Function at 0x41eff0
Capabilities:
Get hostname
Get memory capacity
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x2e0]
sub esp, 0x2e0
push 0xffffffffffffffff
push 0x4453c6
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x4629b4]
xor eax, ebp
mov dword [ebp + 0x2dc], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00427740
push 0x200
lea eax, [ebp + 0xdc]
push 0
push eax
call fcn.0042f620
lea eax, [ebp + 0x4c]
push eax
call fcn.0040e1a0
lea eax, [ebp + 0x4c]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp + 0xac]
push eax
call fcn.0040c200
add esp, 0x18
push 0xffffffffffffffff
lea ecx, [ebp + 0xac]
mov byte [ebp - 4], 1
call fcn.00409580
push eax
lea eax, [ebp + 0xdc]
push eax
call fcn.0040d840
add esp, 0xc
lea ecx, [ebp + 0xac]
push 0x4464a0
call fcn.00405130
lea eax, [ebp]
mov dword [ebp], 0
push eax
lea eax, [ebp + 0xdc]
push 0x46109c
push eax
call fcn.00434661
add esp, 0xc
test eax, eax
je 0x41f105
nop dword [eax + eax]
push 0x469a44
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040ca90
add esp, 0xc
push eax
lea ecx, [ebp + 0xac]
mov byte [ebp - 4], 2
call fcn.004051f0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.004050d0
lea eax, [ebp]
push eax
push 0x46109c
push 0
call fcn.00434661
add esp, 0xc
test eax, eax
jne 0x41f0c0
lea ecx, [ebp + 0xac]
call fcn.00406800
test eax, eax
je 0x41f126
dec eax
lea ecx, [ebp + 0xac]
push eax
call fcn.0040af80
xor ecx, ecx
mov word [eax], cx
push 0xffffffffffffffff
lea ecx, [ebp + 0xac]
call fcn.00409580
push eax
push 0x46a5f4
call fcn.0040d900
push 0x46a5f4
call fcn.0040c2b0
mov ecx, dword [0x4610f8]
add esp, 0x10
cmp eax, ecx
cmovg ecx, eax
xor edi, edi
mov dword [0x4610f8], ecx
mov ecx, 0x469ae4
push 0xb
mov dword [ebp + 0xd4], edi
mov dword [ebp + 8], edi
call fcn.0040df90
mov ecx, eax
call fcn.00409570
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push str.Kernel32
call ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4699a4], eax
nop dword [eax]
test eax, eax
je 0x41f29f
lea ecx, [ebp + 8]
push ecx
push edi
call eax
test eax, eax
jne 0x41f1ed
call esi
cmp eax, 0x7a
jne 0x41f29f
test edi, edi
je 0x41f1cb
push edi
call fcn.00431cee
add esp, 4
push dword [ebp + 8]
call fcn.00434355
mov edi, eax
add esp, 4
mov dword [ebp + 0xd4], edi
test edi, edi
je 0x41f2ac
mov eax, dword [0x4699a4]
jmp 0x41f1a0
xor ebx, ebx
xor ecx, ecx
xor edx, edx
mov dword [0x46c188], ebx
cmp dword [ebp + 8], 0x18
mov dword [0x46c18c], ecx
mov dword [0x46c190], edx
jb 0x41f299
mov eax, 0xc
lea esi, [edi + 0xc]
sub eax, edi
mov edi, dword [0x46c198]
mov dword [ebp + 0xd8], eax
mov eax, dword [esi - 8]
sub eax, 0
je 0x41f259
sub eax, 2
jne 0x41f277
mov al, byte [esi - 4]
cmp al, 1
jne 0x41f23d
add ebx, dword [esi]
jmp 0x41f277
cmp al, 2
jne 0x41f24b
add ecx, dword [esi]
mov dword [0x46c18c], ecx
jmp 0x41f277
cmp al, 3
jne 0x41f277
add edx, dword [esi]
mov dword [0x46c190], edx
jmp 0x41f277
push dword [esi - 0xc]
inc edi
call fcn.0040e370
mov ecx, dword [0x46c18c]
add esp, 4
add dword [0x46c194], eax
mov edx, dword [0x46c190]
mov eax, dword [ebp + 0xd8]
add esi, 0x18
add eax, esi
cmp eax, dword [ebp + 8]
jbe 0x41f225
mov dword [0x46c198], edi
mov edi, dword [ebp + 0xd4]
mov dword [0x46c188], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test edi, edi
je 0x41f2ac
push edi
call fcn.00431cee
add esp, 4
call fcn.0041c8f0
push 0x46c770
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0x46afdc
lea ecx, [ebp + 0x64]
call fcn.00405090
push str.Kernel32.dll
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 3
call fcn.00405200
lea ecx, [ebp + 0x64]
call fcn.00409580
push eax
call fcn.0040e3b0
add esp, 4
mov ecx, 0x469a38
push 0xffffffffffffffff
cmp eax, 0x40
jne 0x41f2fb
push 0x25
jmp 0x41f2fd
push 0x26
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push eax
push 0x469cb4
call fcn.0040d820
add esp, 0xc
call fcn.00420bc0
lea ecx, [ebp + 0x94]
call fcn.004050b0
mov eax, dword [0x46c170]
mov byte [ebp - 4], 4
cmp eax, 9
jbe 0x41f35f
cmp dword [0x46c178], 0x55ef
lea ecx, [ebp + 0x94]
jbe 0x41f353
push 0x4546d0
call fcn.00405130
jmp 0x41f3a0
push 0x4546e8
call fcn.00405130
jmp 0x41f3a0
push dword [0x46c174]
push eax
push str._lu._lu
lea eax, [ebp + 0xdc]
push 0xffffffffffffffff
push eax
call fcn.0040d4b0
lea eax, [ebp + 0xdc]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0041e200
add esp, 0x1c
lea ecx, [ebp + 0x94]
push eax
call fcn.004050f0
lea ecx, [ebp - 0x24]
call fcn.004050d0
push 0x4464a0
lea ecx, [ebp + 0x7c]
call fcn.00405090
mov byte [ebp - 4], 5
call fcn.00420960
test eax, eax
je 0x41f3c7
push 0x454e40
lea ecx, [ebp + 0x7c]
call fcn.00405130
lea ecx, [ebp + 0x7c]
call fcn.00409580
lea ecx, [ebp + 0x94]
mov esi, eax
call fcn.00409580
push esi
push 0x46b074
push dword [0x46c17c]
push 0x469dd4
push 0x469cb4
push eax
push str._s__s__s._lu__s_s
push 0xffffffffffffffff
push 0x469cd4
call fcn.00401430
push dword [0x46c17c]
push 0x469dd4
push str._s._lu
push 0xffffffffffffffff
push 0x469dd4
call fcn.00401430
add esp, 0x38
xorps xmm0, xmm0
mov ecx, 0x469ae4
movlpd qword [ebp + 0xc4], xmm0
push 0xc
call fcn.0040df90
mov ecx, eax
call fcn.00409570
push str.Kernel32
mov esi, eax
call ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4699a8], eax
test eax, eax
je 0x41f483
lea ecx, [ebp + 0xc4]
push ecx
call eax
mov edx, dword [ebp + 0xc8]
mov ecx, dword [ebp + 0xc4]
call fcn.0042e2c0
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x456c3c]
jmp 0x41f4c4
push 0x40
lea eax, [ebp + 0xc]
push 0
push eax
call fcn.0042f620
add esp, 0xc
mov dword [ebp + 0xc], 0x40
lea eax, [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x41f4c1
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
call fcn.0042e2c0
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x456c34]
jmp 0x41f4c4
xorps xmm0, xmm0
cvtss2sd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str._.2f
push 0xffffffffffffffff
push 0x46c0f4
call fcn.0040d490
push 0x46c0f4
call fcn.0040bf10
add esp, 0x18
mov dword [ebp + 0xcc], 0x100
lea eax, [ebp + 0xcc]
push eax
lea eax, [ebp + 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea eax, [ebp + 0xdc]
push eax
push 0x469fd4
call fcn.0040d900
add esp, 0xc
mov dword [ebp + 4], 0
lea eax, [ebp + 4]
mov ecx, 0x469a38
push eax
push 0x20019
push 0
push 0x5c
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41f5af
xorps xmm0, xmm0
mov dword [ebp + 0xd8], 8
push 0x27
mov ecx, 0x469a38
movlpd qword [ebp + 0xd0], xmm0
call fcn.0040df90
mov ecx, eax
call fcn.00409580
lea ecx, [ebp + 0xd8]
push ecx
lea ecx, [ebp + 0xd0]
push ecx
push 0
push 0
push eax
push dword [ebp + 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp + 0xd0]
push dword [ebp + 4]
mov dword [0x469af0], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x31
mov ecx, 0x46b8a4
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push dword [0x46c194]
push eax
push dword [0x46c198]
push 0x454e7c
push str._s_lu__s_lu
push 0xffffffffffffffff
push 0x46a3f4
call fcn.00401430
mov eax, dword [0x46c198]
add esp, 0x1c
mov dword [0x46c134], eax
sub esp, 8
mov eax, dword [0x46c188]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cmp eax, 0x100000
jb 0x41f630
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c3c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.1fMB
jmp 0x41f655
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c44]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.0fKB
push 0xffffffffffffffff
push 0x46b07c
call fcn.0040d490
mov eax, dword [0x46c18c]
add esp, 0x14
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cmp eax, 0x100000
jb 0x41f6a2
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c3c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.1fMB
jmp 0x41f6c7
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c44]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.0fKB
push 0xffffffffffffffff
push 0x46b09c
call fcn.0040d490
mov eax, dword [0x46c190]
add esp, 0x14
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cmp eax, 0x100000
jb 0x41f714
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c3c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.1fMB
jmp 0x41f739
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4472b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x456c44]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str._.0fKB
push 0xffffffffffffffff
push 0x46b0bc
call fcn.0040d490
add esp, 0x14
mov ecx, 0x469a38
push 0x29
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push 0x28
mov ecx, 0x469a38
mov edi, eax
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push 0x2d
mov ecx, 0x46b8a4
mov esi, eax
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push 0x46b0bc
push edi
push 0x46b09c
push esi
push 0x46b07c
push eax
push str._s_s_s_s_s_s
push 0xffffffffffffffff
push 0x46a4f4
call fcn.00401430
add esp, 0x24
mov ecx, 0x46b7ac
push 0
call fcn.0040af80
cmp word [eax], 0
je 0x41f886
push 0x2e
mov ecx, 0x46b8a4
call fcn.0040df90
mov ecx, eax
call fcn.00409580
mov esi, eax
lea eax, [esi + 2]
nop dword [eax]
mov cx, word [esi]
add esi, 2
test cx, cx
jne 0x41f7e0
push 0
sub esi, eax
mov ecx, 0x46b8a4
push 0x2e
sar esi, 1
call fcn.0040df90
mov ecx, eax
call fcn.00409580
push eax
mov ecx, 0x46b7ac
call fcn.0040bce0
cmp eax, 0xffffffff
je 0x41f826
push 0x46b07c
add eax, esi
mov ecx, 0x46b7ac
push eax
call fcn.004096a0
push 0
push 0x2f
mov ecx, 0x46b8a4
call fcn.0040df90
push eax
mov ecx, 0x46b7ac
call fcn.0040bca0
cmp eax, 0xffffffff
je 0x41f856
push 0x46b09c
add eax, esi
mov ecx, 0x46b7ac
push eax
call fcn.004096a0
push 0
push 0x30
mov ecx, 0x46b8a4
call fcn.0040df90
push eax
mov ecx, 0x46b7ac
call fcn.0040bca0
cmp eax, 0xffffffff
je 0x41f886
push 0x46b0bc
add eax, esi
mov ecx, 0x46b7ac
push eax
call fcn.004096a0
lea ecx, [ebp + 0x7c]
call fcn.004050d0
lea ecx, [ebp + 0x94]
call fcn.004050d0
lea ecx, [ebp + 0x64]
call fcn.004050d0
lea ecx, [ebp + 0xac]
call fcn.004050d0
lea ecx, [ebp + 0x4c]
call fcn.00408900
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2dc]
xor ecx, ebp
call fcn.0042d960
lea esp, [ebp + 0x2e0]
pop ebp
ret