Function at 0x448c80
Capabilities:
Access peb ldr_data
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea0
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
lea eax, [ebp - 0x5c]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x78]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x94]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0xb0]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0xcc]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0xe8]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x104]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x120]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x13c]
mov edx, dword [0x412450]
call fcn.00403da0
lea eax, [ebp - 0x158]
mov edx, dword [0x412450]
call fcn.00403da0
lea edi, [ebp - 0x40]
xor eax, eax
push ebp
push 0x448fdc
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [edi], 0x40
push edi
call sub.kernel32.dll_GlobalMemoryStatusEx
lea eax, [ebp - 0xb0]
mov edx, dword [edi + 4]
call fcn.0041321c
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x5c]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x78]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
sub eax, dword [edi + 0x10]
sbb edx, dword [edi + 0x14]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x94]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x1c]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xcc]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x24]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xe8]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x1c]
sub eax, dword [edi + 0x20]
sbb edx, dword [edi + 0x24]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x104]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x28]
mov edx, dword [edi + 0x2c]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x120]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x30]
mov edx, dword [edi + 0x34]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x13c]
call fcn.00413230
mov eax, dword [ebx + 0x10]
cdq
push edx
push eax
mov eax, dword [edi + 0x28]
mov edx, dword [edi + 0x2c]
sub eax, dword [edi + 0x30]
sbb edx, dword [edi + 0x34]
call fcn.00405436
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
fild qword [ebp - 0x160]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x158]
call fcn.00413230
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x94]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0x104]
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x158]
mov dword [ebp - 0x124], eax
mov eax, esi
lea edx, [ebp - 0xb0]
mov ecx, dword [0x412450]
call fcn.0040407c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x448fe3
lea eax, [ebp - 0x158]
mov edx, dword [0x412450]
mov ecx, 0xa
call fcn.00403e98
ret