Function at 0x4076f0
Capabilities:
Authenticate hmac
Shutdown system

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov dword [ebp - 0x28], 0x10
mov dword [ebp - 0x38], 0x3d
mov dword [ebp - 0x10], 0x48
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], 0x35
mov dword [ebp - 8], 0x53
mov dword [ebp - 0x14], 0x1f
mov dword [ebp - 0x4c], 0x3c
mov dword [ebp - 0x54], 0x51
mov dword [ebp - 0x58], 0xe
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x48], 0x19
mov dword [ebp - 0x40], 0x61
mov dword [ebp - 0x3c], 0x16
mov dword [ebp - 0x24], 0x36
mov dword [ebp - 0x1c], 0x15
mov dword [ebp - 0x20], 0x27
mov dword [ebp - 0x70], 0x54
mov dword [ebp - 0x30], 0x2c
mov dword [ebp - 0x2c], 0x59
mov dword [ebp - 0x74], 0x5b
mov dword [ebp - 0x60], 0x1d
mov dword [ebp - 0x18], 0x50
mov dword [ebp - 0x6c], 0x13
mov dword [ebp - 0x78], 0x1e
mov dword [ebp - 0x44], 0x60
mov dword [ebp - 0x5c], 0x55
mov dword [ebp - 0x7c], 0x13
mov eax, dword [ebp - 0x28]
or eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x38]
xor ecx, dword [ebp - 0x28]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0xc]
xor ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
xor edx, dword [ebp - 0x50]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x48]
or eax, dword [ebp - 4]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x40]
and ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 8]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x60]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x44]
or edx, dword [ebp - 0xc]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x7c]
or ecx, dword [ebp - 0x18]
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x20], 8
jge 0x4078fb
cmp dword [ebp - 8], 0x62
jge 0x4078e1
cmp dword [ebp - 0x58], 3
jge 0x4078e1
mov edx, dword [ebp - 0x44]
sub edx, 0x5c
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 6
je 0x4078f9
mov ecx, dword [ebp - 0xc]
or ecx, 2
mov dword [ebp - 0xc], ecx
jmp 0x4078c6
cmp dword [ebp - 0x34], 0x37
jge 0x40790a
mov edx, dword [ebp - 0x1c]
add edx, 0x28
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp + 0x1c]
add eax, 1
mov dword [ebp + 0x1c], eax
cmp dword [ebp - 0x10], 0x1f
jge 0x4079aa
push 0x17078
push 0x111ff
push 0x1756f
push 0x10a7a
push 0xd51c
push 0xed97
push 0xf7dd
push 0x11e0c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
add esp, 0x20
cmp dword [ebp - 0x5c], 0x12
je 0x4079aa
cmp dword [ebp - 0x14], 0x50
jge 0x4079aa
cmp dword [ebp + 0x20], 0x37
jne 0x407997
cmp dword [ebp - 0xc], 0x1c
jne 0x407997
cmp dword [ebp - 0x60], 0x17
jle 0x407997
push 0x15f77
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
add esp, 4
cmp dword [ebp - 0x28], 0x15
je 0x407989
mov ecx, dword [ebp - 0x1c]
add ecx, 0x17
mov dword [ebp - 0x1c], ecx
push 0xa0ec
call dword [sym.imp.KERNEL32.dll_TlsFree]
add esp, 4
push 0x8d44
push 0x5956
call dword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownA]
add esp, 8
cmp dword [ebp + 0x1c], 0xa
jl 0x4078fb
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
cmp dword [ebp - 0x38], 0x62
je 0x4079d2
cmp dword [ebp - 0x10], 0x52
jle 0x4079d2
mov eax, dword [ebp - 0x18]
and eax, 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x64], 0
jmp 0x4079e4
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x18]
add edx, 1
cmp dword [ebp - 0x64], edx
jge 0x4079fa
mov eax, dword [ebp - 4]
and eax, 0x5a
mov dword [ebp - 4], eax
jmp 0x4079db
cmp dword [ebp - 0x3c], 0x6a
jge 0x407b72
cmp dword [ebp - 0x24], 0x29
jge 0x407afa
push 0x18062
push 0x3a6c
push 0xbcfd
call dword [sym.imp.USER32.dll_CheckRadioButton]
add esp, 0xc
cmp dword [ebp - 0x54], 0x36
jne 0x407afa
cmp dword [ebp - 0x20], 0x19
jne 0x407ac9
push 0x10151
push 0xd0ca
push 0xaf35
push 0x302d
push 0x77f5
push 0x111eb
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
add esp, 0x18
cmp dword [ebp - 0x30], 0x34
jne 0x407ac9
cmp dword [ebp - 0x48], 0x2f
jle 0x407a98
mov ecx, dword [ebp - 4]
sub ecx, 0x28
mov dword [ebp - 4], ecx
push 0xa953
push 0x1482c
push 0x1215
push 0x6f89
push 0x15216
call dword [sym.imp.KERNEL32.dll_InterlockedFlushSList]
add esp, 0x14
push 0x1200b
push 0xbffb
push 0x45d5
push 0x6f0a
push 0x8062
push 0x8e19
push 0x54f2
push 0x1517d
call dword [sym.imp.USER32.dll_EnumDisplayMonitors]
add esp, 0x20
push 0x65d1
push 0x8bd5
push 0x83e4
push 0x161bc
push 0x13d75
push 0x168f7
push 0x83b1
push 0x83eb
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
add esp, 0x20
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x30], 0x5c
jne 0x407b6d
cmp dword [ebp + 0x20], 0x62
je 0x407b3c
cmp dword [ebp - 0x24], 0x30
jle 0x407b3c
cmp dword [ebp - 0x28], 0x3d
jle 0x407b3c
push 0x6e5
push 0x4923
push 0x23e3
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
add esp, 0xc
mov eax, dword [ebp - 0x2c]
sub eax, 1
mov dword [ebp - 0x2c], eax
push 0x75ba
push 0xe4de
push 0x796b
push 0x1d59
push 0x3c6f
push 0x605a
push 0x116b7
push 0xdda6
call dword [sym.imp.USER32.dll_GetMessageA]
add esp, 0x20
jmp 0x4079fa
mov dword [ebp - 0x68], 0
jmp 0x407b84
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1f
cmp dword [ebp - 0x68], edx
jge 0x407ba6
cmp dword [ebp - 0x18], 0x59
jge 0x407ba4
cmp dword [ebp - 4], 0x23
jle 0x407ba4
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x407b7b
mov ecx, dword [ebp - 0x50]
add ecx, 0x3b
push ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x15
push edx
mov eax, dword [ebp - 0x6c]
sub eax, 0x94
push eax
mov ecx, dword [ebp - 0x54]
add ecx, 0x40
push ecx
mov edx, dword [ebp + 0x10]
add edx, 0x57
push edx
mov eax, dword [ebp - 0x30]
add eax, 0x25
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x26
push ecx
call fcn.00423eb0
add esp, 0x1c
mov edx, dword [ebp + 0x10]
add edx, 0x4b
push edx
mov eax, dword [ebp - 4]
add eax, 4
push eax
mov ecx, dword [ebp - 8]
sub ecx, 4
push ecx
call fcn.00438cc0
add esp, 0xc
mov esp, ebp
pop ebp
ret