Function at 0x1001e700
Capabilities:
Get memory capacity
Get system information on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x60
mov eax, dword [0x101ed004]
xor eax, esp
mov dword [esp + 0x5c], eax
push ebx
push ebp
mov ebp, ecx
push esi
mov esi, dword [esp + 0x70]
push edi
mov ecx, dword [ebp + 0x18]
mov edi, edx
mov dword [esp + 0x24], ebp
test ecx, ecx
jns 0x1001e72c
mov ebx, 5
jmp 0x1001e73c
add ecx, ecx
mov eax, 0x55555556
imul ecx
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov ecx, edi
mov dword [esp + 0x10], ebx
call fcn.1008b160
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [edi], ebx
mov eax, dword [ebp + 0x50]
mov dword [edi + 0x2c], eax
mov eax, ecx
or eax, edx
je 0x1001e763
mov dword [edi + 0x30], ecx
mov dword [edi + 0x34], edx
mov ecx, esi
call fcn.1008b160
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [esi + 0x48], 0xffffffff
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0xffffffff
mov dword [esi + 0x44], 0xffffffff
mov dword [esi], ebx
mov edx, dword [ebp + 0x70]
mov dword [esi + 0x48], edx
test edx, edx
jns 0x1001e80c
lea eax, [esp + 0x28]
push eax
call edi
mov eax, dword [esp + 0x3c]
mov ecx, 1
cmp eax, 1
cmovl eax, ecx
cmp eax, 0x40
jg 0x1001e7be
cmp eax, ecx
jl 0x1001e7c5
lea eax, [esp + 0x28]
push eax
call edi
lea eax, [esp + 0x28]
push eax
call edi
mov eax, dword [esp + 0x3c]
mov ecx, 1
cmp eax, 1
cmovl eax, ecx
cmp eax, 0x40
jg 0x1001e7e8
cmp eax, ecx
jge 0x1001e7e8
mov edx, ecx
jmp 0x1001e809
lea eax, [esp + 0x28]
push eax
call edi
mov edx, dword [esp + 0x3c]
mov eax, 1
cmp edx, 1
cmovl edx, eax
mov eax, 0x40
cmp edx, 0x40
cmovg edx, eax
mov dword [esi + 0x48], edx
mov ecx, dword [esp + 0x78]
mov eax, ecx
mov edi, dword [esp + 0x7c]
or eax, edi
je 0x1001e820
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], edi
mov ecx, ebx
call fcn.1001e590
mov ecx, esi
mov dword [esi + 4], eax
call fcn.1008f840
cmp dword [ebp + 0x78], 0
je 0x1001e8dd
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x40
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
test edx, edx
jl 0x1001e86b
jg 0x1001e864
cmp ecx, 0x80000000
jb 0x1001e86b
mov ecx, SysReAllocStringLen
xor edx, edx
call fcn.1015e040
mulsd xmm0, qword [0x101dc658]
call fcn.1015df30
mov edi, dword [esi + 0x48]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
cmp edi, 1
jle 0x1001e8dd
mov ebp, eax
mov ebx, edx
mov ecx, esi
call fcn.1008f840
mov eax, dword [esi + 0x48]
cmp eax, edi
jg 0x1001e8d5
mov edx, dword [esi + 4]
lea ecx, [esp + 0x18]
push ecx
sub esp, 0x10
xorps xmm0, xmm0
movlpd qword [esp + 0x2c], xmm0
push eax
push ecx
mov ecx, dword [esi]
call fcn.1001e390
add esp, 0x1c
cmp edx, ebx
jl 0x1001e8d5
jg 0x1001e8c9
cmp eax, ebp
jbe 0x1001e8d5
mov edi, dword [esi + 0x48]
dec edi
mov dword [esi + 0x48], edi
cmp edi, 1
jg 0x1001e891
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x24]
cmp dword [ebp + 0xa0], 0
je 0x1001e9c5
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [esp + 0x3c]
mov eax, 1
cmp edi, 1
cmovl edi, eax
mov eax, 0x40
cmp edi, 0x40
cmovg edi, eax
mov eax, dword [0x1020328c]
test eax, eax
jne 0x1001e948
call fcn.10002620
push 0
push 0x400
push edx
push eax
call fcn.1015d9d0
push 0
push 0x400
push edx
push eax
call fcn.1015d9d0
test eax, eax
mov ecx, 0x1000
cmove eax, ecx
mov dword [0x1020328c], eax
push edi
push eax
push str.Ark_GetSystemMemoryMB:_dMB__thread:_d
call fcn.10001e10
mov ecx, dword [esp + 0x84]
add esp, 0xc
push 0
push 0x100000
push dword [esp + 0x84]
push ecx
call fcn.1015d9d0
push eax
push 0x101d319c
call fcn.10001e10
add esp, 8
push 0
push 0x100000
push dword [ebp + 0x6c]
push dword [ebp + 0x68]
call fcn.1015d9d0
push eax
push dword [ebp + 0x70]
push ebx
push str.__bLZMA2_inp_opt___level:_d__thread:_d__7z_blockSize:_dMB
call fcn.10001e10
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x38]
shr eax, 0x14
push eax
mov eax, dword [esi + 0x3c]
shrd ecx, eax, 0x14
push ecx
push dword [esi + 0x48]
push dword [esi]
push str.__rLZMA2_out_opt___level:_d__thread:_d__lzma2_blockSize:_dMB__lzma_dictSize:_dMB_
call fcn.10001e10
add esp, 0x24
mov ecx, dword [esp + 0x6c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10142783
add esp, 0x60
ret