Function at 0x4091c0
Capabilities:
Get memory capacity
Get system information on windows

Disassembly:
mov eax, 0x101c
call fcn.004309c0
push ebx
push ebp
push esi
push edi
push 0x40
pop ebp
push ebp
xor esi, esi
lea eax, [esp + 0x5c]
push esi
push eax
call fcn.004183a0
add esp, 0xc
lea ecx, [esp + 0xc08]
call fcn.00401cb7
lea ecx, [esp + 0x7e8]
call fcn.00401cb7
lea ecx, [esp + 0xe18]
call fcn.00401cb7
lea ecx, [esp + 0x5d8]
call fcn.00401cb7
lea ecx, [esp + 0x9f8]
call fcn.00401cb7
lea ecx, [esp + 0xc0]
call fcn.0043a71b
xor eax, eax
lea edi, [esp + 0x48]
stosd dword es:[edi], eax
push 0xa
pop ecx
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x134]
rep stosd dword es:[edi], eax
call fcn.004233e0
pop ecx
mov ecx, dword [0x4a22f0]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
cmp edx, dword [0x4a22f4]
jl 0x40926d
jg 0x409265
cmp eax, ecx
jbe 0x40926d
mov ebx, eax
sub ebx, ecx
mov dword [esp + 0x18], ebx
lea ecx, [esp + 0x48]
call fcn.00408955
lea eax, [esp + 0x58]
mov dword [esp + 0x58], ebp
push eax
call dword [sym.imp.KERNEL32.DLL_GlobalMemoryStatusEx]
test eax, eax
jne 0x409298
push ebp
lea eax, [esp + 0x5c]
push esi
push eax
call fcn.004183a0
add esp, 0xc
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
xor edx, edx
lea ecx, [esp + 0x7e8]
call fcn.00408b89
lea ecx, [esp + 0xe18]
call fcn.00408d7e
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcessHandleCount]
neg eax
mov ebx, 0x80
push ebx
sbb eax, eax
and dword [esp + 0x18], eax
lea eax, [esp + 0x15c]
push esi
push eax
call fcn.004183a0
mov edi, 0x100
lea eax, [esp + 0x164]
push edi
push ebx
push eax
mov ebp, reloc.OLEAUT32.dll_SysReAllocString
mov edx, str.SOFTWAREMetaQuotes_Software
push 0x45cf30
mov ecx, ebp
call fcn.00408e7e
add esp, 0x1c
test al, al
je 0x409321
cmp word [esp + 0x158], si
jne 0x409350
push edi
push ebx
lea eax, [esp + 0x160]
mov edx, str.SOFTWAREMetaQuotes_Software
push eax
push 0x45cf30
mov ecx, SysReAllocString
call fcn.00408e7e
add esp, 0x10
test al, al
jne 0x409350
xor eax, eax
mov word [esp + 0x158], ax
mov ebx, 0x200
lea eax, [esp + 0x1d8]
push ebx
push esi
push eax
call fcn.004183a0
push edi
push ebx
lea eax, [esp + 0x1ec]
mov edx, str.HARDWAREDESCRIPTIONSystem
push eax
push str.SystemBiosVersion
mov ecx, ebp
call fcn.00408e7e
add esp, 0x1c
test al, al
jne 0x409392
xor eax, eax
mov word [esp + 0x1d8], ax
jmp 0x4093af
lea eax, [esp + 0x1d8]
push 0x45d9c0
push eax
call fcn.0041779d
pop ecx
pop ecx
test eax, eax
je 0x4093af
xor ecx, ecx
mov word [eax], cx
push ebx
lea eax, [esp + 0x3dc]
push esi
push eax
call fcn.004183a0
push edi
push ebx
lea eax, [esp + 0x3ec]
mov edx, str.HARDWAREDESCRIPTIONSystemBIOS
push eax
push str.SystemProductName
mov ecx, ebp
call fcn.00408e7e
add esp, 0x1c
test al, al
jne 0x4093ec
xor eax, eax
mov word [esp + 0x3d8], ax
jmp 0x40944c
lea eax, [esp + 0x3d8]
push 0x45d9c0
push eax
call fcn.0041779d
pop ecx
pop ecx
test eax, eax
je 0x409409
xor ecx, ecx
mov word [eax], cx
cmp word [esp + 0x3d8], si
je 0x40944c
cmp word [esp + 0x1d8], si
je 0x409433
push 0x45d03c
lea eax, [esp + 0x1dc]
push edi
push eax
call fcn.0041cb4f
add esp, 0xc
lea eax, [esp + 0x3d8]
push eax
lea eax, [esp + 0x1dc]
push edi
push eax
call fcn.0041cb4f
add esp, 0xc
mov ecx, dword [0x4ab39c]
mov ebp, 0x45d07c
mov edi, str.write
mov edx, str.read
cmp ecx, 0xc0000005
jne 0x409476
cmp dword [0x4ab3b0], esi
mov eax, edi
cmove eax, edx
jmp 0x409478
mov eax, ebp
push eax
movzx eax, word [0x4ab3a8]
push eax
push ecx
lea eax, [esp + 0x5e4]
push str._.8X_at__.8X__s
push eax
call fcn.0040c813
mov eax, dword [0x4a19e4]
lea ecx, [esp + 0xd4]
add esp, 0x14
add eax, eax
push eax
push dword [0x4a19e0]
call fcn.0043a631
push 4
push 0x4a2294
lea ecx, [esp + 0xc8]
call fcn.0043a631
mov eax, dword [esp + 0x7f0]
lea ecx, [esp + 0xc0]
add eax, eax
push eax
push dword [esp + 0x7f0]
call fcn.0043a631
mov eax, dword [esp + 0x5e0]
lea ecx, [esp + 0xc0]
add eax, eax
push eax
push dword [esp + 0x5e0]
call fcn.0043a631
lea ecx, [esp + 0xc0]
call fcn.0043a5be
push 0x27
push 0x4a223c
lea ecx, [esp + 0xc8]
call fcn.0043a55c
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0xc4]
call fcn.0043a7b9
push 0x28
lea eax, [esp + 0x134]
push eax
push 0x10
pop edx
lea ecx, [esp + 0x50]
call fcn.0043a768
pop ecx
pop ecx
mov ebx, esi
movzx eax, byte [esp + ebx + 0x48]
push eax
lea eax, [esp + 0x9fc]
push 0x45ad7c
push eax
call fcn.0040c813
add esp, 0xc
lea eax, [esp + 0x9f8]
lea ecx, [esp + 0xc08]
push eax
call fcn.0040c9a2
inc ebx
cmp ebx, 0x10
jb 0x40954b
mov eax, dword [0x4ab39c]
cmp eax, 0xc0000005
jne 0x4095a3
cmp dword [0x4ab3b0], 0
mov ecx, str.read
mov esi, dword [0x4ab3b4]
cmove edi, ecx
jmp 0x4095a5
mov edi, ebp
push esi
push edi
push dword [0x4ab3a8]
push eax
lea eax, [esp + 0x5e8]
push str._.8X_at__.8X__s_to__.8X
push eax
call fcn.0040c813
mov eax, dword [0x4a1e10]
lea edi, [esp + 0xb4]
mov esi, dword [esp + 0x5f4]
add esp, 0x18
mov ebx, dword [0x4a2028]
mov ebp, dword [esp + 0xc0c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xe1c]
push 9
mov dword [esp + 0x24], eax
xor eax, eax
pop ecx
rep stosd dword es:[edi], eax
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
mov eax, dword [esp + 0x7ec]
xor edx, edx
mov dword [esp + 0x24], eax
mov eax, dword [0x4a22a0]
mov dword [esp + 0x28], eax
mov eax, dword [0x4a19e0]
push 0x3c
pop ecx
mov dword [esp + 0x2c], eax
mov eax, dword [0x4a17c8]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
div ecx
mov ecx, dword [esp + 0x84]
push esi
mov esi, dword [esp + 0x84]
mov edi, edx
push ebx
push ebp
push dword [esp + 0x20]
shrd esi, ecx, 0x14
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x9c]
shr ecx, 0x14
push ecx
mov ecx, dword [esp + 0x9c]
shrd ecx, eax, 0x14
push esi
shr eax, 0x14
push eax
mov eax, dword [esp + 0x80]
push ecx
mov ecx, dword [esp + 0x80]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
mov eax, dword [esp + 0x90]
push ecx
mov ecx, dword [esp + 0x90]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
push dword [esp + 0x4c]
lea eax, [esp + 0x18c]
push dword [esp + 0x54]
push dword [esp + 0xe8]
push eax
call fcn.00408f48
push 0x64
cdq
pop esi
idiv esi
push edx
call fcn.00408f48
cdq
idiv esi
push eax
lea eax, [esp + 0x220]
xor edx, edx
push eax
push dword [esp + 0x70]
mov eax, dword [esp + 0x80]
push dword [0x4a2298]
push dword [esp + 0x7c]
push dword [0x4a2294]
push dword [0x4a2290]
push dword [esp + 0x8c]
push edi
push 0x3c
pop ecx
div ecx
mov eax, dword [esp + 0x80]
mov ecx, 0xe10
push edx
xor edx, edx
div ecx
push eax
movzx eax, word [esp + 0xb2]
push eax
movzx eax, word [esp + 0xb4]
push eax
movzx eax, word [esp + 0xb6]
push eax
movzx eax, word [esp + 0xb6]
push eax
movzx eax, word [esp + 0xb8]
push eax
push 0x4a223c
push dword [esp + 0xbc]
push str.Filename____:__s._s_r_nTime________:__04d._02d._02d__02d:_02d___u:_02u:_02u__r_nProgram_____:__s_r_nVersion_____:__d._d___s__r_nRevision____:__d_r_nOS__________:__s_r_nBIOS________:__s_r_nExplorer____:__d._d_r_nID__________:__s_r_nProcessors__:__u_x__s_r_nComputer____:__s_r_nMemory______:__I64u_free_of__I64u_Mb_r_nVirtual_____:__I64u_free_of__I64u_Mb_r_nHandles_____:__lu_r_nCrashMD5____:__s_r_nCustomInfo__:__s_r_nException___:__s_r_n_r_n
push 0xffffffffffffffff
push 0x40000
push dword [0x4a22f8]
call fcn.00401acf
add esp, 0x9c
lea ecx, [esp + 0xc0]
call fcn.0043a6ef
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x101c
ret