Function at 0x534966
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8b0
push ebx
push esi
push edi
lea edi, [ebp - 0x8ac]
call fcn.004cb93d
call fcn.004cb97d
mov dword [ebp - 0x14], eax
call fcn.005385c1
neg al
mov dword [ebp - 0x8c], 0x40
sbb eax, eax
or dword [ebp - 0x84], 0xffffffff
or dword [ebp - 0x80], 0xffffffff
and eax, 0x20
add eax, 0x20
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x80]
shrd eax, ecx, 0x14
push 0x631a7c
push str.ProcessorNameString
push str.HardwareDescriptionSystemCentralProcessor0
mov dword [ebp - 0x20], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x294]
shr ecx, 0x14
call fcn.00401162
lea eax, [ebp - 0x294]
push eax
call fcn.004a6b46
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x49c]
call fcn.0040174c
lea eax, [ebp - 0x6a4]
push eax
call fcn.005363bf
xor esi, esi
mov ebx, str.Software
push ebx
lea edi, [ebp - 0x294]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call fcn.00531c88
push str.SVar
mov eax, edi
push eax
lea eax, [ebp - 0x10]
call fcn.00538794
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x10]
jne 0x534a57
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0x48]
call fcn.004cc03b
push dword [ebp - 0x10]
call fcn.005f858a
pop ecx
push ebx
lea edi, [ebp - 0x294]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call fcn.00531c88
push str.RunningDecoder
mov eax, edi
push eax
lea eax, [ebp - 0x10]
call fcn.00538794
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x10]
jne 0x534aa4
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0x30]
call fcn.004cc03b
push dword [ebp - 0x10]
call fcn.005f858a
pop ecx
push ebx
lea edi, [ebp - 0x294]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call fcn.00531c88
push str.RunningEncoder
mov eax, edi
push eax
lea eax, [ebp - 0x10]
call fcn.00538794
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x10]
mov edi, 0x631a7c
jne 0x534af3
mov eax, edi
push eax
lea eax, [ebp - 0x3c]
call fcn.004cc03b
push dword [ebp - 0x10]
call fcn.005f858a
pop ecx
call fcn.0053856d
test al, al
mov edx, str.admin
jne 0x534b18
mov edx, 0x67a320
mov ecx, dword [ebp - 0x48]
cmp ecx, esi
jne 0x534b21
mov ecx, edi
mov eax, dword [ebp - 0x3c]
cmp eax, esi
jne 0x534b2a
mov eax, edi
cmp dword [ebp - 0x30], esi
je 0x534b32
mov edi, dword [ebp - 0x30]
push ecx
push eax
push edi
lea eax, [ebp - 0x6a4]
push eax
push edx
push str.paid
lea eax, [ebp - 0x49c]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x8ac]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push eax
push str.osver_s__dosbits_dappbits32memphys_dcpu_spaybld_suser_srdf_ssvnr794687decoder_sencoder_ssvar_s
push dword [ebp + 8]
call fcn.0053fe72
add esp, 0x34
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
lea esi, [ebp - 0x1c]
call fcn.0054a9bc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
shrd eax, ecx, 0x14
push eax
mov eax, dword [ebp - 0x24]
shr ecx, 0x14
mov ecx, dword [ebp - 0x20]
shrd eax, ecx, 0x14
push eax
push str.pgsize_dpgused_d
push dword [ebp + 8]
shr ecx, 0x14
call fcn.0053fe72
push dword [ebp - 0x3c]
call fcn.005f858a
add esp, 0x14
push dword [ebp - 0x30]
call fcn.005f858a
pop ecx
push dword [ebp - 0x48]
call fcn.005f858a
pop ecx
pop edi
pop esi
pop ebx
leave
ret 4