Function at 0x4a40a0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x178]
cmp eax, dword [ecx + 8]
jbe 0x4a46a7
sub esp, 0x1f8
lea edi, [esp + 0x20c]
xor eax, eax
call fcn.0045f5d9
mov ecx, dword [esp + 0x1fc]
movzx edx, byte [ecx + 0xf]
and edx, 0x1f
cmp edx, 0x13
jne 0x4a4646
mov edx, dword [esp + 0x200]
test edx, edx
je 0x4a4103
movzx ebx, byte [edx + 0xf]
and ebx, 0x1f
cmp ebx, 0x14
je 0x4a45e6
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], edx
lea eax, [0x6310b0]
mov dword [esp], eax
lea ebx, [0x5398c0]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xbc]
mov dword [esp + 8], ebp
call fcn.00464ca0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test al, al
je 0x4a41e4
mov dword [esp + 0xb8], ecx
lea edi, [esp + 0x194]
xor eax, eax
call fcn.0045f5d7
mov ecx, dword [esp + 0xb8]
lea edx, [0x53c240]
cmp ecx, edx
jne 0x4a45d0
lea edi, [esp + 0x194]
call fcn.0045fa06
lea edi, [esp + 0x130]
lea esi, [esp + 0x194]
call fcn.0045fa06
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov dword [esp + 0xb4], ecx
lea edi, [esp + 0x20c]
lea esi, [esp + 0x138]
call fcn.0045fa1a
mov dword [esp + 0x204], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x208], eax
add esp, 0x1f8
ret
mov eax, dword [esp + 0x1fc]
mov dword [esp], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 4], ecx
call fcn.004a0a20
lea edi, [esp + 0x20c]
lea esi, [esp + 8]
call fcn.0045fa1a
mov eax, dword [esp + 0x258]
add eax, dword [esp + 0x248]
mov dword [esp + 0x64], eax
lea ecx, [0x541960]
mov dword [esp], ecx
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov byte [eax + 0xd], 4
mov ecx, dword [esp + 0x64]
add ecx, 3
and ecx, 0xfffffffc
mov dword [eax], ecx
mov ecx, dword [esp + 0x260]
mov ecx, dword [ecx]
shl ecx, 2
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x260]
mov edx, dword [ecx]
test edx, edx
jbe 0x4a429f
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jbe 0x4a45c7
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x4a4284
mov dword [eax + 0x14], ebx
mov ecx, dword [esp + 0x200]
test ecx, ecx
jmp 0x4a42a8
lea edi, [eax + 0x14]
mov ecx, eax
mov eax, ebx
call fcn.0045f3d0
mov edx, dword [esp + 0x200]
test edx, edx
mov eax, ecx
mov ecx, edx
jmp 0x4a42a8
mov ecx, dword [esp + 0x200]
test ecx, ecx
mov dword [esp + 0xac], eax
je 0x4a4351
mov dword [esp], ecx
call fcn.004a1c10
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1fc]
mov dword [esp], edx
call fcn.004a1c10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x8c]
mov dword [esp], edx
lea edx, [0x5497c4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x10], edx
lea edx, [0x547e69]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
lea eax, [0x547e0b]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 1
call fcn.0044d010
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
jmp 0x4a43a8
mov eax, dword [esp + 0x1fc]
mov dword [esp], eax
call fcn.004a1c10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x6c]
mov dword [esp], edx
lea edx, [0x548f6c]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x547e0b]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044cec0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
call fcn.004a16e0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0045c7e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [ecx + 0x18], eax
lea eax, [0x53f860]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [esp + 0xb4], eax
lea ecx, [0x537600]
mov dword [esp], ecx
call fcn.0040b1a0
mov eax, dword [esp + 4]
lea ecx, [0x4a46c0]
mov dword [eax], ecx
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x4a4436
mov ecx, dword [esp + 0xac]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0xb4]
mov dword [edx + 0x10], eax
jmp 0x4a445c
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xac]
call fcn.0045f3d0
mov edx, dword [esp + 0xb4]
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, ecx
call fcn.0045f3d0
mov ecx, ebx
mov ebx, dword [esp + 0x1fc]
mov dword [esp + 0xc4], ebx
mov ebx, dword [esp + 0x200]
mov dword [esp + 0xc8], ebx
lea edi, [esp + 0x194]
xor eax, eax
call fcn.0045f5d7
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], edx
lea edi, [esp + 0x19c]
lea esi, [esp + 0x20c]
call fcn.0045fa1a
lea ecx, [0x5398c0]
mov dword [esp], ecx
lea edx, [esp + 0xc4]
mov dword [esp + 4], edx
call fcn.00408a30
mov ecx, dword [esp + 8]
mov dword [esp + 0xb0], ecx
lea edx, [0x53c240]
mov dword [esp], edx
lea ebx, [esp + 0x194]
mov dword [esp + 4], ebx
call fcn.00408a30
mov ecx, dword [esp + 8]
lea edx, [0x6310b0]
mov dword [esp], edx
lea edx, [0x5398c0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
lea edx, [0x53c240]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00464f20
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xb8], ecx
mov esi, dword [esp + 0x18]
lea edi, [esp + 0x194]
xor eax, eax
call fcn.0045f5d7
mov ecx, dword [esp + 0xb8]
lea edx, [0x53c240]
cmp ecx, edx
jne 0x4a45b1
lea edi, [esp + 0x194]
call fcn.0045fa06
lea edi, [esp + 0xcc]
lea esi, [esp + 0x194]
call fcn.0045fa06
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0xb4], ecx
lea edi, [esp + 0x20c]
lea esi, [esp + 0xd4]
call fcn.0045fa1a
mov dword [esp + 0x204], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x208], eax
add esp, 0x1f8
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x534a40]
mov dword [esp + 8], eax
call fcn.004088d0
xor eax, eax
mov ecx, edx
call fcn.0045f450
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x534a40]
mov dword [esp + 8], eax
call fcn.004088d0
mov dword [esp], edx
call fcn.004a1c10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x5520e4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x2c
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ce20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408c10
mov eax, dword [esp + 8]
lea ecx, [0x535040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004332d0
mov dword [esp], ecx
call fcn.004a1c10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x550e15]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x25
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ce20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408c10
mov eax, dword [esp + 8]
lea ecx, [0x535040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004332d0
nop
call fcn.0045e000
jmp fcn.004a40a0