Function at 0x41712c
Capabilities:
Check os version
Get common file path
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7e8
push ebx
push esi
lea eax, [ebp - 0xcc]
push edi
push eax
mov dword [ebp - 4], 0x43afa4
mov dword [ebp - 0xcc], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
xor ebx, ebx
cmp dword [ebp - 0xc8], 4
jne 0x4171b3
cmp dword [ebp - 0xc4], ebx
jne 0x41718f
cmp dword [ebp - 0xbc], 1
jne 0x417179
mov dword [ebp - 4], 0x4393a4
cmp dword [ebp - 0xbc], 2
jne 0x41722e
mov dword [ebp - 4], 0x4393a0
jmp 0x4171ff
cmp dword [ebp - 0xc4], 0xa
jne 0x4171a1
mov dword [ebp - 4], 0x43939c
jmp 0x4171f6
cmp dword [ebp - 0xc4], 0x5a
jne 0x4171ef
mov dword [ebp - 4], 0x439398
jmp 0x4171f6
cmp dword [ebp - 0xc8], 5
jne 0x4171ef
cmp dword [ebp - 0xc4], ebx
jne 0x4171cd
mov dword [ebp - 4], 0x439394
jmp 0x4171f6
cmp dword [ebp - 0xc4], 1
jne 0x4171df
mov dword [ebp - 4], 0x439390
jmp 0x4171f6
cmp dword [ebp - 0xc4], 2
mov dword [ebp - 4], 0x432b1c
je 0x4171f6
mov dword [ebp - 4], 0x439388
cmp dword [ebp - 0xbc], 2
jne 0x41722e
cmp byte [ebp - 0xb8], bl
je 0x41722e
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x2e8]
push dword [ebp - 4]
push 0x439cf0
push eax
call fcn.00418f47
lea eax, [ebp - 0x2e8]
add esp, 0x10
mov dword [ebp - 4], eax
mov ax, word [0x42bee0]
push 0x3f
mov word [ebp - 0x25c], ax
pop ecx
xor eax, eax
lea edi, [ebp - 0x25a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x442134]
mov dword [ebp - 0xc], 0x100
cmp eax, ebx
je 0x417267
lea ecx, [ebp - 0xc]
push ecx
lea ecx, [ebp - 0x25c]
push ecx
call eax
push dword [ebp + 0xc]
call fcn.0040cf12
pop ecx
push eax
call dword [fcn.00442288]
mov dword [ebp - 8], eax
push 2
lea eax, [ebp - 8]
push 4
push eax
call dword [0x442200]
cmp eax, ebx
je 0x417290
push dword [eax]
jmp 0x417295
push 0x439cd8
lea eax, [ebp - 0x3e4]
push eax
call fcn.00418f47
pop ecx
lea eax, [ebp - 0x4e8]
pop ecx
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x114]
push 0x46
push eax
push 0x439ccc
push ebx
mov esi, 0x409
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
lea eax, [ebp - 0x15c]
push 0x46
push eax
push 0x42c7a4
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push 0x20
lea eax, [ebp - 0x38]
push ebx
push eax
call fcn.004189f0
add esp, 0xc
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push ebx
push ebx
lea eax, [ebp - 0x18]
push ebx
push eax
lea eax, [ebp - 0x4e8]
push eax
call fcn.0041adb6
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x7e8]
push eax
call fcn.004078c2
push 0x60
mov esi, eax
pop ecx
lea edi, [ebp - 0x7e8]
rep movsd dword es:[edi], dword [esi]
push 0x60
lea esi, [ebp - 0x7e8]
pop ecx
lea edi, [ebp - 0x668]
rep movsd dword es:[edi], dword [esi]
push ebx
call fcn.00416f75
add esp, 0x20
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x25c]
push eax
push dword [ebp + 0xc]
call fcn.0040cf12
pop ecx
push eax
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x5e8]
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push dword [ebp - 4]
push eax
lea eax, [ebp - 0x568]
push eax
mov eax, dword [ebp - 0x2c]
shr eax, 0xa
push ebx
push eax
call fcn.004077b2
pop ecx
pop ecx
push eax
mov eax, dword [ebp - 0x30]
shr eax, 0xa
push ebx
push eax
call fcn.004077b2
pop ecx
pop ecx
push eax
call fcn.00417076
push edx
push eax
push 0x439bf4
push 0x200
push dword [ebp + 8]
call fcn.00418916
mov eax, dword [ebp + 8]
add esp, 0x50
pop edi
pop esi
pop ebx
leave
ret