Function at 0x419c90
Capabilities:
Check os version
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c0
mov eax, dword [0x440ed0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x1a0], edi
call fcn.004198b0
push 0x94
lea eax, [ebp - 0x198]
push 0
push eax
call fcn.0041b530
push str._System_Info__r_n
push edi
mov dword [ebp - 0x198], 0x94
call fcn.004186f0
add esp, 0x14
lea ecx, [ebp - 0x198]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x419f03
push 0xff
xor esi, esi
lea edx, [ebp - 0x103]
push esi
push edx
mov dword [ebp - 0x19c], 0x436328
mov byte [ebp - 0x104], 0
call fcn.0041b530
mov eax, dword [ebp - 0x188]
add esp, 0xc
cmp eax, 2
jne 0x419dda
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x190]
cmp edx, 4
jne 0x419d4b
test ecx, ecx
jne 0x419d72
mov dword [ebp - 0x19c], str.Windows_NT_4.0
jmp 0x419d72
cmp edx, 5
jne 0x419d72
mov eax, ecx
sub eax, 0
je 0x419d68
sub eax, 1
jne 0x419d72
mov dword [ebp - 0x19c], str.Windows_XP
jmp 0x419d72
mov dword [ebp - 0x19c], str.Windows_2000
mov eax, dword [ebp - 0x18c]
push eax
push ecx
push edx
lea ecx, [ebp - 0x104]
push str._lu._lu._lu
push ecx
call fcn.0041e496
add esp, 0x14
mov ecx, 0x436328
lea eax, [ebp - 0x184]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x419dc0
test dl, dl
je 0x419dbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x419dc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x419da0
xor eax, eax
jmp 0x419dc5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x419ed6
lea esi, [ebp - 0x184]
mov eax, esi
jmp 0x419edb
cmp eax, 1
jne 0x419ed6
cmp dword [ebp - 0x194], 4
mov ebx, dword [ebp - 0x190]
jne 0x419ea3
test ebx, ebx
je 0x419e60
cmp ebx, 0xa
je 0x419e17
cmp ebx, 0x5a
jne 0x419ea3
mov dword [ebp - 0x19c], str.Windows_Me
jmp 0x419ea3
mov dword [ebp - 0x19c], str.Windows_98
mov ecx, 0x439194
lea eax, [ebp - 0x184]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x419e50
test dl, dl
je 0x419e4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x419e50
add eax, 2
add ecx, 2
test dl, dl
jne 0x419e30
xor eax, eax
jmp 0x419e55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x419ea3
mov esi, str.Second_Edition
jmp 0x419ea3
mov dword [ebp - 0x19c], str.Windows_95
mov ecx, 0x439174
lea eax, [ebp - 0x184]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x419e95
test dl, dl
je 0x419e91
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x419e95
add eax, 2
add ecx, 2
test dl, dl
jne 0x419e75
xor eax, eax
jmp 0x419e9a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x419ea3
mov esi, str.OSR2
movzx eax, word [ebp - 0x18c]
mov ecx, dword [ebp - 0x194]
lea edx, [ebp - 0x184]
push edx
push eax
push ebx
push ecx
lea edx, [ebp - 0x104]
push str._lu._lu._hu__s
push edx
call fcn.0041e496
add esp, 0x18
test esi, esi
je 0x419ed6
mov eax, esi
jmp 0x419edb
mov eax, 0x436328
push eax
mov eax, dword [ebp - 0x19c]
push eax
push str.Operating_System:__s__s_r_n
push edi
call fcn.004186f0
lea ecx, [ebp - 0x104]
push ecx
push str.Version:__s_r_n
push edi
call fcn.004186f0
add esp, 0x1c
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
test esi, esi
je 0x419f5a
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
push esi
call edi
push 0xa
push esi
mov ebx, eax
call edi
push 0xc
push esi
mov dword [ebp - 0x19c], eax
call edi
mov edx, dword [ebp - 0x19c]
push eax
mov eax, dword [ebp - 0x1a0]
push edx
push ebx
push str.Primary_Monitor_Resolution:__dx_d__d_Bit_Color_r_n
push eax
call fcn.004186f0
add esp, 0x14
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [ebp - 0x1a0]
xor eax, eax
lea ecx, [ebp - 0x1c0]
push ecx
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov edx, dword [ebp - 0x1b8]
push edx
push str.Total_Physical_RAM:__lu_Bytes_r_n
push edi
call fcn.004186f0
mov eax, dword [ebp - 0x1b4]
push eax
push str.Free_Physical_RAM:__lu_Bytes_r_n
push edi
call fcn.004186f0
mov ecx, dword [ebp - 0x1b0]
push ecx
push str.Pagefile_Commit_Limit:__lu_Bytes_r_n
push edi
call fcn.004186f0
mov edx, dword [ebp - 0x1ac]
push edx
push str.Pagefile_Commit_Available:__lu_Bytes_r_n
push edi
call fcn.004186f0
push str.Task_List:_r_n
push edi
call fcn.004186f0
add esp, 0x38
push 0x4197a0
mov ecx, edi
call fcn.00419380
push 0x437e84
push edi
call fcn.004186f0
mov ecx, dword [ebp - 4]
add esp, 8
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0041bc6c
mov esp, ebp
pop ebp
ret