Function at 0x40378f
Capabilities:
Get memory capacity
Write file on windows

Disassembly:
sub esp, 0x36c
mov eax, dword [0x4151a0]
xor eax, esp
mov dword [esp + 0x368], eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x380]
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [esp + 0x22]
push eax
movzx eax, word [esp + 0x24]
push eax
movzx eax, word [esp + 0x20]
push eax
movzx eax, word [esp + 0x2a]
push eax
movzx eax, word [esp + 0x2a]
push eax
push 0x7d5
call fcn.00403396
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
lea eax, [esp + 0xf4]
push eax
call esi
add esp, 0x1c
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
push 0x105
lea eax, [esp + 0x274]
push eax
push dword [0x415f80]
mov byte [esp + 0x27c], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x270]
push eax
push 0x7d6
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov ebp, 0x94
push ebp
lea eax, [esp + 0x4c]
push 0
push eax
call fcn.00403368
add esp, 0xc
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x4c], ebp
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push dword [esp + 0x50]
push dword [esp + 0x50]
push 0x7d7
call fcn.00403396
push eax
lea eax, [esp + 0xe8]
push eax
call esi
add esp, 0x10
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [esp + 0x10], eax
cmp eax, 0x80000000
jae 0x4038fb
push 0x7d8
jmp 0x40390b
cmp al, 4
jae 0x403906
push 0x7d9
jmp 0x40390b
push 0x7da
call fcn.00403396
push eax
lea eax, [esp + 0xe0]
push eax
call esi
pop ecx
pop ecx
push 0
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov ecx, dword [esp + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
push eax
movzx eax, cl
push eax
push 0x7db
call fcn.00403396
push eax
lea eax, [esp + 0xe8]
push eax
call esi
add esp, 0x10
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x2c], 0x20
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push dword [esp + 0x2c]
push 0x7dc
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov eax, dword [esp + 0x30]
shr eax, 0xa
push eax
push 0x7dd
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov eax, dword [esp + 0x34]
shr eax, 0xa
push eax
push 0x7de
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov eax, dword [esp + 0x40]
shr eax, 0xa
push eax
push 0x7df
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov eax, dword [esp + 0x44]
shr eax, 0xa
push eax
push 0x7e0
call fcn.00403396
push eax
lea eax, [esp + 0xe4]
push eax
call esi
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00406540
pop ecx
push eax
lea eax, [esp + 0xe8]
push eax
push edi
call ebx
mov ecx, dword [esp + 0x378]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00406929
add esp, 0x36c
ret