Function at 0x1007d1e4
Capabilities:
Shutdown system

Disassembly:
push ebx
push edi
push esi
push eax
mov eax, dword [0x10193248]
mov ecx, dword [0x1019324c]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
sete byte [esp + 2]
cmp ecx, 0xa
setl byte [esp + 3]
mov esi, dword [esp + 0x14]
mov eax, 0xc0f468f
xor edi, edi
mov ebx, dword [sym.imp.USER32.dll_ExitWindowsEx]
cmp eax, 0x1af8499c
jg 0x1007d279
cmp eax, 0xc74ad1f6
jg 0x1007d2e4
cmp eax, 0x98f70cdb
jg 0x1007d376
cmp eax, 0x909f68a5
jg 0x1007d45e
cmp eax, 0x811b785e
je 0x1007d629
cmp eax, 0x85c5ec5c
je 0x1007d633
cmp eax, 0x88f6c6ff
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x4d4d6d62
mov eax, 0x4d4d6d62
jmp 0x1007d5ab
cmp eax, 0x4d88f974
jg 0x1007d335
cmp eax, 0x421b4792
jg 0x1007d3ac
cmp eax, 0x2636db63
jg 0x1007d489
cmp eax, 0x1af8499d
je 0x1007d63d
cmp eax, 0x1e738c25
je 0x1007d657
cmp eax, 0x227fb14c
jne 0x1007d21a
push 1
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x1e738c25
mov eax, 0x1e738c25
jmp 0x1007d4bf
cmp eax, 0xf3628ba8
jg 0x1007d3e2
cmp eax, 0xda97b0f4
jg 0x1007d4d2
cmp eax, 0xc74ad1f7
je 0x1007d661
cmp eax, 0xcd9024e7
je 0x1007d68d
cmp eax, 0xd64b87ee
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x7bd10000
mov eax, 0x7bd10000
jmp 0x1007d92c
cmp eax, 0x6bf6ea81
jle 0x1007d428
cmp eax, 0x788c9c24
jg 0x1007d4fd
cmp eax, 0x6bf6ea82
je 0x1007d6a7
cmp eax, 0x70df4da0
je 0x1007d6c0
cmp eax, 0x72463872
jne 0x1007d21a
mov eax, 0xbc8aed70
jmp 0x1007d21a
cmp eax, 0xb0451214
jg 0x1007d528
cmp eax, 0x98f70cdc
je 0x1007d6da
cmp eax, 0xa7c58ab8
je 0x1007d6f4
cmp eax, 0xab03dfeb
jne 0x1007d21a
mov eax, 0xb0451215
jmp 0x1007d21a
cmp eax, 0x4a9158de
jg 0x1007d563
cmp eax, 0x421b4793
je 0x1007d71c
cmp eax, 0x449bd87a
je 0x1007d744
cmp eax, 0x464f2983
jne 0x1007d21a
mov eax, 0x88f6c6ff
jmp 0x1007d21a
cmp eax, 0xc0f468e
jg 0x1007d5be
cmp eax, 0xf3628ba9
je 0x1007d74e
cmp eax, 0xb74b37
je 0x1007d774
cmp eax, 0x2bc0d79
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x15ffd95e
mov eax, 0x15ffd95e
jmp 0x1007d8dc
cmp eax, 0x56e5f34d
jle 0x1007d5f9
cmp eax, 0x56e5f34e
je 0x1007d78e
cmp eax, 0x5e1d7f4f
je 0x1007d798
cmp eax, 0x62a09607
jne 0x1007d21a
mov eax, 0xa7c58ab8
jmp 0x1007d21a
cmp eax, 0x909f68a6
je 0x1007d7b4
cmp eax, 0x93b0d395
je 0x1007d7dc
cmp eax, 0x98912e2e
jne 0x1007d21a
mov eax, 0x70df4da0
jmp 0x1007d21a
cmp eax, 0x2636db64
je 0x1007d804
cmp eax, 0x34246bda
je 0x1007d82c
cmp eax, 0x37b7681e
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x227fb14c
mov eax, 0x227fb14c
test dl, 1
je 0x1007d99c
mov eax, 0x788c9c25
jmp 0x1007d99c
cmp eax, 0xda97b0f5
je 0x1007d854
cmp eax, 0xdeabca4c
je 0x1007d87c
cmp eax, 0xe527e64c
jne 0x1007d21a
mov eax, 0xd64b87ee
jmp 0x1007d21a
cmp eax, 0x788c9c25
je 0x1007d8a4
cmp eax, 0x7bd10000
je 0x1007d8bd
cmp eax, 0x7dad4fba
jne 0x1007d21a
mov eax, 0x2bc0d79
jmp 0x1007d21a
cmp eax, 0xb0451215
je 0x1007d8c7
cmp eax, 0xb0a8bc96
je 0x1007d8ef
cmp eax, 0xbc8aed70
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x34246bda
mov eax, 0x34246bda
jmp 0x1007d709
cmp eax, 0x4a9158df
je 0x1007d917
cmp eax, 0x4be15f01
je 0x1007d938
cmp eax, 0x4d4d6d62
jne 0x1007d21a
push edi
push esi
call ebx
push edi
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xdeabca4c
mov eax, 0xdeabca4c
test dl, 1
je 0x1007d99c
mov eax, 0x5e1d7f4f
jmp 0x1007d99c
cmp eax, 0xc0f468f
je 0x1007d959
cmp eax, 0x149f1af2
je 0x1007d97d
cmp eax, 0x15ffd95e
jne 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x88f6c6ff
mov eax, 0x88f6c6ff
jmp 0x1007d891
cmp eax, 0x4d88f975
je 0x1007d9ab
cmp eax, 0x4f3ded43
jne 0x1007d9c7
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x55874ea6
mov eax, 0x55874ea6
jmp 0x1007d94d
mov eax, 0x2636db64
jmp 0x1007d21a
mov eax, 0x93b0d395
jmp 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x2636db64
mov eax, 0x2636db64
jmp 0x1007d819
mov eax, 0x909f68a6
jmp 0x1007d21a
push edi
push esi
call ebx
push edi
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x464f2983
mov eax, 0x464f2983
jmp 0x1007d731
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x4be15f01
mov eax, 0x4be15f01
jmp 0x1007d841
push 1
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, 0xf3628ba9
jmp 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x62a09607
mov eax, 0x62a09607
jmp 0x1007d992
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xcd9024e7
mov eax, 0xcd9024e7
jmp 0x1007d904
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xbc8aed70
mov eax, 0xbc8aed70
test dl, 1
je 0x1007d99c
mov eax, 0x72463872
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xc74ad1f7
mov eax, 0xc74ad1f7
test dl, 1
je 0x1007d99c
mov eax, 0x4d88f975
jmp 0x1007d99c
mov eax, 0x4f3ded43
jmp 0x1007d21a
push 1
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xda97b0f5
mov eax, 0xda97b0f5
jmp 0x1007d7c9
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x909f68a6
mov eax, 0x909f68a6
jmp 0x1007d869
mov eax, 0x98f70cdc
jmp 0x1007d21a
push edi
push esi
call ebx
push edi
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, 0x4d4d6d62
jmp 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xf3628ba9
mov eax, 0xf3628ba9
test dl, 1
je 0x1007d99c
mov eax, 0x6bf6ea82
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xb74b37
mov eax, 0xb74b37
test dl, 1
je 0x1007d99c
mov eax, 0x85c5ec5c
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xab03dfeb
mov eax, 0xab03dfeb
test dl, 1
je 0x1007d99c
mov eax, 0x811b785e
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xb0a8bc96
mov eax, 0xb0a8bc96
test dl, 1
je 0x1007d99c
mov eax, 0x4a9158df
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x1af8499d
mov eax, 0x1af8499d
test dl, 1
je 0x1007d99c
mov eax, 0x37b7681e
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x149f1af2
mov eax, 0x149f1af2
test dl, 1
je 0x1007d99c
mov eax, 0x421b4793
jmp 0x1007d99c
push 1
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, 0x227fb14c
jmp 0x1007d21a
mov eax, 0xb0a8bc96
jmp 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x2bc0d79
mov eax, 0x2bc0d79
test dl, 1
je 0x1007d99c
mov eax, 0x7dad4fba
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x98f70cdc
mov eax, 0x98f70cdc
test dl, 1
je 0x1007d99c
mov eax, 0x56e5f34e
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0xd64b87ee
mov eax, 0xd64b87ee
test dl, 1
je 0x1007d99c
mov eax, 0xe527e64c
jmp 0x1007d99c
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x4f3ded43
mov eax, 0x4f3ded43
test dl, 1
je 0x1007d99c
mov eax, 0x449bd87a
jmp 0x1007d99c
mov cl, byte [esp + 2]
cmp byte [esp + 3], 0
mov edx, 0x93b0d395
mov eax, 0x93b0d395
jne 0x1007d973
mov eax, 0x85c5ec5c
test cl, cl
cmovne eax, edx
jmp 0x1007d21a
mov eax, dword [0x10193248]
lea edx, [eax - 1]
imul edx, eax
mov ecx, 0x70df4da0
mov eax, 0x70df4da0
test dl, 1
je 0x1007d99c
mov eax, 0x98912e2e
cmp dword [0x1019324c], 0xa
cmovl eax, ecx
jmp 0x1007d21a
push edi
push esi
call ebx
push edi
push str.SeShutdownPrivilege
call fcn.10137dab
add esp, 8
mov eax, 0xc74ad1f7
jmp 0x1007d21a
cmp eax, 0x55874ea6
jne 0x1007d21a
add esp, 4
pop esi
pop edi
pop ebx
ret