Function at 0x442aa0
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb8]
cmp eax, dword [ecx + 8]
jbe 0x443134
sub esp, 0x138
mov ecx, dword [esp + 0x13c]
mov ebx, dword [ecx]
cmp ebx, 1
je 0x44311d
cmp ebx, 2
je 0x442ae4
mov dword [ecx], 1
xor eax, eax
jmp 0x442b07
add esp, 0x138
ret
mov dword [esp + 0x44], eax
mov edx, dword [ecx + eax*4 + 0xc]
mov dword [esp], edx
call fcn.00442aa0
mov eax, dword [esp + 0x44]
inc eax
mov ecx, dword [esp + 0x13c]
cmp dword [ecx + 4], eax
ja 0x442aeb
mov ebx, dword [ecx + 8]
test ebx, ebx
je 0x442b78
lea edi, [esp + 0x74]
xor eax, eax
call fcn.0045f5e9
movzx ecx, byte [0x657440]
test cl, cl
jne 0x442b2f
xor ecx, ecx
xor edx, edx
jmp 0x442b57
nop
call fcn.00460210
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
lea edi, [esp + 0x74]
lea esi, [0x657440]
call fcn.0045faba
mov ecx, dword [esp + 0x30]
mov edx, eax
xor eax, eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x13c]
mov ebp, dword [ebx + 4]
lea ebp, [ebx + ebp*4 + 0xc]
mov dword [esp + 0x130], ebp
xor ebp, ebp
jmp 0x442bb0
mov dword [ecx], 2
add esp, 0x138
ret
mov dword [esp + 0x40], ebp
mov eax, dword [esp + 0x130]
mov ecx, dword [eax + ebp*4]
lea edx, [eax + ebp*4]
call ecx
mov eax, dword [esp + 0x40]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x13c]
cmp dword [ebx + 8], ebp
ja 0x442b85
movzx ebp, byte [0x657440]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x442dfc
nop
call fcn.00460210
mov eax, dword [esp]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x24], ecx
lea edi, [esp + 0x90]
lea esi, [0x657440]
call fcn.0045faba
mov ecx, dword [esp + 0x130]
mov ecx, dword [ecx]
mov dword [esp], ecx
call fcn.0044f440
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044fbb0
mov eax, dword [esp + 8]
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x5c]
xor eax, eax
call fcn.0045f5ea
call fcn.004351d0
lea eax, [0x5483db]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00435e00
mov eax, dword [esp + 0x12c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00435e00
lea eax, [0x547e5f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00435e00
call fcn.00435240
mov eax, dword [0x657308]
mov ecx, dword [esp + 0x2c]
mov edx, ecx
sub ecx, eax
mov ebx, dword [esp + 0x20]
sub ebx, edx
mov dword [esp + 0x58], ebx
mov esi, dword [0x65730c]
lea edi, [esp + 0x5c]
mov dword [esp], edi
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
sub edx, eax
mov eax, dword [esp + 0x30]
sbb eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00417c60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.004351d0
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e00
lea eax, [0x5482af]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00435e00
call fcn.00435240
lea eax, [esp + 0x5c]
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
sub eax, ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
sbb eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
call fcn.00417c60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0xec]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.004351d0
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e00
lea eax, [0x54943e]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00435e00
call fcn.00435240
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x88]
sub eax, ecx
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x8c]
sbb ecx, edx
mov edx, 0x17
jmp 0x442e12
mov dword [ebx], 2
add esp, 0x138
ret
mov byte [esp + ebx + 0x5c], dl
lea edx, [ebx - 1]
mov ecx, ebp
test ecx, ecx
sete bl
cmp eax, 0xa
xchg ebp, ebx
setae bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x442edb
mov dword [esp + 0x28], eax
mov dword [esp + 0x3c], edx
mov ebx, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ecx, esi
mov eax, 0x19999999
mov esi, edx
mul ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x50], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, edx
add edx, 0
add edi, edx
lea ebp, [eax + eax*4]
shl ebp, 1
sub ebx, ebp
lea ebp, [ecx + ecx*2]
lea ebx, [ebx + ebp*2]
mov ecx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ebx
shr edx, 3
mov dword [esp + 0x4c], edx
mov ebx, edi
add edi, edx
mov eax, edi
mov edx, 0xa
mul edx
mov edx, dword [esp + 0x28]
sub edx, eax
add edx, 0x30
add ecx, 0
adc esi, 0
mov eax, edi
mov edi, dword [esp + 0x50]
add edi, ebp
mov ebp, dword [esp + 0x58]
adc ebp, esi
mov esi, dword [esp + 0x4c]
add ebx, esi
adc ebp, 0
mov ebx, dword [esp + 0x3c]
cmp ebx, 0x18
jb 0x442e09
jmp 0x443111
add eax, 0x30
cmp edx, 0x18
jae 0x443105
mov byte [esp + edx + 0x5c], al
lea eax, [esp + 0xcc]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x5c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.004351d0
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e00
lea eax, [0x548998]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00435e00
call fcn.00435240
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x80]
sub eax, ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
sbb ecx, edx
mov edx, 0x17
jmp 0x442f90
mov byte [esp + eax + 0x5c], cl
lea edx, [eax - 1]
mov eax, ebx
mov ecx, esi
test ecx, ecx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp eax, 0xa
xchg esi, ebx
setae bl
xchg esi, ebx
and esi, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x443051
mov dword [esp + 0x38], edx
mov ebx, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov esi, edx
add edx, 0
mov eax, 0xcccccccd
mov edi, edx
mul ecx
shr edx, 3
mov dword [esp + 0x58], edx
lea ebp, [edx + edx*4]
shl ebp, 1
sub ecx, ebp
mov eax, 0x19999999
mul ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], eax
add eax, edi
lea ebp, [esi + esi*4]
lea edx, [ecx + ecx*2]
shl ebp, 1
mov ecx, ebx
sub ebx, ebp
lea edx, [ebx + edx*2]
mov ebx, eax
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov dword [esp + 0x48], edx
mov ebp, ebx
add ebx, edx
mov eax, 0xa
mul ebx
sub ecx, eax
add ecx, 0x30
add esi, 0
mov edx, dword [esp + 0x58]
adc edx, 0
mov esi, dword [esp + 0x4c]
add esi, edi
mov esi, dword [esp + 0x50]
adc esi, edx
mov edx, dword [esp + 0x48]
add ebp, edx
adc esi, 0
mov eax, dword [esp + 0x38]
cmp eax, 0x18
jb 0x442f85
jmp 0x4430fb
add eax, 0x30
cmp edx, 0x18
jae 0x4430ef
mov byte [esp + edx + 0x5c], al
lea eax, [esp + 0xac]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x5c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
call fcn.004351d0
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00435e00
lea eax, [0x5486ce]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435e00
call fcn.00435240
call fcn.004351d0
call fcn.004353f0
call fcn.00435240
mov ebx, dword [esp + 0x13c]
jmp 0x442dfc
mov eax, edx
mov ecx, 0x18
call fcn.0045f450
mov ecx, 0x18
call fcn.0045f450
mov eax, edx
mov ecx, 0x18
call fcn.0045f450
mov eax, ebx
mov ecx, 0x18
call fcn.0045f450
lea eax, [0x552ccf]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.00442aa0