Function at 0x140012940
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x570]
sub rsp, 0x670
mov rax, qword [0x1400a0f20]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov rsi, rdx
mov rdi, rcx
mov r9, rdx
mov r8, rcx
lea rdx, str.vbsvcAutomounterQueryMountPoint:_pszMountPoint_s_pszName_s_n
mov ecx, 4
call fcn.140002470
xor r14d, r14d
lea r8, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxAdditionscommonVBoxServiceVBoxServiceAutoMount.cpp
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], r14
mov rcx, rdi
call fcn.1400344d0
test eax, eax
js 0x140012d2d
xor edx, edx
mov dword [rsp + 0x58], r14d
mov r8d, 0x400
mov dword [rsp + 0x54], r14d
lea rcx, [rbp + 0x160]
mov dword [rsp + 0x50], r14d
call sym.NetMonitor.exe_nocrt_memset
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x200
call sym.NetMonitor.exe_nocrt_memset
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x60]
mov dword [rsp + 0x38], 0xff
lea r9, [rsp + 0x58]
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x160]
lea rax, [rsp + 0x50]
mov r8d, 0x1ff
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x140012b6f
lea rdx, str.VBoxSharedFolderFS
lea rcx, [rsp + 0x60]
call fcn.140035f10
test eax, eax
jne 0x140012b32
lea r8, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxAdditionscommonVBoxServiceVBoxServiceAutoMount.cpp
mov qword [rsp + 0x40], r14
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x160]
call fcn.140035d70
test eax, eax
js 0x140012b01
mov rbx, qword [rsp + 0x40]
lea rdx, [0x14006056c]
mov rcx, rbx
call fcn.140029360
test al, al
je 0x140012a89
add rbx, 5
mov rdx, rsi
mov rcx, rbx
call fcn.140017b10
mov r9, rdi
mov ecx, 3
test eax, eax
jne 0x140012acd
mov r8, rsi
lea rdx, str.vbsvcAutomounterQueryMountPoint:_Found_shared_folder__s_at__s._n
call fcn.140002470
mov rcx, qword [rsp + 0x40]
mov ebx, r14d
call fcn.140017710
mov rcx, qword [rsp + 0x48]
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
mov r8, rbx
lea rdx, str.vbsvcAutomounterQueryMountPoint:_Found_shared_folder__s_at__s__not__s..._n
mov qword [rsp + 0x20], rsi
call fcn.140002470
mov ebx, 0xffffff76
mov rcx, qword [rsp + 0x40]
call fcn.140017710
mov rcx, qword [rsp + 0x48]
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
mov r9d, eax
lea r8, [rbp + 0x160]
lea rdx, str.vbsvcAutomounterQueryMountPoint:_RTUtf16ToUtf8__ls___failed:__Rrc_n
mov ecx, 3
call fcn.140002470
mov rcx, qword [rsp + 0x48]
mov ebx, 0xffffff76
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x160]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x20], rdi
lea rdx, str.vbsvcAutomounterQueryMountPoint:_Found_a__ls_with_label__ls_mount_at__s__not__s..._n
mov ecx, 3
call fcn.140002470
mov ebx, 0xffffffda
mov rcx, qword [rsp + 0x48]
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 3
jne 0x140012b85
cmp dword [0x1400a1fd0], 4
jb 0x140012ba3
mov r8, qword [rsp + 0x48]
lea rdx, str.vbsvcAutomounterQueryMountPoint:_GetVolumeInformationW__ls______failed:__u_n
mov r9d, ebx
mov ecx, 3
call fcn.140002470
cmp ebx, 3
jne 0x140012bb9
mov rcx, qword [rsp + 0x48]
mov ebx, 0x4e
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
movsx ecx, byte [rdi]
lea eax, [rcx - 0x61]
cmp eax, 0x1a
jb 0x140012bcc
lea eax, [rcx - 0x41]
cmp eax, 0x1a
jae 0x140012b59
cmp byte [rdi + 1], 0x3a
jne 0x140012b59
movzx eax, byte [rdi + 2]
test al, al
je 0x140012bf0
cmp al, 0x5c
je 0x140012be6
cmp al, 0x2f
jne 0x140012b59
cmp byte [rdi + 3], r14b
jne 0x140012b59
mov rcx, qword [rsp + 0x48]
lea rdx, [rbp + 0x160]
mov r8d, 0x200
mov ebx, 0xffffffda
movzx eax, word [rcx]
mov word [rsp + 0x60], ax
movzx eax, word [rcx + 2]
lea rcx, [rsp + 0x60]
mov word [rsp + 0x62], ax
mov word [rsp + 0x64], r14w
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, 0x15
jbe 0x140012b5e
lea r8d, [rbx + 0x3a]
lea rdx, str.DeviceLanMiniRdr_
lea rcx, [rbp + 0x160]
call fcn.140035fc0
test eax, eax
jne 0x140012b5e
movzx ecx, word [rbp + 0x188]
movzx eax, word [rsp + 0x60]
xor ecx, eax
test ecx, 0xffffffdf
jne 0x140012b5e
cmp word [rbp + 0x18a], 0x3a
jne 0x140012b5e
cmp word [rbp + 0x18c], 0x5c
jne 0x140012b5e
lea r8d, [rbx + 0x2e]
lea rdx, [0x1400602c0]
lea rcx, [rbp + 0x18e]
call fcn.140035fc0
test eax, eax
jne 0x140012b5e
lea r8, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxAdditionscommonVBoxServiceVBoxServiceAutoMount.cpp
mov qword [rsp + 0x40], r14
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x19e]
call fcn.140035d70
test eax, eax
js 0x140012d06
mov rcx, qword [rsp + 0x40]
mov rdx, rsi
call fcn.140017b10
lea ecx, [rbx + 0x28]
mov r9, rdi
test eax, eax
jne 0x140012cf5
mov r8, rsi
lea rdx, str.vbsvcAutomounterQueryMountPoint:_Found_shared_folder__s_at__s__using_QueryDosDeviceW_._n
mov ebx, r14d
call fcn.140002470
jmp 0x140012ae6
mov r8, qword [rsp + 0x40]
lea rdx, str.vbsvcAutomounterQueryMountPoint:_Found_shared_folder__s_at__s__using_QueryDosDeviceW___not__s..._n
jmp 0x140012ad7
mov r8d, eax
lea rdx, str.vbsvcAutomounterQueryMountPoint:_RTUtf16ToUtf8_failed:__Rrc_n
mov ecx, 2
call fcn.140002470
mov rcx, qword [rsp + 0x48]
mov ebx, 0xffffff76
call fcn.140017710
mov eax, ebx
jmp 0x140012d44
mov r8d, eax
lea rcx, str.vbsvcAutomounterQueryMountPoint:_RTStrToUtf16__s_______Rrc_n
mov rdx, rdi
call fcn.140001d30
mov eax, 0x4e
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.140001250
lea r11, [rsp + 0x670]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret