Function at 0x63089800
Capabilities:
Get disk information
Get disk size
Query environment variable

Disassembly:
push ebp
mov eax, 0x2364c
mov ebp, esp
push edi
push esi
push ebx
call fcn.630a6c70
mov ecx, 0x800
lea esi, [ebp - 0x22018]
sub esp, eax
xor eax, eax
lea ebx, [ebp - 0x20018]
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], 0x630d9034
mov edi, ebx
mov dword [esp + 4], str._s_mah_s
mov dword [esp], esi
mov dword [esp + 8], eax
call sub.msvcrt.dll_sprintf
xor eax, eax
mov ecx, 0x8000
rep stosd dword es:[edi], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.63089381
xor edx, edx
test eax, eax
jle 0x63089c49
mov dword [esp + 8], ebx
mov dword [esp + 4], str.A_NO
mov dword [esp], 0
call fcn.63085a10
test eax, eax
js 0x63089c2a
lea ebx, [ebp - 0x22618]
lea edx, [ebp - 0x22418]
xor eax, eax
mov ecx, 0x40
lea esi, [ebp - 0x22a18]
mov edi, ebx
rep stosd dword es:[edi], eax
mov edi, edx
lea edx, [ebp - 0x22818]
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x10
rep stosd dword es:[edi], eax
mov dword [esp + 4], ebx
mov dword [esp], 0x100
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
push eax
push eax
movsx eax, byte [ebx + edi]
test al, al
je 0x63089989
mov dword [esp + 8], eax
mov dword [esp + 4], 0x630c485d
mov dword [esp], esi
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x22c18]
mov dword [esp], esi
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x22e18]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x23018]
mov dword [esp + 8], eax
lea eax, [ebp - 0x23218]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
mov ecx, dword [ebp - 0x23018]
mov eax, dword [ebp - 0x22c18]
sub esp, 0x14
imul ecx, dword [ebp - 0x23218]
sub eax, dword [ebp - 0x22e18]
shr ecx, 0xa
imul eax, ecx
lea ecx, [ebp - 0x22818]
mov dword [ebp - 0x2361c], ecx
shr eax, 0xa
mov dword [esp + 0xc], eax
movsx eax, byte [ebx + edi]
mov dword [esp], ecx
mov dword [esp + 4], str._c:_lu_
mov dword [esp + 8], eax
call sub.msvcrt.dll_sprintf
mov ecx, dword [ebp - 0x2361c]
lea eax, [ebp - 0x22418]
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_strcat
add edi, 4
cmp edi, 0x100
jne 0x630898d3
lea ebx, [ebp - 0x23618]
xor eax, eax
mov ecx, pe_nt_image_headers32
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp], str.USERNAME
call sub.msvcrt.dll_getenv
test eax, eax
je 0x630899bf
mov dword [esp + 4], eax
jmp 0x630899c7
mov dword [esp + 4], 0x630c4872
mov dword [esp], ebx
lea ebx, [ebp - 0x23418]
call sub.msvcrt.dll_strcpy
mov edi, ebx
xor eax, eax
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], str.USERPROFILE
call sub.msvcrt.dll_getenv
test eax, eax
je 0x630899f6
mov dword [esp + 4], eax
jmp 0x630899fe
mov dword [esp + 4], 0x630c4872
lea esi, [ebp - 0x23218]
mov dword [esp], ebx
call sub.msvcrt.dll_strcpy
mov edi, esi
xor eax, eax
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], 0x630c4880
call sub.msvcrt.dll_getenv
test eax, eax
je 0x63089a2d
mov dword [esp + 4], eax
jmp 0x63089a35
mov dword [esp + 4], 0x630c4872
mov dword [esp], esi
lea esi, [ebp - 0x23018]
call sub.msvcrt.dll_strcpy
mov edi, esi
xor eax, eax
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], str.COMPUTERNAME
call sub.msvcrt.dll_getenv
test eax, eax
je 0x63089a64
mov dword [esp + 4], eax
jmp 0x63089a6c
mov dword [esp + 4], 0x630c4872
mov dword [esp], esi
lea edi, [ebp - 0x22e18]
lea esi, [ebp - 0x22618]
call sub.msvcrt.dll_strcpy
mov dword [esp], ebx
mov dword [esp + 8], 0x2f
mov dword [esp + 4], 0x5c
call fcn.6308740f
xor eax, eax
mov ecx, pe_nt_image_headers32
lea edx, [ebp - 0x23618]
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x22c18]
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x22a18]
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x22818]
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov edi, esi
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
lea eax, [ebp - 0x22e18]
mov dword [esp + 4], edx
mov edi, ebx
not ecx
dec ecx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.63088438
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
lea eax, [ebp - 0x22c18]
mov dword [esp + 4], ebx
lea ebx, [ebp - 0x22018]
not ecx
dec ecx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.63088438
lea edx, [ebp - 0x23218]
xor eax, eax
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
lea eax, [ebp - 0x22a18]
mov dword [esp + 4], edx
not ecx
dec ecx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.63088438
lea edx, [ebp - 0x23018]
xor eax, eax
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
lea eax, [ebp - 0x22818]
mov dword [esp + 4], edx
not ecx
dec ecx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.63088438
lea edx, [ebp - 0x22418]
xor eax, eax
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
mov dword [esp + 4], edx
mov dword [esp], esi
mov edi, ebx
not ecx
dec ecx
mov dword [esp + 8], ecx
call fcn.63088438
xor eax, eax
mov ecx, 0x800
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x22818]
mov dword [esp + 0x20], esi
lea esi, [ebp - 0x20018]
mov dword [esp + 0xc], 0x630d9034
mov dword [esp + 4], str._s_msh_sun_sup_sos_scn_sdsk_s
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x22a18]
mov dword [esp], ebx
mov edi, esi
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x22c18]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x22e18]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
call sub.msvcrt.dll_sprintf
xor eax, eax
mov ecx, 0x8000
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.63089381
test eax, eax
jle 0x63089c26
mov dword [esp + 8], esi
mov dword [esp + 4], str.S_IN
mov dword [esp], 0
call fcn.63085a10
test eax, eax
mov dl, 1
jns 0x63089c49
xor edx, edx
jmp 0x63089c49
mov dword [esp + 8], ebx
mov dword [esp + 4], str.A_OK
mov dword [esp], 0
call fcn.63085a10
not eax
mov edx, eax
shr edx, 0x1f
lea esp, [ebp - 0xc]
mov al, dl
pop ebx
pop esi
pop edi
pop ebp
ret