Function at 0x411300
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4115c2
sub esp, 0x40
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
cmp ecx, edx
je 0x411385
test edx, edx
je 0x4115bc
lea edi, [esp + 0x18]
xor eax, eax
call fcn.0045f5e6
mov eax, dword [esp + 0x5c]
mov ecx, edx
xor edx, edx
div ecx
mov edx, ecx
shr ecx, 2
mov ebx, dword [esp + 0x54]
mov ebp, ebx
shr ebx, 2
mov esi, ecx
sub ecx, ebx
test ecx, ecx
jbe 0x41137e
mov byte [esp + 0x18], 1
cmp ecx, 1
jbe 0x411374
mov byte [esp + 0x1a], 0x81
lea ebx, [ecx - 1]
mov ecx, 3
jmp 0x411586
mov ecx, 2
jmp 0x411460
xor ecx, ecx
jmp 0x411460
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
call fcn.004116b0
mov eax, dword [esp + 0x10]
mov ecx, eax
shl eax, 2
mov edx, dword [esp + 0x54]
cmp edx, eax
jne 0x4113e3
lea eax, [ecx + 3]
shr eax, 2
mov ecx, dword [esp + 0x60]
shr ecx, 4
mov edx, dword [esp + 0x44]
add ecx, edx
add eax, edx
mov edx, eax
mov dword [esp], edx
sub ecx, eax
mov dword [esp + 4], ecx
call fcn.0045fb10
add esp, 0x40
ret
mov dword [esp + 0x14], ecx
call fcn.004351d0
lea eax, [0x551ead]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00435e00
mov dword [esp + 4], 0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00435aa0
lea eax, [0x54a08f]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00435e00
mov dword [esp + 4], 0
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00435aa0
call fcn.004353f0
call fcn.00435240
lea eax, [0x551cff]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00433a00
cmp ecx, 0x28
jae 0x411568
mov byte [esp + ecx + 0x18], pe_nt_image_headers32
lea ebx, [ecx + 1]
jmp 0x411487
mov edi, esi
or esi, 0x80
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
shr edi, 7
inc ebx
mov esi, edi
cmp esi, 0x80
jb 0x411499
cmp ebx, 0x28
jb 0x411473
jmp 0x41155c
cmp ebx, 0x28
jae 0x411550
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
inc ebx
lea esi, [eax - 1]
mov eax, esi
jmp 0x4114c4
mov edi, esi
or esi, 0x80
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
shr edi, 7
inc ebx
mov esi, edi
cmp esi, 0x80
jb 0x4114d3
cmp ebx, 0x28
jb 0x4114b0
jmp 0x411544
cmp ebx, 0x28
jae 0x411538
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
lea esi, [ebx + 1]
cmp esi, 0x28
jae 0x41152c
mov dword [esp + 0x14], eax
mov byte [esp + ebx + 0x19], 0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
lea eax, [esp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
call fcn.004116b0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x14]
imul eax, ecx
mov ecx, dword [esp + 0x54]
add ecx, eax
shr ecx, 2
jmp 0x4113ba
mov eax, esi
mov ecx, 0x28
call fcn.0045f450
mov eax, ebx
mov ecx, 0x28
call fcn.0045f450
mov eax, ebx
mov ecx, 0x28
call fcn.0045f450
mov eax, ebx
mov ecx, 0x28
call fcn.0045f450
mov eax, ebx
mov ecx, 0x28
call fcn.0045f450
mov eax, ecx
mov ecx, 0x28
call fcn.0045f450
mov edi, ebx
or ebx, 0x80
mov byte [esp + ecx + 0x18], bl
shr edi, 7
inc ecx
mov ebx, edi
cmp ebx, 0x80
jb 0x411595
cmp ecx, 0x28
jb 0x411574
jmp 0x4115b0
cmp ecx, 0x28
jae 0x4115a4
mov byte [esp + ecx + 0x18], bl
inc ecx
jmp 0x411460
mov eax, ecx
mov ecx, 0x28
call fcn.0045f450
mov eax, ecx
mov ecx, 0x28
call fcn.0045f450
call fcn.004320f0
nop
call fcn.0045e000
jmp fcn.00411300