Function at 0x4bbb7c
Capabilities:
Get disk information
Get hostname
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x74
push 0
push 0
dec ecx
jne 0x4bbb84
push ebx
push esi
push edi
mov dword [ebp - 0x28], eax
xor eax, eax
push ebp
push 0x4bc09d
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x4bc048
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4bbfe0
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4bc0b4
mov edx, 0x4bc0c8
mov eax, 0x80000002
call fcn.0044c504
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4bc0fc
mov edx, 0x4bc0c8
mov eax, 0x80000002
call fcn.0044c504
push 0
lea eax, [ebp - 0x36c]
push eax
mov ecx, 0x4bc110
mov edx, dword [0x4cbe78]
mov eax, 0x80000002
call fcn.0044c504
mov eax, dword [ebp - 0x36c]
mov edx, dword [ebp - 0x28]
call fcn.004b8554
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
je 0x4bbc38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bc052
xor eax, eax
push ebp
push 0x4bbc89
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x370]
mov eax, dword [0x4cbe70]
call fcn.004396dc
mov ebx, dword [ebp - 0x370]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x374], ebx
mov eax, dword [ebp - 0x374]
call fcn.0040e6e8
mov eax, dword [ebp - 0x24]
call fcn.004bdc6c
fstp qword [0x4cbf68]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bbca1
lea eax, [ebp - 0x348]
push eax
call sub.ole32.dll_CoCreateGuid
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x348]
call fcn.00418718
mov dword [ebp - 0x2c], 0xff
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x138]
push eax
call sub.kernel32.dll_GetComputerNameA
lea eax, [ebp - 0x20]
lea edx, [ebp - 0x138]
mov ecx, pe_nt_image_headers32
call fcn.004054f0
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.00405318
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.0040554c
push 0xff
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
push 0xff
lea eax, [ebp - 0x238]
push eax
push 0x4bc118
call sub.kernel32.dll_GetVolumeInformationA
mov eax, dword [ebp - 0x30]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x378]
call fcn.00409a64
mov edx, dword [ebp - 0x378]
lea eax, [ebp - 0xc]
call fcn.0040554c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x18]
call fcn.0040554c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
call fcn.0040554c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x20]
call fcn.0040554c
mov eax, dword [0x4cc584]
movzx eax, byte [eax]
cmp eax, 8
ja case.0x4bbd7b.0
jmp dword [eax*4 + 0x4bbd82]
lea eax, [ebp - 0xc]
mov edx, 0x4bc124
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc130
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc13c
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc148
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc154
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc160
call fcn.0040554c
jmp 0x4bbe0d
lea eax, [ebp - 0xc]
mov edx, 0x4bc16c
call fcn.0040554c
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bbe19
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 4]
mov edx, dword [ebp - 0xc]
movzx edx, byte [edx + ebx - 1]
call fcn.00405468
lea eax, [ebp - 0x368]
push eax
call sub.kernel32.dll_GlobalMemoryStatus
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x380], eax
fild qword [ebp - 0x384]
fdiv dword [0x4bc170]
call fcn.00403438
push edx
push eax
lea eax, [ebp - 0x37c]
call fcn.00409a64
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.0040554c
push dword [ebp - 4]
push 0x4bc17c
lea eax, [ebp - 0x388]
call fcn.00439860
push dword [ebp - 0x388]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00405614
push dword [ebp - 4]
push 0x4bc17c
push 0
lea eax, [ebp - 0x38c]
push eax
mov ecx, 0x4bc188
mov edx, 0x4bc198
mov eax, 0x80000002
call fcn.0044c504
push dword [ebp - 0x38c]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00405614
push 0
lea eax, [ebp - 0x390]
push eax
mov ecx, 0x4bc188
mov edx, 0x4bc198
mov eax, 0x80000002
call fcn.0044c504
mov edx, dword [ebp - 0x390]
lea eax, [ebp - 0xc]
call fcn.0040554c
lea eax, [ebp - 0x394]
call fcn.00439860
mov edx, dword [ebp - 0x394]
lea eax, [ebp - 0xc]
call fcn.0040554c
lea edx, [ebp - 0x398]
mov eax, dword [ebp - 0xc]
call fcn.0045bee8
mov edx, dword [ebp - 0x398]
lea eax, [ebp - 0xc]
call fcn.00405318
lea eax, [ebp - 8]
call fcn.00405280
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4bbf47
sub eax, 4
mov eax, dword [eax]
mov ebx, eax
test ebx, ebx
jbe 0x4bbf83
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
movzx eax, byte [eax + edx - 1]
lea ecx, [ebp - 0x39c]
mov edx, 2
call fcn.00409a8c
mov edx, dword [ebp - 0x39c]
lea eax, [ebp - 8]
call fcn.0040554c
inc dword [ebp - 0x2c]
dec ebx
jne 0x4bbf54
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004b8474
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4bbf9a
sub eax, 4
mov eax, dword [eax]
mov ebx, eax
test ebx, ebx
jbe 0x4bbfd6
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
movzx eax, byte [eax + edx - 1]
lea ecx, [ebp - 0x3a0]
mov edx, 2
call fcn.00409a8c
mov edx, dword [ebp - 0x3a0]
lea eax, [ebp - 8]
call fcn.0040554c
inc dword [ebp - 0x2c]
dec ebx
jne 0x4bbfa7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bbfea
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
mov edx, 0x4bc1c8
call fcn.00405598
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
call fcn.004b8474
mov eax, dword [ebp - 8]
push eax
push 0
push 0
push 1
mov ecx, 0x4bc110
mov edx, dword [0x4cbe78]
mov eax, 0x80000002
call fcn.0044c6fc
lea eax, [ebp - 8]
call fcn.00405280
lea eax, [ebp - 0xc]
call fcn.00405280
lea eax, [ebp - 4]
call fcn.00405280
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bc052
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bc0a4
lea eax, [ebp - 0x3a0]
mov edx, 7
call fcn.004052a4
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.004052a4
lea eax, [ebp - 0x370]
mov edx, 2
call fcn.004052a4
lea eax, [ebp - 0x24]
mov edx, 9
call fcn.004052a4
ret