Function at 0x418cd0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x418f87
sub esp, 0x38
mov edx, dword [0x637290]
mov ecx, dword [0x637320]
mov ebx, dword [0x63731c]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jae 0x418f81
mov ebp, dword [0x6372dc]
test byte [ebp], al
mov eax, dword [ebx + eax*4]
cmp eax, 0x400
jae 0x418f77
mov dword [esp + 0x1c], edx
mov ebx, dword [ebp + eax*4]
mov dword [esp + 0x2c], ebx
test byte [ebx], al
xor eax, eax
jmp 0x418d3f
mov ebp, dword [esp + 0x28]
lea eax, [ebp + 1]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
cmp eax, 0x40
jge 0x418d6e
jae 0x418f6d
mov dword [esp + 0x28], eax
lea ecx, [ebx + eax + 0x40880]
mov dword [esp], ecx
call fcn.00401bc0
movzx eax, byte [esp + 4]
test al, al
je 0x418d30
mov byte [esp + 0x16], al
xor ecx, ecx
jmp 0x418d73
add esp, 0x38
ret
inc ecx
cmp ecx, 8
jae 0x418d30
mov edx, 1
shl edx, cl
test al, dl
je 0x418d72
mov edx, dword [esp + 0x28]
lea ebx, [ecx + edx*8]
cmp ebx, 0x200
jae 0x418f61
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + ebx*4 + 0x40000]
mov dword [esp + 0x20], ecx
test byte [ecx], al
lea edx, [ecx + 0x3b]
mov dword [esp], edx
call fcn.00401bc0
movzx eax, byte [esp + 4]
cmp al, 1
jne 0x418f0a
movzx eax, byte [0x657192]
test al, al
je 0x418dd5
mov eax, dword [esp + 0x20]
jmp 0x418def
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x30]
mov edx, dword [esp + 0x1c]
cmp ecx, edx
je 0x418def
lea ebx, [edx + 3]
cmp ecx, ebx
jne 0x418e9e
lea ecx, [eax + 0x48]
mov dword [esp + 0x34], ecx
nop
mov dword [esp], ecx
call fcn.00409140
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x4c]
jmp 0x418e25
nop
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00409340
movzx eax, byte [esp + 0x16]
mov ecx, dword [esp + 0x24]
jmp 0x418d72
mov ecx, dword [ecx]
test ecx, ecx
je 0x418e08
cmp byte [ecx + 6], 1
jne 0x418e23
movzx edx, word [ecx + 4]
mov ebx, dword [eax + 0x40]
mov ebp, dword [eax + 0xc]
test ebx, ebx
je 0x418e99
mov dword [esp + 0x18], ecx
mov eax, edx
xor edx, edx
div ebx
imul eax, ebx
lea ecx, [ebp + eax]
mov dword [esp], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.0041b070
mov ecx, dword [esp + 0x18]
lea edx, [ecx + 8]
mov dword [esp], edx
mov dword [esp + 4], 4
lea edx, [0x616186]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.0041af40
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
jmp 0x418e23
call fcn.004320f0
mov dword [esp + 0x30], ecx
call fcn.004351d0
lea eax, [0x548682]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00435e00
mov dword [esp + 4], 0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00435aa0
call fcn.004353b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00435aa0
call fcn.004353f0
call fcn.00435240
lea eax, [0x54aa6a]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00433a00
mov byte [esp + 0x17], al
call fcn.004351d0
lea eax, [0x54933a]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00435e00
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x17]
movzx eax, al
mov dword [esp], eax
call fcn.00435aa0
call fcn.004353f0
call fcn.00435240
lea eax, [0x551dd6]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00433a00
mov eax, ebx
mov ecx, 0x200
call fcn.0045f460
mov ecx, 0x40
call fcn.0045f450
mov ecx, 0x400
call fcn.0045f460
call fcn.0045f450
nop
call fcn.0045e000
jmp fcn.00418cd0