Function at 0x10001c20
Capabilities:
Get memory capacity
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb8
xor eax, eax
lea ecx, [esp + 0x90]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], eax
jmp 0x10001d0d
mov eax, dword [esp + 0x74]
mov ecx, 0xf0f0f0f1
mov dword [esp + 0x70], eax
mul ecx
shr edx, 4
imul eax, edx, 0x11
mov ecx, dword [esp + 0x70]
sub ecx, eax
mov eax, ecx
sub eax, 3
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
je 0x10001ce7
jmp 0x10001c6e
mov eax, dword [esp + 0x6c]
sub eax, 7
mov dword [esp + 0x64], eax
je 0x10001dad
jmp 0x10001ded
mov dword [esp + 0xb0], 0xf16
mov eax, esp
lea ecx, [esp + 0xb0]
mov dword [eax + 4], ecx
mov dword [eax], 0xe3ddbb
mov eax, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 0x10], 0x6a8
mov dword [ecx + 0xc], 0x8de
mov dword [ecx + 8], 0x5594b2
mov dword [ecx + 4], 0x1d2a9f
mov dword [ecx], 0x522e56
mov ecx, dword [sym.imp.GDI32.dll_FrameRgn]
mov dword [esp + 0x60], eax
call ecx
sub esp, 0x14
mov dword [esp + 0x5c], eax
jmp 0x10001e59
mov eax, esp
mov dword [eax + 4], 0x56b
mov dword [eax], 0x6b0dad
mov eax, dword [sym.imp.KERNEL32.dll_TerminateJobObject]
call eax
sub esp, 8
mov dword [esp + 0x58], eax
jmp 0x10001dad
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x78]
mov ecx, esp
mov dword [ecx + 8], 0xe4e
mov dword [ecx + 4], 0x2bb
mov dword [ecx], 0x4055a1
mov ecx, dword [sym.imp.USER32.dll_SetMenuDefaultItem]
mov dword [esp + 0x54], eax
call ecx
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 0xc], 0x763064
mov dword [ecx + 8], 0x417
mov dword [ecx + 4], 0x431
mov dword [ecx], 0xead5a4
mov ecx, dword [sym.imp.USER32.dll_DrawIcon]
mov dword [esp + 0x50], eax
call ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], 0x129236
mov ecx, dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov dword [esp + 0x4c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x9b4
mov dword [ecx + 4], 0x3c5
mov dword [ecx], 0x9d6
mov ecx, dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x48], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x74], ecx
jmp 0x10001c42
mov dword [esp + 0xb4], 0x115
mov eax, esp
lea ecx, [esp + 0xb4]
mov dword [eax + 4], ecx
mov dword [eax + 0x10], 0x800d8e
mov dword [eax + 0xc], 0x4facc6
mov dword [eax + 8], 0xbbe
mov dword [eax], 0xbe8
mov eax, dword [sym.imp.USER32.dll_BroadcastSystemMessageA]
call eax
sub esp, 0x14
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x70]
add eax, 1
cmp eax, 0x140
mov dword [esp + 0x74], eax
jne 0x10001c42
xor eax, eax
mov ecx, esp
mov dword [ecx + 4], 0xf7c
mov dword [ecx], 0xad7
mov ecx, dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [esp + 0x3c], eax
call ecx
sub esp, 8
xor ecx, ecx
mov edx, dword [esp + 0x54]
sub edx, 0x45
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], edx
je 0x10001c84
jmp 0x10001e42
mov eax, dword [esp + 0x54]
sub eax, 0xf
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ecx
jne 0x10001eb1
jmp 0x10001e59
xor eax, eax
mov ecx, 0x20
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
call sub.msvcrt.dll_memset
mov eax, esp
lea ecx, [esp + 0x90]
mov dword [eax], ecx
mov eax, dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
call eax
sub esp, 4
mov eax, esp
mov dword [eax], 0x3ae
mov eax, dword [sym.imp.USER32.dll_GetSysColor]
call eax
sub esp, 4
mov dword [esp + 0x1c], eax
jmp 0x10001efe
mov eax, dword [esp + 0x28]
mov ecx, esp
lea edx, [esp + 0x80]
mov dword [ecx + 4], edx
mov dword [ecx + 0xc], 0xe89
mov dword [ecx + 8], 0xe8c
mov dword [ecx], 0x4751a8
mov ecx, dword [sym.imp.USER32.dll_DrawEdge]
mov dword [esp + 0x18], eax
call ecx
sub esp, 0x10
mov ecx, dword [esp + 0x18]
add ecx, 1
cmp ecx, 0xa
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], ecx
jne 0x10001eb1
mov eax, esp
mov dword [eax + 4], 0xf6f
mov dword [eax], 0x890
mov eax, dword [sym.imp.ole32.dll_CoFreeUnusedLibrariesEx]
call eax
sub esp, 8
mov eax, dword [esp + 0x54]
add eax, 1
cmp eax, 0x112
mov dword [esp + 0x78], eax
je 0x10001d09
jmp 0x10001d0d