Function at 0x42f700
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x42fa4e
sub esp, 0x8c
lea edi, [esp + 0x5a]
lea esi, [0x54d3e9]
call fcn.0045fac4
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea ecx, [esp + 0x5a]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.0042e540
mov eax, dword [0x6573b0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f76c
mov dword [0x6307a0], ecx
jmp 0x42f779
lea edi, [0x6307a0]
mov eax, ecx
call fcn.0045f3d0
test ecx, ecx
je 0x42fa37
lea edi, [esp + 0x42]
lea esi, [0x54d479]
call fcn.0045fac4
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea ecx, [esp + 0x42]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], 0x18
call fcn.0042e540
mov eax, dword [0x6573b0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f7cd
mov dword [0x6307b0], ecx
jmp 0x42f7da
lea edi, [0x6307b0]
mov eax, ecx
call fcn.0045f3d0
mov dword [esp + 0x72], 0x72657551
lea edi, [esp + 0x74]
lea esi, [0x54de59]
call fcn.0045fac4
mov eax, dword [esp + 0x90]
mov dword [esp], eax
lea eax, [esp + 0x72]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], 0x1a
call fcn.0042e540
mov eax, dword [0x6573b0]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x42f82e
mov dword [0x6307b4], ecx
jmp 0x42f83b
lea edi, [0x6307b4]
mov eax, ecx
call fcn.0045f3d0
mov eax, dword [0x6307b0]
test eax, eax
je 0x42fa21
test ecx, ecx
je 0x42fa21
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [0x6307b4]
lea ecx, [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00430e40
mov eax, dword [esp + 0x3c]
test eax, eax
sete cl
mov edx, dword [esp + 0x38]
test edx, edx
sete bl
and ebx, ecx
test bl, bl
jne 0x42fa0b
test eax, eax
setg al
cmp edx, 0x7fffffff
seta bl
and ebx, ecx
or ebx, eax
test bl, bl
jne 0x42f9f5
mov dword [esp + 0x34], edx
mov eax, dword [0x6307b0]
lea ecx, [0x657300]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00430e40
mov eax, dword [esp + 0x34]
xor ecx, ecx
mov edx, 0x1e
xor ebx, ebx
mov ebp, 0x3b9aca00
jmp 0x42f8e8
lea edx, [ecx - 1]
mov eax, dword [esp + 0x34]
mov ecx, edi
mov ebp, esi
test edx, edx
jl 0x42f9b9
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ecx
cmp edx, 0x20
sbb esi, esi
mov dword [esp + 0x30], esi
mov ecx, edx
shl eax, cl
and eax, esi
mov dword [esp + 0x2c], eax
cmp ebp, eax
xchg edi, ebx
setae bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
lea eax, [ecx - 0x20]
mov dword [esp + 0x28], eax
neg eax
cmp eax, 0x20
sbb ebp, ebp
mov dword [esp + 0x24], ebp
mov edi, dword [esp + 0x28]
cmp edi, 0x20
sbb ebx, ebx
mov esi, dword [esp + 0x34]
sar esi, 0x1f
mov ecx, eax
mov ebp, dword [esp + 0x34]
mov eax, ebp
shr ebp, cl
mov ecx, edi
shl eax, cl
and eax, ebx
mov ecx, edx
shl esi, cl
mov ebx, dword [esp + 0x24]
and ebp, ebx
mov ebx, dword [esp + 0x30]
and esi, ebx
or ebp, esi
or ebp, eax
mov eax, dword [esp + 0x20]
cmp eax, ebp
setg bl
xchg esi, ebx
sete bl
xchg esi, ebx
movzx edi, byte [esp + 0x17]
and esi, edi
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x42f9aa
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x2c]
sub esi, edi
sbb eax, ebp
cmp ecx, 0x20
sbb edi, edi
mov ebx, eax
mov eax, 1
shl eax, cl
and eax, edi
mov edi, dword [esp + 0x18]
or edi, eax
jmp 0x42f8dd
mov edi, dword [esp + 0x18]
mov ebx, eax
mov esi, dword [esp + 0x1c]
jmp 0x42f8dd
mov edx, eax
sar eax, 0x1f
cmp ebx, eax
sete al
setg bl
cmp ebp, edx
setae dl
and eax, edx
or ebx, eax
test bl, bl
je 0x42f9d8
mov ecx, 0x7fffffff
mov dword [0x6572f8], ecx
sar ecx, 0x1f
mov dword [0x6572fc], ecx
mov byte [0x657194], 1
add esp, 0x8c
ret
lea eax, [0x553ba2]
mov dword [esp], eax
mov dword [esp + 4], 0x56
call fcn.00433a00
lea eax, [0x553aa8]
mov dword [esp], eax
mov dword [esp + 4], 0x50
call fcn.00433a00
lea eax, [0x54e2a5]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00433a00
lea eax, [0x55283d]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.0042f700