Function at 0x418ca0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x418f57
sub esp, 0x38
mov edx, dword [0x65e190]
mov ecx, dword [0x65e220]
mov ebx, dword [0x65e21c]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jae 0x418f51
mov ebp, dword [0x65e1dc]
test byte [ebp], al
mov eax, dword [ebx + eax*4]
cmp eax, 0x400
jae 0x418f47
mov dword [esp + 0x1c], edx
mov ebx, dword [ebp + eax*4]
mov dword [esp + 0x2c], ebx
test byte [ebx], al
xor eax, eax
jmp 0x418d0f
mov ebp, dword [esp + 0x28]
lea eax, [ebp + 1]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
cmp eax, 0x40
jge 0x418d3e
jae 0x418f3d
mov dword [esp + 0x28], eax
lea ecx, [ebx + eax + 0x40880]
mov dword [esp], ecx
call fcn.00401b90
movzx eax, byte [esp + 4]
test al, al
je 0x418d00
mov byte [esp + 0x16], al
xor ecx, ecx
jmp 0x418d43
add esp, 0x38
ret
inc ecx
cmp ecx, 8
jae 0x418d00
mov edx, 1
shl edx, cl
test al, dl
je 0x418d42
mov edx, dword [esp + 0x28]
lea ebx, [ecx + edx*8]
cmp ebx, 0x200
jae 0x418f31
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + ebx*4 + 0x40000]
mov dword [esp + 0x20], ecx
test byte [ecx], al
lea edx, [ecx + 0x3b]
mov dword [esp], edx
call fcn.00401b90
movzx eax, byte [esp + 4]
cmp al, 1
jne 0x418eda
movzx eax, byte [0x67e093]
test al, al
je 0x418da5
mov eax, dword [esp + 0x20]
jmp 0x418dbf
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x30]
mov edx, dword [esp + 0x1c]
cmp ecx, edx
je 0x418dbf
lea ebx, [edx + 3]
cmp ecx, ebx
jne 0x418e6e
lea ecx, [eax + 0x48]
mov dword [esp + 0x34], ecx
nop
mov dword [esp], ecx
call fcn.00409110
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x4c]
jmp 0x418df5
nop
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00409310
movzx eax, byte [esp + 0x16]
mov ecx, dword [esp + 0x24]
jmp 0x418d42
mov ecx, dword [ecx]
test ecx, ecx
je 0x418dd8
cmp byte [ecx + 6], 1
jne 0x418df3
movzx edx, word [ecx + 4]
mov ebx, dword [eax + 0x40]
mov ebp, dword [eax + 0xc]
test ebx, ebx
je 0x418e69
mov dword [esp + 0x18], ecx
mov eax, edx
xor edx, edx
div ebx
imul eax, ebx
lea ecx, [ebp + eax]
mov dword [esp], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.0041b040
mov ecx, dword [esp + 0x18]
lea edx, [ecx + 8]
mov dword [esp], edx
mov dword [esp + 4], 4
lea edx, [0x63c1c8]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.0041af10
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
jmp 0x418df3
call fcn.00432170
mov dword [esp + 0x30], ecx
call fcn.00435250
lea eax, [0x55cc1a]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00435e80
mov dword [esp + 4], 0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00435b20
call fcn.00435430
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00435b20
call fcn.00435470
call fcn.004352c0
lea eax, [0x55f03b]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00433a80
mov byte [esp + 0x17], al
call fcn.00435250
lea eax, [0x55d91c]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00435e80
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x17]
movzx eax, al
mov dword [esp], eax
call fcn.00435b20
call fcn.00435470
call fcn.004352c0
lea eax, [0x56674a]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00433a80
mov eax, ebx
mov ecx, 0x200
call fcn.0045f4e0
mov ecx, 0x40
call fcn.0045f4d0
mov ecx, 0x400
call fcn.0045f4e0
call fcn.0045f4d0
nop
call fcn.0045e080
jmp fcn.00418ca0