Function at 0x4bad6f
Capabilities:
Get disk size
Get memory capacity
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c4
mov eax, dword [0x5c4e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
push 7
pop ecx
xor eax, eax
push 8
lea edi, [ebp - 0x394]
mov dword [ebp - 0x398], ebx
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x360]
push 0xff
mov dword [ebp - 0x364], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x24f]
push ebx
push eax
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x330], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x334], ebx
mov byte [ebp - 0x250], bl
call fcn.005117f0
add esp, 0xc
push 0x3f
lea eax, [ebp - 0x47]
push ebx
push eax
mov byte [ebp - 0x48], bl
call fcn.005117f0
add esp, 0xc
push 0x103
lea eax, [ebp - 0x14f]
push ebx
push eax
mov byte [ebp - 0x150], bl
call fcn.005117f0
add esp, 0xc
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x3bc]
push 0xa8
mov dword [ebp - 0x3c0], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2fc]
push ebx
push eax
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
mov dword [ebp - 0x300], ebx
call fcn.005117f0
xor eax, eax
mov word [ebp - 0x31c], bx
lea edi, [ebp - 0x31a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push 0x24
stosw word es:[edi], ax
lea eax, [ebp - 0x364]
push ebx
push eax
call fcn.005117f0
add esp, 0xc
push 0x20
lea eax, [ebp - 0x398]
push ebx
push eax
call fcn.005117f0
add esp, 0xc
call fcn.00416356
push eax
lea eax, [ebp - 0x250]
push 0x100
push eax
call fcn.004c53b7
add esp, 0xc
lea eax, [ebp - 0x364]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x350]
cmp eax, ebx
jne 0x4baed3
push str.NO_CORE_
jmp 0x4baef5
cmp eax, 1
jne 0x4baedf
push str.Single_Core
jmp 0x4baef5
cmp eax, 2
jne 0x4baeeb
push str.Dual_Core
jmp 0x4baef5
cmp eax, 4
jne 0x4baf05
push str.Quad_Core
lea eax, [ebp - 0x48]
push 0x40
push eax
call fcn.004c53b7
add esp, 0xc
jmp 0x4baf19
push eax
push str._u_Core
lea eax, [ebp - 0x48]
push 0x40
push eax
call fcn.004c53b7
add esp, 0x10
movzx eax, word [ebp - 0x364]
cmp eax, ebx
lea edi, [ebp - 0x48]
je 0x4baf84
cmp eax, 6
je 0x4baf6d
cmp eax, 9
je 0x4baf56
cmp eax, 0xffff
movzx eax, byte [ebp - 0x342]
push eax
movzx eax, byte [ebp - 0x341]
push eax
je 0x4baf4f
push str.INVALID_CPU__d__d
jmp 0x4bafbd
push str.UNKNOWN_CPU__d__d
jmp 0x4bafbd
movzx eax, byte [ebp - 0x342]
push eax
movzx eax, byte [ebp - 0x341]
push eax
push str.AMD64__d__d
jmp 0x4bafbd
movzx eax, byte [ebp - 0x342]
push eax
movzx eax, byte [ebp - 0x341]
push eax
push str.IA64_CPU__d__d
jmp 0x4bafbd
mov ax, word [ebp - 0x342]
shr ax, 8
cmp al, 3
jne 0x4bafac
movzx eax, byte [ebp - 0x342]
push eax
push str.Pentium__d
push 0x40
pop eax
call fcn.004c5375
pop ecx
pop ecx
jmp 0x4bafc8
movzx ecx, byte [ebp - 0x342]
movzx eax, al
push ecx
push eax
push str.Intel_d__d
push 0x40
pop eax
call fcn.004c5375
add esp, 0xc
lea eax, [ebp - 0x398]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push ebx
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x340]
push eax
push ebx
push ebx
call fcn.00489f49
mov esi, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
pop ecx
pop ecx
push eax
call esi
test eax, eax
jne 0x4bb00b
push str._GetLastError_
push str.:3:LogResources___FAILED:_GetDiskFreeSpaceEx___FAILED:__s
call fcn.00426c01
pop ecx
pop ecx
push ebx
push ebx
call fcn.00489f49
mov ecx, eax
call fcn.0042979e
push edx
push eax
call fcn.004607e3
push ebx
lea edi, [ebp - 0x150]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
call fcn.004682da
add esp, 0x14
push ebx
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x330]
push eax
mov eax, edi
push eax
call esi
test eax, eax
jne 0x4bb064
push str._GetLastError_
push str.:3:LogResources___FAILED:_GetDiskFreeSpaceEx___FAILED:__s
call fcn.00426c01
pop ecx
pop ecx
lea ecx, [ebp - 0x150]
call fcn.0042979e
push edx
push eax
call fcn.004607e3
mov dword [ebp - 0x378], eax
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x304]
mov dword [ebp - 0x374], edx
call fcn.00502338
push ebx
mov esi, str.PaulaServer
call fcn.004111f6
add esp, 0x14
push 0x530c74
lea ebx, [ebp - 0x3c0]
call fcn.00410a6f
pop ecx
push esi
mov edi, eax
call fcn.00410a6f
mov esi, eax
pop ecx
lea eax, [ebp - 0x300]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea eax, [ebp - 0x31c]
push eax
push 0x5387f4
push 0
call fcn.00489f49
pop ecx
pop ecx
push eax
xor ecx, ecx
call fcn.0042865d
pop ecx
pop ecx
xor ecx, ecx
call fcn.00471469
push eax
push ecx
call fcn.00428357
pop ecx
mov ecx, eax
call fcn.004f0e4d
fild dword [ebp - 0x37c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x250]
push eax
push dword [ebp - 0x308]
lea eax, [ebp - 0x2a8]
push dword [ebp - 0x30c]
push dword [ebp - 0x304]
push esi
push edi
push eax
lea eax, [ebp - 0x2fc]
push eax
mov eax, dword [ebp - 0x37c]
test eax, eax
jge 0x4bb14b
fadd qword [0x5bf888]
fld qword [0x5bfea0]
mov eax, dword [ebp - 0x380]
fmul st(1), st(0)
sub esp, 0x50
test eax, eax
fxch st(1)
fstp qword [esp + 0x48]
fild dword [ebp - 0x380]
jge 0x4bb172
fadd qword [0x5bf888]
mov eax, dword [ebp - 0x38c]
fmul st(1)
test eax, eax
fstp qword [esp + 0x40]
fild dword [ebp - 0x38c]
jge 0x4bb18e
fadd qword [0x5bf888]
mov eax, dword [ebp - 0x390]
fmul st(1)
test eax, eax
fstp qword [esp + 0x38]
fild dword [ebp - 0x390]
jge 0x4bb1aa
fadd qword [0x5bf888]
fmul st(1)
movzx eax, word [ebp - 0x310]
fstp qword [esp + 0x30]
fild qword [ebp - 0x330]
fmul st(1)
fstp qword [esp + 0x28]
fild qword [ebp - 0x338]
fmul st(1)
fstp qword [esp + 0x20]
fild qword [ebp - 0x378]
fmul st(1)
fstp qword [esp + 0x18]
fild qword [ebp - 0x340]
fmul st(1)
fstp qword [esp + 0x10]
fild qword [ebp - 0x328]
fmul st(1)
fstp qword [esp + 8]
fild qword [ebp - 0x370]
fmulp st(1)
fstp qword [esp]
push eax
movzx eax, word [ebp - 0x312]
push eax
movzx eax, word [ebp - 0x314]
push eax
movzx eax, word [ebp - 0x31c]
push eax
movzx eax, word [ebp - 0x316]
push eax
movzx eax, word [ebp - 0x31a]
push eax
push str.:1:_Rev__02d__02d__04d____02d:_02d._02d__PAULA_is_using__.2fMB_of_disk_space_with__.2fMB_total_space_and__.2fMB_still_available:_TAMS_using__.2fMB___.2fMBtot__.2fMBavail._PhysMem:__.2fMB__.2fMB__VMem:__.2fMB__.2fMB__TZ:_s__s__xE:_d__xSE:_d_Res:__dx_dx_d___s___s__UpTime:_s__NetUser:_s
call fcn.00426c01
mov ecx, dword [ebp - 4]
add esp, 0x98
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051291c
leave
ret