Function at 0x411740
Capabilities:
Get disk information
Get hostname
Get memory capacity
Get session user name
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f052
mov eax, dword fs:[0]
push eax
sub esp, 0x894
mov eax, dword [0x458504]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x87c], edi
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
mov byte [edi], 0
push 0x3ff
lea eax, [ebp - 0x40f]
mov dword [ebp - 4], 0
push 0
push eax
mov dword [ebp - 0x878], 1
mov byte [ebp - 0x410], 0
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [ebp - 0x870]
push 0x28
push eax
push esi
call sub.PSAPI.DLL_GetProcessMemoryInfo
mov eax, dword [ebp - 0x864]
sub esp, 8
mov esi, dword [sym.imp.MSVCR120.dll__snprintf_s]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.WorkingSetSize_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411826
xor ecx, ecx
jmp 0x411839
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411830
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, dword [ebp - 0x850]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.PagefileUsage_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411897
xor ecx, ecx
jmp 0x4118a9
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4118a0
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
push 0x3ff
lea eax, [ebp - 0x80f]
mov byte [ebp - 0x810], 0
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x874], 0x400
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [ebp - 0x874]
cmp eax, 0x400
jae 0x411d87
mov byte [ebp + eax - 0x810], 0
lea eax, [ebp - 0x810]
push eax
push str.UserName_s_r_n
push 0xffffffffffffffff
lea eax, [ebp - 0x410]
push 0x400
push eax
call esi
add esp, 0x14
cmp byte [ebp - 0x410], 0
jne 0x411938
xor ecx, ecx
jmp 0x41194a
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411941
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x874], 0x400
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 0x874]
cmp eax, 0x400
jae 0x411d87
mov byte [ebp + eax - 0x810], 0
lea eax, [ebp - 0x810]
push eax
push str.ComputerName_s_r_n
push 0xffffffffffffffff
lea eax, [ebp - 0x410]
push 0x400
push eax
call esi
add esp, 0x14
cmp byte [ebp - 0x410], 0
jne 0x4119d2
xor ecx, ecx
jmp 0x4119e9
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
jmp 0x4119e0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4119e0
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
lea eax, [ebp - 0x848]
push eax
call fcn.00411510
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x411a0f
mov eax, dword [eax]
push eax
push str.OSVer_s_r_n
push 0xffffffffffffffff
lea eax, [ebp - 0x410]
push 0x400
push eax
call esi
add esp, 0x14
cmp dword [ebp - 0x834], 0x10
jb 0x411a3f
push dword [ebp - 0x848]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp byte [ebp - 0x410], 0
jne 0x411a4c
xor ecx, ecx
jmp 0x411a5e
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411a55
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
xorps xmm0, xmm0
mov dword [ebp - 0x8a0], 0
lea eax, [ebp - 0x8a0]
push eax
movdqu xmmword [ebp - 0x89c], xmm0
movdqu xmmword [ebp - 0x88c], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0x8a0]
push eax
push dword [ebp - 0x888]
lea eax, [ebp - 0x410]
push dword [ebp - 0x88c]
push str.CPU_d_processor_s___type__d_arch__d_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x1c
cmp byte [ebp - 0x410], 0
jne 0x411ad0
xor ecx, ecx
jmp 0x411ae9
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411ae0
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
lea eax, [ebp - 0x830]
mov dword [ebp - 0x830], 0x20
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push dword [ebp - 0x82c]
lea eax, [ebp - 0x410]
push str.MemoryLoad_d_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x14
cmp byte [ebp - 0x410], 0
jne 0x411b3a
xor ecx, ecx
jmp 0x411b4c
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411b43
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, dword [ebp - 0x828]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.TotalPhys_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411baa
xor ecx, ecx
jmp 0x411bbc
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411bb3
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, dword [ebp - 0x824]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.AvailPhys_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411c1a
xor ecx, ecx
jmp 0x411c2c
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411c23
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, dword [ebp - 0x818]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.TotalVirtual_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411c8a
xor ecx, ecx
jmp 0x411c9c
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411c93
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, dword [ebp - 0x814]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444ea0]
lea eax, [ebp - 0x410]
mulsd xmm0, qword [0x444e90]
movsd qword [esp], xmm0
push str.AvailVirtual_.2fM_r_n
push 0xffffffffffffffff
push 0x400
push eax
call esi
add esp, 0x18
cmp byte [ebp - 0x410], 0
jne 0x411cfa
xor ecx, ecx
jmp 0x411d0c
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411d03
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
push eax
push str.DriveType_d_r_n
push 0xffffffffffffffff
lea eax, [ebp - 0x410]
push 0x400
push eax
call esi
add esp, 0x14
cmp byte [ebp - 0x410], 0
jne 0x411d49
xor ecx, ecx
jmp 0x411d5b
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411d52
sub ecx, edx
push ecx
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00402d80
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043d084
mov esp, ebp
pop ebp
ret
call fcn.0043d2de
int3