Function at 0x40dae0
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40dda7
sub esp, 0x34
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x40dd8e
movzx ecx, byte [eax + 4]
test cl, 4
jne 0x40dd78
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [edx]
mov ebp, dword [eax + 8]
lea esi, [esp + 0x40]
mov dword [esp], esi
mov dword [esp + 4], ebp
call ebx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x3c]
movzx ebx, byte [ecx + 4]
xor ebx, 4
mov byte [ecx + 4], bl
mov ebx, dword [ecx + 0xc]
test ebx, ebx
jne 0x40db91
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x28]
mov edx, dword [ecx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.0040a920
mov eax, dword [0x6573b0]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x40db79
mov eax, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
jmp 0x40db89
mov edx, dword [esp + 0x3c]
lea edi, [edx + 0xc]
mov eax, ecx
call fcn.0045f3d0
mov eax, edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
jmp 0x40dbb5
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d0b0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x14]
mov eax, edx
mov edx, dword [esp + 0x38]
movzx ebx, byte [ecx + 5]
mov ebp, ecx
mov ecx, ebx
mov esi, 1
shl esi, cl
lea ebx, [esi - 1]
and ebx, eax
mov esi, dword [ebp + 0x10]
test esi, esi
je 0x40dbf4
mov dword [esp + 0x18], ebx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0040e0b0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x3c]
movzx esi, word [edx + 0x32]
mov dword [esp + 0x20], esi
imul ebx, esi
add ebx, dword [ebp + 0xc]
xor ecx, ecx
xor edi, edi
jmp 0x40dc7e
mov ebx, eax
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x40dcf5
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [ebp]
inc eax
movzx esi, byte [ebp + 5]
cmp eax, 8
jle 0x40dc53
mov dword [esp + 0x1c], edi
mov ecx, esi
mov ebx, 1
shl ebx, cl
shr ebx, 1
lea edi, [ebx + ebx*2]
lea ebx, [ebx + edi*4]
cmp ebx, eax
jb 0x40db97
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x1c]
movzx eax, word [ebp + 6]
xchg esi, eax
cmp al, 0xf
xchg esi, eax
jbe 0x40dc63
mov esi, 0xf
and esi, 0xf
mov ecx, esi
mov ebx, 1
shl ebx, cl
cmp ax, bx
jae 0x40db97
jmp 0x40dced
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x24]
jmp 0x40dcac
mov eax, ebx
lea ebx, [ebx + esi - 4]
mov ebx, dword [ebx]
test ebx, ebx
jne 0x40dc7a
jmp 0x40dc08
inc eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, 8
jae 0x40dc8e
test byte [ebx], al
movzx esi, byte [ebx + eax]
xchg esi, eax
cmp al, 1
xchg esi, eax
ja 0x40dcd5
test ecx, ecx
jne 0x40dcca
mov ecx, ebx
mov edi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x40dc9f
jmp 0x40dc0a
mov esi, ebx
lea ebx, [ebx + eax*4 + 8]
mov ebx, dword [ebx]
cmp dword [esp + 0x40], ebx
je 0x40dce7
mov ebx, esi
jmp 0x40dc9f
mov ebx, esi
mov esi, eax
jmp 0x40dd40
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
test ecx, ecx
jne 0x40dd17
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0040bb60
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
xor edi, edi
mov eax, dword [esp + 0x14]
shr eax, 0x18
cmp al, 5
jae 0x40dd26
add eax, 5
test byte [ecx], al
mov esi, edi
and edi, 7
mov byte [ecx + edi], al
mov ebx, ecx
lea eax, [ecx + esi*4 + 8]
nop
mov ecx, dword [esp + 0x40]
mov dword [eax], ecx
inc dword [ebp]
movzx eax, byte [edx + 0x31]
imul eax, esi
movzx ecx, byte [ebp + 4]
lea eax, [eax + ebx + 0x28]
test cl, 4
je 0x40dd62
and ecx, 0xfffffffb
mov byte [ebp + 4], cl
mov dword [esp + 0x44], eax
add esp, 0x34
ret
lea eax, [0x54c432]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00433a00
lea eax, [0x54c432]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00433a00
lea eax, [0x537fa0]
mov dword [esp], eax
lea eax, [0x57d96c]
mov dword [esp + 4], eax
call fcn.004332d0
nop
call fcn.0045e000
jmp fcn.0040dae0