Function at 0x405170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x43c5a7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x160
mov eax, dword [0x45447c]
push ebx
push ebp
push esi
mov dword [esp + 0x168], eax
push edi
mov dword [esp + 0x50], ecx
sub esp, 0x1c
mov esi, esp
xor ebx, ebx
mov edi, 7
mov dword [esp + 0x2c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov dword [esp + 0x198], ebx
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x78
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1b8], 1
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0x118]
mov byte [esp + 0x1b4], bl
call fcn.0041fd60
mov eax, dword [esp + 0x184]
cmp eax, ebx
mov byte [esp + 0x178], 2
jne 0x40523b
xor eax, eax
jmp 0x405257
mov ecx, dword [esp + 0x188]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Clearing_read_only_on__d_volumes_...
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Clearing_read_only_on__d_volumes_...
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 3
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x7a
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x84], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 4
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0x138]
push eax
mov byte [esp + 0x1d8], 2
call fcn.0041fad0
add esp, 0x60
mov dword [esp + 0x38], ebx
push str._CoCreateInstance_CLSID_VdsLoader__NULL__CLSCTX_LOCAL_SERVER____uuidof_IVdsServiceLoader____void__pLoader__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov byte [esp + 0x19c], 5
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 6
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x82
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x84], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 7
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0x138]
push ecx
mov byte [esp + 0x1d8], 5
call fcn.0041fad0
add esp, 0x60
lea edx, [esp + 0x38]
push edx
push 0x440ef0
push 4
push ebx
push 0x4401cc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jge 0x40554c
push str._CoCreateInstance_CLSID_VdsLoader__NULL__CLSCTX_LOCAL_SERVER____uuidof_IVdsServiceLoader____void__pLoader__
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, ebp
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
add esp, 0x24
push esi
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, ebp
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
lea edx, [esp + 0xe4]
push esi
push edx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 8
jb 0x405497
mov eax, dword [eax + 4]
jmp 0x40549a
add eax, 4
push eax
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Error_text:__s
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, ebp
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
mov eax, dword [esp + 0xfc]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 5
jb 0x4054fc
mov ecx, dword [esp + 0xc4]
push ecx
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x2c], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, ebp
call fcn.00402190
lea edx, [esp + 0xf8]
push edx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.004302ea
mov dword [esp + 0x4c], ebx
push str._pLoader__LoadService_NULL__pService__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov byte [esp + 0x19c], 9
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0xa
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x86
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x84], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0xb
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0x138]
push ecx
mov byte [esp + 0x1d8], 9
call fcn.0041fad0
mov eax, dword [esp + 0x98]
mov edx, dword [eax]
add esp, 0x60
lea ecx, [esp + 0x4c]
push ecx
push ebx
push eax
call dword [edx + 0xc]
mov ebp, eax
cmp ebp, ebx
jge 0x405787
push str._pLoader__LoadService_NULL__pService__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
add esp, 0x24
push ebp
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
lea ecx, [esp + 0xe4]
push ebp
push ecx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 0xc
jb 0x4056d2
mov eax, dword [eax + 4]
jmp 0x4056d5
add eax, 4
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Error_text:__s
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
mov eax, dword [esp + 0xfc]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 9
jb 0x405737
mov eax, dword [esp + 0xc4]
push eax
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x2c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0xf8]
push ecx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], ebp
call fcn.004302ea
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov eax, dword [esp + 0x184]
mov byte [esp + 0x178], 0xe
xor ebp, ebp
mov esi, eax
cmp eax, ebx
je 0x405864
mov ecx, dword [esp + 0x188]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jae 0x405864
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push esi
mov word [ecx + 4], bx
call fcn.00401de0
lea eax, [esp + 0xdc]
push eax
call fcn.00403bd0
add esp, 0x20
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x17c], 0xf
call fcn.00404a10
cmp dword [esp + 0xd8], 8
mov byte [esp + 0x178], 0xe
jb 0x40583e
mov ecx, dword [esp + 0xc4]
push ecx
call fcn.0042fe43
add esp, 4
mov eax, dword [esp + 0x184]
inc ebp
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], ebx
mov word [esp + 0xc4], bx
add esi, 0x1c
jmp 0x4057b2
mov dword [esp + 0x40], ebx
push str._pService__QueryProviders_VDS_QUERY_SOFTWARE_PROVIDERS_pEnumProvider__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov byte [esp + 0x19c], 0x10
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x11
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x93
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x84], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0x12
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0x138]
push edx
mov byte [esp + 0x1d8], 0x10
call fcn.0041fad0
mov eax, dword [esp + 0xac]
mov ecx, dword [eax]
add esp, 0x60
lea edx, [esp + 0x40]
push edx
push 1
push eax
call dword [ecx + 0x18]
mov ebp, eax
cmp ebp, ebx
jge 0x405aa0
push str._pService__QueryProviders_VDS_QUERY_SOFTWARE_PROVIDERS_pEnumProvider__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
add esp, 0x24
push ebp
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
lea edx, [esp + 0xe4]
push ebp
push edx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 0x13
jb 0x4059eb
mov eax, dword [eax + 4]
jmp 0x4059ee
add eax, 4
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Error_text:__s
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
mov eax, dword [esp + 0xfc]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 0x10
jb 0x405a50
mov ecx, dword [esp + 0xc4]
push ecx
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x2c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0xf8]
push edx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.004302ea
mov ecx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x54]
lea edx, [esp + 0x94]
push edx
call fcn.00404620
xor esi, esi
mov byte [esp + 0x178], 0x14
mov dword [esp + 0x34], esi
jmp 0x405ad0
mov ecx, dword [esp + 0x94]
cmp ecx, ebx
je 0x406ac5
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x406ac5
mov eax, dword [ecx + esi*4]
cmp eax, ebx
mov dword [esp + 0x18], ebx
je 0x405b0d
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push 0x4401dc
push eax
call dword [ecx]
push esi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Provider__d
mov byte [esp + 0x19c], 0x15
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Provider__d
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x58], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x16
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x9a
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x80], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0x17
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0x138]
push eax
mov byte [esp + 0x1d8], 0x15
call fcn.0041fad0
add esp, 0x60
mov dword [esp + 0x28], ebx
push str._pSwProvider__QueryPacks_pEnumPack__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov byte [esp + 0x19c], 0x18
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x58], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x19
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0x9e
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x80], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0x1a
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0x138]
push ecx
mov byte [esp + 0x1d8], 0x18
call fcn.0041fad0
mov eax, dword [esp + 0x78]
mov edx, dword [eax]
add esp, 0x60
lea ecx, [esp + 0x28]
push ecx
push eax
call dword [edx + 0xc]
mov esi, eax
cmp esi, ebx
jl 0x406503
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x50]
push edx
lea eax, [esp + 0xb4]
push eax
call fcn.00404620
mov byte [esp + 0x178], 0x1c
xor ebp, ebp
mov ecx, dword [esp + 0xb4]
cmp ecx, ebx
mov dword [esp + 0x1c], ebp
je 0x4064bb
mov eax, dword [esp + 0xb8]
sub eax, ecx
sar eax, 2
cmp ebp, eax
jae 0x4064bb
mov eax, dword [ecx + ebp*4]
cmp eax, ebx
mov dword [esp + 0x44], ebx
je 0x405d0f
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 0x4401ec
push eax
call dword [ecx]
mov eax, dword [esp + 0x34]
push eax
push ebp
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Pack__d__d
mov byte [esp + 0x1a0], 0x1d
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Pack__d__d
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x64], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1bc], 0x1e
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0xa5
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x90], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1dc], 0x1f
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0x13c]
push ecx
mov byte [esp + 0x1dc], 0x1d
call fcn.0041fad0
add esp, 0x64
mov dword [esp + 0x48], ebx
push str._pPack__QueryVolumes_pEnumVolumes__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x50], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov byte [esp + 0x19c], 0x20
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x4c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x21
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0xa9
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x80], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0x22
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0x138]
push edx
mov byte [esp + 0x1d8], 0x20
call fcn.0041fad0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
add esp, 0x60
lea edx, [esp + 0x48]
push edx
push eax
call dword [ecx + 0x14]
mov esi, eax
cmp esi, ebx
jl 0x406659
mov eax, dword [esp + 0x48]
push eax
lea ecx, [esp + 0xa4]
push ecx
mov ecx, dword [esp + 0x58]
call fcn.00404620
xor edx, edx
mov byte [esp + 0x178], 0x24
mov dword [esp + 0x24], edx
lea esp, [esp]
mov ecx, dword [esp + 0xa4]
cmp ecx, ebx
je 0x40647d
mov eax, dword [esp + 0xa8]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x40647d
mov eax, dword [ecx + edx*4]
xor ecx, ecx
cmp eax, ebx
mov dword [esp + 0x20], ecx
je 0x405f23
mov edx, dword [eax]
lea ecx, [esp + 0x20]
push ecx
push 0x4401fc
push eax
call dword [edx]
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
lea eax, [esp + 0x134]
push eax
push ecx
mov byte [esp + 0x180], 0x25
call dword [edx + 0xc]
mov ebp, eax
cmp ebp, 0x8004240b
je 0x406453
push str.L_pVolume__GetProperties_volProp__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x50], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.Executing_COM_call__s
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.Executing_COM_call__s
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x4c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x26
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0xb6
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x88], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1d8], 0x27
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0x138]
push edx
mov byte [esp + 0x1d8], 0x25
call fcn.0041fad0
add esp, 0x60
cmp ebp, ebx
jl 0x4067af
test byte [esp + 0x15c], 0x10
jne 0x406453
mov eax, dword [esp + 0x164]
mov dword [esp + 0x10], eax
push eax
mov byte [esp + 0x17c], 0x29
mov esi, eax
mov dword [esp + 0x134], edi
mov dword [esp + 0x130], ebx
mov word [esp + 0x120], bx
call fcn.0042fe2d
add esp, 4
push eax
push esi
lea ecx, [esp + 0x120]
call fcn.00402190
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x48], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x13c]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x1a0], 0x2a
mov word [ecx + 4], bx
call fcn.00401de0
lea eax, [esp + 0xdc]
push eax
call fcn.00403bd0
add esp, 0x20
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x1c]
mov ebp, 8
push ecx
cmp eax, ebp
mov eax, dword [esp + 0x120]
mov byte [esp + 0x17c], 0x2b
push edx
jae 0x4060c6
lea eax, [esp + 0x124]
push eax
cmp dword [esp + 0xe4], ebp
mov eax, dword [esp + 0xd0]
jae 0x4060de
lea eax, [esp + 0xd0]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x58], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Found_volume__s__device___s__in__d__d
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Found_volume__s__device___s__in__d__d
mov ecx, esi
call fcn.00402190
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x78], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1c4], 0x2c
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.VssClient::MakeVolumesReadWrite
mov ecx, esi
call fcn.00402190
push 0xc5
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x7c], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.._break.cpp
mov byte [esp + 0x1e4], 0x2d
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.._break.cpp
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0x144]
push eax
mov byte [esp + 0x1e4], 0x2b
call fcn.0041fad0
add esp, 0x5c
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00403380
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xf4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x1b0], 0x2e
mov word [ecx + 4], bx
call fcn.00401de0
mov byte [esp + 0x1a4], 0x2b
call fcn.00403a80
add esp, 0x2c
cmp al, bl
jne 0x40624a
cmp dword [esp + 0xd8], ebp
jb 0x4061fb
mov ecx, dword [esp + 0xc4]
push ecx
call fcn.0042fe43
add esp, 4
cmp dword [esp + 0x130], ebp
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], ebx
mov word [esp + 0xc4], bx
jb 0x40622a
mov edx, dword [esp + 0x11c]
push edx
call fcn.0042fe43
add esp, 4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x130], edi
mov dword [esp + 0x12c], ebx
mov word [esp + 0x11c], bx
push eax
jmp 0x40644d
cmp dword [esp + 0x130], ebp
mov eax, dword [esp + 0x11c]
jae 0x406261
lea eax, [esp + 0x11c]
push eax
cmp dword [esp + 0xdc], ebp
mov eax, dword [esp + 0xc8]
jae 0x406279
lea eax, [esp + 0xc8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push str.__Clearing_read_only_flag_for_volume__s___s__...
call fcn.004026d0
lea edx, [esp + 0x100]
push edx
call fcn.00420010
add esp, 0x28
push str._pVolume__ClearFlags_VDS_VF_READONLY__
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.Executing_COM_call__s
call fcn.004026d0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x2f
call fcn.004026d0
push 0xcf
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x8c], esp
push str.._break.cpp
mov byte [esp + 0x1d8], 0x30
call fcn.004026d0
lea eax, [esp + 0x138]
push eax
mov byte [esp + 0x1d8], 0x2b
call fcn.0041fad0
mov eax, dword [esp + 0x80]
mov ecx, dword [eax]
add esp, 0x60
push ebp
push eax
call dword [ecx + 0x34]
mov esi, eax
cmp esi, ebx
jl 0x406902
mov eax, dword [esp + 0x20]
cmp eax, ebx
mov dword [esp + 0x3c], ebx
je 0x40633e
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push 0x44020c
push eax
call dword [edx]
cmp dword [esp + 0x130], ebp
mov eax, dword [esp + 0x11c]
mov byte [esp + 0x178], 0x32
jae 0x40635d
lea eax, [esp + 0x11c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.__Dismounting_volume__s_...
call fcn.004026d0
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
add esp, 0x24
push str._pVolumeMF__Dismount_TRUE__FALSE__
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.Executing_COM_call__s
call fcn.004026d0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push str.VssClient::MakeVolumesReadWrite
mov byte [esp + 0x1b8], 0x33
call fcn.004026d0
push 0xd5
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x8c], esp
push str.._break.cpp
mov byte [esp + 0x1d8], 0x34
call fcn.004026d0
lea eax, [esp + 0x138]
push eax
mov byte [esp + 0x1d8], 0x32
call fcn.0041fad0
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax]
add esp, 0x60
push ebx
push 1
push eax
call dword [ecx + 0x28]
mov esi, eax
cmp esi, ebx
jl 0x4069eb
lea edx, [esp + 0xc0]
push edx
lea ecx, [esp + 0x68]
call fcn.00404a10
mov eax, dword [esp + 0x3c]
cmp eax, ebx
mov byte [esp + 0x178], 0x2b
je 0x406430
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [esp + 0xc0]
call fcn.004012a0
lea ecx, [esp + 0x118]
call fcn.004012a0
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [esp + 0x20]
cmp eax, ebx
mov byte [esp + 0x178], 0x24
je 0x406469
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x24]
mov ebp, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x24], eax
mov edx, eax
jmp 0x405ee0
lea ecx, [esp + 0xa0]
call fcn.00402dd0
mov eax, dword [esp + 0x48]
cmp eax, ebx
mov byte [esp + 0x178], 0x1d
je 0x40649f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x44]
cmp eax, ebx
mov byte [esp + 0x178], 0x1c
je 0x4064b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc ebp
jmp 0x405cce
lea ecx, [esp + 0xb0]
call fcn.00402dd0
mov eax, dword [esp + 0x28]
cmp eax, ebx
mov byte [esp + 0x178], 0x15
je 0x4064dd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov byte [esp + 0x178], 0x14
je 0x4064f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
mov esi, eax
jmp 0x405ad0
push str._pSwProvider__QueryPacks_pEnumPack__
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, ebp
call fcn.00402190
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
add esp, 0x24
push esi
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, ebp
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
lea ecx, [esp + 0xe4]
push esi
push ecx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 0x1b
jb 0x4065a4
mov eax, dword [eax + 4]
jmp 0x4065a7
add eax, 4
push eax
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Error_text:__s
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, ebp
call fcn.00402190
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
mov eax, dword [esp + 0xfc]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 0x18
jb 0x406609
mov eax, dword [esp + 0xc4]
push eax
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, ebp
call fcn.00402190
lea ecx, [esp + 0xf8]
push ecx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], esi
call fcn.004302ea
push str._pPack__QueryVolumes_pEnumVolumes__
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, ebp
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
add esp, 0x24
push esi
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, ebp
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
lea edx, [esp + 0xe4]
push esi
push edx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 0x23
jb 0x4066fa
mov eax, dword [eax + 4]
jmp 0x4066fd
add eax, 4
push eax
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x34], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Error_text:__s
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, ebp
call fcn.00402190
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
mov eax, dword [esp + 0xfc]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 0x20
jb 0x40675f
mov ecx, dword [esp + 0xc4]
push ecx
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov ebp, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [ebp + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, ebp
call fcn.00402190
lea edx, [esp + 0xf8]
push edx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.004302ea
push str.L_pVolume__GetProperties_volProp__
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str._nERROR:_COM_call__s_failed.
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str._nERROR:_COM_call__s_failed.
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
add esp, 0x24
push ebp
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Returned_HRESULT__0x_08lx
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Returned_HRESULT__0x_08lx
mov ecx, esi
call fcn.00402190
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
lea eax, [esp + 0x98]
push ebp
push eax
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], 8
mov byte [esp + 0x178], 0x28
jb 0x406850
mov eax, dword [eax + 4]
jmp 0x406853
add eax, 4
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Error_text:__s
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Error_text:__s
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
mov eax, dword [esp + 0xb0]
add esp, 0x24
cmp eax, 8
mov byte [esp + 0x178], 0x25
jb 0x4068b2
mov edx, dword [esp + 0x78]
push edx
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0xf8]
push eax
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], ebp
call fcn.004302ea
push str._pVolume__ClearFlags_VDS_VF_READONLY__
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str._nERROR:_COM_call__s_failed.
call fcn.004026d0
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
add esp, 0x24
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.__Returned_HRESULT__0x_08lx
call fcn.004026d0
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
lea ecx, [esp + 0x98]
push esi
push ecx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], ebp
mov byte [esp + 0x178], 0x31
jb 0x40696e
mov eax, dword [eax + 4]
jmp 0x406971
add eax, 4
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.__Error_text:__s
call fcn.004026d0
lea edx, [esp + 0xfc]
push edx
call fcn.00420010
mov eax, dword [esp + 0xb0]
add esp, 0x24
cmp eax, ebp
mov byte [esp + 0x178], 0x2b
jb 0x4069b5
mov eax, dword [esp + 0x78]
push eax
call fcn.0042fe43
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
call fcn.004026d0
lea ecx, [esp + 0xf8]
push ecx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], esi
call fcn.004302ea
push str._pVolumeMF__Dismount_TRUE__FALSE__
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str._nERROR:_COM_call__s_failed.
call fcn.004026d0
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
add esp, 0x24
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.__Returned_HRESULT__0x_08lx
call fcn.004026d0
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
lea edx, [esp + 0x98]
push esi
push edx
call fcn.0041f780
add esp, 0x2c
cmp dword [eax + 0x18], ebp
mov byte [esp + 0x178], 0x35
jb 0x406a57
mov eax, dword [eax + 4]
jmp 0x406a5a
add eax, 4
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.__Error_text:__s
call fcn.004026d0
lea eax, [esp + 0xfc]
push eax
call fcn.00420010
add esp, 0x24
lea ecx, [esp + 0x74]
mov byte [esp + 0x178], 0x32
call fcn.004012a0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push str.__Please_re_run_VSHADOW.EXE_with_the__tracing_option_to_get_more_details
call fcn.004026d0
lea ecx, [esp + 0xf8]
push ecx
call fcn.00420010
add esp, 0x20
push 0x44f9c4
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], esi
call fcn.004302ea
mov eax, dword [esp + 0x68]
cmp eax, ebx
jne 0x406ad1
xor esi, esi
jmp 0x406aea
mov ecx, dword [esp + 0x6c]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, dword [esp + 0x58]
cmp eax, ebx
jne 0x406af6
xor eax, eax
jmp 0x406b0f
mov ecx, dword [esp + 0x5c]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
je 0x406c39
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.WARNING:_some_volumes_were_not_succesfully_converted_to_read_write_
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.WARNING:_some_volumes_were_not_succesfully_converted_to_read_write_
mov ecx, esi
call fcn.00402190
lea eax, [esp + 0xf8]
push eax
call fcn.00420010
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x78]
add esp, 0x20
mov dword [esp + 0x18], ebx
add ebp, 4
cmp esi, ebx
je 0x406c39
mov ecx, dword [esp + 0x5c]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [esp + 0x18]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jae 0x406c39
sub esp, 0x10
lea edx, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00403380
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x1b0], 0x36
mov word [ecx + 4], bx
call fcn.00401de0
mov byte [esp + 0x1a4], 0x14
call fcn.00403a80
add esp, 0x2c
cmp al, bl
jne 0x406c2d
cmp dword [ebp + 0x14], 8
jb 0x406be9
mov eax, dword [ebp]
jmp 0x406beb
mov eax, ebp
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.__Volume__s_not_found_on_the_system._Clearing_the_read_only_flag_failed_on_it.
mov word [esi + 4], bx
call fcn.0042fe2d
add esp, 4
push eax
push str.__Volume__s_not_found_on_the_system._Clearing_the_read_only_flag_failed_on_it.
mov ecx, esi
call fcn.00402190
lea ecx, [esp + 0xfc]
push ecx
call fcn.00420010
mov esi, dword [esp + 0x7c]
add esp, 0x24
inc dword [esp + 0x18]
add ebp, 0x1c
jmp 0x406b63
lea ecx, [esp + 0x90]
call fcn.00402dd0
mov eax, dword [esp + 0x40]
cmp eax, ebx
mov byte [esp + 0x178], 0xe
je 0x406c5b
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [esp + 0x54]
call fcn.00403340
lea ecx, [esp + 0x64]
call fcn.00403340
mov eax, dword [esp + 0x4c]
cmp eax, ebx
mov byte [esp + 0x178], 5
je 0x406c83
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x38]
cmp eax, ebx
mov byte [esp + 0x178], 2
je 0x406c99
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [esp + 0xdc]
mov byte [esp + 0x178], bl
call fcn.0041fed0
lea ecx, [esp + 0x180]
call fcn.00403340
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x16c]
call fcn.0043053d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x16c
ret 0x10