Function at 0x598098
Capabilities:
Shutdown system

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x5980a1
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
mov eax, dword [ebp + 0xc]
call fcn.00404968
mov eax, dword [ebp + 8]
call fcn.00404968
xor eax, eax
push ebp
push 0x598899
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 4], 0xffffffff
jne 0x5980e3
mov eax, dword [0x60f11c]
mov eax, dword [eax]
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], 0
je 0x598171
imul eax, dword [ebp - 4], 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
cmp byte [edx + eax + 0x297], 0
jne 0x598171
imul edi, dword [ebp - 4], 0x2f7
mov eax, dword [0x60f078]
mov eax, dword [eax]
lea eax, [eax + edi + 0x2bb]
mov edx, dword [ebp + 0xc]
call fcn.0040450c
mov eax, dword [0x60f078]
mov eax, dword [eax]
lea eax, [eax + edi + 0x2bf]
mov edx, dword [ebp + 8]
call fcn.0040450c
cmp dword [ebp + 8], 0
je 0x598159
mov eax, dword [0x60f078]
mov eax, dword [eax]
lea eax, [eax + edi + 0x2c3]
mov edx, 0x5988b8
call fcn.0040450c
jmp 0x598171
mov eax, dword [0x60f078]
mov eax, dword [eax]
lea eax, [eax + edi + 0x2c3]
mov edx, 0x5988c8
call fcn.0040450c
call fcn.005c9098
imul edx, dword [ebp - 4], 0x2f7
mov ecx, dword [0x60f078]
mov ecx, dword [ecx]
mov dword [ecx + edx + 0x28], eax
mov eax, dword [esi]
mov edx, 0x5988d4
call fcn.004048c4
je 0x5987e3
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi]
mov ecx, 1
mov edx, 1
call fcn.004049d8
mov eax, dword [ebp - 0x14]
mov edx, 0x5988e4
call fcn.004048c4
jne 0x5981d5
push esi
mov eax, dword [esi]
call fcn.00404778
mov ecx, eax
mov eax, dword [esi]
mov edx, 2
call fcn.004049d8
xor edx, edx
push ebp
push 0x5987d7
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x1c]
mov edx, dword [esi]
call fcn.00404d40
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.004e1138
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.004063d4
lea ecx, [ebp - 0x20]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov edi, dword [eax]
call dword [edi + 0x44]
mov eax, dword [ebp - 0x20]
xor edx, edx
call fcn.00404e78
je 0x5987a2
lea ecx, [ebp - 0x24]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov edi, dword [eax]
call dword [edi + 0x44]
mov eax, dword [ebp - 0x24]
mov edx, 0x598904
call fcn.00404e78
jne 0x5983a6
mov eax, dword [0x60efc0]
mov eax, dword [eax]
mov edx, 0x598928
call fcn.004048c4
jne 0x5982be
mov eax, dword [0x60e518]
mov eax, dword [eax]
mov edx, 0x598934
call fcn.004048c4
jne 0x5982be
mov eax, dword [0x60ea84]
mov eax, dword [eax]
mov edx, 0x598928
call fcn.004048c4
jne 0x59828f
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492d48
push 0
call sub.kernel32.dll_ExitProcess_1
mov eax, dword [0x60e6e0]
mov eax, dword [eax]
mov edx, 0x598928
call fcn.004048c4
jne 0x5982be
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492d48
push 0
push 9
call sub.user32.dll_ExitWindowsEx
push 0
call sub.kernel32.dll_ExitProcess_1
imul eax, dword [ebp - 4], 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov byte [edx + eax + 0x297], 1
mov eax, dword [0x60efdc]
mov byte [eax], 1
lea ecx, [ebp - 0x30]
mov eax, dword [ebx]
mov edx, 0x59893c
mov edi, dword [eax]
call dword [edi + 0x44]
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x59895c
call fcn.00404dcc
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
call fcn.00404740
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 4]
mov edx, 0x598990
call fcn.005b8b34
mov edx, 0x5989a0
mov eax, 0x5989b0
call fcn.00404abc
test eax, eax
jle 0x598351
mov byte [ebp - 5], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5987e7
mov eax, dword [0x60ece4]
mov eax, dword [eax]
call fcn.00492ab0
push 0x1f4
call sub.kernel32.dll_Sleep
imul eax, dword [ebp - 4], 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
cmp byte [edx + eax + 0x297], 0
jne 0x59833b
mov eax, ebx
imul edi, dword [ebp - 4], 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov edx, dword [edx + edi + 0x2ef]
call fcn.004063d4
mov eax, esi
mov edx, dword [0x60f078]
mov edx, dword [edx]
mov edx, dword [edx + edi + 0x2f3]
call fcn.0040450c
mov byte [ebp - 5], 1
jmp 0x5987cd
lea ecx, [ebp - 0x34]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x34]
mov edx, 0x5989b8
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x38]
mov eax, dword [ebx]
mov edx, 0x5989cc
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x38]
mov edx, 0x5989e4
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x3c]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x3c]
mov edx, 0x5989f8
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x40]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x40]
mov edx, 0x598a08
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x44]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x44]
mov edx, 0x598a18
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x48]
mov eax, dword [ebx]
mov edx, 0x59893c
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x48]
mov edx, 0x598a08
call fcn.00404e78
je 0x598480
lea ecx, [ebp - 0x4c]
mov eax, dword [ebx]
mov edx, 0x59893c
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x4c]
mov edx, 0x598a28
call fcn.00404e78
jne 0x598492
mov eax, 0x598a3c
call fcn.00409c58
test al, al
je 0x598635
push 1
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x598a50
mov edx, 0x598a5c
mov eax, dword [ebp + 8]
call fcn.005c89d4
cmp dword [ebp - 0xc], 0
je 0x598554
push 0x598a6c
push dword [ebp - 0xc]
push 0x598aac
imul eax, dword [ebp - 4], 0x2f7
mov edx, dword [0x60f078]
mov edx, dword [edx]
push dword [edx + eax + 0xc]
push 0x598ac0
lea eax, [ebp - 0x50]
mov edx, 5
call fcn.00404838
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x10]
call fcn.005c5210
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14c]
test eax, eax
jle 0x59854c
push 0x598acc
mov edx, 0x598adc
mov eax, dword [ebp - 0x10]
call fcn.004cc68c
lea edx, [ebp - 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0x54]
push 0x598af0
mov edx, 0x598afc
mov eax, dword [ebp - 0x10]
call fcn.004cc68c
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0x58]
push 0x598b0c
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.00404838
mov eax, dword [ebp - 0x10]
call fcn.004035c4
lea ecx, [ebp - 0x5c]
mov eax, dword [ebx]
mov edx, 0x598b18
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x5c]
xor edx, edx
call fcn.00404e78
je 0x5985d0
lea ecx, [ebp - 0x68]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x68]
push 0x598b30
lea ecx, [ebp - 0x6c]
mov eax, dword [ebx]
mov edx, 0x598b18
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x6c]
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0xc]
call fcn.00404d40
push dword [ebp - 0x70]
lea eax, [ebp - 0x64]
mov edx, 4
call fcn.00404e30
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 0x60]
call fcn.00404740
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 4]
mov edx, 0x598990
call fcn.005b8b34
jmp 0x598635
lea ecx, [ebp - 0x7c]
mov eax, dword [ebx]
mov edx, 0x59893c
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x7c]
push 0x598b30
lea ecx, [ebp - 0x80]
mov eax, dword [ebx]
mov edx, 0x5989cc
mov esi, dword [eax]
call dword [esi + 0x44]
push dword [ebp - 0x80]
lea eax, [ebp - 0x84]
mov edx, dword [ebp - 0xc]
call fcn.00404d40
push dword [ebp - 0x84]
lea eax, [ebp - 0x78]
mov edx, 4
call fcn.00404e30
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x74]
call fcn.00404740
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 4]
mov edx, 0x598990
call fcn.005b8b34
mov edx, 0x5989a0
mov eax, 0x5989b0
call fcn.00404abc
test eax, eax
jne 0x598760
lea ecx, [ebp - 0x88]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov esi, dword [eax]
call dword [esi + 0x44]
mov edx, dword [ebp - 0x88]
mov eax, 0x598b3c
call fcn.00404f48
test eax, eax
jg 0x5986c0
lea ecx, [ebp - 0x8c]
mov eax, dword [ebx]
mov edx, 0x59893c
mov esi, dword [eax]
call dword [esi + 0x44]
mov edx, dword [ebp - 0x8c]
mov eax, 0x598b3c
call fcn.00404f48
test eax, eax
jg 0x5986c0
lea ecx, [ebp - 0x90]
mov eax, dword [ebx]
mov edx, 0x5988ec
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 0x90]
mov edx, 0x598b4c
call fcn.00404e78
jne 0x598760
imul ebx, dword [ebp - 4], 0x2f7
mov eax, dword [0x60f078]
mov eax, dword [eax]
mov byte [eax + ebx + 0x2c], 1
mov eax, dword [0x60f078]
mov eax, dword [eax]
mov byte [eax + ebx + 0x291], 0
mov eax, dword [0x60f078]
mov eax, dword [eax]
mov byte [eax + ebx + 0x296], 0
xor eax, eax
push ebp
push 0x598756
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x598b64
mov eax, dword [0x60f078]
mov eax, dword [eax]
push dword [eax + ebx + 0xc]
push 0x598ba4
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404838
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 4]
mov edx, 0x598990
call fcn.005b8b34
mov eax, dword [0x60ee4c]
mov eax, dword [eax]
mov eax, dword [eax + 0x428]
mov edx, dword [eax]
call dword [edx + 0x80]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x598760
mov eax, 0x598a3c
call fcn.00409c58
test al, al
je 0x59879c
push dword [ebp + 0xc]
push 0x5988e4
push dword [ebp + 8]
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.00404838
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 4]
mov edx, 0x598990
call fcn.005b8b34
mov byte [ebp - 5], 0
jmp 0x5987cd
lea ecx, [ebp - 0x9c]
mov eax, dword [ebx]
mov edx, 0x598bc4
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 0x9c]
xor edx, edx
call fcn.00404e78
je 0x5987c9
mov byte [ebp - 5], 0
jmp 0x5987cd
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5987e7
mov byte [ebp - 5], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5988a3
lea eax, [ebp - 0x9c]
call fcn.00404bc4
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.004044dc
lea eax, [ebp - 0x90]
mov edx, 7
call fcn.00404bdc
lea eax, [ebp - 0x74]
call fcn.004044b8
lea eax, [ebp - 0x70]
mov edx, 4
call fcn.00404bdc
lea eax, [ebp - 0x60]
call fcn.004044b8
lea eax, [ebp - 0x5c]
call fcn.00404bc4
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.004044dc
lea eax, [ebp - 0x4c]
mov edx, 9
call fcn.00404bdc
lea eax, [ebp - 0x28]
call fcn.004044b8
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404bdc
lea eax, [ebp - 0x18]
call fcn.004063bc
lea eax, [ebp - 0x14]
call fcn.004044b8
lea eax, [ebp - 0xc]
call fcn.004044b8
lea eax, [ebp + 8]
mov edx, 2
call fcn.004044dc
ret