Function at 0x180029a60
Capabilities:
Shutdown system

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0xa8
movsd xmm0, qword [0x180060100]
call fcn.18002b530
mov dword [rsp + 0x3c], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x30], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 3
mov dword [rsp + 0x34], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x34]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x3c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180029e51
xor eax, eax
cmp eax, 8
je 0x180029e51
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x40], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 3
mov dword [rsp + 0x44], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x44]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x180029e40
mov rcx, qword [rsp + 0xb0]
call fcn.180027db0
cdqe
cvtsi2sd xmm0, rax
call fcn.18002b530
mov dword [rsp + 0x58], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x4c], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
call fcn.180029e70
movsx eax, al
shl eax, 2
mov dword [rsp + 0x50], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x50]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x58]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180029e40
xor eax, eax
cmp eax, 9
je 0x180029e40
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x5c], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 0xa
mov dword [rsp + 0x60], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x60]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x180029d22
mov dword [rsp + 0x28], 0x80030002
mov dword [rsp + 0x20], 1
mov r9d, 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownExA]
cdqe
cvtsi2sd xmm0, rax
call fcn.18002b530
mov dword [rsp + 0x74], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x68], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 5
mov dword [rsp + 0x6c], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x6c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x74]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180029d22
xor eax, eax
cmp eax, 0xa
je 0x180029d22
jmp 0x180029e51
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x78], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80], eax
call fcn.180029e70
movsx eax, al
mov dword [rsp + 0x7c], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x7c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x80]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x180029e40
xor edx, edx
mov ecx, 6
call qword [sym.imp.USER32.dll_ExitWindowsEx]
cdqe
cvtsi2sd xmm0, rax
call fcn.18002b530
mov dword [rsp + 0x90], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x84], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8c], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 6
mov dword [rsp + 0x88], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x88]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x8c]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x90]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180029e40
xor eax, eax
cmp eax, 7
je 0x180029e40
jmp 0x180029e51
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x180029a6c
add rsp, 0xa8
ret