Function at 0x42cce1
Capabilities:
Get disk information
Get disk size
Get geographical location
Get memory capacity
Get system information on windows

Disassembly:
mov eax, 0x49d32d
call fcn.00498a28
sub esp, 0xd8
push ebx
push esi
push edi
xor ebx, ebx
mov edi, 0x4cf090
mov dword [ebp - 0x14], ebx
xor eax, eax
push 0xf
pop esi
stosd dword es:[edi], eax
mov dword [ebp - 0x40], 0x4cf090
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [0x4cf0a0], ebx
mov dword [0x4cf0a4], esi
mov byte [0x4cf090], bl
mov dword [ebp - 4], ebx
mov edi, 0x4cf0a8
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [0x4cf0b8], ebx
mov dword [0x4cf0bc], esi
mov byte [0x4cf0a8], bl
mov edi, 0x4cf108
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [0x4cf118], ebx
mov dword [0x4cf11c], esi
mov byte [0x4cf108], bl
mov edi, 0x4cf120
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [0x4cf130], ebx
mov dword [0x4cf134], esi
mov byte [0x4cf120], bl
mov dword [0x4cf13c], ebx
mov dword [0x4cf140], ebx
mov dword [0x4cf144], ebx
mov eax, 0xffff
mov dword [0x4cf0d8], ebx
push 0x58
mov dword [0x4cf0dc], ebx
mov dword [0x4cf0e0], ebx
mov dword [0x4cf0e4], ebx
mov byte [0x4cf0e8], bl
mov word [0x4cf0ea], ax
mov dword [0x4cf0fc], ebx
mov dword [0x4cf100], ebx
mov dword [0x4cf104], ebx
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
setne byte [0x4cf138]
mov byte [ebp - 4], 5
lea edi, [ebp - 0x3c]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x2c], ebx
inc edi
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x3c], bl
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x58]
call fcn.00416423
mov byte [ebp - 4], 6
cmp dword [ebp - 0x48], ebx
jbe 0x42ce29
cmp dword [ebp - 0x44], 7
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x7c]
cmova edx, dword [ebp - 0x58]
call fcn.004165a4
push eax
lea ecx, [ebp - 0x3c]
call fcn.00414d0b
lea ecx, [ebp - 0x7c]
call fcn.00402fc0
lea ecx, [ebp - 0x58]
call fcn.00402f3d
lea eax, [ebp - 0x3c]
mov ecx, 0x4cf090
push eax
call fcn.00414d0b
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28]
cmp eax, esi
jbe 0x42ce56
inc eax
push eax
push dword [ebp - 0x3c]
call fcn.00402f94
pop ecx
pop ecx
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x42ce95
push 0x4ba070
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x42ce95
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x42ce95
cmp dword [ebp - 0x14], edi
sete byte [0x4cf0e8]
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov ax, word [ebp - 0xe0]
push 0x10
push 0x4cf0ec
push 0x59
push 0x400
mov word [0x4cf0ea], ax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push ebx
push ebx
push ebx
push ebx
push 0x4cf0fc
push ebx
push ebx
push 0x4ba080
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea eax, [ebp - 0xbc]
mov dword [0x4cf0c0], ebx
push eax
mov dword [0x4cf0c4], ebx
mov dword [ebp - 0xbc], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x42cf17
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb0]
mov dword [0x4cf0c0], eax
mov dword [0x4cf0c4], ecx
lea eax, [ebp - 0x64]
mov dword [0x4cf0c8], ebx
push eax
lea eax, [ebp - 0x1c]
mov dword [0x4cf0cc], ebx
push eax
lea eax, [ebp - 0x24]
mov dword [0x4cf0d0], ebx
push eax
push 0x4b1090
mov dword [0x4cf0d4], ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x42cf6e
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov dword [0x4cf0c8], ecx
mov ecx, dword [ebp - 0x24]
mov dword [0x4cf0cc], edx
mov edx, dword [ebp - 0x20]
mov dword [0x4cf0d0], ecx
mov dword [0x4cf0d4], edx
mov ecx, dword [ebp - 0xc]
mov eax, 0x4cf090
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret