Function at 0x416486
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
and dword [ebp - 4], 0
and dword [ebp - 8], 0
push esi
push edi
mov edi, dword [ebp + 0xc]
push dword [edi + 8]
call fcn.0041a294
push eax
push dword [ebp + 0x18]
push dword [edi + 0x50]
push 0x20000172
push 3
call fcn.0040bac1
add esp, 0x14
test byte [ebp + 0x18], 1
je 0x4164ef
push dword [ebp + 8]
mov eax, dword [ebp + 0x14]
add eax, 4
push eax
push dword [edi + 0x10]
push dword [edi + 0x48]
push dword [edi]
call fcn.00420188
mov esi, eax
test esi, esi
jns 0x4164ef
push dword [ebp + 8]
push 0x4529b8
push esi
call 0x446f1d
add esp, 0xc
jmp 0x416a68
lea eax, [ebp - 4]
push eax
push 0x20006
push dword [edi + 0x50]
push dword [edi + 0x4c]
call 0x447882
mov esi, eax
test esi, esi
jns 0x41651b
push 0x4529e0
push esi
call 0x446f1d
pop ecx
pop ecx
jmp 0x416a68
test byte [ebp + 0x18], 2
push ebx
je 0x4169dc
push dword [edi + 0x54]
mov ebx, 0x451d40
push ebx
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
js 0x416a1d
push dword [edi + 0x24]
mov ebx, 0x451dc4
push dword [edi + 0x20]
push ebx
push dword [ebp - 4]
call 0x448269
mov esi, eax
test esi, esi
js 0x416a1d
push dword [edi + 0x2c]
mov ebx, 0x451d60
push dword [edi + 0x28]
push ebx
push dword [ebp - 4]
call 0x448269
mov esi, eax
test esi, esi
js 0x416a1d
push dword [edi + 0x1c]
mov ebx, 0x451d80
push dword [edi + 0x18]
push ebx
push dword [ebp - 4]
call 0x448269
mov esi, eax
test esi, esi
js 0x416a1d
push dword [edi + 0x34]
mov ebx, 0x451da4
push dword [edi + 0x30]
push ebx
push dword [ebp - 4]
call 0x448269
mov esi, eax
test esi, esi
js 0x416a1d
mov ecx, dword [edi + 0x38]
mov ebx, 0x451e00
mov edx, dword [edi + 0x3c]
movzx eax, cx
push eax
mov eax, edx
shrd ecx, eax, 0x10
shr eax, 0x10
movzx eax, cx
push eax
movzx eax, dx
push eax
shr edx, 0x10
push edx
push 0x452a20
push ebx
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x1c
test esi, esi
js 0x416a1d
movzx eax, word [edi + 0x3e]
mov ebx, 0x45220c
push eax
push ebx
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
js 0x416a1d
mov eax, dword [edi + 0x38]
mov cl, 0x20
mov edx, dword [edi + 0x3c]
call fcn.00434750
movzx eax, ax
mov ebx, 0x452228
push eax
push ebx
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
js 0x416a1d
cmp dword [edi + 0x44], 0
je 0x41665f
push dword [edi + 0x44]
mov ebx, str.msi.dll
push ebx
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
js 0x416a1d
cmp dword [edi + 0x14], 0
je 0x416680
push dword [edi + 0x14]
mov ebx, 0x451e5c
push ebx
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
js 0x416a1d
push str.SWRQh8
push 0x452a40
mov ebx, 0x451e1c
push ebx
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x10
test esi, esi
js 0x416a1d
push dword [edi + 0x54]
mov ebx, 0x451fd8
push 0x452a48
push ebx
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x10
test esi, esi
js 0x416a1d
push dword [ebp - 4]
mov ebx, dword [ebp + 0x10]
push ebx
push edi
call fcn.0041569d
mov esi, eax
test esi, esi
jns 0x4166e5
push 0x452a54
jmp 0x416a5f
cmp dword [edi + 0x64], 0
je 0x41670b
push dword [edi + 0x64]
push 0x451ff0
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x41670b
push 0x451ff0
jmp 0x416a1e
lea eax, [ebp - 8]
push eax
push ebx
push edi
call fcn.00414e61
test eax, eax
mov eax, dword [ebp - 8]
jns 0x416720
mov eax, dword [edi + 0x68]
push eax
push 0x45202c
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x41673e
push 0x45202c
jmp 0x416a1e
cmp dword [edi + 0x6c], 0
je 0x416764
push dword [edi + 0x6c]
push 0x452040
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x416764
push 0x452040
jmp 0x416a1e
cmp dword [edi + 0x70], 0
je 0x41678a
push dword [edi + 0x70]
push 0x452054
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x41678a
push 0x452054
jmp 0x416a1e
cmp dword [edi + 0x74], 0
je 0x4167b0
push dword [edi + 0x74]
push 0x452070
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x4167b0
push 0x452070
jmp 0x416a1e
cmp dword [edi + 0x78], 0
je 0x4167d6
push dword [edi + 0x78]
push str._a_b_t_n_v_f_r
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x4167d6
push str._a_b_t_n_v_f_r
jmp 0x416a1e
cmp dword [edi + 0x7c], 0
je 0x41681c
push dword [edi + 0x7c]
push str._________._0123U456U789:_____ABCDEFGHIJKLMNOPQRSTUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x4167fc
push str._________._0123U456U789:_____ABCDEFGHIJKLMNOPQRSTUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
jmp 0x416a1e
push dword [edi + 0x7c]
push 0x4520cc
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x41681c
push 0x4520cc
jmp 0x416a1e
mov eax, dword [edi + 0x80]
test eax, eax
je 0x416844
push eax
push 0x4520e8
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x416844
push 0x4520e8
jmp 0x416a1e
mov eax, dword [edi + 0x84]
test eax, eax
je 0x41686c
push eax
push 0x4520fc
push dword [ebp - 4]
call 0x4481bf
mov esi, eax
test esi, esi
jns 0x41686c
push 0x4520fc
jmp 0x416a1e
mov eax, dword [edi + 0x88]
cmp eax, 1
jne 0x416895
push eax
push 0x45210c
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
jns 0x4168e1
push 0x45210c
jmp 0x416a1e
cmp eax, 2
je 0x4168e1
push dword [edi + 0x54]
push 0x452a7c
push 0x452120
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x4168c2
push 0x452120
jmp 0x416a1e
push 1
push 0x452138
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
jns 0x4168e1
push 0x452138
jmp 0x416a1e
cmp dword [edi + 0x8c], 0
je 0x41690d
push dword [edi + 0x90]
push 0x45215c
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
jns 0x41690d
push 0x45215c
jmp 0x416a1e
cmp dword [edi + 4], 0
jne 0x416932
push 1
push 0x452170
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
jns 0x416932
push 0x452170
jmp 0x416a1e
push dword [edi + 0x54]
push str.Failed_to_start_bootstrapper_application.
push 0x452190
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x41695a
push 0x452190
jmp 0x416a1e
cmp dword [edi + 0x88], 2
mov eax, 0x452ac8
je 0x41696d
mov eax, 0x452ad8
push eax
push dword [edi + 0x54]
push 0x44cd0c
push 0x4521bc
push dword [ebp - 4]
call 0x4483a0
mov esi, eax
add esp, 0x14
test esi, esi
jns 0x416996
push 0x4521bc
jmp 0x416a1e
cmp dword [edi + 0x98], 0
je 0x4169bc
lea eax, [edi + 0x94]
push eax
push ebx
call fcn.0041593e
mov esi, eax
test esi, esi
jns 0x4169bc
push str.Failed_to_get_process_token.
jmp 0x416a5f
cmp dword [edi + 0x9c], 0
je 0x4169dc
push ebx
push edi
call fcn.00415a72
mov esi, eax
test esi, esi
jns 0x4169dc
push str.SeShutdownPrivilege
jmp 0x416a5f
test byte [ebp + 0x18], 4
je 0x416a2e
mov ecx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x24]
shrd ecx, eax, 0xa
shr eax, 0xa
test eax, eax
jb 0x416a2e
ja 0x4169fd
test ecx, ecx
je 0x416a2e
test eax, eax
jb 0x416a06
push 0xffffffffffffffff
pop eax
ja 0x416a08
cmp ecx, eax
ja 0x416a08
mov eax, ecx
push eax
mov ebx, 0x452010
push ebx
push dword [ebp - 4]
call 0x448171
mov esi, eax
test esi, esi
jns 0x416a2e
push ebx
push 0x452a04
push esi
call 0x446f1d
add esp, 0xc
jmp 0x416a67
cmp dword [ebp + 0x1c], 1
jne 0x416a47
push edi
call fcn.0042e9e0
mov esi, eax
test esi, esi
jns 0x416a47
push str.Failed_to_get_shutdown_privilege_LUID.
jmp 0x416a5f
push 0
push 1
push dword [ebp - 4]
push edi
call fcn.004156fd
mov esi, eax
test esi, esi
jns 0x416a67
push 0x452b68
push esi
call 0x446f1d
pop ecx
pop ecx
pop ebx
cmp dword [ebp - 8], 0
je 0x416a76
push dword [ebp - 8]
call fcn.00408b47
cmp dword [ebp - 4], 0
je 0x416a85
push dword [ebp - 4]
call dword [0x44c000]
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret 0x20