Function at 0x1007758
Capabilities:
Check mutex on windows
Shutdown system

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xf20
mov rax, qword [0x0101c380]
xor rax, rsp
mov qword [rsp + 0xf10], rax
mov rbx, rcx
mov rbp, rdx
lea rcx, [rsp + 0x50]
xor edx, edx
mov r8d, 0x6c0
mov rdi, r9
call fcn.01012d10
mov qword [rsp + 0x50], rbx
call fcn.0100e86c
mov r8, qword [rbx + 0x48]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x58], eax
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
xor r13d, r13d
mov r12, rax
cmp rax, r13
je 0x1007d6a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1007d61
lea rcx, [rsp + 0xb10]
lea r14d, [r13 + 1]
sub rcx, rdi
mov al, byte [rdi]
mov byte [rcx + rdi], al
add rdi, r14
cmp al, r13b
jne 0x10077e9
mov r8, qword [rbx + 0x138]
cmp r8, r13
je 0x1007860
or r9, 0xffffffffffffffff
xor eax, eax
mov rdi, r8
mov rcx, r9
repne scasb al, byte [rdi]
not rcx
cmp rcx, r14
je 0x1007860
lea rdi, [rsp + 0xb10]
mov rcx, r9
repne scasb al, byte [rdi]
lea rcx, [0x010063c4]
sub rdi, r14
xor edx, edx
mov al, byte [rcx + rdx]
mov byte [rdi + rdx], al
add rdx, r14
test al, al
jne 0x1007831
xor eax, eax
lea rdi, [rsp + 0xb10]
mov rcx, r9
repne scasb al, byte [rdi]
sub rdi, r14
xor ecx, ecx
mov al, byte [r8 + rcx]
mov byte [rdi + rcx], al
add rcx, r14
test al, al
jne 0x1007852
mov eax, dword [rsp + 0x58]
mov esi, 0xd
cmp eax, r13d
je 0x1007a15
cmp eax, r14d
je 0x1007a15
cmp eax, 2
je 0x1007a15
cmp eax, 6
je 0x1007a15
cmp eax, 0x15
je 0x1007a15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb10]
call fcn.01007224
mov edi, eax
cmp eax, r13d
jne 0x1007a1a
lea rcx, [rsp + 0x50]
call fcn.0100b250
mov edi, eax
cmp eax, r13d
jne 0x1007a1a
cmp dword [rsp + 0x7c], r13d
jne 0x1007909
cmp dword [rsp + 0x78], r13d
je 0x1007909
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x198]
mov rcx, qword [rcx + 0x40]
call fcn.01007674
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SETUPAPI.dll_SetupPromptReboot]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x58], 7
jl 0x1007920
mov ecx, 0x220
call fcn.01008b08
cmp eax, r13d
cmove edi, esi
cmp edi, r13d
jne 0x1007a1a
mov r8, qword [rsp + 0x50]
cmp qword [r8 + 0x178], r13
je 0x100799c
mov rcx, qword [rbx + 0x48]
lea rdx, [rsp + 0x38]
mov esi, r13d
call fcn.01007f88
mov rdx, r14
mov ecx, 4
call fcn.01012368
lea rdx, [rsp + 0x38]
xor r9d, r9d
mov rcx, rax
mov r8d, r14d
mov rbx, rax
call fcn.0100eb44
cmp eax, r13d
je 0x100797b
mov rcx, qword [rbx]
cmp dword [rcx + 0x18], r13d
seta sil
cmp rbx, r13
je 0x1007988
mov rcx, rbx
call fcn.0101226c
cmp esi, r13d
je 0x1007997
mov edi, 0xe
mov r8, qword [rsp + 0x50]
cmp dword [rsp + 0x4b0], r13d
jne 0x1007a1a
mov rcx, qword [rsp + 0x4a8]
cmp rcx, r13
je 0x1007a1a
cmp qword [r8 + 0x160], r13
je 0x10079e0
mov rax, qword [r8 + 0x48]
mov r9d, dword [rsp + 0x58]
xor edx, edx
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.010085f8
cmp eax, r13d
jne 0x1007a1a
mov edi, 0xc
jmp 0x1007a1a
cmp dword [rsp + 0x5c], r13d
jne 0x1007a1a
mov rdx, qword [r8 + 0x110]
cmp rdx, r13
je 0x1007a1a
mov r8, qword [r8 + 0x108]
mov r9d, 0x31
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 2
mov eax, 3
cmove edi, eax
jmp 0x1007a1a
mov edi, 9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 4