Function at 0x41d5b0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41d823
sub esp, 0x2c
mov eax, dword [0x67e120]
test eax, eax
je 0x41d80c
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00417210
movzx eax, byte [esp + 4]
test al, al
je 0x41d800
lea eax, [0x67e1d0]
mov dword [esp], eax
call fcn.00409000
mov eax, dword [esp + 4]
test eax, eax
je 0x41d7f4
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
test byte [eax], al
mov ecx, dword [0x571220]
lea ebx, [eax + 0xf0]
mov dword [esp], ebx
lea edx, [0x571220]
call ecx
movzx eax, byte [esp + 4]
test al, al
je 0x41d647
mov eax, dword [esp + 0x34]
mov dword [eax + 0x948], 1
jmp 0x41d762
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x108]
mov edx, dword [eax + 0x10c]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x41d7d2
call fcn.004602a0
mov eax, dword [esp]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0xe8]
sub eax, edx
mov edx, dword [esp + 4]
mov ebx, dword [ecx + 0xec]
sbb edx, ebx
test eax, eax
seta bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
and ebp, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x41d754
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x940]
mov edx, dword [eax + 0x944]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00449d90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x18]
mov dword [esp], edx
call fcn.00449d90
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00448ae0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x30]
mov ebx, dword [edx + 0x108]
mov edx, dword [edx + 0x10c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
jne 0x41d7b0
mov eax, dword [esp + 0x34]
mov dword [eax + 0x948], 2
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00437fc0
movzx eax, byte [0x662748]
test al, al
je 0x41d7a4
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004545c0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], eax
add esp, 0x2c
ret
lea eax, [0x67e1d0]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00408f80
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
lea eax, [0x67e1d0]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00408f80
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
lea eax, [0x567ad6]
mov dword [esp], eax
mov dword [esp + 4], 0x36
call fcn.00433a80
nop
call fcn.0045e080
jmp fcn.0041d5b0