Function at 0x45a300
Capabilities:
Delete volume shadow copies
Run powershell expression

Disassembly:
lea r12, [rsp - 0xa0]
cmp r12, qword [r14 + 0x10]
jbe 0x45af7e
sub rsp, 0x120
mov qword [rsp + 0x118], rbp
lea rbp, [rsp + 0x118]
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rbx
lea rax, [0x00584500]
mov rbx, rcx
lea rcx, [rsp + 0x108]
call fcn.0040e9e0
test bl, bl
jne 0x45a949
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x108], rdx
mov rsi, qword [rsp + 0x130]
mov qword [rsp + 0x110], rsi
lea rax, [0x00584500]
mov rbx, qword [rsp + 0x100]
lea rcx, [rsp + 0x108]
call fcn.0040ee20
test byte [rax], al
mov rax, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x130]
nop
cmp rax, rdx
je 0x45a934
movzx ecx, byte [rax + 0x17]
mov ebx, ecx
and ecx, 0x1f
movzx esi, byte [rdx + 0x17]
and esi, 0x1f
nop dword [rax]
cmp sil, cl
jne 0x45a922
mov byte [rsp + 0x1b], bl
mov byte [rsp + 0x1a], cl
call fcn.00459020
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x68], rbx
mov rax, qword [rsp + 0x130]
call fcn.00459020
mov rcx, qword [rsp + 0x68]
cmp rbx, rcx
jne 0x45a42e
mov rbx, rax
mov rax, qword [rsp + 0xf8]
call fcn.00402ec0
test al, al
jne 0x45a441
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
nop
ret
mov rax, qword [rsp + 0x128]
call fcn.004590c0
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x130]
nop
call fcn.004590c0
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
jne 0x45a485
test rax, rax
je 0x45a50d
nop dword [rax + rax]
test rcx, rcx
je 0x45a48a
test rax, rax
jne 0x45a49c
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov qword [rsp + 0x98], rax
mov ebx, dword [rcx]
mov rax, qword [rsp + 0x128]
call fcn.00459200
call fcn.00459960
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x30], rbx
mov rcx, qword [rsp + 0x98]
mov ecx, dword [rcx]
mov rax, qword [rsp + 0x130]
mov ebx, ecx
call fcn.00459200
nop
call fcn.00459960
mov rcx, qword [rsp + 0x30]
cmp rbx, rcx
jne 0x45a910
mov rbx, rax
mov rax, qword [rsp + 0xb8]
nop
call fcn.00402ec0
test al, al
je 0x45a910
movzx esi, byte [rsp + 0x1a]
lea edi, [rsi - 1]
cmp dil, 0xf
jbe 0x45a8fb
nop
cmp sil, 0x15
ja 0x45a7a9
cmp sil, 0x12
jbe 0x45a6f8
cmp sil, 0x13
jne 0x45a5eb
mov rsi, qword [rsp + 0x128]
movzx edi, word [rsi + 0x32]
mov r8, qword [rsp + 0x130]
cmp word [r8 + 0x32], di
jne 0x45a5d9
movzx ecx, word [rsi + 0x30]
movzx edi, word [r8 + 0x30]
cmp di, cx
jne 0x45a5d9
nop
movzx r9d, byte [rsi + 0x14]
test r9b, 1
je 0x45a57e
mov eax, 0x48
jmp 0x45a583
mov eax, 0x38
lea r9, [rsi + rax]
cmp rcx, 0x100000
ja 0x45af73
nop
movzx edx, byte [r8 + 0x14]
test dl, 1
je 0x45a5a6
mov eax, 0x48
jmp 0x45a5ab
mov eax, 0x38
mov word [rsp + 0x1e], cx
mov word [rsp + 0x1c], di
mov qword [rsp + 0x88], r9
nop
lea rdx, [r8 + rax]
mov qword [rsp + 0x80], rdx
mov r10, qword [rsp + 0x100]
xor eax, eax
jmp 0x45add8
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
cmp sil, 0x14
jne 0x45a696
mov rcx, qword [rsp + 0x128]
mov rax, qword [rcx + 0x30]
call fcn.00459960
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [rsp + 0x130]
mov rdx, qword [rcx + 0x30]
mov rax, rdx
call fcn.00459960
mov rcx, qword [rsp + 0x68]
cmp rbx, rcx
jne 0x45a684
mov rbx, rax
mov rax, qword [rsp + 0xf8]
nop dword [rax]
call fcn.00402ec0
test al, al
je 0x45a684
mov rdx, qword [rsp + 0x128]
mov rsi, qword [rdx + 0x40]
mov rdi, qword [rsp + 0x130]
nop dword [rax]
cmp qword [rdi + 0x40], rsi
jne 0x45a672
mov qword [rsp + 0x68], rsi
xor eax, eax
jmp 0x45abae
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov rdx, qword [rsp + 0x128]
mov rax, qword [rdx + 0x30]
mov rsi, qword [rsp + 0x130]
mov rbx, qword [rsi + 0x30]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
test al, al
jne 0x45a6c3
xor eax, eax
jmp 0x45a6e8
mov rdx, qword [rsp + 0x128]
mov rax, qword [rdx + 0x38]
mov rdx, qword [rsp + 0x130]
mov rbx, qword [rdx + 0x38]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
cmp sil, 0x11
je 0x45a74f
nop
cmp sil, 0x12
jne 0x45a95e
mov rdx, qword [rsp + 0x128]
mov rsi, qword [rdx + 0x38]
mov rdi, qword [rsp + 0x130]
nop
cmp qword [rdi + 0x38], rsi
je 0x45a72a
xor eax, eax
jmp 0x45a73f
mov rax, qword [rdx + 0x30]
mov rbx, qword [rdi + 0x30]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov rdx, qword [rsp + 0x128]
mov rax, qword [rdx + 0x30]
mov rsi, qword [rsp + 0x130]
mov rbx, qword [rsi + 0x30]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
test al, al
je 0x45a795
mov rcx, qword [rsp + 0x128]
mov rcx, qword [rcx + 0x40]
mov rdx, qword [rsp + 0x130]
cmp qword [rdx + 0x40], rcx
sete cl
jmp 0x45a797
xor ecx, ecx
mov eax, ecx
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
cmp sil, 0x17
ja 0x45a820
cmp sil, 0x16
jne 0x45a7ea
mov rdx, qword [rsp + 0x128]
mov rax, qword [rdx + 0x30]
mov rdx, qword [rsp + 0x130]
mov rbx, qword [rdx + 0x30]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov rdx, qword [rsp + 0x128]
mov rax, qword [rdx + 0x30]
mov rdx, qword [rsp + 0x130]
mov rbx, qword [rdx + 0x30]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
cmp sil, 0x18
je 0x45a8e6
cmp sil, 0x19
jne 0x45a8e0
mov rcx, qword [rsp + 0x130]
mov rdx, qword [rcx + 0x40]
mov rbx, qword [rsp + 0x128]
cmp qword [rbx + 0x40], rdx
jne 0x45a8cb
mov rax, qword [rbx + 0x30]
call fcn.00459960
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [rsp + 0x130]
mov rdx, qword [rcx + 0x30]
mov rax, rdx
call fcn.00459960
mov rcx, qword [rsp + 0x68]
nop dword [rax]
cmp rbx, rcx
jne 0x45a8b9
mov rbx, rax
mov rax, qword [rsp + 0xf8]
call fcn.00402ec0
test al, al
je 0x45a8b9
mov rdx, qword [rsp + 0x128]
mov rbx, qword [rdx + 0x40]
mov qword [rsp + 0x68], rbx
mov rsi, qword [rsp + 0x130]
xor eax, eax
jmp 0x45a9c3
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
cmp sil, 0x1a
jne 0x45a95e
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
nop
call fcn.004372e0
lea rax, [0x005b3110]
mov ebx, 0x1e
call fcn.00437be0
movzx eax, byte [rsp + 0x1b]
and eax, 0x1f
nop
call fcn.004378e0
call fcn.00437540
call fcn.00437360
lea rax, [0x005b2bb8]
mov ebx, 0x1d
nop dword [rax + rax]
call fcn.00435b40
mov rdi, qword [rsp + 0x38]
lea rax, [rdi + 1]
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x128]
cmp rax, rbx
jge 0x45ab71
mov rdi, qword [rdx + 0x38]
mov rcx, qword [rdx + 0x40]
cmp rax, rcx
jae 0x45ab8b
lea r8, [rax + rax*2]
mov r9, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x40]
cmp rax, rcx
jae 0x45ab86
mov qword [rsp + 0x60], r8
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xe8], r9
mov qword [rsp + 0x38], rax
mov rax, qword [rdi + r8*8]
call fcn.00459960
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xe8]
mov rsi, qword [rdx + rcx*8]
mov rax, rsi
call fcn.00459960
mov rcx, qword [rsp + 0x58]
cmp rbx, rcx
jne 0x45ab5f
mov rbx, rax
mov rax, qword [rsp + 0xf8]
call fcn.00402ec0
nop dword [rax]
test al, al
je 0x45ab5f
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0xf0]
mov rax, qword [rsi + rdx*8 + 8]
mov rdi, qword [rsp + 0xe8]
mov rbx, qword [rdi + rdx*8 + 8]
mov rcx, qword [rsp + 0x100]
call fcn.0045a300
test al, al
je 0x45ab4d
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xf0]
mov rax, qword [rdx + rcx*8]
call fcn.00459a20
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xe8]
mov rsi, qword [rdx + rcx*8]
mov rax, rsi
call fcn.00459a20
mov rcx, qword [rsp + 0x58]
nop dword [rax]
cmp rbx, rcx
jne 0x45ab3b
mov rbx, rax
mov rax, qword [rsp + 0xf8]
call fcn.00402ec0
test al, al
je 0x45ab3b
mov rdx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0xf0]
mov rbx, qword [rbx + rdx*8 + 0x10]
mov rsi, qword [rsp + 0xe8]
mov rdx, qword [rsi + rdx*8 + 0x10]
nop dword [rax + rax]
cmp rdx, rbx
je 0x45a9a5
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
call fcn.00462280
call fcn.00462280
mov r8, qword [rsp + 0x40]
lea rax, [r8 + 1]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x128]
cmp rax, rsi
jge 0x45ad7e
mov r8, qword [rdx + 0x38]
mov rcx, qword [rdx + 0x40]
nop
cmp rax, rcx
jae 0x45ad98
lea r9, [r8 + rax*8]
mov r10, qword [rdi + 0x38]
mov rcx, qword [rdi + 0x40]
cmp rax, rcx
jae 0x45ad93
mov qword [rsp + 0xe0], r10
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0xa8], r9
mov ebx, dword [r8 + rax*8]
mov rax, r9
call fcn.00459200
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0xe0]
lea rsi, [rdx + rcx*8]
mov qword [rsp + 0x90], rsi
mov ebx, dword [rdx + rcx*8]
mov rax, rsi
call fcn.00459200
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xd0]
call fcn.00459960
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0xc8]
nop dword [rax]
call fcn.00459960
mov rcx, qword [rsp + 0x60]
cmp rbx, rcx
jne 0x45ad6c
mov rbx, rax
mov rax, qword [rsp + 0xc0]
nop
call fcn.00402ec0
test al, al
je 0x45ad6c
mov rax, qword [rsp + 0xd0]
call fcn.00459b20
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0xc8]
call fcn.00459b20
mov rcx, qword [rsp + 0x60]
nop dword [rax]
cmp rbx, rcx
jne 0x45ad5a
mov rbx, rax
mov rax, qword [rsp + 0xf8]
call fcn.00402ec0
test al, al
je 0x45ad5a
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0xd8]
mov ebx, dword [rdx + rcx*8 + 4]
mov rax, qword [rsp + 0xa8]
call fcn.004594a0
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0xe0]
mov ebx, dword [rdx + rcx*8 + 4]
mov rax, qword [rsp + 0x90]
nop dword [rax]
call fcn.004594a0
mov rbx, rax
mov rcx, qword [rsp + 0x100]
mov rax, qword [rsp + 0xb0]
call fcn.0045a300
nop dword [rax]
test al, al
jne 0x45ab90
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
call fcn.00462280
call fcn.00462280
mov r11, qword [rsp + 0x50]
lea rax, [r11 + 1]
movzx ecx, word [rsp + 0x1e]
movzx edi, word [rsp + 0x1c]
mov r10, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x80]
mov r9, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x128]
mov r8, qword [rsp + 0x130]
cmp rax, rcx
jge 0x45ae16
mov r11, qword [r9 + rax*8]
cmp rax, rdi
jae 0x45af6c
mov qword [rsp + 0x50], rax
mov rbx, qword [rdx + rax*8]
mov rcx, r10
mov rax, r11
call fcn.0045a300
nop
test al, al
jne 0x45ad9d
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
nop
movzx edx, byte [rsi + 0x14]
nop dword [rax + rax]
test dl, 1
je 0x45ae2c
mov eax, 0x48
jmp 0x45ae31
mov eax, 0x38
movzx edx, word [rsi + 0x32]
and edx, 0x7fff
movzx edi, word [rsi + 0x30]
add edx, edi
add rsi, rax
movzx ecx, dx
cmp rdi, rcx
ja 0x45af65
nop
sub rcx, rdi
lea rdx, [rdi - 0x100000]
shl rdi, 3
sar rdx, 0x3f
and rdi, rdx
lea rdx, [rsi + rdi]
movzx esi, byte [r8 + 0x14]
test sil, 1
je 0x45ae7c
mov eax, 0x48
jmp 0x45ae81
mov eax, 0x38
movzx esi, word [r8 + 0x32]
and esi, 0x7fff
movzx edi, word [r8 + 0x30]
add esi, edi
add r8, rax
movzx esi, si
nop dword [rax]
cmp rdi, rsi
ja 0x45af58
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x78], rdx
sub rsi, rdi
mov qword [rsp + 0x20], rsi
lea r9, [rdi - 0x100000]
shl rdi, 3
sar r9, 0x3f
and rdi, r9
add rdi, r8
mov qword [rsp + 0x70], rdi
xor eax, eax
jmp 0x45af00
mov r8, qword [rsp + 0x48]
lea rax, [r8 + 1]
mov rcx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x20]
mov r10, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
nop
cmp rax, rcx
jge 0x45af3b
mov r8, qword [rdx + rax*8]
cmp rax, rsi
jae 0x45af50
mov qword [rsp + 0x48], rax
mov rbx, qword [rdi + rax*8]
mov rcx, r10
mov rax, r8
nop dword [rax]
call fcn.0045a300
test al, al
jne 0x45aed9
xor eax, eax
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov eax, 1
mov rbp, qword [rsp + 0x118]
add rsp, 0x120
ret
mov rcx, rsi
call fcn.00462280
mov eax, edi
mov rcx, rsi
nop dword [rax]
call fcn.00462340
mov eax, edi
call fcn.00462340
mov ecx, edi
call fcn.00462280
mov edx, 0x100000
call fcn.004622c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0045fba0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.0045a300