Function at 0x10002fdb
Capabilities:
Get memory capacity

Disassembly:
mov eax, 0x1004b358
call fcn.1004ae30
sub esp, 0x48
push ebx
push esi
mov dword [ebp - 0x28], 0x12ed
mov eax, edx
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x28], 0x154d
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x15], cl
jle 0x10003061
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0x13f9
mov esi, dword [ebp - 0x1c]
mov edi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [ebx + edi]
mov ecx, 0x10062a18
and eax, esi
cdq
push edx
push eax
call fcn.10003a17
inc ebx
cmp ebx, 0x395a
jl 0x1000301d
inc edi
push 0
pop ebx
cmp edi, 0x42f2
jl 0x1000301a
mov esi, dword [ebp - 0x24]
add dword [ebp - 0x1c], esi
dec dword [ebp - 0x20]
jne 0x10003015
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x68e5
jl 0x1000300b
mov eax, dword [ebp - 0x30]
mov cl, byte [ebp - 0x15]
test cl, cl
je 0x1000321a
cmp byte [ebp + 0xc], 0
je 0x1000320c
mov dword [ebp - 0x30], 0xf606
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xbacd7953
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x30], 0x5cbd9454
mov dword [ebp - 0x30], 0x1fdf
cmp dword [ebp - 0x30], 0xb70
jge 0x100031d0
mov dword [ebp - 0x3c], 0xf
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x50], bl
mov dword [ebp - 4], ebx
mov esi, 0x10062ad0
mov eax, dword [0x10062ad0]
push 0xa
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.10005017
movzx eax, al
lea edx, [ebp - 0x50]
push eax
mov ecx, esi
call fcn.10006997
pop ecx
mov esi, 0x10053cdc
push esi
call fcn.10035c80
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x50]
call fcn.1000406d
mov esi, 0x10053ce0
mov edi, eax
push esi
call fcn.10035c80
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x50]
call fcn.1000406d
mov edx, dword [ebp - 0x40]
mov ecx, eax
sub ecx, edi
sub edx, eax
dec ecx
dec edx
add ecx, edi
cmp edx, ecx
jne 0x1000312f
lea edx, [ebp - 0x50]
call fcn.100063a1
push eax
call fcn.1000636f
jmp 0x100031c0
lea eax, [ecx + 2]
cmp edx, eax
jne 0x10003170
push 0x10053ce4
call fcn.10036008
mov eax, dword [ebp - 0x40]
mov esi, ebx
pop ecx
dec eax
je 0x100031c1
cmp dword [ebp - 0x3c], 0x10
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
movsx eax, byte [eax + esi]
push eax
push 0x10053ce8
call fcn.10036008
mov eax, dword [ebp - 0x40]
inc esi
dec eax
pop ecx
pop ecx
cmp esi, eax
jb 0x10003149
jmp 0x100031c1
lea eax, [edx + 2]
cmp eax, ecx
jne 0x100031b6
dec edi
mov esi, ebx
push 2
pop eax
cmove edi, eax
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x100031af
cmp esi, edi
je 0x100031aa
cmp dword [ebp - 0x3c], 0x10
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
movsx eax, byte [eax + esi]
push eax
push 0x10053ce8
call fcn.10036008
mov eax, dword [ebp - 0x40]
pop ecx
pop ecx
inc esi
cmp esi, eax
jb 0x10003187
push 0x10053ce4
jmp 0x100031bb
push 0x10053cec
call fcn.10036226
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
push ebx
push 1
call fcn.100040fa
mov dword [ebp - 0x34], 0x6887e08a
mov dword [ebp - 0x1c], ebx
jmp 0x100031ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x38], 0x61ab6ec7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100031dc
push 0x4f36
push 0x88a
push ebx
push 1
lea edx, [ebp - 0x34]
mov cl, 1
call fcn.1000282a
add esp, 0x10
jmp 0x10003246
cmp byte [eax], 0
je 0x10003246
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x10003246
cmp byte [ebp + 8], 0
je 0x10003229
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
jmp 0x10003246
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10003246
push 0x5334
push ebx
mov edx, 0x61c0
xor cl, cl
call fcn.10001b5d
pop ecx
pop ecx
mov dword [ebp - 4], 1
cmp dword [ebp - 0x28], 0x120d
jge 0x10003265
mov edx, str.vgzzlos_vfoaxon_hngap_nxfgjrrs_gqjgje_aevp_osk_xynnt
mov ecx, 0x10062a18
call fcn.10006198
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret