701c
call fcn.00474cb0
mov ecx, dword [esp + 0x120]
add esp, 0xc
pop edi
pop ebx
pop esi
mov eax, 0x80004005
pop ebp
call fcn.005900c7
add esp, 0x108
ret