Function at 0x5325b0
Capabilities:
Delete volume shadow copies

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1d4]
cmp eax, dword [ecx + 8]
jbe 0x532ef1
sub esp, 0x254
mov eax, dword [esp + 0x258]
mov dword [esp], eax
mov ecx, dword [esp + 0x25c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 0x1a4
call fcn.0048f120
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
je 0x53267b
mov dword [esp + 0x224], 0
mov dword [esp + 0x228], 0
test edx, edx
je 0x53262e
mov edx, dword [edx + 4]
mov dword [esp + 0x224], edx
mov dword [esp + 0x228], ebx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x224]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x254
ret
mov dword [esp + 0x1f0], eax
movzx ecx, byte [0x63c1c7]
test cl, cl
je 0x532743
mov eax, dword [0x6532b8]
mov ecx, dword [0x6532bc]
mov dword [esp], 0
mov edx, dword [esp + 0x258]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x25c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
lea edi, [esp + 0x240]
mov edx, eax
xor eax, eax
call fcn.0045f67b
lea ecx, [0x532f90]
mov dword [esp + 0x240], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x244], ecx
mov ebx, dword [esp + 0x25c]
mov dword [esp + 0x248], ebx
mov dword [esp + 0x24c], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x250], edx
lea edx, [esp + 0x240]
mov dword [esp + 0x124], edx
lea edx, [esp + 0x118]
mov dword [esp], edx
call fcn.004322b0
test eax, eax
jne 0x532ba9
mov dword [esp + 0x234], 0
mov dword [esp + 0x238], 0
mov dword [esp + 0x23c], 0
lea eax, [0x532f40]
mov dword [esp + 0x234], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 0x238], eax
mov ecx, dword [esp + 0x25c]
mov dword [esp + 0x23c], ecx
lea edx, [esp + 0x234]
mov dword [esp + 0x100], edx
lea edx, [esp + 0xf4]
mov dword [esp], edx
call fcn.004322b0
test eax, eax
jne 0x532b9d
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
lea eax, [0x532f00]
mov dword [esp + 0x21c], eax
mov eax, dword [esp + 0x1f0]
mov dword [esp + 0x220], eax
lea ecx, [esp + 0x21c]
mov dword [esp + 0xdc], ecx
lea ecx, [esp + 0xd0]
mov dword [esp], ecx
call fcn.004322b0
test eax, eax
jne 0x532b91
mov eax, dword [esp + 0x1f0]
mov dword [esp], eax
call fcn.00490bb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
test eax, eax
je 0x532899
mov dword [esp + 0x214], 0
mov dword [esp + 0x218], 0
test ecx, ecx
je 0x53284c
mov ecx, dword [ecx + 4]
mov dword [esp + 0x214], ecx
mov dword [esp + 0x218], edx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x214]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x254
ret
mov dword [esp + 0x30], ebx
mov dword [esp + 0x1ec], ebp
mov eax, dword [0x657bb0]
mov ecx, dword [0x657bb4]
lea edx, [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004c6ba0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test edx, edx
je 0x532965
mov dword [esp + 0x20c], 0
mov dword [esp + 0x210], 0
test ebx, ebx
je 0x532918
mov ebx, dword [ebx + 4]
mov dword [esp + 0x20c], ebx
mov dword [esp + 0x210], ebp
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x20c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x254
ret
mov dword [esp + 0x200], eax
mov dword [esp + 0x1f8], ecx
mov eax, dword [0x657ba8]
mov ecx, dword [0x657bac]
lea edx, [esp + 0x90]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x200]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1f8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0
call fcn.004c5eb0
mov eax, dword [0x657b88]
mov ecx, dword [0x657b8c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1e4], ebx
lea ebp, [esp + 0x70]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1f4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [0x657b84]
mov ebp, dword [0x657b80]
lea esi, [esp + 0x50]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0044d2b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0x13c]
mov ebx, eax
xor eax, eax
call fcn.0045f656
lea eax, [esp + 0x13c]
mov dword [esp], eax
mov eax, dword [esp + 0x1f4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
call fcn.0052e530
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x532ae3
mov dword [esp + 0x1e8], edx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], 0x100000
mov dword [esp + 8], 0x100000
call fcn.00447590
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1fc], eax
xor ecx, ecx
xor edx, edx
mov ebx, 1
jmp 0x532bc5
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x563d7f]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1f
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
movzx edx, byte [0x63c1c1]
test dl, dl
je 0x532b85
mov dword [esp + 0x22c], 0
mov dword [esp + 0x230], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x5474c0]
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x230], eax
lea eax, [esp + 0x22c]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5fe0
call fcn.004328a0
add esp, 0x254
ret
call fcn.004328a0
add esp, 0x254
ret
call fcn.004328a0
add esp, 0x254
ret
call fcn.004328a0
add esp, 0x254
ret
add ebx, 0x200000
adc ecx, 0
xor eax, 1
mov edx, ebx
mov ebx, eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], ecx
mov byte [esp + 0x2b], bl
mov eax, dword [esp + 0x30]
mov ebp, dword [eax + 0x20]
mov esi, dword [esp + 0x1ec]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
sete al
setl dl
mov ebx, dword [esp + 0x44]
cmp dword [esp + 4], ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
and eax, ebp
or edx, eax
test dl, dl
je 0x532e26
movzx eax, byte [esp + 0x2b]
test al, al
je 0x532bb5
mov eax, dword [esp + 0x1f0]
mov dword [esp], eax
mov edx, dword [esp + 0x1fc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x100000
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ebx
call fcn.0048e510
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
test ecx, ecx
je 0x532c9d
mov ebp, dword [0x657afc]
cmp dword [0x657af8], edx
je 0x532c73
mov ecx, 1
jmp 0x532c95
mov dword [esp + 0x34], eax
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004031f0
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, eax
mov eax, dword [esp + 0x34]
test cl, cl
jne 0x532db0
test eax, eax
je 0x532e26
mov ebx, eax
shr eax, 0x1f
lea ecx, [ebx + eax]
sar ecx, 1
mov dword [esp + 0x34], ecx
movzx eax, byte [0x67e083]
test al, al
je 0x532d02
cmp ecx, 0x100000
ja 0x532ee6
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
mov edx, dword [esp + 0x1fc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x100000
call fcn.0052e820
jmp 0x532d48
cmp ecx, 0x100000
ja 0x532edc
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0x1e4]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1fc]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x100000
call edx
mov ecx, dword [esp + 0x34]
cmp ecx, 0x100000
ja 0x532ed2
mov eax, dword [esp + 0x1f0]
mov dword [esp], eax
mov edx, dword [esp + 0x1fc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x100000
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x10], ebx
call fcn.0048eba0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x532dbc
movzx eax, byte [esp + 0x2b]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x44]
jmp 0x532bb5
call fcn.004328a0
add esp, 0x254
ret
mov dword [esp + 0x204], 0
mov dword [esp + 0x208], 0
test ecx, ecx
je 0x532dd9
mov ecx, dword [ecx + 4]
mov dword [esp + 0x204], ecx
mov dword [esp + 0x208], edx
mov eax, dword [0x6575ec]
lea ecx, [0x59a878]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x204]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004adf70
call fcn.004328a0
add esp, 0x254
ret
mov dword [esp], 0
lea eax, [0x560f9f]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x16
mov eax, dword [esp + 0x258]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x10], eax
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
movzx edx, byte [0x63c1c1]
test dl, dl
je 0x532ec6
mov dword [esp + 0x22c], 0
mov dword [esp + 0x230], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x5474c0]
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x230], eax
lea eax, [esp + 0x22c]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5fe0
call fcn.004328a0
add esp, 0x254
ret
mov edx, 0x100000
call fcn.0045f510
mov edx, 0x100000
call fcn.0045f510
mov edx, 0x100000
call fcn.0045f510
nop
call fcn.0045e080
jmp fcn.005325b0