Function at 0x401087
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6f8
push ebx
push esi
push edi
mov ebx, ecx
push 0xfffffffffffffffa
push dword [ebx + 4]
lea esi, [ebx + 0x10]
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
mov ecx, esi
call fcn.0040a5e3
push 0xa5
mov ecx, esi
push dword [ebx + 4]
call fcn.0040a5f0
push 0xa7
push 0x45b
push dword [ebx + 4]
mov ecx, esi
call fcn.0040a614
push 0x3fc
lea esi, [ebx + 8]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi], eax
lea ecx, [ebp - 0x24]
xor eax, eax
mov edi, 0xc8
push ecx
push eax
mov ecx, esi
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 0x419100
mov dword [ebp - 0x10], eax
call fcn.0040145b
and dword [ebp - 0x20], 0
push 1
mov dword [ebp - 0x1c], edi
pop edi
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push edi
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x18], 0x4190fc
mov dword [ebp - 0x10], edi
call fcn.0040145b
push 0
push 0xffffffffffffffff
push edi
push 0xc3
lea ecx, [ebx + 0x10]
call fcn.0040a539
push eax
mov ecx, esi
call fcn.00401495
push edi
lea ecx, [ebp - 0x6f8]
mov dword [ebp - 4], eax
call fcn.00402d93
test eax, eax
jne 0x401170
lea eax, [ebp - 4]
push 0x416c90
push eax
mov dword [ebp - 4], edi
call fcn.0040d2d0
lea eax, [ebp - 0x148]
lea ecx, [ebp - 0x6f8]
push eax
call fcn.00401578
push eax
mov ecx, ebx
call fcn.0040139e
push edi
lea eax, [ebp - 0x148]
push dword [ebp - 4]
mov ecx, esi
push eax
call fcn.00401527
mov eax, dword [ebp - 4]
push 0
inc eax
push 0xffffffffffffffff
push eax
push 0xc4
lea ecx, [ebx + 0x10]
call fcn.0040a539
push eax
mov ecx, esi
call fcn.00401495
mov dword [ebp - 4], eax
push str.17:20:45
push str.Sep_26_2001
lea eax, [ebp - 0x148]
push str._s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x148]
mov ecx, esi
push edi
push dword [ebp - 4]
push eax
call fcn.00401527
lea ecx, [ebp - 0x1e4]
call fcn.004071b6
mov eax, dword [ebp - 4]
push 0
inc eax
push 0xffffffffffffffff
push eax
push 0xc5
lea ecx, [ebx + 0x10]
call fcn.0040a539
push eax
mov ecx, esi
call fcn.00401495
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 4], eax
call fcn.00407266
dec eax
je 0x40124d
dec eax
je 0x401246
dec eax
je 0x40123f
dec eax
je 0x401238
push str.Windows
jmp 0x401252
push str.WinCE
jmp 0x401252
push str.WinNT
jmp 0x401252
push str.Win9x
jmp 0x401252
push str.Win32s
lea eax, [ebp - 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
lea eax, [ebp - 0x148]
push dword [ebp - 4]
mov ecx, esi
push eax
call fcn.00401527
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x40]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0x20
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov eax, dword [ebp - 4]
push 0
inc eax
push 0xffffffffffffffff
push eax
push str.Free_Physical_RAM
mov ecx, esi
call fcn.00401495
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x38]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
shr eax, 0xa
push eax
lea eax, [ebp - 0x148]
push str._d_kb
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x148]
mov ecx, esi
push 1
push dword [ebp - 4]
push eax
call fcn.00401527
mov eax, dword [ebp - 4]
push 0
inc eax
push 0xffffffffffffffff
push eax
push str.Free_Virtual_RAM
mov ecx, esi
call fcn.00401495
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x28]
shr eax, 0xa
push eax
lea eax, [ebp - 0x148]
push str._d_kb
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x148]
mov ecx, esi
push 1
push dword [ebp - 4]
push eax
call fcn.00401527
mov eax, dword [ebp - 4]
push 0
inc eax
push 0xffffffffffffffff
push eax
push str.Swap_File_Size
mov ecx, esi
call fcn.00401495
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x34]
shr eax, 0xa
push eax
lea eax, [ebp - 0x148]
push str._d_kb
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x148]
mov ecx, esi
push 1
push dword [ebp - 4]
push eax
call fcn.00401527
push 0
push dword [ebx + 4]
call fcn.00401772
mov eax, dword [esi]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
pop ecx
mov ebx, 0x101e
test eax, eax
pop ecx
je 0x401383
push 0xfffe
push 0
push ebx
push eax
call edi
mov esi, dword [esi]
test esi, esi
je 0x401394
push 0xfffe
push 1
push ebx
push esi
call edi
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 8