Function at 0x41bac0
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5c
mov eax, dword [0x427008]
xor eax, esp
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
mov byte [esp + 0xe], 1
mov esi, dword [edi + 4]
mov ecx, dword [esi + 0x10]
call fcn.0041d3c0
mov esi, dword [esi + 0xc]
and esi, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], 0x40
nop dword [eax + eax]
mov ecx, dword [edi + 4]
mov ebx, dword [ebp + 0xc]
cmp eax, dword [ecx + 0x14]
jb 0x41bb30
mov eax, ebx
mov ecx, edi
cdq
add eax, dword [ebp + 0x10]
adc edx, dword [ebp + 0x14]
push edx
push eax
call fcn.0041b900
mov ecx, dword [edi + 4]
lea edx, [esi + ebx]
cmp edx, dword [ecx + 8]
cmovge edx, dword [ecx + 8]
mov ebx, edx
mov dword [esp + 0x18], edx
sub ebx, esi
push ebx
push dword [esp + 0x18]
call dword [0x427764]
mov edx, dword [edi + 4]
add esp, 8
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xf], al
mov eax, dword [edx + 0x1c]
cmp byte [ecx + eax], 0
je 0x41bc32
mov edx, dword [edx + 0x24]
mov ecx, edx
mov eax, dword [edi + 4]
imul ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
lea eax, [eax + ecx*4]
push eax
mov eax, dword [edi + 4]
push edx
push dword [eax + 0x18]
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
cmp byte [esp + 0xf], 0
mov eax, dword [edi + 4]
mov eax, dword [eax + 0x18]
je 0x41bbab
push ebx
push dword [esp + 0x18]
add eax, esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x41bcfe
push esi
push eax
call dword [0x427764]
add esp, 8
test al, al
jne 0x41bc19
mov ecx, dword [edi + 4]
mov eax, dword [ecx + 8]
sub eax, ebx
sub eax, esi
push eax
mov eax, dword [ecx + 0x18]
add eax, dword [esp + 0x1c]
push eax
call dword [0x427764]
add esp, 8
test al, al
jne 0x41bc19
mov edx, dword [edi + 4]
mov esi, dword [esp + 0x10]
mov eax, dword [edx + 0x24]
mov dword [esp + 0x1c], eax
mov ecx, dword [edx + 0x24]
mov eax, dword [edx + 0x28]
imul ecx, esi
lea eax, [eax + ecx*4]
push eax
lea eax, [esp + 0x20]
push eax
push dword [edx + 0x20]
call dword [sym.imp.KERNEL32.dll_FreeUserPhysicalPages]
mov eax, dword [edi + 4]
mov eax, dword [eax + 0x1c]
mov byte [esi + eax], 0
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x2c]
dec ecx
jmp 0x41bcf8
mov eax, dword [edi + 4]
push ebx
push 0
mov eax, dword [eax + 0x18]
add eax, esi
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x41bcfe
cmp byte [esp + 0xf], 0
je 0x41bcfe
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
cmp dword [esp + 0x44], 0
ja 0x41bc66
jb 0x41bc5b
cmp dword [esp + 0x40], 0x6400000
jae 0x41bc66
xor dl, dl
mov byte [esp + 0xe], dl
jmp 0x41bd02
mov edx, dword [edi + 4]
mov eax, dword [edx + 0x24]
mov dword [esp + 0x1c], eax
mov ecx, dword [edx + 0x24]
imul ecx, dword [esp + 0x10]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*4]
push eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x20]
push eax
push dword [edx + 0x20]
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
test eax, eax
jne 0x41bc9d
xor dl, dl
mov byte [esp + 0xe], dl
jmp 0x41bd02
mov eax, dword [edi + 4]
push dword [esp + 0x18]
mov ecx, dword [eax + 0x24]
cmp dword [esp + 0x20], ecx
je 0x41bcc3
lea ecx, [esp + 0x20]
push ecx
push dword [eax + 0x20]
call dword [sym.imp.KERNEL32.dll_FreeUserPhysicalPages]
xor dl, dl
mov byte [esp + 0xe], dl
jmp 0x41bd02
push ecx
push dword [eax + 0x18]
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
mov eax, dword [edi + 4]
push ebx
push dword [esp + 0x18]
mov eax, dword [eax + 0x18]
add eax, esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 4]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x1c]
mov byte [ecx + eax], 1
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x2c]
inc ecx
mov eax, dword [edi + 4]
mov dword [eax + 0x2c], ecx
mov dl, byte [esp + 0xe]
mov ecx, dword [ebp + 0xc]
xor esi, esi
mov eax, dword [esp + 0x10]
sub ecx, ebx
add dword [esp + 0x14], ebx
inc eax
mov dword [esp + 0x10], eax
mov dword [ebp + 0xc], ecx
test ecx, ecx
jg 0x41bb10
mov ecx, dword [esp + 0x64]
mov al, dl
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041c61b
mov esp, ebp
pop ebp
ret 0x10