Function at 0x41d5e0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41d853
sub esp, 0x2c
mov eax, dword [0x657218]
test eax, eax
je 0x41d83c
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00417240
movzx eax, byte [esp + 4]
test al, al
je 0x41d830
lea eax, [0x6572c8]
mov dword [esp], eax
call fcn.00409030
mov eax, dword [esp + 4]
test eax, eax
je 0x41d824
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
test byte [eax], al
mov ecx, dword [0x556128]
lea ebx, [eax + 0xf0]
mov dword [esp], ebx
lea edx, [0x556128]
call ecx
movzx eax, byte [esp + 4]
test al, al
je 0x41d677
mov eax, dword [esp + 0x34]
mov dword [eax + 0x948], 1
jmp 0x41d792
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x108]
mov edx, dword [eax + 0x10c]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call fcn.00449ba0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x41d802
call fcn.00460210
mov eax, dword [esp]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0xe8]
sub eax, edx
mov edx, dword [esp + 4]
mov ebx, dword [ecx + 0xec]
sbb edx, ebx
test eax, eax
seta bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
and ebp, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x41d784
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x940]
mov edx, dword [eax + 0x944]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00449d10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x18]
mov dword [esp], edx
call fcn.00449d10
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00448a60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x30]
mov ebx, dword [edx + 0x108]
mov edx, dword [edx + 0x10c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
call fcn.00449c00
movzx eax, byte [esp + 0x10]
test al, al
jne 0x41d7e0
mov eax, dword [esp + 0x34]
mov dword [eax + 0x948], 2
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00437f40
movzx eax, byte [0x63b848]
test al, al
je 0x41d7d4
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00454540
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], eax
add esp, 0x2c
ret
lea eax, [0x6572c8]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00408fb0
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
lea eax, [0x6572c8]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00408fb0
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
lea eax, [0x553040]
mov dword [esp], eax
mov dword [esp + 4], 0x36
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.0041d5e0