Function at 0x531b90
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1d0]
cmp eax, dword [ecx + 8]
jbe 0x5324b6
sub esp, 0x250
mov eax, dword [esp + 0x254]
mov dword [esp], eax
mov ecx, dword [esp + 0x258]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 0x1a4
call fcn.0048f120
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
je 0x531c5b
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0
test edx, edx
je 0x531c0e
mov edx, dword [edx + 4]
mov dword [esp + 0x220], edx
mov dword [esp + 0x224], ebx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x220]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp + 0x1ec], eax
movzx ecx, byte [0x63c1c7]
test cl, cl
je 0x531d23
mov eax, dword [0x6532b8]
mov ecx, dword [0x6532bc]
mov dword [esp], 0
mov edx, dword [esp + 0x254]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x258]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x48], ecx
lea edi, [esp + 0x23c]
mov edx, eax
xor eax, eax
call fcn.0045f67b
lea ecx, [0x532550]
mov dword [esp + 0x23c], ecx
mov ecx, dword [esp + 0x254]
mov dword [esp + 0x240], ecx
mov ebx, dword [esp + 0x258]
mov dword [esp + 0x244], ebx
mov dword [esp + 0x248], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x24c], edx
lea edx, [esp + 0x23c]
mov dword [esp + 0x120], edx
lea edx, [esp + 0x114]
mov dword [esp], edx
call fcn.004322b0
test eax, eax
jne 0x532185
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
mov dword [esp + 0x238], 0
lea eax, [0x532500]
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 0x234], eax
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x238], ecx
lea edx, [esp + 0x230]
mov dword [esp + 0xfc], edx
lea edx, [esp + 0xf0]
mov dword [esp], edx
call fcn.004322b0
test eax, eax
jne 0x532179
mov dword [esp + 0x218], 0
mov dword [esp + 0x21c], 0
lea eax, [0x5324c0]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x1ec]
mov dword [esp + 0x21c], eax
lea ecx, [esp + 0x218]
mov dword [esp + 0xd8], ecx
lea ecx, [esp + 0xcc]
mov dword [esp], ecx
call fcn.004322b0
test eax, eax
jne 0x53216d
mov eax, dword [esp + 0x1ec]
mov dword [esp], eax
call fcn.00490bb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
test eax, eax
je 0x531e79
mov dword [esp + 0x210], 0
mov dword [esp + 0x214], 0
test ecx, ecx
je 0x531e2c
mov ecx, dword [ecx + 4]
mov dword [esp + 0x210], ecx
mov dword [esp + 0x214], edx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x210]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1e8], ebp
mov eax, dword [0x657bb0]
mov ecx, dword [0x657bb4]
lea edx, [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004c6ba0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test edx, edx
je 0x531f45
mov dword [esp + 0x208], 0
mov dword [esp + 0x20c], 0
test ebx, ebx
je 0x531ef8
mov ebx, dword [ebx + 4]
mov dword [esp + 0x208], ebx
mov dword [esp + 0x20c], ebp
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x208]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp + 0x1fc], eax
mov dword [esp + 0x1f4], ecx
mov eax, dword [0x657ba8]
mov ecx, dword [0x657bac]
lea edx, [esp + 0x8c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1fc]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1f4]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0
call fcn.004c5eb0
mov eax, dword [0x657b88]
mov ecx, dword [0x657b8c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1e0], ebx
lea ebp, [esp + 0x6c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1f0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x3c], edx
mov ebx, dword [0x657b84]
mov ebp, dword [0x657b80]
lea esi, [esp + 0x4c]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0x138]
mov ebx, eax
xor eax, eax
call fcn.0045f656
lea eax, [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x1f0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
call fcn.0052e530
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
test eax, eax
je 0x532137
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x563d7f]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1f
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
movzx edx, byte [0x63c1c1]
test dl, dl
je 0x53212b
mov dword [esp + 0x228], 0
mov dword [esp + 0x22c], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x5474c0]
mov dword [esp + 0x228], ecx
mov dword [esp + 0x22c], eax
lea eax, [esp + 0x228]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5fe0
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp + 0x1e4], edx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], 0x100000
mov dword [esp + 8], 0x100000
call fcn.00447590
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1f8], eax
xor ecx, ecx
xor edx, edx
jmp 0x5321a3
call fcn.004328a0
add esp, 0x250
ret
call fcn.004328a0
add esp, 0x250
ret
call fcn.004328a0
add esp, 0x250
ret
mov eax, dword [esp + 0x40]
add eax, 0x100000
mov ecx, dword [esp + 0x44]
adc ecx, 0
mov edx, eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x2c]
mov ebx, dword [eax + 0x20]
mov ebp, dword [esp + 0x1e8]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp ecx, eax
sete al
setl dl
mov ebx, dword [esp + 0x40]
cmp dword [esp + 4], ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
and eax, ebp
or edx, eax
test dl, dl
je 0x5323eb
mov eax, dword [esp + 0x1ec]
mov dword [esp], eax
mov edx, dword [esp + 0x1f8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x100000
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ebx
call fcn.0048e510
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
test ecx, ecx
je 0x53226e
mov ebp, dword [0x657afc]
cmp dword [0x657af8], edx
je 0x532244
mov ecx, 1
jmp 0x532266
mov dword [esp + 0x30], eax
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004031f0
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, eax
mov eax, dword [esp + 0x30]
test cl, cl
jne 0x532375
test eax, eax
je 0x5323eb
mov ebx, eax
shr eax, 0x1f
lea ecx, [ebx + eax]
sar ecx, 1
mov dword [esp + 0x30], ecx
movzx eax, byte [0x67e083]
test al, al
je 0x5322d3
cmp ecx, 0x100000
ja 0x5324ab
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
mov edx, dword [esp + 0x1f8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x100000
call fcn.0052e820
jmp 0x532319
cmp ecx, 0x100000
ja 0x5324a1
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0x1e0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1f8]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x100000
call edx
mov ecx, dword [esp + 0x30]
cmp ecx, 0x100000
ja 0x532497
mov eax, dword [esp + 0x1ec]
mov dword [esp], eax
mov edx, dword [esp + 0x1f8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x10], ebx
call fcn.0048eba0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
je 0x532191
jmp 0x532381
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp + 0x200], 0
mov dword [esp + 0x204], 0
test ecx, ecx
je 0x53239e
mov ecx, dword [ecx + 4]
mov dword [esp + 0x200], ecx
mov dword [esp + 0x204], edx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x200]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x250
ret
mov dword [esp], 0
lea eax, [0x55ebe9]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xf
mov eax, dword [esp + 0x254]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 0x10], eax
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
movzx edx, byte [0x63c1c1]
test dl, dl
je 0x53248b
mov dword [esp + 0x228], 0
mov dword [esp + 0x22c], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x5474c0]
mov dword [esp + 0x228], ecx
mov dword [esp + 0x22c], eax
lea eax, [esp + 0x228]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5fe0
call fcn.004328a0
add esp, 0x250
ret
mov edx, 0x100000
call fcn.0045f510
mov edx, 0x100000
call fcn.0045f510
mov edx, 0x100000
call fcn.0045f510
nop
call fcn.0045e080
jmp fcn.00531b90