Function at 0x42af20
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42b1be
sub esp, 0x28
mov ebp, dword [0x657640]
test ebp, ebp
jne 0x42af8a
mov dword [esp], 0xafc7c
lea eax, [0x67fb00]
mov dword [esp + 4], eax
call fcn.00413070
mov eax, dword [0x67e2d0]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x42af6f
mov dword [0x657640], ecx
jmp 0x42af7c
lea edi, [0x657640]
mov eax, ecx
call fcn.0045f450
mov ebp, dword [0x657640]
test ebp, ebp
je 0x42b1a7
mov ebp, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
xor eax, eax
xor edx, edx
jmp 0x42afae
mov esi, dword [ebp + eax*4]
inc eax
add esi, edx
mov edi, esi
shl esi, 0xa
lea edx, [edi + esi]
mov esi, edx
shr edx, 6
xor edx, esi
cmp ecx, eax
jg 0x42af98
mov esi, dword [0x657640]
test byte [esi], al
mov edi, dword [esp + 0x30]
mov eax, ebp
lea ebp, [edx + edi]
mov edx, ebp
shl ebp, 0xa
add ebp, edx
mov edx, ebp
shr ebp, 6
xor ebp, edx
lea ebp, [ebp + ebp*8]
mov edx, ebp
shr ebp, 0xb
xor ebp, edx
mov edx, eax
mov eax, 0x74d43f79
mov ebx, edx
mul ebp
add edx, ebp
rcr edx, 1
shr edx, 0x11
mov eax, edi
imul edi, edx, 0x2bf1f
mov edx, ebp
sub ebp, edi
cmp ebp, 0x2bf1f
jae 0x42b19b
mov dword [esp + 0x1c], ebp
mov esi, dword [esi + ebp*4]
mov edi, dword [esp + 0x2c]
jmp 0x42b015
mov esi, dword [esi]
test esi, esi
je 0x42b059
cmp dword [esi + 8], edi
jne 0x42b013
cmp dword [esi + 0xc], edx
jne 0x42b013
cmp dword [esi + 0x10], eax
jne 0x42b013
mov ebp, dword [esi + 0x14]
cmp ebp, 0x20
ja 0x42b18f
cmp ecx, ebp
je 0x42b03e
mov ebp, dword [esp + 0x1c]
jmp 0x42b013
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x20], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x20]
jmp 0x42b157
movzx esi, byte [esp + 0x40]
xchg esi, eax
test al, al
xchg esi, eax
je 0x42b12a
mov dword [esp + 0x18], edx
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.0042add0
mov eax, dword [esp + 8]
nop
mov edx, dword [eax + 0x14]
cmp edx, 0x20
ja 0x42b136
mov ecx, dword [esp + 0x38]
cmp ecx, edx
jl 0x42b093
mov ecx, edx
lea edx, [eax + 0x18]
mov ebx, dword [esp + 0x34]
cmp ebx, edx
je 0x42b0b9
mov dword [esp + 0x10], eax
mov dword [esp], edx
mov dword [esp + 4], ebx
shl ecx, 2
mov dword [esp + 8], ecx
call fcn.0045fd70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x10], ecx
mov ecx, dword [0x657640]
test byte [ecx], al
mov edx, dword [esp + 0x1c]
mov ecx, dword [ecx + edx*4]
mov dword [eax], ecx
mov ecx, dword [0x657640]
test byte [ecx], al
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x2c]
cmp ecx, 1
jne 0x42b0fd
mov ecx, dword [0x67e138]
mov dword [eax + 4], ecx
mov dword [0x67e138], eax
jmp 0x42b122
cmp ecx, 3
jne 0x42b113
mov ecx, dword [0x67e1a4]
mov dword [eax + 4], ecx
mov dword [0x67e1a4], eax
jmp 0x42b122
mov ecx, dword [0x67e0dc]
mov dword [eax + 4], ecx
mov dword [0x67e0dc], eax
mov dword [esp + 0x44], eax
add esp, 0x28
ret
mov dword [esp + 0x44], 0
add esp, 0x28
ret
mov ebx, 0x20
call fcn.0045f560
lea ebp, [edi + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
cmp edi, ebp
jge 0x42b180
mov esi, dword [esi + edi*4 + 0x18]
cmp ecx, edi
jbe 0x42b188
lea ebp, [ebx + edi*4]
cmp dword [ebp], esi
je 0x42b140
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x2c]
jmp 0x42b013
mov dword [esp + 0x44], esi
add esp, 0x28
ret
mov eax, edi
call fcn.0045f4d0
mov edx, ebp
mov ebx, 0x20
call fcn.0045f560
mov eax, ebp
mov ecx, 0x2bf1f
call fcn.0045f4d0
lea eax, [0x563ef3]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.00433a80
nop
call fcn.0045e080
jmp fcn.0042af20