Function at 0x140001dff
Capabilities:
Get hostname
Get memory capacity
Get session user name
Get system information on windows
Identify system language via api

Disassembly:
push rbp
push rsi
push rbx
sub rsp, 0x440
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x3e0], rcx
mov dword [rbp + 0x29c], 0x101
lea rdx, [rbp + 0x29c]
lea rax, [rbp + 0x2a0]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_GetUserNameA]
call rax
test eax, eax
je 0x140001e74
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
lea rdx, [rbp + 0x2a0]
mov r8, rdx
lea rdx, str.Username:__s_n
mov rcx, rax
call sym.sprintf
jmp 0x140001e94
mov ecx, 2
mov rax, qword [dbg.__acrt_iob_func]
call rax
mov rcx, rax
lea rax, str.Failed_to_retrieve_username_n
mov rdx, rax
call sym.fprintf
mov dword [rbp + 0x27c], 0x10
lea rdx, [rbp + 0x27c]
lea rax, [rbp + 0x280]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetComputerNameA]
call rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
lea rdx, [rbp + 0x280]
mov r8, rdx
lea rdx, str.Computer_Name:__s_n
mov rcx, rax
call sym.sprintf
mov rax, qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
call rax
mov word [rbp + 0x3ba], ax
movzx ebx, word [rbp + 0x3ba]
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8d, ebx
lea rdx, str.System_Language:__x_n
mov rcx, rax
call sym.sprintf
lea rax, [rbp + 0x1d0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
call rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
lea rdx, [rbp + 0x1d0]
add rdx, 4
mov r8, rdx
lea rdx, str.Time_Zone:__ls_n
mov rcx, rax
call sym.sprintf
lea rax, [rbp + 0x1c0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLocalTime]
call rax
movzx eax, word [rbp + 0x1ca]
movzx esi, ax
movzx eax, word [rbp + 0x1c8]
movzx ebx, ax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r9d, esi
mov r8d, ebx
lea rdx, str.System_Time:__02d:_02d_n
mov rcx, rax
call sym.sprintf
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp + 0x3b4], eax
mov ecx, 1
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp + 0x3b0], eax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov ecx, dword [rbp + 0x3b0]
mov edx, dword [rbp + 0x3b4]
mov r9d, ecx
mov r8d, edx
lea rdx, str.Screen_Resolution:__dx_d_n
mov rcx, rax
call sym.sprintf
mov dword [rbp + 0x10], 0x1a8
mov dword [rbp + 0x3bc], 0
jmp 0x140002086
mov eax, dword [rbp + 0xb4]
and eax, 1
test eax, eax
je 0x14000207f
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
lea rdx, [rbp + 0x10]
add rdx, 0x24
mov r8, rdx
lea rdx, str.Graphics_Card:__s_n
mov rcx, rax
call sym.sprintf
add dword [rbp + 0x3bc], 1
mov eax, dword [rbp + 0x3bc]
lea rdx, [rbp + 0x10]
mov r9d, 0
mov r8, rdx
mov edx, eax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
call rax
test eax, eax
jne 0x14000203f
lea rax, [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call rax
movzx eax, word [rbp - 0x20]
movzx ebx, ax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8d, ebx
lea rdx, str.Processor_Architecture:__d_n
mov rcx, rax
call sym.sprintf
mov ebx, dword [rbp]
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8d, ebx
lea rdx, str.Number_of_Processors:__d_n
mov rcx, rax
call sym.sprintf
mov dword [rbp - 0x60], 0x40
lea rax, [rbp - 0x60]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
call rax
test eax, eax
je 0x1400021e7
mov rax, qword [rbp - 0x58]
shr rax, 0x14
mov rbx, rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8, rbx
lea rdx, str.Total_RAM:__llu_MB_n
mov rcx, rax
call sym.sprintf
mov rdx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
sub rdx, rax
mov rbx, rdx
shr rbx, 0x14
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8, rbx
lea rdx, str.Used_RAM:__llu_MB_n
mov rcx, rax
call sym.sprintf
mov rax, qword [rbp - 0x50]
shr rax, 0x14
mov rbx, rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sym.strlen
mov rdx, qword [rbp + 0x3e0]
add rax, rdx
mov r8, rbx
lea rdx, str.Free_RAM:__llu_MB_n
mov rcx, rax
call sym.sprintf
jmp 0x140002207
mov ecx, 2
mov rax, qword [dbg.__acrt_iob_func]
call rax
mov rcx, rax
lea rax, str.Failed_to_retrieve_memory_information_n
mov rdx, rax
call sym.fprintf
mov eax, 0
add rsp, 0x440
pop rbx
pop rsi
pop rbp
ret