Function at 0x10b0d3bd
Capabilities:
Get disk size
Get memory capacity
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x4d0
mov eax, dword [0x10b1e210]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edx
push ecx
push esi
push eax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x4d0], edx
call fcn.10b0d2e7
test eax, eax
je 0x10b0d406
xor eax, eax
inc eax
jmp 0x10b0db26
push ebx
push edi
mov ebx, 0xe04
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
mov dword [ebp - 0x4c8], edi
je 0x10b0db24
cmp esi, ebx
ja 0x10b0da27
push esi
push dword [ebp - 0x4c0]
push edi
call sub.msvcrt.dll_memcpy
lea eax, [esi + 8]
and eax, 0xfffffff8
add esp, 0xc
cmp eax, ebx
jbe 0x10b0d456
xor ebx, ebx
jmp 0x10b0da27
lea esi, [eax + edi]
sub ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 8
pop edi
cmp ebx, edi
mov dword [esi], eax
jb 0x10b0d44f
add esi, edi
sub ebx, edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, edi
mov dword [esi], eax
jb 0x10b0d44f
add esi, edi
sub ebx, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp ebx, edi
mov dword [esi], eax
jb 0x10b0d44f
sub ebx, edi
add esi, edi
cmp ebx, 0x10
jb 0x10b0da27
push esi
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp ebx, 0x18
jb 0x10b0d44f
sub ebx, 0x18
add esi, 0x18
cmp ebx, edi
jb 0x10b0da27
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0x10
pop edi
cmp ebx, edi
jb 0x10b0d44f
push 0x20
sub ebx, edi
pop eax
add esi, edi
cmp ebx, eax
jb 0x10b0da27
push esi
mov dword [esi], eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
cmp ebx, 0x28
jb 0x10b0d44f
sub ebx, 0x28
add esi, 0x28
cmp ebx, edi
jb 0x10b0da27
lea eax, [esi + 0xc]
push eax
lea eax, [esi + 8]
push eax
lea eax, [esi + 4]
push eax
push esi
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
cmp ebx, 0x18
jb 0x10b0d44f
add esi, 0x18
sub ebx, 0x18
cmp dword [0x10b21800], edi
mov dword [ebp - 0x4c0], esi
jne 0x10b0d5f4
mov dword [ebp - 0x4c4], edi
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
cmp eax, edi
mov dword [ebp - 0x4bc], eax
jne 0x10b0d559
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStrings]
cmp eax, edi
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4c4], 1
je 0x10b0d5ea
lea eax, [ebp - 0x114]
push eax
call fcn.10b0e0c4
mov esi, dword [ebp - 0x4bc]
pop ecx
xor edi, edi
cmp dword [ebp - 0x4c4], 0
jne 0x10b0d586
lea esi, [esi + edi + 2]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
jmp 0x10b0d591
lea esi, [esi + edi + 1]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
lea eax, [ebp - 0x114]
push eax
push edi
push esi
call fcn.10b0e128
add esp, 0xc
test edi, edi
jne 0x10b0d56e
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.10b0e367
cmp dword [ebp - 0x4c4], 0
pop ecx
pop ecx
push 5
pop ecx
push dword [ebp - 0x4bc]
lea esi, [ebp - 0xb8]
mov edi, 0x10b21804
rep movsd dword es:[edi], dword [esi]
jne 0x10b0d5e4
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x10b0d5ea
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
mov dword [0x10b21800], 1
cmp ebx, 0x14
jb 0x10b0da27
cmp ebx, 0x18
mov edi, dword [ebp - 0x4c0]
push 5
pop ecx
mov esi, 0x10b21804
rep movsd dword es:[edi], dword [esi]
jb 0x10b0d44f
mov esi, dword [ebp - 0x4c0]
add esi, 0x18
sub ebx, 0x18
call fcn.10b0d212
test eax, eax
je 0x10b0da27
push 0x40
pop eax
cmp ebx, eax
mov dword [ebp - 0x4c0], eax
jb 0x10b0da27
lea eax, [ebp - 0x4c0]
push eax
push esi
call fcn.10af6799
test eax, eax
push 0xfffffffffffffff8
pop edi
je 0x10b0d66b
mov eax, dword [ebp - 0x4c0]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
mov eax, dword [0x10b2181c]
test eax, eax
je 0x10b0da27
push 0
push ebx
push esi
push 5
mov dword [ebp - 0x4bc], ebx
call eax
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x184]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x184]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x184]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
cmp ebx, 0x18
jb 0x10b0d44f
sub ebx, 0x18
add esi, 0x18
cmp ebx, 0x30
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x30
push esi
push 3
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d703
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
cmp ebx, 0x18
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x18
push esi
push 7
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d739
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
cmp ebx, 0x54
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x54
push esi
push 0x50
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d76f
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
cmp ebx, 0x24
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x24
push esi
push 0x15
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d7a5
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
mov eax, 0x138
cmp ebx, eax
jb 0x10b0da27
lea ecx, [ebp - 0x4bc]
push ecx
push eax
push esi
push 2
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d7de
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
cmp ebx, 0x10
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x10
push esi
push 0x21
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d814
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
cmp ebx, 0x20
jb 0x10b0da27
lea eax, [ebp - 0x4bc]
push eax
push 0x20
push esi
push 0x2d
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d84a
mov eax, dword [ebp - 0x4bc]
add eax, 8
and eax, edi
cmp eax, ebx
ja 0x10b0d44f
add esi, eax
sub ebx, eax
lea eax, [ebp - 0x4bc]
push eax
push ebx
push esi
push 8
mov dword [ebp - 0x4bc], ebx
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d8ae
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x264]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x264]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
push 0x18
pop edi
cmp ebx, edi
jb 0x10b0d44f
add esi, edi
sub ebx, edi
jmp 0x10b0d8b1
push 0x18
pop edi
lea eax, [ebp - 0x4bc]
push eax
push ebx
push esi
push 0x3d
mov dword [ebp - 0x4bc], ebx
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d910
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x1f4]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x1f4]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x1f4]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
cmp ebx, edi
jb 0x10b0d44f
add esi, edi
sub ebx, edi
lea eax, [ebp - 0x4bc]
push eax
push ebx
push esi
push 0x12
mov dword [ebp - 0x4bc], ebx
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d96f
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x2d4]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x2d4]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x2d4]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
cmp ebx, edi
jb 0x10b0d44f
add esi, edi
sub ebx, edi
lea eax, [ebp - 0x4bc]
push eax
push ebx
push esi
push 0x17
mov dword [ebp - 0x4bc], ebx
call dword [0x10b2181c]
test eax, eax
jl 0x10b0d9ce
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x3b4]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x3b4]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x3b4]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
cmp ebx, edi
jb 0x10b0d44f
add esi, edi
sub ebx, edi
lea eax, [ebp - 0x4bc]
push eax
push ebx
push esi
push 0x2a
mov dword [ebp - 0x4bc], ebx
call dword [0x10b2181c]
test eax, eax
jl 0x10b0da27
cmp ebx, 0x14
jb 0x10b0da27
lea eax, [ebp - 0x344]
push eax
call fcn.10b0e0c4
lea eax, [ebp - 0x344]
push eax
push dword [ebp - 0x4bc]
push esi
call fcn.10b0e128
lea eax, [ebp - 0x344]
push esi
push eax
call fcn.10b0e367
add esp, 0x18
cmp ebx, edi
jb 0x10b0d44f
sub ebx, edi
push 0x14
pop ecx
lea eax, [ebp - 0x54]
push eax
push 0x50
lea eax, [ebp - 0x4b8]
mov esi, 0x10b21690
lea edi, [ebp - 0x54]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.10b0de7d
mov ecx, 0xe04
mov eax, ecx
sub eax, ebx
cmp eax, ecx
jbe 0x10b0da55
mov eax, ecx
lea ecx, [ebp - 0x54]
push ecx
push eax
push dword [ebp - 0x4c8]
call fcn.10b14548
push 0x14
pop ecx
push 0x14
mov ebx, eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0xa4]
rep movsd dword es:[edi], dword [esi]
pop ecx
lea eax, [ebp - 0xa4]
push eax
push 0x50
lea esi, [ebp - 0x54]
mov edi, 0x10b21690
rep movsd dword es:[edi], dword [esi]
pop esi
push esi
lea eax, [ebp - 0x4b8]
push eax
call fcn.10b0dd30
push esi
lea eax, [ebp - 0xa4]
push eax
call fcn.10b142e6
mov ecx, esi
lea eax, [ebp - 0xa4]
mov byte [eax], 0
inc eax
dec ecx
jne 0x10b0daae
lea eax, [ebp - 0x54]
push eax
push esi
lea eax, [ebp - 0x4b8]
push eax
call fcn.10b0de7d
lea eax, [ebp - 0x54]
mov byte [eax], 0
inc eax
dec esi
jne 0x10b0dac9
push dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4d0]
push dword [eax]
lea eax, [ebp - 0x4b8]
push eax
call fcn.10b0dd30
mov ecx, 0x102
lea eax, [ebp - 0x4b8]
mov byte [eax], 0
inc eax
dec ecx
jne 0x10b0daf5
mov eax, dword [ebp - 0x4c8]
mov ecx, 0xe04
mov byte [eax], 0
inc eax
dec ecx
jne 0x10b0db07
push dword [ebp - 0x4c8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, ebx
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.10af9677
leave
ret 0x10