Function at 0x597a44
Capabilities:
Shutdown system

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x597a4c
push ebx
push esi
push edi
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x597efc
push dword fs:[eax]
mov dword fs:[eax], esp
cmp ebx, 0xffffffff
jne 0x597a75
mov ebx, dword [0x60f11c]
mov ebx, dword [ebx]
call fcn.005c9098
imul edx, ebx, 0x2f7
mov ecx, dword [0x60f078]
mov ecx, dword [ecx]
mov dword [ecx + edx + 0x28], eax
mov eax, dword [esi]
mov edx, 0x597f14
call fcn.004048c4
je 0x597e7b
lea eax, [ebp - 8]
push eax
mov eax, dword [esi]
mov ecx, 1
mov edx, 1
call fcn.004049d8
mov eax, dword [ebp - 8]
mov edx, 0x597f24
call fcn.004048c4
jne 0x597ad8
push esi
mov eax, dword [esi]
call fcn.00404778
mov ecx, eax
mov eax, dword [esi]
mov edx, 2
call fcn.004049d8
xor edx, edx
push ebp
push 0x597e6d
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0xc]
mov edx, dword [esi]
call fcn.00404d40
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 4]
call fcn.004e1138
lea ecx, [ebp - 0x10]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x44]
mov eax, dword [ebp - 0x10]
xor edx, edx
call fcn.00404e78
je 0x597def
lea ecx, [ebp - 0x14]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x44]
mov eax, dword [ebp - 0x14]
mov edx, 0x597f44
call fcn.00404e78
jne 0x597c9b
mov eax, dword [0x60efc0]
mov eax, dword [eax]
mov edx, 0x597f68
call fcn.004048c4
jne 0x597bb9
mov eax, dword [0x60e518]
mov eax, dword [eax]
mov edx, 0x597f74
call fcn.004048c4
jne 0x597bb9
mov eax, dword [0x60ea84]
mov eax, dword [eax]
mov edx, 0x597f68
call fcn.004048c4
jne 0x597b8a
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492d48
push 0
call sub.kernel32.dll_ExitProcess_1
mov eax, dword [0x60e6e0]
mov eax, dword [eax]
mov edx, 0x597f68
call fcn.004048c4
jne 0x597bb9
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492d48
push 0
push 9
call sub.user32.dll_ExitWindowsEx
push 0
call sub.kernel32.dll_ExitProcess_1
imul eax, ebx, 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov byte [edx + eax + 0x297], 1
mov eax, dword [0x60efdc]
mov byte [eax], 1
lea ecx, [ebp - 0x20]
mov edx, 0x597f7c
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x44]
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 0x597f9c
call fcn.00404dcc
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.00404740
mov eax, dword [ebp - 0x18]
mov ecx, ebx
mov edx, 0x597fd0
call fcn.005b8b34
mov edx, 0x597fe0
mov eax, 0x597ff0
call fcn.00404abc
test eax, eax
jle 0x597c49
xor ebx, ebx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597e7d
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492ab0
push 0x1f4
call sub.kernel32.dll_Sleep
imul eax, ebx, 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
cmp byte [edx + eax + 0x297], 0
jne 0x597c33
lea eax, [ebp - 4]
imul edi, ebx, 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov edx, dword [edx + edi + 0x2ef]
call fcn.004063d4
mov eax, esi
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov edx, dword [edx + edi + 0x2f3]
call fcn.0040450c
mov bl, 1
jmp 0x597e63
lea ecx, [ebp - 0x24]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x24]
mov edx, 0x597ff8
call fcn.00404e78
je 0x597d17
lea ecx, [ebp - 0x28]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x28]
mov edx, 0x59800c
call fcn.00404e78
je 0x597d17
lea ecx, [ebp - 0x2c]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x2c]
mov edx, 0x59801c
call fcn.00404e78
je 0x597d17
lea ecx, [ebp - 0x30]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x30]
mov edx, 0x59802c
call fcn.00404e78
jne 0x597d29
mov eax, 0x598040
call fcn.00409c58
test al, al
je 0x597deb
lea ecx, [ebp - 0x34]
mov edx, 0x598050
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x34]
xor edx, edx
call fcn.00404e78
je 0x597d99
lea ecx, [ebp - 0x40]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x40]
push 0x598068
lea ecx, [ebp - 0x44]
mov edx, 0x598050
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x44]
lea eax, [ebp - 0x3c]
mov edx, 3
call fcn.00404e30
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.00404740
mov eax, dword [ebp - 0x38]
mov ecx, ebx
mov edx, 0x597fd0
call fcn.005b8b34
jmp 0x597deb
lea ecx, [ebp - 0x50]
mov edx, 0x597f7c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x50]
push 0x598068
lea ecx, [ebp - 0x54]
mov edx, 0x598074
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x54]
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.00404e30
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
call fcn.00404740
mov eax, dword [ebp - 0x48]
mov ecx, ebx
mov edx, 0x597fd0
call fcn.005b8b34
xor ebx, ebx
jmp 0x597e63
lea ecx, [ebp - 0x58]
mov edx, 0x59808c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x58]
xor edx, edx
call fcn.00404e78
je 0x597e61
lea ecx, [ebp - 0x64]
mov edx, 0x597f2c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x64]
push 0x598068
lea ecx, [ebp - 0x68]
mov edx, 0x59808c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x68]
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00404e30
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x5c]
call fcn.00404740
mov eax, dword [ebp - 0x5c]
mov ecx, ebx
mov edx, 0x597fd0
call fcn.005b8b34
xor ebx, ebx
jmp 0x597e63
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597e7d
xor ebx, ebx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x597f03
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404bdc
lea eax, [ebp - 0x5c]
call fcn.004044b8
lea eax, [ebp - 0x58]
mov edx, 4
call fcn.00404bdc
lea eax, [ebp - 0x48]
call fcn.004044b8
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.00404bdc
lea eax, [ebp - 0x38]
call fcn.004044b8
lea eax, [ebp - 0x34]
mov edx, 7
call fcn.00404bdc
lea eax, [ebp - 0x18]
call fcn.004044b8
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404bdc
lea eax, [ebp - 8]
call fcn.004044b8
lea eax, [ebp - 4]
call fcn.004063bc
ret