Function at 0x42cba1
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0042cba1
xor esi, esi
xor edi, edi
mov ecx, 0xfb
push esi
dec ecx
jne 0x42cbbd
mov eax, 0x40
mov dword [ebp - 0x360], eax
lea ebx, [ebp - 0x360]
push ebx
call dword [sym.imp.KERNEL32.DLL_GlobalMemoryStatusEx]
fldcw word [ebp - 0x10]
test eax, eax
je 0x42cbea
mov esi, dword [ebp - 0x35c]
inc dword [0x1860278]
fild dword [0x186d6a4]
mov eax, dword [0x45fff8]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x42cde8
cmp dword [str.SusClientId], 0
jne 0x42cde8
cmp dword [0x45feb0], 0
jne 0x42cc45
mov edx, 0x18637e4
call fcn.0045d0ba
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045ced6
jmp 0x42cde8
lea ebx, [ebp - 0x470]
push ebx
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
fldcw word [ebp - 0x10]
xor eax, eax
movzx ecx, word [ebp - 0x468]
cmp ecx, eax
jne 0x42ccc8
xor eax, eax
movzx ecx, word [ebp - 0x466]
cmp ecx, eax
jne 0x42ccc8
lea ebx, [ebp - 0x114]
mov eax, pe_nt_image_headers32
call fcn.004506bf
push 0
mov edx, 0x1863808
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
mov edx, 0x18637f8
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.004125cf
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
jmp 0x42cf32
push 0
mov edx, 0x18637f8
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00412511
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
call fcn.0045d0d1
lea ebx, [ebp - 0x460]
mov ecx, 0x100
call fcn.0045ced6
lea ebx, [ebp - 0x460]
call fcn.0045ce8d
mov edx, 0x18609c8
call fcn.0045d0ba
call fcn.0045c602
jne 0x42cd45
mov edx, 0x1863810
call fcn.0045d0ba
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045ced6
jmp 0x42cde8
mov eax, 3
lea ebx, [ebp - 0x460]
call fcn.0045ce8d
mov dword [ebp - 0x30], eax
call fcn.0045d088
cmp eax, dword [ebp - 0x30]
jle 0x42cde8
fild dword [0x186d870]
mov eax, dword [0x1860278]
call fcn.0045c27b
call fcn.0045c1ac
ficomp dword [0x186d6a4]
fnstsw ax
sahf
jne 0x42cd90
call fcn.0042cf4b
mov eax, dword [0x45fffc]
test eax, eax
je 0x42cdcd
lea ebx, [ebp - 0x460]
call fcn.0045ce8d
mov edx, 0x1863820
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045ced6
jmp 0x42cde8
lea ebx, [ebp - 0x460]
call fcn.0045ce8d
lea ebx, [ebp - 0x114]
mov ecx, pe_nt_image_headers32
call fcn.0045ced6
call fcn.0042c9ed
call fcn.0045d0d1
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045ced6
lea ebx, [ebp - 0x114]
call fcn.0045ce8d
lea ebx, [ebp - 0x214]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045ced6
mov eax, dword [0x460118]
test eax, eax
je 0x42ce65
mov edx, 0x1863830
call fcn.0045d0ba
lea ebx, [ebp - 0x214]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x214]
mov ecx, 0x100
call fcn.0045ced6
call fcn.0042bea9
mov edi, eax
mov edx, 0x186383c
call fcn.0045d0ba
lea ebx, [ebp - 0x214]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x186385c
call fcn.0045d0ba
call fcn.0045c56d
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x1863878
call fcn.0045d0ba
call fcn.0045c56d
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x1863894
call fcn.0045d0ba
call fcn.0045c56d
fild dword [0x45fecc]
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x18638b0
call fcn.0045d0ba
call fcn.0045c56d
mov eax, dword [0x46000c]
call fcn.0045c27b
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x18638cc
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043e4bc
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret