Function at 0x40a920
Capabilities:
Disable automatic windows recovery features
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40b0fb
sub esp, 0x44
cmp dword [0x657220], 2
je 0x40b0e4
mov edx, dword [esp + 0x48]
test edx, edx
je 0x40b04e
movzx ebx, byte [0x657560]
test bl, bl
je 0x40aa26
mov ebx, dword [0x65756c]
test ebx, ebx
je 0x40a9ce
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x40a9a7
test edx, 7
jne 0x40a982
mov eax, 8
jmp 0x40a9ac
test edx, 3
jne 0x40a991
mov eax, 4
jmp 0x40a9ac
test edx, 1
jne 0x40a9a0
mov eax, 2
jmp 0x40a9ac
mov eax, 1
jmp 0x40a9ac
mov eax, 0x10
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x658c00]
mov dword [esp + 8], eax
call fcn.0040b630
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
movzx ebx, byte [0x657440]
test bl, bl
je 0x40aa26
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x50]
cmp dword [0x657444], ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ebx, dword [ebx + 0x54]
cmp dword [0x657448], ebx
sete bl
and ebx, ebp
test bl, bl
je 0x40aa26
mov ebx, dword [0x65744c]
add ebx, 1
mov ebp, dword [0x657450]
mov dword [0x65744c], ebx
adc ebp, 0
mov dword [0x657450], ebp
mov ebx, dword [0x657218]
test ebx, ebx
je 0x40aa80
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
jne 0x40aa49
mov ebp, ebx
mov ebx, dword [ebp + 0xe4]
sub ebx, edx
mov esi, dword [ebp + 0xe8]
mov dword [ebp + 0xe4], ebx
sbb esi, 0
mov dword [ebp + 0xe8], esi
test esi, esi
jge 0x40aa82
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.00418fa0
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x40aa82
xor ebp, ebp
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x40b0ce
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x40b0b8
mov dword [esi + 0x68], 1
mov ebx, dword [esi + 0x54]
test ebx, ebx
je 0x40aacf
mov ebx, dword [ebx + 0x30]
jmp 0x40aad5
mov ebx, dword [0x657234]
test ebx, ebx
je 0x40b0a2
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x40aaf5
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
jmp 0x40aafc
mov eax, ebp
mov ebp, 1
mov dword [esp + 0x34], esi
mov dword [esp + 0x20], ebx
xchg ebp, eax
mov byte [esp + 0x16], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x40ad54
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40ac3d
cmp edx, 0x10
jae 0x40ac3d
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x40ab40
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40ab6a
cmp edx, 0xc
jne 0x40ab4d
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40ab6a
test edx, 3
jne 0x40ab5d
add ecx, 3
and ecx, 0xfffffffc
jmp 0x40ab6a
test edx, 1
jne 0x40ab6a
nop
inc ecx
and ecx, 0xfffffffe
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x40abbb
mov edi, dword [ebx + 8]
test edi, edi
je 0x40abbb
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x40abb3
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x40abb3
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a5f0
mov eax, dword [esp + 4]
test eax, eax
je 0x40abda
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x40abf8
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040a700
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
cmp dword [ebp + 0xc], ebx
ja 0x40ac27
mov esi, dword [ebp + 8]
test esi, esi
jne 0x40ac31
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
jmp 0x40ac33
mov esi, eax
mov eax, 0x10
jmp 0x40ad4d
cmp edx, 0x3f8
ja 0x40ac65
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x40b096
lea edi, [0x619a80]
movzx esi, byte [edi + esi]
jmp 0x40ac86
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x40b08a
lea edi, str._______________________....______0001123333333333444444444455666677777888888888889999999999::::::___________________________________________________________________________AAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
movzx esi, byte [edi + esi]
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x44
jae 0x40b07e
lea edx, [0x619bc0]
movzx edx, word [edx + edi*2]
nop
shl esi, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or esi, edi
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x88
jae 0x40b072
xchg esi, eax
mov byte [esp + 0x14], al
xchg esi, eax
mov dword [esp + 0x28], edx
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a5f0
mov eax, dword [esp + 4]
test eax, eax
je 0x40ace3
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x40ad05
mov eax, dword [esp + 0x20]
mov dword [esp], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 4], cl
call fcn.0040a700
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40ad3f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
je 0x40ad3f
mov dword [esp + 0x38], eax
mov byte [esp + 0x15], dl
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
call fcn.0045fb10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x15]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x28]
xor edi, edi
jmp 0x40ade6
mov dword [esp], ebx
mov dword [esp + 4], edx
xchg ebp, eax
mov byte [esp + 8], al
xchg ebp, eax
call fcn.00412270
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], 1
mov word [eax + 0x38], 1
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0xc]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40adc4
movzx ebx, byte [eax + 0x3c]
test bl, bl
je 0x40adc4
movzx ebx, byte [esp + 0x16]
test bl, bl
jne 0x40adc0
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0045fb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
movzx ebx, byte [esp + 0x16]
mov ebp, ebx
jmp 0x40adcb
movzx ebp, byte [esp + 0x16]
xor ebx, ebx
mov ebp, dword [esp + 0x20]
mov edi, ebx
mov esi, edx
mov ebx, dword [esp + 0x48]
mov edx, 1
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
mov byte [esp + 0x15], dl
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
mov dword [esp + 0x18], ecx
movzx edx, byte [esp + 0x16]
test dl, dl
je 0x40ae11
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x40ae5d
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
call fcn.00410870
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x48]
cmp edx, ecx
jbe 0x40ae4d
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40ae47
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
jmp 0x40ae52
mov ebp, edx
xor ecx, ecx
jmp 0x40ae52
mov ecx, dword [eax + 4]
mov ebp, edx
mov edx, dword [esp + 0x20]
add dword [edx + 4], ecx
mov dword [esp + 0x1c], ecx
call fcn.0045f080
mov eax, dword [0x657220]
test eax, eax
je 0x40ae90
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.0041bc80
mov eax, dword [0x6571b8]
test eax, eax
jle 0x40aed5
cmp eax, 1
je 0x40aeb3
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [esp + 0x28]
cmp edx, ecx
jae 0x40aeb7
sub ecx, edx
mov dword [eax], ecx
jmp 0x40aed9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040b280
mov edx, dword [esp + 0x28]
jmp 0x40aed9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ebx, dword [eax + 0x78]
lea ebp, [ebx - 1]
mov dword [eax + 0x78], ebp
cmp ebx, 1
jne 0x40af0f
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40af0f
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [esp + 0x17]
test al, al
je 0x40af39
movzx eax, byte [esp + 0x16]
test al, al
je 0x40b05c
mov dword [esp], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0040b110
mov edx, dword [esp + 0x28]
movzx eax, byte [0x657560]
test al, al
je 0x40afbd
mov eax, dword [0x657564]
test eax, eax
je 0x40af6a
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.0042bad0
mov edx, dword [esp + 0x28]
movzx eax, byte [0x657440]
test al, al
je 0x40afbd
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
cmp dword [0x657444], ecx
sete cl
mov eax, dword [eax + 0x54]
cmp dword [0x657448], eax
sete al
and eax, ecx
test al, al
je 0x40afbd
mov eax, dword [0x657454]
add eax, edx
mov ecx, dword [0x657458]
mov dword [0x657454], eax
adc ecx, 0
mov dword [0x657458], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40afe8
mov ecx, dword [eax + 0xe4]
mov ebx, dword [esp + 0x48]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xe8]
mov dword [eax + 0xe4], ecx
sbb edx, 0
mov dword [eax + 0xe8], edx
movzx eax, byte [esp + 0x15]
test al, al
je 0x40b042
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00414990
movzx eax, byte [esp + 0x10]
test al, al
je 0x40b042
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00414af0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x6572a0]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x552a1e]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.00433a00
mov eax, edi
mov ecx, 0x88
call fcn.0045f450
mov eax, edi
mov ecx, 0x44
call fcn.0045f450
mov eax, esi
mov ecx, 0xf9
call fcn.0045f460
mov eax, esi
mov ecx, 0x81
call fcn.0045f460
lea eax, [0x552e66]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00433a00
lea eax, [0x54bfac]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00433a00
lea eax, [0x54a68f]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00433a00
lea eax, [0x552c9d]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.0040a920