Function at 0x5be160
Capabilities:
Get disk information
Get disk size
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xbe4
push esi
push edi
xor esi, esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1e6]
mov word [esp + 0x1e4], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x1e4]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
test eax, eax
jne 0x5be1a4
pop edi
pop esi
add esp, 0xbe4
ret
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x146]
mov word [esp + 0x144], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x46]
mov word [esp + 0x44], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
mov ecx, 0x37
xor eax, eax
cmp word [esp + 0x1e8], si
lea edi, [esp + 0x6c]
lea ebp, [esp + 0x1e8]
mov dword [esp + 0x68], esi
mov dword [esp + 0xc], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x10], ebp
rep stosd dword es:[edi], eax
je 0x5be59f
push ebx
mov ebx, dword [esp + 0xbf8]
jmp 0x5be21b
mov ebp, dword [esp + 0x14]
push ebp
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
jne 0x5be580
mov dx, word [0x92f200]
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x3f6]
mov word [esp + 0x3f4], si
mov word [esp + 0x20], dx
rep stosd dword es:[edi], eax
mov ecx, dword [0x92f1fc]
push 0x400
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x3f8]
stosw word es:[edi], ax
mov ax, word [ebp]
lea edx, [esp + 0x20]
push ecx
push edx
mov word [esp + 0x28], ax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, esi
jbe 0x5be2c1
cmp eax, 0x400
jae 0x5be2c1
push str.DeviceTSafeDiskVolume
call fcn.005fc40b
push eax
lea eax, [esp + 0x3fc]
push eax
push str.DeviceTSafeDiskVolume
call fcn.005fddee
add esp, 0x10
test eax, eax
jne 0x5be2c1
push ebp
call fcn.005fc40b
lea ecx, [ebp + eax*2 + 2]
add esp, 4
mov dword [esp + 0x14], ecx
jmp 0x5be591
mov ecx, 0x28
xor eax, eax
lea edi, [esp + 0x14c]
lea edx, [esp + 0x4c]
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
push 0x10
lea eax, [esp + 0x3c]
push edx
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
lea eax, [esp + 0x160]
push 0x50
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x2c]
push ecx
lea eax, [esp + 0x48]
push edx
push eax
push ebp
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov esi, dword [esp + 0x30]
mov ecx, 0x38
xor eax, eax
lea edi, [esp + 0x6c]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, edi
or edx, esi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
je 0x5be387
mov edx, edi
push 0
sub edx, eax
mov eax, esi
sbb eax, ecx
push 0x3e8
push eax
push edx
call fcn.005fd650
push esi
push edi
push edx
push eax
call fcn.005fd690
mov dword [esp + 0x7c], eax
lea ecx, [esp + 0x80]
push 4
push ecx
push 0xffffffffffffffff
push ebp
call fcn.005814c0
lea edx, [esp + 0x98]
push 0x50
push edx
lea eax, [esp + 0x164]
push 0xffffffffffffffff
push eax
call fcn.005814c0
lea ecx, [esp + 0x148]
push 0x10
push ecx
lea edx, [esp + 0x74]
push 0xffffffffffffffff
push edx
call fcn.005814c0
mov ecx, dword [ebx + 8]
xor edi, edi
mov esi, ecx
add esp, 0x30
mov dword [esp + 0x18], esi
lea ebp, [esi + 1]
cmp ebp, edi
jne 0x5be3ff
mov eax, dword [ebx + 4]
cmp eax, edi
je 0x5be3f4
push eax
mov dword [esp + 0x1c], ecx
call fcn.008325dd
add esp, 4
mov dword [ebx + 4], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 8], edi
jmp 0x5be556
mov edx, dword [ebx + 4]
cmp edx, edi
jne 0x5be43f
lea edi, [ebp*8]
sub edi, ebp
shl edi, 5
push edi
call fcn.008325b4
mov edx, eax
mov ecx, edi
mov dword [ebx + 4], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebx + 0xc], ebp
mov dword [ebx + 8], ebp
jmp 0x5be556
mov edi, dword [ebx + 0xc]
cmp ebp, edi
jg 0x5be490
cmp ecx, ebp
jge 0x5be480
mov eax, ebp
lea edi, [ecx*8]
sub eax, ecx
sub edi, ecx
shl edi, 5
lea ecx, [eax*8]
add edi, edx
sub ecx, eax
xor eax, eax
shl ecx, 5
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebx + 8], ebp
jmp 0x5be556
jle 0x5be488
sub ecx, ebp
mov dword [esp + 0x18], ecx
mov dword [ebx + 8], ebp
jmp 0x5be556
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x5be4ba
mov eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x5be4ae
mov eax, 4
jmp 0x5be4ba
cmp eax, 0x400
jle 0x5be4ba
mov eax, 0x400
add eax, edi
cmp ebp, eax
jge 0x5be4c6
mov dword [esp + 0x10], eax
jmp 0x5be4cc
mov dword [esp + 0x10], ebp
mov eax, ebp
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 5
push ecx
call fcn.008325b4
mov edx, dword [ebx + 8]
mov esi, dword [ebx + 4]
mov edi, eax
mov dword [esp + 0x40], eax
lea ecx, [edx*8]
sub ecx, edx
shl ecx, 5
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 8]
sub edx, ecx
lea edi, [ecx*8]
sub edi, ecx
lea ecx, [edx*8]
sub ecx, edx
shl ecx, 5
shl edi, 5
mov edx, ecx
add edi, eax
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebx + 4]
push eax
call fcn.008325dd
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
add esp, 8
mov dword [ebx + 4], ecx
mov dword [ebx + 8], ebp
mov dword [ebx + 0xc], edx
mov eax, dword [ebx + 4]
lea edi, [esi*8]
sub edi, esi
mov ebp, dword [esp + 0x14]
shl edi, 5
add edi, eax
mov ecx, 0x38
lea esi, [esp + 0x6c]
mov dword [esp + 0x10], 1
rep movsd dword es:[edi], dword [esi]
xor esi, esi
push ebp
call fcn.005fc40b
lea eax, [ebp + eax*2 + 2]
add esp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
cmp word [ecx], si
jne 0x5be217
pop ebx
mov eax, dword [esp + 0xc]
pop ebp
pop edi
pop esi
add esp, 0xbe4
ret