Function at 0x418cfe
Capabilities:
Check if file exists
Get memory capacity
Get system information on windows

Disassembly:
push 0x764
mov eax, 0x43e53d
call fcn.00429c87
mov esi, ecx
mov dword [ebp - 0x72c], esi
call fcn.00405833
push eax
push 0x44278c
push esi
call fcn.00418b00
call fcn.0041db9a
push eax
push 0x4452f8
push esi
call fcn.00418b00
mov eax, dword [0x451a2c]
mov edi, 0x451a2c
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x720], eax
and dword [ebp - 4], 0
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x71c], eax
lea ebx, [ebp - 0x71c]
lea esi, [ebp - 0x720]
mov byte [ebp - 4], 1
call fcn.00419483
mov esi, dword [ebp - 0x720]
mov ebx, dword [ebp - 0x72c]
push esi
push str.partner
push ebx
call fcn.00418b00
push dword [ebp - 0x71c]
push str.ipartner
push ebx
call fcn.00418b00
mov eax, dword [ebp - 0x71c]
add eax, 0xfffffff0
call fcn.004054cf
or dword [ebp - 4], 0xffffffff
lea eax, [esi - 0x10]
call fcn.004054cf
call fcn.0041934a
push eax
push str.instdays
push ebx
call fcn.00418c54
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x720], eax
mov dword [ebp - 4], 2
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x724], eax
lea eax, [ebp - 0x720]
push eax
lea esi, [ebp - 0x724]
mov byte [ebp - 4], 3
call fcn.0040abec
pop ecx
push dword [ebp - 0x720]
push 0x444ecc
push ebx
call fcn.00418b00
push dword [0x4551f8]
lea eax, [ebp - 0x720]
push dword [0x4551f4]
push dword [0x4551f0]
push str._d._d_Build_d_
call fcn.00405984
add esp, 0x10
push dword [ebp - 0x720]
push str.sysver
push ebx
call fcn.00418b00
mov ax, word [0x455300]
test ax, ax
je 0x418e74
movzx eax, ax
push eax
push str.syssp
push ebx
call fcn.00418c54
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x71c], eax
lea eax, [ebp - 0x71c]
push eax
mov ecx, str.360se6.exe
mov byte [ebp - 4], 4
call fcn.0040aea5
pop ecx
test eax, eax
jne 0x418ecd
lea eax, [ebp - 0x71c]
push eax
mov ecx, str.360se.exe
call fcn.0040aea5
pop ecx
test eax, eax
jne 0x418ecd
lea eax, [ebp - 0x71c]
push eax
mov ecx, str.360chrome.exe
call fcn.0040aea5
pop ecx
test eax, eax
je 0x418ef4
push dword [ebp - 0x71c]
lea eax, [ebp - 0x720]
call fcn.0040a609
pop ecx
test eax, eax
je 0x418ef4
push dword [ebp - 0x720]
push str.sever
push ebx
call fcn.00418b00
lea eax, [ebp - 0x71c]
push eax
mov ecx, str.IEXPLORE.EXE
call fcn.0040aea5
mov esi, dword [ebp - 0x71c]
pop ecx
test eax, eax
je 0x418f32
push esi
lea eax, [ebp - 0x720]
call fcn.0040a609
pop ecx
test eax, eax
je 0x418f32
push dword [ebp - 0x720]
push str.iever
push ebx
call fcn.00418b00
lea eax, [esi - 0x10]
call fcn.004054cf
mov eax, dword [ebp - 0x724]
add eax, 0xfffffff0
call fcn.004054cf
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x720]
add eax, 0xfffffff0
call fcn.004054cf
push 0x24
lea eax, [ebp - 0x754]
push 0
push eax
call fcn.004253c0
add esp, 0xc
lea eax, [ebp - 0x754]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [ebp - 0x754]
push eax
push str.platform
push ebx
call fcn.00418c54
push dword [ebp - 0x740]
push str.processors
push ebx
call fcn.00418c54
call fcn.00419533
push eax
push str.computertype
push ebx
call fcn.00418c54
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x724], eax
lea esi, [ebp - 0x724]
mov dword [ebp - 4], 5
call fcn.004197b7
mov esi, dword [ebp - 0x724]
test eax, eax
je 0x418fe5
push esi
push ebx
call fcn.00418b5c
or dword [ebp - 4], 0xffffffff
lea eax, [esi - 0x10]
call fcn.004054cf
push 0x208
lea eax, [ebp - 0x718]
push 0
push eax
call fcn.004253c0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x718]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp word [ebp - 0x716], 0x3a
jne 0x4190ba
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x718]
call fcn.00419876
test eax, eax
je 0x4190ba
lea eax, [ebp - 0x71c]
push eax
push dword [ebp - 0x724]
call fcn.00419939
test eax, eax
je 0x419064
push dword [ebp - 0x71c]
push str.hddt
push ebx
call fcn.00418c54
push dword [ebp - 0x724]
lea ebx, [ebp - 0x71c]
call fcn.00419a9b
test eax, eax
je 0x41908f
push dword [ebp - 0x71c]
push str.hddv
push dword [ebp - 0x72c]
call fcn.00418c54
lea esi, [ebp - 0x71c]
call fcn.00419ba3
test eax, eax
je 0x4190b4
push dword [ebp - 0x71c]
push str.sysdisk
push dword [ebp - 0x72c]
call fcn.00418c54
mov ebx, dword [ebp - 0x72c]
lea eax, [ebp - 0x770]
push eax
mov dword [ebp - 0x770], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x419100
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x764]
shrd eax, ecx, 0x14
push eax
push 0x445420
shr ecx, 0x14
push ebx
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
call fcn.00418c54
call fcn.00419d9f
xor esi, esi
inc esi
test eax, eax
je 0x419118
push esi
push 0x445428
push ebx
call fcn.00418c54
mov eax, dword [0x4544e8]
test eax, eax
je 0x41912c
xor ecx, ecx
cmp eax, esi
sete cl
mov eax, ecx
jmp 0x419142
or dword [0x4544e8], 0xffffffff
call fcn.0041c764
test eax, eax
je 0x419152
mov dword [0x4544e8], esi
test eax, eax
je 0x419152
push esi
push 0x445430
push ebx
call fcn.00418c54
call fcn.00419c18
push eax
push str.ovinst
push ebx
call fcn.00418c54
mov eax, dword [0x451a2c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x724], eax
lea eax, [ebp - 0x724]
push eax
mov dword [ebp - 4], 6
call fcn.00419d0d
mov edi, dword [ebp - 0x724]
test eax, eax
je 0x41919f
push edi
push str.fixid
push ebx
call fcn.00418b00
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.004054cf
lea eax, [ebp - 0x510]
push eax
mov eax, str.360EntClient.exe
call fcn.0040a54b
pop ecx
test eax, eax
je 0x4191fd
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x510]
push eax
call edi
test eax, eax
je 0x4191fd
push 2
lea eax, [ebp - 0x510]
pop esi
push eax
mov eax, str.deepscanqhentinfo.dll
call fcn.0040a54b
pop ecx
test eax, eax
je 0x4191fd
lea eax, [ebp - 0x510]
push eax
call edi
test eax, eax
je 0x4191fd
push 3
pop esi
push esi
push 0x4454a8
push ebx
call fcn.00418c54
and dword [ebp - 0x728], 0
and dword [ebp - 0x724], 0
push 0xc
pop ecx
mov dword [ebp - 4], 7
mov esi, str.Software360safeLiveup
lea edi, [ebp - 0x308]
rep movsd dword es:[edi], dword [esi]
push 0x1d8
xor esi, esi
lea eax, [ebp - 0x2d8]
push esi
push eax
call fcn.004253c0
add esp, 0xc
xor eax, eax
push 0x8e
mov word [ebp - 0x100], ax
lea eax, [ebp - 0xfe]
push esi
push eax
call fcn.004253c0
add esp, 0xc
xor eax, eax
push 0x5e
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x6e]
push esi
push eax
call fcn.004253c0
add esp, 0xc
push 1
lea eax, [ebp - 0x308]
push eax
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
push ebx
lea eax, [ebp - 0x728]
mov dword [ebp - 0x71c], 0x48
call fcn.004045a3
test eax, eax
jne 0x4192db
push str.mid_old
lea eax, [ebp - 0x728]
push eax
lea esi, [ebp - 0x71c]
lea edi, [ebp - 0x100]
call fcn.004091a4
test eax, eax
jne 0x4192db
mov word [ebp - 0xc0], ax
mov eax, edi
push eax
push str.mid_old
push dword [ebp - 0x72c]
call fcn.00418b00
push 1
lea eax, [ebp - 0x308]
push eax
push ebx
lea eax, [ebp - 0x728]
mov dword [ebp - 0x71c], 0x30
call fcn.004045a3
test eax, eax
jne 0x41932c
mov ebx, str.m2_old
push ebx
lea eax, [ebp - 0x728]
push eax
lea esi, [ebp - 0x71c]
lea edi, [ebp - 0x70]
call fcn.004091a4
test eax, eax
jne 0x41932c
mov eax, edi
push eax
push ebx
push dword [ebp - 0x72c]
call fcn.00418b00
cmp dword [ebp - 0x728], 0
je 0x419341
push dword [ebp - 0x728]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
call fcn.00429d0a
ret