Function at 0x42f6d0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x42fa1e
sub esp, 0x8c
lea edi, [esp + 0x5a]
lea esi, [0x561a4c]
call fcn.0045fb54
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea ecx, [esp + 0x5a]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.0042e510
mov eax, dword [0x67e2d0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f73c
mov dword [0x657600], ecx
jmp 0x42f749
lea edi, [0x657600]
mov eax, ecx
call fcn.0045f450
test ecx, ecx
je 0x42fa07
lea edi, [esp + 0x42]
lea esi, [0x561adc]
call fcn.0045fb54
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea ecx, [esp + 0x42]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.0042e510
mov eax, dword [0x67e2d0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f79d
mov dword [0x657610], ecx
jmp 0x42f7aa
lea edi, [0x657610]
mov eax, ecx
call fcn.0045f450
mov dword [esp + 0x72], 0x72657551
lea edi, [esp + 0x74]
lea esi, [0x5624d4]
call fcn.0045fb54
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea eax, [esp + 0x72]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], 0x1a
call fcn.0042e510
mov eax, dword [0x67e2d0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f7fe
mov dword [0x657614], ecx
jmp 0x42f80b
lea edi, [0x657614]
mov eax, ecx
call fcn.0045f450
mov eax, dword [0x657610]
test eax, eax
je 0x42f9f1
test ecx, ecx
je 0x42f9f1
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [0x657614]
lea ecx, [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00430e10
mov eax, dword [esp + 0x3c]
test eax, eax
sete cl
mov edx, dword [esp + 0x38]
test edx, edx
sete bl
and ebx, ecx
test bl, bl
jne 0x42f9db
test eax, eax
setg al
cmp edx, 0x7fffffff
seta bl
and ebx, ecx
or ebx, eax
test bl, bl
jne 0x42f9c5
mov dword [esp + 0x34], edx
mov eax, dword [0x657610]
lea ecx, [0x67e208]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00430e10
mov eax, dword [esp + 0x34]
xor ecx, ecx
mov edx, 0x1e
xor ebx, ebx
mov ebp, 0x3b9aca00
jmp 0x42f8b8
lea edx, [ecx - 1]
mov eax, dword [esp + 0x34]
mov ecx, edi
mov ebp, esi
test edx, edx
jl 0x42f989
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ecx
cmp edx, 0x20
sbb esi, esi
mov dword [esp + 0x30], esi
mov ecx, edx
shl eax, cl
and eax, esi
mov dword [esp + 0x2c], eax
cmp ebp, eax
xchg edi, ebx
setae bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
lea eax, [ecx - 0x20]
mov dword [esp + 0x28], eax
neg eax
cmp eax, 0x20
sbb ebp, ebp
mov dword [esp + 0x24], ebp
mov edi, dword [esp + 0x28]
cmp edi, 0x20
sbb ebx, ebx
mov esi, dword [esp + 0x34]
sar esi, 0x1f
mov ecx, eax
mov ebp, dword [esp + 0x34]
mov eax, ebp
shr ebp, cl
mov ecx, edi
shl eax, cl
and eax, ebx
mov ecx, edx
shl esi, cl
mov ebx, dword [esp + 0x24]
and ebp, ebx
mov ebx, dword [esp + 0x30]
and esi, ebx
or ebp, esi
or ebp, eax
mov eax, dword [esp + 0x20]
cmp eax, ebp
setg bl
xchg esi, ebx
sete bl
xchg esi, ebx
movzx edi, byte [esp + 0x17]
and esi, edi
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x42f97a
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x2c]
sub esi, edi
sbb eax, ebp
cmp ecx, 0x20
sbb edi, edi
mov ebx, eax
mov eax, 1
shl eax, cl
and eax, edi
mov edi, dword [esp + 0x18]
or edi, eax
jmp 0x42f8ad
mov edi, dword [esp + 0x18]
mov ebx, eax
mov esi, dword [esp + 0x1c]
jmp 0x42f8ad
mov edx, eax
sar eax, 0x1f
cmp ebx, eax
sete al
setg bl
cmp ebp, edx
setae dl
and eax, edx
or ebx, eax
test bl, bl
je 0x42f9a8
mov ecx, 0x7fffffff
mov dword [0x67e200], ecx
sar ecx, 0x1f
mov dword [0x67e204], ecx
mov byte [0x67e095], 1
add esp, 0x8c
ret
lea eax, [0x568769]
mov dword [esp], eax
mov dword [esp + 4], 0x56
call fcn.00433a80
lea eax, [0x56866f]
mov dword [esp], eax
mov dword [esp + 4], 0x50
call fcn.00433a80
lea eax, [0x5629a3]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00433a80
lea eax, [0x56723d]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.00433a80
nop
call fcn.0045e080
jmp fcn.0042f6d0