Function at 0x442b20
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb8]
cmp eax, dword [ecx + 8]
jbe 0x4431b4
sub esp, 0x138
mov ecx, dword [esp + 0x13c]
mov ebx, dword [ecx]
cmp ebx, 1
je 0x44319d
cmp ebx, 2
je 0x442b64
mov dword [ecx], 1
xor eax, eax
jmp 0x442b87
add esp, 0x138
ret
mov dword [esp + 0x44], eax
mov edx, dword [ecx + eax*4 + 0xc]
mov dword [esp], edx
call fcn.00442b20
mov eax, dword [esp + 0x44]
inc eax
mov ecx, dword [esp + 0x13c]
cmp dword [ecx + 4], eax
ja 0x442b6b
mov ebx, dword [ecx + 8]
test ebx, ebx
je 0x442bf8
lea edi, [esp + 0x74]
xor eax, eax
call fcn.0045f679
movzx ecx, byte [0x67e360]
test cl, cl
jne 0x442baf
xor ecx, ecx
xor edx, edx
jmp 0x442bd7
nop
call fcn.004602a0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
lea edi, [esp + 0x74]
lea esi, [0x67e360]
call fcn.0045fb4a
mov ecx, dword [esp + 0x30]
mov edx, eax
xor eax, eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x13c]
mov ebp, dword [ebx + 4]
lea ebp, [ebx + ebp*4 + 0xc]
mov dword [esp + 0x130], ebp
xor ebp, ebp
jmp 0x442c30
mov dword [ecx], 2
add esp, 0x138
ret
mov dword [esp + 0x40], ebp
mov eax, dword [esp + 0x130]
mov ecx, dword [eax + ebp*4]
lea edx, [eax + ebp*4]
call ecx
mov eax, dword [esp + 0x40]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x13c]
cmp dword [ebx + 8], ebp
ja 0x442c05
movzx ebp, byte [0x67e360]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x442e7c
nop
call fcn.004602a0
mov eax, dword [esp]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x24], ecx
lea edi, [esp + 0x90]
lea esi, [0x67e360]
call fcn.0045fb4a
mov ecx, dword [esp + 0x130]
mov ecx, dword [ecx]
mov dword [esp], ecx
call fcn.0044f4c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044fc30
mov eax, dword [esp + 8]
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x5c]
xor eax, eax
call fcn.0045f67a
call fcn.00435250
lea eax, [0x55c94a]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00435e80
mov eax, dword [esp + 0x12c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00435e80
lea eax, [0x55c2bf]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00435e80
call fcn.004352c0
mov eax, dword [0x67e210]
mov ecx, dword [esp + 0x2c]
mov edx, ecx
sub ecx, eax
mov ebx, dword [esp + 0x20]
sub ebx, edx
mov dword [esp + 0x58], ebx
mov esi, dword [0x67e214]
lea edi, [esp + 0x5c]
mov dword [esp], edi
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
sub edx, eax
mov eax, dword [esp + 0x30]
sbb eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00417c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d150
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.00435250
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e80
lea eax, [0x55c7c9]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00435e80
call fcn.004352c0
lea eax, [esp + 0x5c]
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
sub eax, ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
sbb eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
call fcn.00417c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0xec]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d150
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.00435250
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e80
lea eax, [0x55da2a]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00435e80
call fcn.004352c0
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x88]
sub eax, ecx
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x8c]
sbb ecx, edx
mov edx, 0x17
jmp 0x442e92
mov dword [ebx], 2
add esp, 0x138
ret
mov byte [esp + ebx + 0x5c], dl
lea edx, [ebx - 1]
mov ecx, ebp
test ecx, ecx
sete bl
cmp eax, 0xa
xchg ebp, ebx
setae bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x442f5b
mov dword [esp + 0x28], eax
mov dword [esp + 0x3c], edx
mov ebx, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ecx, esi
mov eax, 0x19999999
mov esi, edx
mul ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x50], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, edx
add edx, 0
add edi, edx
lea ebp, [eax + eax*4]
shl ebp, 1
sub ebx, ebp
lea ebp, [ecx + ecx*2]
lea ebx, [ebx + ebp*2]
mov ecx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ebx
shr edx, 3
mov dword [esp + 0x4c], edx
mov ebx, edi
add edi, edx
mov eax, edi
mov edx, 0xa
mul edx
mov edx, dword [esp + 0x28]
sub edx, eax
add edx, 0x30
add ecx, 0
adc esi, 0
mov eax, edi
mov edi, dword [esp + 0x50]
add edi, ebp
mov ebp, dword [esp + 0x58]
adc ebp, esi
mov esi, dword [esp + 0x4c]
add ebx, esi
adc ebp, 0
mov ebx, dword [esp + 0x3c]
cmp ebx, 0x18
jb 0x442e89
jmp 0x443191
add eax, 0x30
cmp edx, 0x18
jae 0x443185
mov byte [esp + edx + 0x5c], al
lea eax, [esp + 0xcc]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x5c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d150
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.00435250
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e80
lea eax, [0x55cf68]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00435e80
call fcn.004352c0
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x80]
sub eax, ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
sbb ecx, edx
mov edx, 0x17
jmp 0x443010
mov byte [esp + eax + 0x5c], cl
lea edx, [eax - 1]
mov eax, ebx
mov ecx, esi
test ecx, ecx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp eax, 0xa
xchg esi, ebx
setae bl
xchg esi, ebx
and esi, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4430d1
mov dword [esp + 0x38], edx
mov ebx, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov esi, edx
add edx, 0
mov eax, 0xcccccccd
mov edi, edx
mul ecx
shr edx, 3
mov dword [esp + 0x58], edx
lea ebp, [edx + edx*4]
shl ebp, 1
sub ecx, ebp
mov eax, 0x19999999
mul ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], eax
add eax, edi
lea ebp, [esi + esi*4]
lea edx, [ecx + ecx*2]
shl ebp, 1
mov ecx, ebx
sub ebx, ebp
lea edx, [ebx + edx*2]
mov ebx, eax
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov dword [esp + 0x48], edx
mov ebp, ebx
add ebx, edx
mov eax, 0xa
mul ebx
sub ecx, eax
add ecx, 0x30
add esi, 0
mov edx, dword [esp + 0x58]
adc edx, 0
mov esi, dword [esp + 0x4c]
add esi, edi
mov esi, dword [esp + 0x50]
adc esi, edx
mov edx, dword [esp + 0x48]
add ebp, edx
adc esi, 0
mov eax, dword [esp + 0x38]
cmp eax, 0x18
jb 0x443005
jmp 0x44317b
add eax, 0x30
cmp edx, 0x18
jae 0x44316f
mov byte [esp + edx + 0x5c], al
lea eax, [esp + 0xac]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x5c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d150
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.00435250
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e80
lea eax, [0x55cc66]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435e80
call fcn.004352c0
call fcn.00435250
call fcn.00435470
call fcn.004352c0
mov ebx, dword [esp + 0x13c]
jmp 0x442e7c
mov eax, edx
mov ecx, 0x18
call fcn.0045f4d0
mov ecx, 0x18
call fcn.0045f4d0
mov eax, edx
mov ecx, 0x18
call fcn.0045f4d0
mov eax, ebx
mov ecx, 0x18
call fcn.0045f4d0
lea eax, [0x567730]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00433a80
nop
call fcn.0045e080
jmp fcn.00442b20