Function at 0x417e90
Capabilities:
Resolve function by parsing pe exports
Shutdown system

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x10]
push eax
mov ebx, ecx
mov ecx, dword [0x530b64]
mov edi, 1
push str.UseGameOver
mov dword [esp + 0x18], edi
call fcn.00413f40
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [0x1b2e560], ecx
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x14], ebp
mov dword [0x1b2ef7c], ebp
mov dword [ebx + 0x6d830], ebp
jmp 0x417ee0
cmp dword [ebx + 0x1c], ebp
mov dword [ebx + 0x78], edi
je 0x4180c2
cmp dword [ebx + 0x18], edi
jne 0x417f25
push 0x48
call fcn.00478528
add esp, 4
cmp eax, ebp
je 0x417f09
mov dword [eax], 0x48d40c
mov esi, eax
jmp 0x417f0b
xor esi, esi
mov edx, dword [0x530b64]
push edx
mov ecx, esi
call fcn.00401930
push esi
call fcn.004788ca
add esp, 4
mov dword [ebx + 0x18], ebp
push 0x48
call fcn.00478528
add esp, 4
cmp eax, ebp
je 0x417f3d
mov dword [eax], 0x48d348
mov esi, eax
jmp 0x417f3f
xor esi, esi
mov eax, dword [0x530b64]
push eax
mov ecx, esi
call fcn.00401930
push esi
mov edi, eax
call fcn.004788ca
add esp, 4
cmp edi, ebp
je 0x41815a
cmp edi, 2
jne 0x417f9a
push 0x48
call fcn.00478528
add esp, 4
cmp eax, ebp
je 0x417f7c
mov dword [eax], 0x48d310
mov esi, eax
jmp 0x417f7e
xor esi, esi
mov ecx, dword [0x530b64]
push ecx
mov ecx, esi
call fcn.00401930
push esi
call fcn.004788ca
add esp, 4
jmp case.default.0x418025
cmp edi, 3
jne 0x417fda
push 0x48
call fcn.00478528
add esp, 4
cmp eax, ebp
je 0x417fb7
mov dword [eax], 0x48d428
mov esi, eax
jmp 0x417fb9
xor esi, esi
mov edx, dword [0x530b64]
push edx
mov ecx, esi
call fcn.00401930
push esi
call fcn.004788ca
add esp, 4
mov edi, 1
jmp 0x417ee0
mov dword [0x1b2e718], ebp
call sub.WINMM.dll_timeGetTime
add dword [0x16963cc], 1
cmp dword [0x1b2eb6c], ebp
jne case.default.0x418025
cmp dword [0x1b2eadc], ebp
je 0x41800c
cmp dword [0x1696400], ebp
je case.default.0x418025
mov ecx, ebx
call fcn.00415f00
test eax, eax
jne case.default.0x418025
mov eax, dword [0x1b2e548]
cmp eax, 0xc
ja case.default.0x418025
jmp dword [eax*4 + 0x418174]
mov ecx, ebx
call fcn.00416b90
jmp case.default.0x418025
mov ecx, ebx
call fcn.00416600
jmp case.default.0x418025
mov ecx, ebx
call fcn.004168c0
jmp case.default.0x418025
mov ecx, ebx
call fcn.00416b90
jmp case.default.0x418025
mov ecx, ebx
call fcn.00416fc0
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417230
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417450
jmp case.default.0x418025
mov ecx, ebx
call fcn.00416d60
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417670
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417850
jmp case.default.0x418025
mov ecx, ebx
call fcn.004160e0
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417c70
jmp case.default.0x418025
mov ecx, ebx
call fcn.00417a30
call fcn.00418e60
call fcn.00418ee0
call fcn.00418f60
call sub.WINMM.dll_timeGetTime
call fcn.00415310
mov edi, 1
jmp 0x417ee0
push 0x48
call fcn.00478528
add esp, 4
cmp eax, ebp
je 0x4180da
mov dword [eax], 0x48d3d4
mov esi, eax
jmp 0x4180dc
xor esi, esi
mov eax, dword [0x530b64]
push eax
mov ecx, esi
call fcn.00401930
push esi
call fcn.004788ca
add esp, 4
cmp dword [0x169641c], edi
jne 0x417ee0
lea ecx, [esp + 0x14]
push ecx
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x418127
lea edx, [esp + 0x1c]
push edx
push str.SeShutdownPrivilege
push ebp
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov ecx, dword [esp + 0x14]
push ebp
push ebp
push ebp
lea eax, [esp + 0x24]
push eax
push ebp
push ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push ebp
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret
call fcn.00418e60
call fcn.00418ee0
call fcn.00418f60
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret