Function at 0x407f10
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x408201
sub esp, 0x20
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x28]
mov edx, dword [eax + 0x24]
test ecx, ecx
je 0x4081ea
mov ecx, dword [esp + 0x28]
movzx ebx, byte [ecx + 0xc]
test bl, 1
jne 0x407f61
movzx ebx, byte [esp + 0x2c]
test bl, bl
je 0x40813c
mov dword [esp + 0x30], 0
add esp, 0x20
ret
lea eax, [0x652ea8]
mov dword [esp], eax
call fcn.00401bf0
mov eax, dword [esp + 4]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 8], ecx
call fcn.00408210
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x40807c
nop
lea eax, [0x67e134]
mov dword [esp], eax
call fcn.00409110
mov eax, dword [0x652ea8]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 8], ecx
call fcn.00408210
mov eax, dword [esp + 0xc]
test eax, eax
je 0x407fe8
mov dword [esp + 0x14], eax
nop
lea eax, [0x67e134]
mov dword [esp], eax
call fcn.00409310
mov eax, dword [esp + 0x14]
jmp 0x40807c
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x28]
dec ecx
shl ecx, 2
add ecx, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
lea ecx, [0x67fb20]
mov dword [esp + 8], ecx
call fcn.0040b600
mov edi, dword [esp + 0xc]
test byte [edi], al
mov eax, dword [0x67e2d0]
test eax, eax
jne 0x40802f
mov eax, dword [esp + 0x24]
mov dword [edi], eax
mov ecx, dword [esp + 0x28]
mov dword [edi + 4], ecx
jmp 0x40804a
mov eax, dword [esp + 0x24]
call fcn.0045f450
lea ecx, [edi + 4]
mov edx, edi
mov edi, ecx
mov eax, dword [esp + 0x28]
call fcn.0045f450
mov edi, edx
mov dword [esp + 0x1c], edi
mov dword [edi + 8], 0
mov dword [esp], edi
call fcn.00408450
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.004082c0
nop
lea eax, [0x67e134]
mov dword [esp], eax
call fcn.00409310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x408098
movzx ecx, byte [esp + 0x2c]
test cl, cl
je 0x4080a0
mov dword [esp + 0x30], 0
add esp, 0x20
ret
mov dword [esp + 0x30], eax
add esp, 0x20
ret
mov dword [esp], eax
call fcn.00408450
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x10], ecx
lea edx, [0x5509a0]
mov dword [esp], edx
call fcn.0040b170
mov eax, dword [esp + 4]
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x40811e
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x10], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x40810c
mov ecx, dword [esp + 0x18]
mov dword [eax + 0xc], ecx
lea ecx, [0x54b040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x18]
call fcn.0045f450
mov eax, ecx
jmp 0x4080fa
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f450
lea edi, [ecx + 8]
mov eax, dword [esp + 0x24]
call fcn.0045f450
mov eax, ecx
jmp 0x4080e2
mov ecx, dword [edx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004589c0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00459190
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x10], ecx
lea edx, [0x5509a0]
mov dword [esp], edx
call fcn.0040b170
mov eax, dword [esp + 4]
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4081cc
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x10], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4081ba
mov ecx, dword [esp + 0x18]
mov dword [eax + 0xc], ecx
lea ecx, [0x54b040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x18]
call fcn.0045f450
mov eax, ecx
jmp 0x4081a8
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f450
lea edi, [ecx + 8]
mov eax, dword [esp + 0x24]
call fcn.0045f450
mov eax, ecx
jmp 0x408190
lea eax, [0x563dbd]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.00433a80
nop
call fcn.0045e080
jmp fcn.00407f10