Function at 0x40dab0
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40dd77
sub esp, 0x34
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x40dd5e
movzx ecx, byte [eax + 4]
test cl, 4
jne 0x40dd48
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [edx]
mov ebp, dword [eax + 8]
lea esi, [esp + 0x40]
mov dword [esp], esi
mov dword [esp + 4], ebp
call ebx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x3c]
movzx ebx, byte [ecx + 4]
xor ebx, 4
mov byte [ecx + 4], bl
mov ebx, dword [ecx + 0xc]
test ebx, ebx
jne 0x40db61
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x28]
mov edx, dword [ecx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.0040a8f0
mov eax, dword [0x67e2d0]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x40db49
mov eax, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
jmp 0x40db59
mov edx, dword [esp + 0x3c]
lea edi, [edx + 0xc]
mov eax, ecx
call fcn.0045f450
mov eax, edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
jmp 0x40db85
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d080
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x14]
mov eax, edx
mov edx, dword [esp + 0x38]
movzx ebx, byte [ecx + 5]
mov ebp, ecx
mov ecx, ebx
mov esi, 1
shl esi, cl
lea ebx, [esi - 1]
and ebx, eax
mov esi, dword [ebp + 0x10]
test esi, esi
je 0x40dbc4
mov dword [esp + 0x18], ebx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0040e080
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x3c]
movzx esi, word [edx + 0x32]
mov dword [esp + 0x20], esi
imul ebx, esi
add ebx, dword [ebp + 0xc]
xor ecx, ecx
xor edi, edi
jmp 0x40dc4e
mov ebx, eax
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x40dcc5
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [ebp]
inc eax
movzx esi, byte [ebp + 5]
cmp eax, 8
jle 0x40dc23
mov dword [esp + 0x1c], edi
mov ecx, esi
mov ebx, 1
shl ebx, cl
shr ebx, 1
lea edi, [ebx + ebx*2]
lea ebx, [ebx + edi*4]
cmp ebx, eax
jb 0x40db67
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x1c]
movzx eax, word [ebp + 6]
xchg esi, eax
cmp al, 0xf
xchg esi, eax
jbe 0x40dc33
mov esi, 0xf
and esi, 0xf
mov ecx, esi
mov ebx, 1
shl ebx, cl
cmp ax, bx
jae 0x40db67
jmp 0x40dcbd
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x24]
jmp 0x40dc7c
mov eax, ebx
lea ebx, [ebx + esi - 4]
mov ebx, dword [ebx]
test ebx, ebx
jne 0x40dc4a
jmp 0x40dbd8
inc eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, 8
jae 0x40dc5e
test byte [ebx], al
movzx esi, byte [ebx + eax]
xchg esi, eax
cmp al, 1
xchg esi, eax
ja 0x40dca5
test ecx, ecx
jne 0x40dc9a
mov ecx, ebx
mov edi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x40dc6f
jmp 0x40dbda
mov esi, ebx
lea ebx, [ebx + eax*4 + 8]
mov ebx, dword [ebx]
cmp dword [esp + 0x40], ebx
je 0x40dcb7
mov ebx, esi
jmp 0x40dc6f
mov ebx, esi
mov esi, eax
jmp 0x40dd10
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
test ecx, ecx
jne 0x40dce7
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0040bb30
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
xor edi, edi
mov eax, dword [esp + 0x14]
shr eax, 0x18
cmp al, 5
jae 0x40dcf6
add eax, 5
test byte [ecx], al
mov esi, edi
and edi, 7
mov byte [ecx + edi], al
mov ebx, ecx
lea eax, [ecx + esi*4 + 8]
nop
mov ecx, dword [esp + 0x40]
mov dword [eax], ecx
inc dword [ebp]
movzx eax, byte [edx + 0x31]
imul eax, esi
movzx ecx, byte [ebp + 4]
lea eax, [eax + ebx + 0x28]
test cl, 4
je 0x40dd32
and ecx, 0xfffffffb
mov byte [ebp + 4], cl
mov dword [esp + 0x44], eax
add esp, 0x34
ret
lea eax, [0x560a68]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00433a80
lea eax, [0x560a68]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00433a80
lea eax, [0x54a860]
mov dword [esp], eax
lea eax, [0x59a674]
mov dword [esp + 4], eax
call fcn.00433350
nop
call fcn.0045e080
jmp fcn.0040dab0