Function at 0x140117570
Capabilities:
Shutdown system

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov rax, qword [0x1402bf5c8]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov esi, edx
mov rbx, rcx
xor r14d, r14d
mov qword [rbp - 0x21], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x21]
lea edx, [r14 + 0x20]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x140117796
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp + 7]
call fcn.140023b20
nop
mov qword [rbp - 0x29], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, edi
xor edx, edx
mov ecx, 0x13ff
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r8d, eax
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov rdx, qword [rbp - 0x29]
lea rcx, [rbp - 0x19]
call fcn.140018360
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rax, qword [rbp - 0x19]
lea rcx, [rbp + 7]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
cmovae rcx, qword [rbp + 7]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, str.Unable_to_OpenProcessToken:__d__s
lea r8, [r14 - 1]
call fcn.14009de10
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1401176a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401176a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117e0b
call fcn.1401a9a50
lea rdi, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rdi, qword [rbp + 7]
mov dword [rbp - 0x29], r14d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
lea rax, [rbp - 0x25]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov r8d, 0x14
lea rdx, str.InitiateSystemReboot
lea rcx, [rbp - 0x19]
call fcn.140018360
nop
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rbp - 0x59]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x69]
mov r8d, 0x8e5
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.1400b16b0
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x140117dcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117c9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117df9
jmp 0x140117c9f
lea r8, [rbp + 0x27]
lea rdx, [0x14024ce28]
lea rcx, [0x14022ee70]
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
jne 0x140117988
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r14w
mov edx, 0x400
lea rcx, [rbp - 0x19]
call fcn.140023c30
mov rdx, rax
mov qword [rbp - 9], 0x3ff
mov qword [rbp - 1], 0x3ff
movzx eax, r14w
mov rdi, rdx
mov ecx, 0x3ff
rep stosw word [rdi], ax
mov word [rdx + 0x7fe], r14w
mov qword [rbp - 0x19], rdx
mov edx, ebx
lea rcx, [rbp - 0x59]
call fcn.14007e3e0
cmp qword [rax + 0x18], 8
jb 0x14011782e
mov rax, qword [rax]
lea rcx, [rbp - 0x19]
mov rdx, qword [rbp - 1]
cmp rdx, 8
cmovae rcx, qword [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, str.Unable_to_LookupPrivilegeValue:__d__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x14011789b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117e11
call fcn.1401a9a50
lea rdi, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdi, qword [rbp - 0x19]
mov dword [rbp - 0x29], r14d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
lea rax, [rbp - 0x25]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x59]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], 7
mov r8d, 0x14
lea rdx, str.InitiateSystemReboot
lea rcx, [rbp - 0x59]
call fcn.140018360
nop
mov qword [rbp + 7], r14
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rbp + 7]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x69]
mov r8d, 0x8ec
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 7]
call fcn.1400b16b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x140117dcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117c9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117dff
jmp 0x140117c9f
mov dword [rbp + 0x2f], 1
mov rax, qword [rbp + 0x27]
mov qword [rbp + 0x33], rax
mov dword [rbp + 0x3b], 2
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r9d, 0x10
lea r8, [rbp + 0x2f]
xor edx, edx
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov edi, eax
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140117b5b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp + 7]
call fcn.140023b20
nop
mov edx, edi
lea rcx, [rbp - 0x59]
call fcn.14007e3e0
cmp qword [rax + 0x18], 8
jb 0x140117a01
mov rax, qword [rax]
lea rcx, [rbp + 7]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
cmovae rcx, qword [rbp + 7]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, str.Unable_to_AdjustTokenPrivileges:__d__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x140117a6e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117a69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117e17
call fcn.1401a9a50
lea rdi, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rdi, qword [rbp + 7]
mov dword [rbp - 0x29], r14d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
lea rax, [rbp - 0x25]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x59]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], 7
mov r8d, 0x14
lea rdx, str.InitiateSystemReboot
lea rcx, [rbp - 0x59]
call fcn.140018360
nop
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rbp - 0x19]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x69]
mov r8d, 0x8f8
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x19]
call fcn.1400b16b0
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x140117dcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117c9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117e05
jmp 0x140117c9f
mov dword [rsp + 0x28], 0x80010002
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, esi
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownExW]
cmp eax, 1
jne 0x140117ca9
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp + 7]
call fcn.140023b20
nop
lea rcx, [rbp + 7]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
cmovae rcx, qword [rbp + 7]
lea r9, str.Initiating_system_shutdown
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rdi, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rdi, qword [rbp + 7]
mov dword [rbp - 0x29], r14d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
lea rax, [rbp - 0x25]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x59]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], 7
mov r8d, 0x14
lea rdx, str.InitiateSystemReboot
lea rcx, [rbp - 0x59]
call fcn.140018360
nop
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rbp - 0x19]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x69]
mov r8d, 0x902
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x19]
call fcn.1400b16b0
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x140117dcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117c9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117e1d
call fcn.1401a9a50
jmp 0x140117dcf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp - 0x19]
call fcn.140023b20
nop
mov edx, edi
lea rcx, [rbp - 0x59]
call fcn.14007e3e0
cmp qword [rax + 0x18], 8
jb 0x140117cd8
mov rax, qword [rax]
lea rcx, [rbp - 0x19]
mov rdx, qword [rbp - 1]
cmp rdx, 8
cmovae rcx, qword [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, str.Initiating_system_shutdown_failed_with_error_code:__d__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x140117d45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117d40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140117df3
call fcn.1401a9a50
lea rbx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rbx, qword [rbp - 0x19]
mov dword [rbp - 0x29], r14d
lea rax, [rbp - 0x59]
mov qword [rbp - 0x31], rax
lea rdx, str.InitiateSystemReboot
lea rcx, [rbp - 0x59]
call fcn.140017fc0
mov rdi, rax
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rbp + 7]
call fcn.140017fc0
lea rcx, [rbp - 0x29]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x25]
mov qword [rbp - 0x61], rcx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x69]
mov r8d, 0x906
mov rdx, rdi
mov rcx, rax
call fcn.1400b16b0
nop
mov r8, qword [rbp - 1]
cmp r8, 8
jb 0x140117dcf
inc r8
mov rdx, qword [rbp - 0x19]
lea rcx, [rbp - 0x19]
call fcn.140023c60
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1401a9a30
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
int3
call fcn.1401e3dbc
int3
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
int3