Function at 0x76e45826
Capabilities:
Get memory capacity
Print debug messages

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x288
mov eax, dword [0x76e5f514]
push ebx
push 1
mov ebx, 0x76e5f080
push ebx
mov dword [ebp - 4], eax
call dword [sym.imp.ntdll.dll_RtlAcquireResourceExclusive]
test al, al
je 0x76e4872f
push esi
push edi
mov dword [0x76e5f384], 0x76e5f670
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
movzx eax, ah
mov dword [0x76e5f2f4], eax
lea eax, [ebp - 0x260]
and ecx, 0xff
push eax
mov dword [0x76e5f2f0], ecx
mov dword [0x76e5f2ec], 0x1f4
call fcn.76e47b19
mov edi, eax
xor esi, esi
cmp edi, esi
jne 0x76e48744
push esi
push 4
push 0x20a
mov edi, 0x76e5f0b8
push edi
push dword [ebp - 0x260]
push esi
call sub.NETAPI32.dll_I_NetNameCanonicalize
mov ebx, eax
cmp ebx, esi
jne 0x76e4875f
push dword [ebp - 0x260]
call sub.NETAPI32.dll_NetApiBufferFree
push edi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
push 1
push 0x76e45bf4
mov dword [0x76e5f2c4], eax
push esi
lea eax, [ebp - 0x264]
push eax
call fcn.76e45c1d
mov ebx, eax
cmp ebx, esi
jne 0x76e4879f
lea eax, [ebp - 0x25c]
push eax
call fcn.76e479dc
mov ebx, eax
cmp ebx, esi
jne 0x76e487bc
mov eax, dword [ebp - 0x25c]
xor ebx, ebx
cmp word [eax], bx
mov esi, 0x76e5f2c8
je 0x76e45abc
push ebx
call fcn.76e454eb
neg eax
sbb eax, eax
and eax, 7
add eax, 6
push eax
push 0x20
push esi
push dword [ebp - 0x25c]
push ebx
call sub.NETAPI32.dll_I_NetNameCanonicalize
mov ebx, eax
test ebx, ebx
jne 0x76e487c7
xor ebx, ebx
push dword [ebp - 0x25c]
call sub.NETAPI32.dll_NetApiBufferFree
push esi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
push 1
push dword [ebp - 0x264]
mov dword [0x76e5f2e8], eax
call fcn.76e44f21
push edi
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
lea eax, [ebp - 0x238]
push eax
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x250], 6
call edi
mov eax, dword [0x76e5f2c4]
lea ecx, [eax + eax]
mov dword [ebp - 0x240], ecx
mov ecx, dword [0x76e5f2e8]
lea eax, [ebp + eax*2 - 0x238]
add ecx, ecx
push esi
push eax
mov dword [ebp - 0x23c], ecx
call edi
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x240]
add esp, 0x10
push ebx
push 0x8c
push 0x76e5f2f8
lea eax, [eax + ecx + 0x24]
push eax
lea eax, [ebp - 0x254]
push eax
push 0x140191
push dword [0x76e5f538]
call fcn.76e42a4e
mov ebx, eax
xor edi, edi
cmp ebx, edi
mov esi, 0x420
jne 0x76e48800
mov eax, dword [0x76e5f338]
cmp eax, 0xffffffff
je 0x76e48830
cmp dword [0x76e5f348], edi
mov dword [ebp - 0x22c], eax
mov eax, dword [0x76e5f33c]
mov dword [ebp - 0x228], eax
mov eax, dword [0x76e5f340]
mov dword [ebp - 0x224], eax
mov eax, dword [0x76e5f344]
mov dword [ebp - 0x220], eax
setne al
mov byte [ebp - 0x21c], al
lea eax, [ebp - 0x268]
push eax
mov dword [ebp - 0x250], 6
call dword [sym.imp.ntdll.dll_RtlGetNtProductType]
cmp dword [ebp - 0x268], 2
push edi
push edi
push edi
sete al
push 0x50
mov byte [ebp - 0x21b], al
lea eax, [ebp - 0x254]
push eax
push 0x130007
push dword [0x76e5f518]
call fcn.76e42abd
mov ebx, eax
cmp ebx, edi
jne 0x76e48856
call fcn.76e46093
xor ebx, ebx
push dword [ebp - 0x264]
call fcn.76e46353
push 0x76e5f080
call dword [sym.imp.ntdll.dll_RtlReleaseResource]
mov eax, ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
pop ebx
call fcn.76e42a30
leave
ret
mov word [0x76e5f2c8], bx
jmp 0x76e4594c
push 0x76e489d4
call sub.ntdll.dll_DbgPrint
pop ecx
mov eax, 0x85c
jmp 0x76e45ab1
push ebx
call dword [sym.imp.ntdll.dll_RtlReleaseResource]
push edi
push 0x76e489ac
call sub.ntdll.dll_DbgPrint
pop ecx
pop ecx
mov eax, edi
jmp 0x76e45aaf
mov eax, dword [ebp - 0x260]
push esi
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x258]
push eax
push 1
push 1
push 0xf1e
call fcn.76e4b849
push dword [ebp - 0x260]
call sub.NETAPI32.dll_NetApiBufferFree
push 0x76e5f080
call dword [sym.imp.ntdll.dll_RtlReleaseResource]
push ebx
push 0x76e48980
jmp 0x76e487b0
push 0x76e5f080
call dword [sym.imp.ntdll.dll_RtlReleaseResource]
push ebx
push 0x76e4895c
call sub.ntdll.dll_DbgPrint
pop ecx
pop ecx
jmp 0x76e45aad
push ebx
push 0x76e4892c
jmp 0x76e48884
mov eax, dword [ebp - 0x25c]
push 0
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x258]
push eax
push 1
push 1
push 0xf5c
call fcn.76e4b849
push dword [ebp - 0x25c]
call sub.NETAPI32.dll_NetApiBufferFree
push ebx
push 0x76e48904
jmp 0x76e48884
cmp ebx, esi
je 0x76e459ff
push ebx
lea eax, [ebp - 0x258]
push eax
push 1
push 1
push 0xc29
mov dword [ebp - 0x258], 0x76e49d5c
call fcn.76e4b849
push ebx
push 0x76e488e0
jmp 0x76e48884
lea eax, [ebp - 0x288]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov eax, dword [ebp - 0x280]
xor edx, edx
mov ecx, 0x1f4000
div ecx
mov dword [0x76e5f338], eax
jmp 0x76e45a0d
cmp ebx, esi
je 0x76e45a90
push ebx
lea eax, [ebp - 0x258]
push eax
push 1
push 1
push 0xc29
mov dword [ebp - 0x258], 0x76e488bc
call fcn.76e4b849
push ebx
push 0x76e48890
call sub.ntdll.dll_DbgPrint
pop ecx
pop ecx
jmp 0x76e45a97