Function at 0x4091fb
Capabilities:
Shutdown system

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], esp
call dword [sym.imp.KERNEL32.dll_GetVersion]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x409231
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 4], eax
push 0x80000301
push 0
push connect
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0xc4
call fcn.0040ed50
add esp, 0x1c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x409275
mov dword [ebp - 8], 1
jmp 0x40927c
mov dword [ebp - 8], 0
cmp dword [ebp + 8], 3
jne 0x409355
cmp dword [ebp - 8], 1
jne 0x4092bf
push 1
mov eax, str.SeShutdownPrivilege
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
call fcn.004012bc
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4092bf
push ebx
call fcn.0040e012
add esp, 4
cmp dword [ebp + 0x10], 0
je 0x409322
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 0
push 2
mov ebx, 0xc8
call fcn.004102e0
add esp, 0x1c
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push 0xffff
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x40931d
push 6
call fcn.0040e01e
add esp, 4
jmp 0x40934b
mov dword [ebp - 0xc], esp
push 0xffff
push 0
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40934b
push 6
call fcn.0040e01e
add esp, 4
jmp 0x4094f8
cmp dword [ebp + 8], 2
jne 0x40942e
cmp dword [ebp + 0x10], 0
je 0x4093fb
cmp dword [ebp - 8], 1
jne 0x4093a2
push 1
mov eax, str.SeShutdownPrivilege
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
call fcn.004012bc
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4093a2
push ebx
call fcn.0040e012
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 2
push 2
mov ebx, 0xc8
call fcn.004102e0
add esp, 0x1c
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push 0xffff
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x4093f6
push 6
call fcn.0040e01e
add esp, 4
jmp 0x409424
mov dword [ebp - 0xc], esp
push 0xffff
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x409424
push 6
call fcn.0040e01e
add esp, 4
jmp 0x4094f8
cmp dword [ebp + 0x10], 0
je 0x4094ca
cmp dword [ebp - 8], 1
jne 0x409471
push 1
mov eax, str.SeShutdownPrivilege
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
call fcn.004012bc
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x409471
push ebx
call fcn.0040e012
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 1
push 2
mov ebx, 0xc8
call fcn.004102e0
add esp, 0x1c
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push 0xffff
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x4094c5
push 6
call fcn.0040e01e
add esp, 4
jmp 0x4094f3
mov dword [ebp - 0xc], esp
push 0xffff
push 1
call dword [sym.imp.USER32.dll_ExitWindowsEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x4094f3
push 6
call fcn.0040e01e
add esp, 4
jmp 0x4094f8
mov esp, ebp
pop ebp
ret 0x10