Function at 0x10011cf0
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x1006b5d8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 0x40
xor ebx, ebx
lea eax, [ebp - 0x44]
push ebx
push eax
call fcn.1003ae80
mov ecx, dword [0x1007e6bc]
add esp, 0xc
cmp byte [ecx + 0x1c18], 6
mov dword [ebp - 0x44], 0x40
jb 0x10011d4b
push 0x10058cf0
push 0x10058ce0
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
cmp eax, ebx
je 0x10011d8b
lea edx, [ebp - 0x44]
push edx
call eax
jmp 0x10011d8b
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.kernel32.dll_GlobalMemoryStatus]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ebx
mov ecx, dword [0x1007e6bc]
fnstcw word [ebp - 0x66]
mov edx, dword [ebp - 0x34]
mov dword [ecx + 0x1c20], edx
mov eax, dword [ebp - 0x30]
mov dword [ecx + 0x1c24], eax
mov edx, dword [ebp - 0x3c]
mov dword [ecx + 0x1c28], edx
mov eax, dword [ebp - 0x38]
mov dword [ecx + 0x1c2c], eax
mov edx, dword [ebp - 0x14]
mov dword [ecx + 0x1c30], edx
mov eax, dword [ebp - 0x10]
mov dword [ecx + 0x1c34], eax
mov edx, dword [ebp - 0x1c]
mov dword [ecx + 0x1c38], edx
mov eax, dword [ebp - 0x18]
mov dword [ecx + 0x1c3c], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x70], edx
mov edx, eax
and eax, 0x7fffffff
mov dword [ebp - 0x6c], eax
fild qword [ebp - 0x70]
movzx eax, word [ebp - 0x66]
and edx, 0x80000000
mov dword [ebp - 0x6c], edx
mov edx, dword [ecx + 0x1c30]
mov dword [ebp - 0x70], ebx
or eax, 0xc00
fild qword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
fchs
faddp st(1)
fld qword [0x10058cd8]
fmul st(1), st(0)
fld qword [0x10057fd0]
fadd st(2), st(0)
fldcw word [ebp - 0x6c]
fxch st(2)
fistp qword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ecx + 0x1c34]
fldcw word [ebp - 0x66]
mov dword [ebp - 0x70], edx
mov edx, eax
and eax, 0x7fffffff
mov dword [ebp - 0x6c], eax
and edx, 0x80000000
fild qword [ebp - 0x70]
fnstcw word [ebp - 0x66]
mov dword [ebp - 0x6c], edx
mov edx, dword [ecx + 0x1c28]
movzx eax, word [ebp - 0x66]
mov dword [ebp - 0x70], ebx
or eax, 0xc00
fild qword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
fchs
faddp st(1)
fmul st(1)
faddp st(2)
fldcw word [ebp - 0x6c]
fxch st(1)
fistp qword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x70], edx
push eax
fldcw word [ebp - 0x66]
mov eax, dword [ecx + 0x1c2c]
mov edx, eax
and eax, 0x7fffffff
mov dword [ebp - 0x6c], eax
and edx, 0x80000000
fild qword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x70], ebx
fild qword [ebp - 0x70]
fchs
mov edx, dword [ecx + 0x1c20]
faddp st(1)
fnstcw word [ebp - 0x66]
add ecx, 0x800
movzx eax, word [ebp - 0x66]
fmul st(1)
fld1
or eax, 0xc00
fadd st(1), st(0)
mov dword [ebp - 0x6c], eax
fldcw word [ebp - 0x6c]
fxch st(1)
fistp qword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ecx + 0x1424]
fldcw word [ebp - 0x66]
mov dword [ebp - 0x70], edx
mov edx, eax
and eax, 0x7fffffff
mov dword [ebp - 0x6c], eax
and edx, 0x80000000
fild qword [ebp - 0x70]
fnstcw word [ebp - 0x66]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x70], ebx
fild qword [ebp - 0x70]
movzx eax, word [ebp - 0x66]
or eax, 0xc00
mov dword [ebp - 0x6c], eax
fchs
faddp st(1)
fmulp st(2)
faddp st(1)
fldcw word [ebp - 0x6c]
fistp qword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
push eax
push 0x10058c9c
fldcw word [ebp - 0x66]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [0x1007e6bc]
mov edx, dword [ecx + 0x1c28]
mov eax, dword [ecx + 0x1c2c]
mov dword [ebp - 0x70], edx
mov edx, eax
fnstcw word [ebp - 0x66]
and eax, 0x7fffffff
mov dword [ebp - 0x6c], eax
fild qword [ebp - 0x70]
movzx eax, word [ebp - 0x66]
and edx, 0x80000000
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x70], ebx
or eax, 0xc00
add esp, 0x18
fild qword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
fchs
faddp st(1)
fmul qword [0x10058cd8]
fadd qword [0x10057fd0]
fldcw word [ebp - 0x6c]
fistp qword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
fldcw word [ebp - 0x66]
cmp eax, 0x3e8
jb 0x10011fb5
mov byte [ecx + 0x1804], bl
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003b1fb
mov esp, ebp
pop ebp
ret
cmp eax, 0x1f4
setb al
pop ebx
lea eax, [eax + eax + 1]
mov byte [ecx + 0x1804], al
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 1
call fcn.1003b1fb
mov esp, ebp
pop ebp
ret