Function at 0x48d2f0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x48d650
sub esp, 0x44
mov eax, 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov byte [esp + 0x1f], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x48]
test byte [eax], al
lea ecx, [eax + 4]
mov dword [esp], ecx
call fcn.004637c0
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.0046ed20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x48d42d
cmp eax, 0xffffffff
jne 0x48d3f2
test ecx, ecx
jne 0x48d383
xor eax, eax
xor ecx, ecx
jmp 0x48d3de
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], edx
lea eax, [0x54c360]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x55fdf2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x48d3c6
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48d3d6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f450
mov eax, ecx
mov ecx, eax
lea eax, [0x59a8a0]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
lea eax, [0x54a280]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x566db2]
mov dword [eax], ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x59a7d8]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov dword [esp + 0x24], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
lea ecx, [esp + 0x24]
mov dword [esp + 4], ecx
call fcn.0046dc80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test eax, eax
je 0x48d4c6
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
lea eax, [0x54c360]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x55f78b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x48d49c
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48d4ac
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f450
mov eax, ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x59a8a0]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x550c20]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [eax + 8]
mov dword [esp + 8], ecx
lea ecx, [eax + 0x10]
mov dword [esp + 0xc], ecx
lea ecx, [eax + 0x18]
mov dword [esp + 0x10], ecx
call fcn.0046e190
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x48d57e
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
lea eax, [0x54c360]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xf
lea ecx, [0x55eaea]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x48d554
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48d564
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f450
mov eax, ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x59a8a0]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
nop
mov eax, dword [esp + 0x48]
lea ecx, [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.004637e0
lea eax, [0x5711f4]
mov dword [esp + 0x40], eax
mov byte [esp + 0x1f], 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
lea eax, [0x48d660]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x38], eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x1f], 3
lea ecx, [0x54f1c0]
mov dword [esp], ecx
call fcn.0040b170
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x48]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x48d608
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
jmp 0x48d618
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x30]
call fcn.0045f450
mov eax, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov byte [esp + 0x1f], 1
mov edx, dword [esp + 0x3c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x1f], 0
call fcn.00491fd0
add esp, 0x44
ret
call fcn.0045e080
jmp fcn.0048d2f0