Function at 0x10009a3c
Capabilities:
Get memory capacity

Disassembly:
mov eax, 0x10055bae
call fcn.100553f0
sub esp, 0x80
push ebx
push esi
mov dword [ebp - 0x30], 0x3b66
mov esi, ecx
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x30], 0x3f1c
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x34], esi
jle 0x10009a96
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1006f038
and eax, esi
cdq
push edx
push eax
call fcn.10003f1c
inc edi
cmp edi, 0x59f2
jl 0x10009a70
inc esi
cmp esi, 0x1121
jl 0x10009a6e
mov esi, dword [ebp - 0x34]
cmp byte [ebp + 8], 0
je 0x10009bbf
xor edi, edi
mov dword [ebp - 0x2c], 0xcf5
inc edi
cmp dword [ebp - 0x2c], 0xe81
jle 0x10009b1f
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
cdq
idiv ecx
mov eax, esi
lea ecx, [ebp - 0x88]
sub eax, edx
cdq
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009ade
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x88]
call fcn.10001539
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x3c61
jl 0x10009abf
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x6bb7
jl 0x10009aba
inc esi
cmp esi, 0x1689
jl 0x10009ab5
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
cmp dword [ebp - 0x2c], 0xaef
jge 0x10009b33
push str.bnzolddqu_gvmlzyotv_jnpcmvfi_wvir_hffmqx_eayncdrv_oneiho_tmjqgfb_ncaxlnipk_whmmua_crgcdzo_rak_qjcspcmy
call fcn.1003ed0a
pop ecx
mov edx, dword [ebp + 0x18]
mov esi, dword [ebp + 0x24]
mov eax, dword [edx]
mov eax, dword [esi]
mov eax, dword [edx]
mov eax, dword [esi]
imul ecx, eax, 0x23cc
mov eax, dword [edx]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp + 0x1c]
sete dl
xor ecx, ecx
mov eax, dword [eax]
cmp eax, edx
mov eax, dword [ebp + 0x14]
setl cl
mov dword [eax], ecx
cmp dword [eax], ebx
jne 0x10009b69
cmp dword [esi], ebx
je 0x10009b6b
mov ebx, edi
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
mov eax, dword [ebp + 0xc]
imul edx, ebx
mov dword [eax], edx
mov dword [ebp - 4], 2
cmp dword [ebp - 0x30], 0x3a43
jge 0x10009da0
mov edx, str.dgvoehxce_pqekup_svzqiqk_dtmpfom_pmrpys_nflce_xfird_batugdu
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10009da0
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x30], 0x979c
push 3
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], 0x33a79cc0
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10009bf3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10009be5
push ecx
push ecx
lea eax, [ebp - 0x24]
xor dl, dl
push eax
push ecx
push ecx
push 0x18d7
push ecx
push 0x1f62
call fcn.10009197
add esp, 0x20
cmp dword [ebp - 0x24], ebx
jne 0x10009c38
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
sub ecx, eax
cmp dword [ebp - 0x24], ecx
jge 0x10009c4e
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
xor edi, edi
lea eax, [edi + 1]
sub eax, ecx
mov dword [ebp - 0x5c], eax
movzx eax, word [esi]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push ecx
lea ecx, [ebp - 0x38]
call fcn.1000a32b
pop ecx
pop ecx
mov edi, ebx
mov dword [ebp - 0x1c], 0x1f7e2799
mov dword [ebp - 0x1c], 0xffffffea
jmp 0x10009c97
mov byte [ebp - 0x15], bl
lea ecx, [ebp - 0x15]
xor dl, dl
call fcn.1000934b
cmp dword [ebp - 0x1c], ebx
jne 0x10009c9d
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
je 0x10009c82
mov esi, dword [ebp - 0x38]
mov dl, 0x28
mov cl, byte [edi + esi]
call fcn.10013008
mov byte [edi + esi], al
inc edi
cmp edi, 2
jb 0x10009c72
mov dword [ebp - 0x1c], 0xfffffff7
push 1
mov dword [ebp - 0x40], 0x3f9e923e
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x10009cd7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10009cc9
push 3
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x10009cf3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], 0xef20fe6e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10009ce5
mov dword [ebp - 0x50], ebx
jmp 0x10009d8d
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x9b79
mov dword [ebp - 0x30], 0xab1d6a56
mov edx, 0x1172
push eax
xor cl, cl
call fcn.10009970
add esp, 4
mov dword [ebp - 0x1c], ebx
jmp 0x10009d85
mov dword [ebp - 0x34], 0x6859
mov dword [ebp - 0x20], ebx
jmp 0x10009d7d
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x4c], edi
je 0x10009d66
mov dword [ebp - 0x28], ebx
jmp 0x10009d4e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x70], 0xb441a62a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x10009d40
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x4c], ebx
jne 0x10009d82
lea edx, [ebp - 0x40]
call fcn.1000930c
jmp 0x10009d74
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x10009d32
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x10009d26
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jle 0x10009d00
mov ecx, dword [ebp - 0x44]
mov ax, word [ebp - 0x3c]
mov word [ecx], ax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret