Function at 0x582590
Capabilities:
Get memory capacity
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a61cd
mov eax, dword fs:[0]
push eax
mov eax, 0x10e0
call fcn.00498090
mov eax, dword [0x61c850]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10b8], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x148], ecx
cmp dword [ebp - 0x148], 0
jne 0x5825de
jmp 0x582d59
mov dx, word [0x5ffcb8]
mov word [ebp - 0x364], dx
push 0x206
push 0
lea eax, [ebp - 0x362]
push eax
call fcn.00496f40
add esp, 0xc
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x10a8]
push eax
push 0x104
lea ecx, [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x148]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x10b8]
call fcn.00581a90
lea ecx, [ebp - 0x10c]
call fcn.00402540
lea ecx, [ebp - 0xdc]
call fcn.00402540
lea ecx, [ebp - 0x3bc]
call fcn.004056c0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004056c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.004056c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x364]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00405df0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x380]
push eax
call fcn.00469210
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
call fcn.00405ea0
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x380]
push eax
call fcn.0046df50
add esp, 0xc
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0x380]
push edx
call fcn.00470e40
add esp, 8
lea eax, [ebp - 0x1088]
push eax
call fcn.0046e520
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x1088]
push eax
call fcn.0046df50
add esp, 0xc
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x1088]
push edx
call fcn.00470e40
add esp, 8
xor eax, eax
jne 0x582729
lea ecx, [ebp - 0x158]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [ebp - 0x10a4]
call fcn.004056c0
mov byte [ebp - 4], 7
movzx edx, word [ebp - 0x14e]
push edx
movzx eax, word [ebp - 0x150]
push eax
movzx ecx, word [ebp - 0x152]
push ecx
movzx edx, word [ebp - 0x156]
push edx
movzx eax, word [ebp - 0x158]
push eax
push str._r_n_r_ncrash_report_generating_V1.0_http:__www.youku.com_time
lea ecx, [ebp - 0x106c]
push ecx
call fcn.0043bfc0
add esp, 0x1c
lea edx, [ebp - 0x106c]
push edx
lea ecx, [ebp - 0x10a4]
call fcn.00405930
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ecx, dword [ebp - 0x394]
shr ecx, 0xa
shr ecx, 0xa
push ecx
mov edx, dword [ebp - 0x398]
shr edx, 0xa
shr edx, 0xa
push edx
push str.memory__d_MB___avaliable__d_MB_r_n
lea eax, [ebp - 0x106c]
push eax
call fcn.0043bfc0
add esp, 0x10
lea ecx, [ebp - 0x106c]
push ecx
lea ecx, [ebp - 0x10a4]
call fcn.00405930
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0xdc]
call fcn.004027b0
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x10bc]
mov dword [ebp - 0x10c0], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.004027b0
mov dword [ebp - 0x10c4], eax
lea ecx, [ebp - 0x380]
call fcn.004059d0
push eax
mov ecx, dword [ebp - 0x10c0]
call fcn.004059d0
push eax
lea ecx, [ebp - 0x1088]
call fcn.004059d0
push eax
mov ecx, dword [ebp - 0x10c4]
call fcn.004059d0
push eax
push str.crash_EXE:___s__s_r_ncrash_DLL:___s__s_r_n
lea edx, [ebp - 0x106c]
push edx
call fcn.0043bfc0
add esp, 0x18
lea ecx, [ebp - 0x64]
call fcn.004058b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x48]
call fcn.004058b0
push 0x5ffd58
lea ecx, [ebp - 0x80]
call fcn.00405770
mov dword [ebp - 0x10c8], eax
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x10cc], eax
mov byte [ebp - 4], 9
push str.______________________________________________________________________
lea ecx, [ebp - 0x9c]
call fcn.00405770
mov dword [ebp - 0x10d0], eax
mov ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d4], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x10d4]
push edx
lea eax, [ebp - 0x106c]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.0040c6c0
add esp, 0xc
mov dword [ebp - 0x10d8], eax
mov edx, dword [ebp - 0x10d8]
mov dword [ebp - 0x10dc], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x10cc]
push eax
mov ecx, dword [ebp - 0x10dc]
push ecx
lea edx, [ebp - 0xd4]
push edx
call fcn.0040c4c0
add esp, 0xc
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp - 0x10e0]
mov dword [ebp - 0x10e4], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x10e4]
push ecx
lea ecx, [ebp - 0x10a4]
call fcn.00405910
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd4]
call fcn.004058b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb8]
call fcn.004058b0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x9c]
call fcn.004058b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x80]
call fcn.004058b0
lea ecx, [ebp - 0x10a4]
call fcn.004613d0
push eax
lea ecx, [ebp - 0x10a4]
call fcn.004059d0
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00402c00
mov dword [ebp - 0x100], 0x400
mov byte [ebp - 0x86c], 0
push 0x3ff
push 0
lea edx, [ebp - 0x86b]
push edx
call fcn.00496f40
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x86c]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea edx, [ebp - 0x86c]
push edx
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
push ecx
call fcn.00581820
add esp, 4
push eax
mov edx, dword [ebp - 0x148]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx + 0xc]
push edx
push str._Address_x___code__8x__s__r_nUserName:_s_r_n
lea eax, [ebp - 0x106c]
push eax
call fcn.0043bfc0
add esp, 0x18
lea ecx, [ebp - 0x106c]
push ecx
call fcn.00496050
add esp, 4
push eax
lea edx, [ebp - 0x106c]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.00402c00
mov dword [ebp - 0x46c], 0
push 0x90
push 0
lea eax, [ebp - 0x468]
push eax
call fcn.00496f40
add esp, 0xc
mov dword [ebp - 0x46c], 0x94
lea ecx, [ebp - 0x46c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea edx, [ebp - 0x458]
push edx
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x464]
push edx
mov eax, dword [ebp - 0x468]
push eax
push str.OS_Version:__d._d._d._d____s___r_n
lea ecx, [ebp - 0x106c]
push ecx
call fcn.0043bfc0
add esp, 0x1c
lea edx, [ebp - 0x106c]
push edx
call fcn.00496050
add esp, 4
push eax
lea eax, [ebp - 0x106c]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00402c00
xor ecx, ecx
jne 0x582ab7
mov dword [ebp - 0x10ac], 0
jmp 0x582ad6
mov edx, dword [ebp - 0x10ac]
add edx, 1
mov dword [ebp - 0x10ac], edx
mov ecx, dword [ebp - 0x10b8]
add ecx, 0x34
call fcn.0043b4d0
cmp dword [ebp - 0x10ac], eax
jae 0x582b3f
mov eax, dword [ebp - 0x10ac]
push eax
mov ecx, dword [ebp - 0x10b8]
add ecx, 0x34
call fcn.0043b4f0
mov ecx, eax
call fcn.004613d0
push eax
mov ecx, dword [ebp - 0x10ac]
push ecx
mov ecx, dword [ebp - 0x10b8]
add ecx, 0x34
call fcn.0043b4f0
mov ecx, eax
call fcn.004059d0
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00402c00
push 2
push 0x5ffdf8
mov ecx, dword [ebp + 0x10]
call fcn.00402c00
jmp 0x582ac7
xor edx, edx
jne 0x582b3f
mov eax, dword [ebp + 0x10]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10b0], esp
push str.generate_feedback_info_for_crash
call fcn.00405770
mov dword [ebp - 0x10e8], eax
mov ecx, dword [ebp - 0x10e8]
mov dword [ebp - 0x10ec], ecx
mov byte [ebp - 4], 0xd
call fcn.00434fd0
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0057c2e0
push 1
push 0x800
push 0
lea ecx, [ebp - 0x3d0]
call fcn.00485e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x3d0]
call fcn.004023d0
mov byte [eax], 0
mov dword [ebp - 0xfc], 0
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x128]
push eax
mov ecx, dword [ebp - 0x10b8]
call fcn.00582260
mov byte [ebp - 4], 0xf
call fcn.00434fd0
cmp dword [eax + 0x30], 0
je 0x582bf3
lea ecx, [ebp - 0xfc]
push ecx
push 0
push 0
push 0
push 0x5ffe20
call fcn.00434fd0
mov edx, dword [eax + 0x30]
call edx
lea ecx, [ebp - 0x3d0]
call fcn.004023d0
mov dword [ebp - 0x10b4], eax
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x464]
push edx
mov eax, dword [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx + 0xc]
sub edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x3bc]
call fcn.004059d0
push eax
lea ecx, [ebp - 0xf8]
call fcn.004059d0
push eax
lea ecx, [ebp - 0x128]
call fcn.004059d0
push eax
mov edx, dword [ebp - 0xfc]
push edx
push str.runstate_dtrigger_scrashexe_scrashdll_scode_Xaddress_Xbase_Xrva_Xosv_d._d._d._d
lea eax, [ebp - 0x10b4]
push eax
call fcn.0040c720
add esp, 0x38
push eax
lea ecx, [ebp - 0x3d0]
call fcn.00402b70
call fcn.00434fd0
cmp dword [eax + 0x30], 0
je 0x582cbc
push 0xffffffffffffffff
push 1
lea ecx, [ebp - 0x3d0]
push ecx
push 0
push 0x5ffe34
call fcn.00434fd0
mov edx, dword [eax + 0x30]
call edx
lea ecx, [ebp - 0x3d0]
call fcn.004023d0
mov byte [eax], 0
lea ecx, [ebp - 0x3d0]
call fcn.004465d0
push eax
mov ecx, dword [ebp + 0x14]
call fcn.004058f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x128]
call fcn.004058b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3d0]
call fcn.00485ea0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x10a4]
call fcn.004058b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1088]
call fcn.004058b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x380]
call fcn.004058b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.004058b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004058b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.004058b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493f9c
mov esp, ebp
pop ebp
ret 0x10