Function at 0x52b8f0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa0]
cmp eax, dword [ecx + 8]
jbe 0x52bcab
sub esp, 0x120
mov ecx, dword [esp + 0x12c]
cmp ecx, 0x20
jne 0x52bc64
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.0045f676
lea ecx, [esp + 0xe8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x130]
mov dword [esp + 0xc], edx
call fcn.00529700
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x110], ecx
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.0045f676
nop
lea ecx, [esp + 0xc0]
mov dword [esp], ecx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
call fcn.0052b030
lea edi, [esp + 0x98]
xor eax, eax
call fcn.0045f676
mov ecx, dword [0x657494]
lea edx, [esp + 0x98]
mov dword [esp], edx
lea edx, [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.005295d0
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x11c], ecx
lea edi, [esp + 0x70]
xor eax, eax
call fcn.0045f676
mov ecx, dword [0x65748c]
nop
lea edx, [esp + 0x70]
mov dword [esp], edx
lea ebx, [esp + 0xc0]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0052a530
mov ecx, dword [0x657494]
lea edx, [esp + 0x70]
mov dword [esp], edx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00529520
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x118], ecx
lea edi, [esp + 0x48]
xor eax, eax
call fcn.0045f676
lea ecx, [esp + 0x48]
mov dword [esp], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 8], ecx
call fcn.0052a170
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test edx, edx
jne 0x52baa4
lea eax, [0x54a280]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x24
lea ecx, [0x565268]
mov dword [eax], ecx
mov dword [esp + 0x134], 0
lea ecx, [0x59a7d8]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x13c], eax
add esp, 0x120
ret
mov dword [esp + 0x114], ecx
lea edi, [esp + 0x20]
xor eax, eax
call fcn.0045f676
mov ecx, dword [0x652e88]
lea edx, [esp + 0x20]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 8], ecx
call fcn.005295d0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x128]
movzx edx, byte [edx + 0x1f]
shr dl, 7
movzx edx, dl
xor ebx, ebx
sub ebx, edx
nop
mov ebp, dword [ecx]
and ebp, ebx
mov esi, dword [ecx + 4]
mov dword [esp + 0x1c], esi
mov eax, ebx
not ebx
mov dword [esp + 0x18], ebx
mov edi, ecx
mov ecx, dword [esp + 0x114]
mov esi, dword [ecx]
and esi, ebx
or ebp, esi
mov esi, dword [ecx + 4]
mov dword [ecx], ebp
mov ebp, edx
sar edx, 0x1f
xor ebx, ebx
sub ebx, ebp
mov ebx, 0
sbb ebx, edx
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x1c]
and edx, ebx
not ebx
mov dword [esp + 0x1c], ebx
and esi, ebx
or edx, esi
mov dword [ecx + 4], edx
mov edx, dword [edi + 8]
and edx, eax
mov esi, dword [edi + 0xc]
mov ebx, dword [ecx + 8]
mov ebp, dword [esp + 0x18]
and ebx, ebp
or edx, ebx
mov ebx, dword [ecx + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x14]
and esi, edx
mov edx, dword [esp + 0x1c]
and ebx, edx
or esi, ebx
mov dword [ecx + 0xc], esi
mov ebx, dword [edi + 0x10]
and ebx, eax
mov esi, dword [edi + 0x14]
mov edx, dword [ecx + 0x10]
and edx, ebp
or ebx, edx
mov edx, dword [ecx + 0x14]
mov dword [ecx + 0x10], ebx
mov ebx, dword [esp + 0x14]
and esi, ebx
mov ebx, dword [esp + 0x1c]
and edx, ebx
or esi, edx
mov dword [ecx + 0x14], esi
mov edx, dword [edi + 0x18]
and edx, eax
mov esi, dword [edi + 0x1c]
mov ebx, dword [ecx + 0x18]
and ebx, ebp
or ebx, edx
mov edx, dword [ecx + 0x1c]
mov dword [ecx + 0x18], ebx
mov ebx, dword [esp + 0x14]
and esi, ebx
mov ebx, dword [esp + 0x1c]
and edx, ebx
or edx, esi
mov dword [ecx + 0x1c], edx
mov edx, dword [edi + 0x20]
and eax, edx
mov edx, dword [edi + 0x24]
mov esi, dword [ecx + 0x20]
and ebp, esi
or ebp, eax
mov esi, dword [ecx + 0x24]
mov dword [ecx + 0x20], ebp
mov ebp, dword [esp + 0x14]
and ebp, edx
and ebx, esi
or ebx, ebp
mov dword [ecx + 0x24], ebx
mov edi, dword [esp + 0x124]
mov esi, ecx
call fcn.0045fb2c
mov ecx, dword [esp + 0x124]
lea edi, [ecx + 0x28]
mov esi, dword [esp + 0x110]
call fcn.0045fb2c
mov esi, dword [0x652e84]
mov ecx, dword [esp + 0x124]
lea edi, [ecx + 0x50]
call fcn.0045fb2c
mov ecx, dword [esp + 0x124]
lea edx, [ecx + 0x78]
nop
mov dword [esp], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 8], edx
call fcn.0052a530
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
add esp, 0x120
ret
lea eax, [0x54a280]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2b
lea ecx, [0x5665f2]
mov dword [eax], ecx
mov dword [esp + 0x134], 0
lea ecx, [0x59a7d8]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x13c], eax
add esp, 0x120
ret
call fcn.0045e080
jmp fcn.0052b8f0