Function at 0x140045bc0
Capabilities:
Shutdown system

Disassembly:
push rbx
sub rsp, 0x30
add edx, 0xffff6320
mov rbx, rcx
cmp edx, 0x79
ja case.0x140045bf1.40172
lea rcx, [0x140000000]
movzx eax, byte [rcx + rdx + 0x45f18]
mov edx, dword [rcx + rax*4 + 0x45ed4]
add rdx, rcx
jmp rdx
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiLockComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiLogoffComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiSleepComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiHibernateComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
mov edx, 1
mov r8d, 0x400
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 5]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhUiShutdownComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
mov edx, 1
mov r8d, 0x200
mov rcx, rbx
call sym.ProcessHacker.exe_PhUiShutdownComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 2]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
lea r8, str.shut_down
lea rdx, str.preforms_a_hard
lea rcx, str.This_option__s__s_in_an_disorderly_manner_and_may_cause_corrupted_files_or_instability_in_the_system.
call fcn.140001720
lea r8, str.the_computer
mov byte [rsp + 0x20], 1
lea rdx, str.shut_down
mov rcx, rbx
mov r9, qword [rax + 8]
call sym.ProcessHacker.exe_PhShowConfirmMessage
nop dword [rax]
test al, al
je 0x140045ec3
mov ecx, 2
call qword [sym.imp.ntdll.dll_NtShutdownSystem]
jmp 0x140045da6
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 3]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
lea r8, str.shut_down
lea rdx, str.forces_a_critical
lea rcx, str.This_option__s__s_in_an_disorderly_manner_and_may_cause_corrupted_files_or_instability_in_the_system.
call fcn.140001720
lea r8, str.the_computer
mov byte [rsp + 0x20], 1
lea rdx, str.shut_down
mov rcx, rbx
mov r9, qword [rax + 8]
call sym.ProcessHacker.exe_PhShowConfirmMessage
test al, al
je 0x140045ec3
mov edx, 6
mov r8d, 0x80000000
mov ecx, edx
call qword [sym.imp.ntdll.dll_NtSetSystemPowerState]
test eax, eax
jns 0x140045ec3
lfence
xor r9d, r9d
lea rdx, str.Unable_to_shut_down_the_computer.
mov r8d, eax
mov rcx, rbx
call sym.ProcessHacker.exe_PhShowStatus
mov al, 1
add rsp, 0x30
pop rbx
ret
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 6]
call sym.ProcessHacker.exe_PhUiRestartComputer
mov al, 1
add rsp, 0x30
pop rbx
ret
lea rcx, str.EnableWarnings
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x140045e1b
xor r9d, r9d
mov byte [rsp + 0x20], 0
lea r8, str.the_computer
mov rcx, rbx
lea rdx, str.update_and_shutdown
call sym.ProcessHacker.exe_PhShowConfirmMessage
test al, al
je 0x140045ec3
mov r9d, 0x48
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_InitiateShutdownW]
test eax, eax
je 0x140045ec3
mov ecx, eax
mov qword [rsp + 0x40], rdi
call sym.ProcessHacker.exe_PhGetWin32Message
lea r9, str.Unable_to_shut_down_the_computer.
mov rdi, rax
test rax, rax
je 0x140045eaa
mov rcx, qword ds:[rax + 8]
mov edx, 0x20
mov qword [rsp + 0x28], rcx
lea rax, [0x1401b8d58]
mov rcx, rbx
mov qword [rsp + 0x20], rax
mov r8d, 0xfffe
call sym.ProcessHacker.exe_PhShowMessage2
lea rcx, [rdi - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140045ebe
call fcn.1400fbcc0
mov rdi, qword [rsp + 0x40]
mov al, 1
add rsp, 0x30
pop rbx
ret
lea r8, [0x1401efb68]
mov edx, 0x10
mov rcx, rbx
call sym.ProcessHacker.exe_PhShowMessage
mov rdi, qword [rsp + 0x40]
mov al, 1
add rsp, 0x30
pop rbx
ret
xor al, al
add rsp, 0x30
pop rbx
ret