Function at 0x403e6b
Capabilities:
Get memory capacity
Read .ini file

Disassembly:
sub esp, 0x228
mov eax, dword [0x420004]
xor eax, esp
mov dword [esp + 0x224], eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x23c]
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0x421fd0
mov dword [0x421fd0], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
xor ebx, ebx
push ebx
push str.ProgMan
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
push ebx
push str.SHELLDLL_DefView
push ebx
push eax
call esi
push ebx
push str.SysListView32
push ebx
push eax
call esi
push 0x104
mov ebp, 0x422a40
mov dword [0x422c48], eax
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push ebx
push ebp
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
sub eax, ebp
and eax, 0xfffffffe
cmp eax, 0x208
jae 0x40424c
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
xor ecx, ecx
push ebp
push 0x422018
mov word [eax + 0x422a40], cx
call esi
push ebp
push 0x422630
call esi
push ebp
mov ebp, 0x422428
push ebp
call esi
mov ebx, 0x422a40
push ebx
push 0x422220
call esi
push ebx
mov ebx, 0x422838
push ebx
call esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
push str.Langdefault.lng
push ebx
call esi
push str._ramsaverpro.ini
push 0x422a40
call esi
call fcn.00405f3c
push str._ramsaverpro.exe
push 0x422630
call esi
push str._ramsavercp.exe
push ebp
call esi
push str.help_
mov ebp, 0x422220
push ebp
call esi
push ebx
push 0x104
lea eax, [esp + 0x34]
push eax
push 0
push 0x41c6d0
push str.LANGUAGE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x2c]
push eax
push ebp
call esi
call fcn.00404353
call fcn.0040530e
mov dword [0x421bf8], edi
call fcn.00402169
test eax, eax
je 0x404248
push 0x2710
push dword [0x421bf8]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
xor ebp, ebp
mov ebx, eax
push ebp
push dword [0x421bf8]
mov eax, 0x80000000
push ebp
push ebp
push ebp
push eax
push ebp
push eax
push 0x16cf0000
push str.RamSaverPro
push str.RamSaverProWndClass
push ebp
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x421af4], eax
test eax, eax
je 0x404248
call fcn.00403df8
push 0x3b8
push ebp
push 0x421c04
call fcn.00406fc0
push str.RAM_Saver_Pro
push 0x41cde8
push 0x64
push 0x421c18
mov dword [0x421c00], 0x3bc
call fcn.0040603c
mov eax, dword [0x421fe0]
xor edx, edx
mov esi, 0xffa80
add esp, 0x1c
div esi
push 0x64
pop ecx
sub ecx, dword [0x421fd4]
push 0x41c754
push ecx
push eax
mov ecx, 0x41cdf0
call fcn.004020c3
push eax
push 0x64
push 0x421d20
call fcn.0040603c
mov eax, dword [0x421af4]
add esp, 0x18
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x421c04], eax
mov dword [0x421c08], 1
push ebp
push 0x32
mov dword [0x421c0c], 0x17
mov dword [0x421c10], 0x410
call esi
push eax
push 0x31
call esi
push eax
push 1
push 0xbb8
push edi
call dword [sym.imp.USER32.dll_LoadImageW]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov esi, 0x422a40
push esi
push 3
push str.SetNotify
push 0x41c620
mov dword [0x421c14], eax
call edi
test eax, eax
je 0x404111
cmp eax, 3
jne 0x4040fd
push esi
push 0x41c61c
push str.SetNotify
push 0x41c620
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x421c00
push ebp
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
test eax, eax
je 0x404248
mov dword [0x421c0c], 7
call fcn.004056bf
call fcn.00404487
call fcn.004044ab
call fcn.00405151
push ebp
push 0x3e8
push 1
push dword [0x421af4]
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.0040462d
call fcn.00405b30
call fcn.00405c65
test eax, eax
jmp 0x4041a4
mov edx, 0x41c61c
mov dword [0x422014], 1
mov ecx, str.rvsmr
call fcn.00401e09
mov dword [0x422010], 1
push esi
push ebp
push str.RamStart
push 0x41c620
call edi
test eax, eax
je 0x4041e4
mov ecx, dword [0x421af4]
call fcn.0040544f
call fcn.00404324
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
jmp 0x40421b
lea eax, [esp + 0x10]
push eax
push ebx
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x40421b
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebp
push ebp
push ebp
lea eax, [esp + 0x1c]
push eax
call esi
test eax, eax
jne 0x4041f1
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x234]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0040606a
add esp, 0x228
ret 0x10
xor eax, eax
jmp 0x40422d
call fcn.0040619a
int3