Function at 0x48ca20
Capabilities:
Disable automatic windows recovery features

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x48cd80
sub esp, 0x44
mov eax, 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov byte [esp + 0x1f], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x48]
test byte [eax], al
lea ecx, [eax + 4]
mov dword [esp], ecx
call fcn.00463730
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.0046e6e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x48cb5d
cmp eax, 0xffffffff
jne 0x48cb22
test ecx, ecx
jne 0x48cab3
xor eax, eax
xor ecx, ecx
jmp 0x48cb0e
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], edx
lea eax, [0x5396e0]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x54b825]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x48caf6
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48cb06
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f3d0
mov eax, ecx
mov ecx, eax
lea eax, [0x57db78]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
lea eax, [0x537a20]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x552411]
mov dword [eax], ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x57dac4]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov dword [esp + 0x24], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
lea ecx, [esp + 0x24]
mov dword [esp + 4], ecx
call fcn.0046d640
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test eax, eax
je 0x48cbf6
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
lea eax, [0x5396e0]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x54b1a9]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x48cbcc
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48cbdc
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f3d0
mov eax, ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x57db78]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x53d920]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [eax + 8]
mov dword [esp + 8], ecx
lea ecx, [eax + 0x10]
mov dword [esp + 0xc], ecx
lea ecx, [eax + 0x18]
mov dword [esp + 0x10], ecx
call fcn.0046db50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x48ccae
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
lea eax, [0x5396e0]
mov dword [esp], eax
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xf
lea ecx, [0x54a536]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x48cc84
mov ecx, dword [esp + 0x28]
mov dword [eax + 0xc], ecx
jmp 0x48cc94
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x28]
call fcn.0045f3d0
mov eax, ecx
mov dword [esp + 0x4c], 0
lea ecx, [0x57db78]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
add esp, 0x44
ret
nop
mov eax, dword [esp + 0x48]
lea ecx, [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.00463750
lea eax, [0x5560fc]
mov dword [esp + 0x40], eax
mov byte [esp + 0x1f], 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
lea eax, [0x48cd90]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x38], eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x1f], 3
lea ecx, [0x53c140]
mov dword [esp], ecx
call fcn.0040b1a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x48]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x48cd38
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
jmp 0x48cd48
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x30]
call fcn.0045f3d0
mov eax, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov byte [esp + 0x1f], 1
mov edx, dword [esp + 0x3c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x1f], 0
call fcn.00491370
add esp, 0x44
ret
call fcn.0045e000
jmp fcn.0048ca20