Function at 0x42d491
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0042d491
xor esi, esi
xor edi, edi
mov ecx, 0xfb
push esi
dec ecx
jne 0x42d4ad
mov eax, 0x40
mov dword [ebp - 0x360], eax
lea ebx, [ebp - 0x360]
push ebx
call dword [sym.imp.KERNEL32.DLL_GlobalMemoryStatusEx]
fldcw word [ebp - 0x10]
test eax, eax
je 0x42d4da
mov esi, dword [ebp - 0x35c]
inc dword [0x185e250]
fild dword [0x186b388]
mov eax, dword [0x45dff8]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x42d6d8
cmp dword [str.SusClientIdValidation], 0
jne 0x42d6d8
cmp dword [0x45deb0], 0
jne 0x42d535
mov edx, 0x18619f4
call fcn.0045b687
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045b4a3
jmp 0x42d6d8
lea ebx, [ebp - 0x470]
push ebx
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
fldcw word [ebp - 0x10]
xor eax, eax
movzx ecx, word [ebp - 0x468]
cmp ecx, eax
jne 0x42d5b8
xor eax, eax
movzx ecx, word [ebp - 0x466]
cmp ecx, eax
jne 0x42d5b8
lea ebx, [ebp - 0x114]
mov eax, pe_nt_image_headers32
call fcn.0044f5df
push 0
mov edx, 0x1861a18
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1861a08
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.004125cf
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
jmp 0x42d822
push 0
mov edx, 0x1861a08
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00412511
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
call fcn.0045b69e
lea ebx, [ebp - 0x460]
mov ecx, 0x100
call fcn.0045b4a3
lea ebx, [ebp - 0x460]
call fcn.0045b45a
mov edx, 0x185e9a0
call fcn.0045b687
call fcn.0045abcf
jne 0x42d635
mov edx, 0x1861a20
call fcn.0045b687
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045b4a3
jmp 0x42d6d8
mov eax, 3
lea ebx, [ebp - 0x460]
call fcn.0045b45a
mov dword [ebp - 0x30], eax
call fcn.0045b655
cmp eax, dword [ebp - 0x30]
jle 0x42d6d8
fild dword [0x186b554]
mov eax, dword [0x185e250]
call fcn.0045a848
call fcn.0045a779
ficomp dword [0x186b388]
fnstsw ax
sahf
jne 0x42d680
call fcn.0042d83b
mov eax, dword [0x45dffc]
test eax, eax
je 0x42d6bd
lea ebx, [ebp - 0x460]
call fcn.0045b45a
mov edx, 0x1861a30
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045b4a3
jmp 0x42d6d8
lea ebx, [ebp - 0x460]
call fcn.0045b45a
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045b4a3
call fcn.0042d2dd
call fcn.0045b69e
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045b4a3
lea ebx, [ebp - 0x114]
call fcn.0045b45a
lea ebx, [ebp - 0x214]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045b4a3
mov eax, dword [0x45e118]
test eax, eax
je 0x42d755
mov edx, 0x1861a40
call fcn.0045b687
lea ebx, [ebp - 0x214]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045b4a3
call fcn.0042c799
mov edi, eax
mov edx, 0x1861a4c
call fcn.0045b687
lea ebx, [ebp - 0x214]
call fcn.0045b45a
call fcn.0045ab3a
mov edx, 0x1861a6c
call fcn.0045b687
call fcn.0045ab3a
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1861a88
call fcn.0045b687
call fcn.0045ab3a
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1861aa4
call fcn.0045b687
call fcn.0045ab3a
fild dword [0x45decc]
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1861ac0
call fcn.0045b687
call fcn.0045ab3a
mov eax, dword [0x45e00c]
call fcn.0045a848
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1861adc
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043cf35
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret