Function at 0x10002976
Capabilities:
Get hostname
Get memory capacity
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
mov eax, dword [0x1001d008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
push ecx
mov dword [ebp - 0x70], esi
lea eax, [esi + 0x48]
mov dword [ebp - 0x74], ebx
push eax
call fcn.10002c7d
lea eax, [ebx + 0x4dc]
push eax
lea eax, [esi + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x98]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.10002b9b
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x84]
push 0x3c
mov dword [esi + 0x20], eax
lea eax, [ebp - 0x64]
push 0
push eax
call fcn.10005730
add esp, 0xc
mov dword [ebp - 0x68], 0x40
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x5c]
mov dword [esi + 0x14], eax
mov esi, 0x104
push 2
pop edi
mov eax, esi
mov dword [ebp - 0x6c], esi
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000459c
pop ecx
lea ecx, [ebp - 0x6c]
mov ebx, eax
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor ecx, ecx
mov dword [ebp - 0x6c], esi
mov eax, esi
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000459c
pop ecx
mov edi, eax
lea eax, [ebp - 0x6c]
push eax
push edi
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
push 0x420
call fcn.1000459c
pop ecx
mov esi, eax
push 0x25
pop eax
push 0x77
pop edx
push 0x73
pop ecx
push 0x5c
mov word [ebp - 0x14], ax
pop eax
push 0x25
mov word [ebp - 0xe], ax
pop eax
push 0x57
mov word [ebp - 0xc], ax
xor eax, eax
mov word [ebp - 6], ax
pop eax
push 0x4f
mov word [ebp - 0x12], dx
mov word [ebp - 0xa], dx
pop edx
push 0x52
mov word [ebp - 0x10], cx
mov word [ebp - 8], cx
pop ecx
push 0x4b
mov word [ebp - 0x28], ax
pop eax
push 0x47
mov word [ebp - 0x22], ax
pop eax
push 0x55
mov word [ebp - 0x20], ax
pop eax
push 0x50
mov word [ebp - 0x1a], ax
pop eax
mov word [ebp - 0x18], ax
xor eax, eax
push ebx
push edi
mov word [ebp - 0x26], dx
mov word [ebp - 0x24], cx
mov word [ebp - 0x1e], cx
mov word [ebp - 0x1c], dx
mov word [ebp - 0x16], ax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x14]
cmovg ecx, edi
push ecx
push eax
push 0x210
push esi
call fcn.10001026
mov eax, dword [ebp - 0x70]
add esp, 0x14
add eax, 0x168
push esi
push 0x40
push eax
call fcn.10008f28
add esp, 0xc
push ebx
call fcn.100045a5
pop ecx
push edi
call fcn.100045a5
pop ecx
push esi
call fcn.100045a5
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x70]
add eax, 0x40c
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
pop ecx
push eax
lea eax, [edi + 0xe8]
push eax
call ebx
mov eax, dword [ebp - 0x74]
push 0x10
lea esi, [eax + 0x2518]
add edi, 0x68
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x70]
add eax, 0x49c
push eax
lea eax, [esi + 0x1e8]
push eax
call ebx
mov eax, dword [ebp - 0x74]
add eax, 0x48c
push eax
lea eax, [esi + 0x228]
push eax
call ebx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [esi + 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov ecx, dword [ebp - 4]
pop edi
mov dword [esi + 0x1c], eax
xor ecx, ebp
pop esi
pop ebx
call fcn.1000423e
mov esp, ebp
pop ebp
ret 8