Function at 0x44a7a8
Capabilities:
Simulate ctrl alt del

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x44a7b0
push ebx
xor eax, eax
push ebp
push 0x44ae0f
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
lea eax, [ebp - 4]
call fcn.0043ae20
mov edx, 0x44ae28
mov eax, dword [ebp - 4]
call fcn.0040ec94
test al, al
je 0x44a827
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_GetCursorPos
mov eax, dword [ebp - 0x20]
add eax, 0x14
push eax
mov eax, dword [ebp - 0x24]
add eax, 0x14
push eax
call sub.user32.dll_SetCursorPos
mov ebx, 0x64
push 0x64
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 4]
call fcn.0043ae20
mov edx, 0x44ae28
mov eax, dword [ebp - 4]
call fcn.0040ec94
test al, al
je 0x44a827
dec ebx
jne 0x44a804
mov edx, 0x44ae50
mov eax, dword [ebp - 4]
call fcn.0040ec94
test al, al
jne 0x44ade4
push 0x2000000
push 0
push 1
call sub.user32.dll_OpenInputDesktop
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x44a86d
call sub.kernel32.dll_GetLastError_1
lea edx, [ebp - 0x30]
call fcn.00413240
mov eax, dword [ebp - 0x30]
call fcn.00449b40
jmp 0x44ade4
xor eax, eax
push ebp
push 0x44ad8b
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x28]
call fcn.0043ad9c
lea eax, [ebp - 0x34]
call fcn.0043adf0
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 4]
call fcn.0040ec94
test al, al
jne 0x44ad74
mov eax, dword [ebp - 0x28]
push eax
call sub.user32.dll_SetThreadDesktop
test eax, eax
je 0x44ad74
push 0x44ae60
push 0x44ae7c
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44a986
mov eax, dword [ebp - 0x10]
call fcn.0044a3d8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44a986
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.004044d4
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x38]
mov edx, 0x44aea8
call fcn.0040fdd4
mov ecx, dword [ebp - 0x38]
mov dl, 1
mov eax, dword [0x439440]
call fcn.004397f4
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x44a97f
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x44aec0
mov edx, 0x44aed8
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
call fcn.00449d20
test al, al
je 0x44a969
push 0x3e8
call sub.kernel32.dll_Sleep_1
push 0
push 0xd
push 0x102
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_PostMessageW
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 9], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44a986
mov eax, dword [ebp - 0x2c]
call fcn.00404cc4
ret
mov ebx, 0x3c
push 0x44aee4
push 0x44aef4
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x44a9bf
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_PostMessageW
push 0x3e8
call sub.kernel32.dll_Sleep_1
dec ebx
jne 0x44a98b
mov ebx, 0x3c
push 0x44af04
push 0
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x44a9f5
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_PostMessageW
push 0x3e8
call sub.kernel32.dll_Sleep_1
dec ebx
jne 0x44a9c4
push 0x44af18
push 0x44af30
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44ab3e
call fcn.0043df80
lea eax, [ebp - 8]
push eax
mov ecx, dword [0x4516e4]
mov edx, 0xfffffffc
mov eax, dword [ebp - 0x10]
call fcn.0043e078
test eax, eax
jne 0x44ab39
mov ebx, 5
push 0x3e8
call sub.kernel32.dll_Sleep_1
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.0044a1d8
test al, al
jne 0x44aa59
dec ebx
jne 0x44aa3a
cmp dword [ebp - 0x18], 0
jbe 0x44ab39
lea edx, [ebp - 0x48]
xor eax, eax
call fcn.004044d4
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
mov edx, 0x44aea8
call fcn.0040fdd4
mov ecx, dword [ebp - 0x44]
mov dl, 1
mov eax, dword [0x439440]
call fcn.004397f4
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x44ab32
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x14], 0
jbe 0x44aad0
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x44af80
mov edx, 0x44aed8
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
call fcn.00449d20
push 0x1f4
call sub.kernel32.dll_Sleep_1
push 0
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x44aec0
mov edx, 0x44aed8
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
call fcn.00449d20
test al, al
je 0x44ab1c
push 0x3e8
call sub.kernel32.dll_Sleep_1
push 0
push 0xd
push 0x102
mov eax, dword [ebp - 0x18]
push eax
call sub.user32.dll_PostMessageW
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 9], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ab39
mov eax, dword [ebp - 0x2c]
call fcn.00404cc4
ret
call fcn.0043dfb4
push 0x44af8c
push 0x44aef4
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44ab9c
push 0x44afa4
push 0x44afac
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_FindWindowExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jbe 0x44ab9c
push 0
push 0
push 0x201
mov eax, dword [ebp - 0x1c]
push eax
call sub.user32.dll_PostMessageW
push 0
push 0
push 0x202
mov eax, dword [ebp - 0x1c]
push eax
call sub.user32.dll_PostMessageW
mov byte [ebp - 9], 1
push 0x44afbc
push 0x44aef4
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44abde
push 0x2e0003
push 0
push 0x312
push 0xffff
call sub.user32.dll_PostMessageW
mov edx, 0x44afcc
mov eax, 0x44aef4
mov ecx, 0xa
call fcn.00449cd4
push 0x44afcc
push 0x44aef4
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jbe 0x44ad74
push 0
push 0x44afdc
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_FindWindowExW
mov dword [ebp - 0x14], eax
push 0
push 0x44afdc
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_FindWindowExW
mov dword [ebp - 0x18], eax
push 0x44afe8
push 0x44afac
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_FindWindowExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x14], 0
jbe 0x44ad74
cmp dword [ebp - 0x18], 0
jbe 0x44ad74
cmp dword [ebp - 0x1c], 0
jbe 0x44ad74
lea edx, [ebp - 0x58]
xor eax, eax
call fcn.004044d4
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
mov edx, 0x44aea8
call fcn.0040fdd4
mov ecx, dword [ebp - 0x54]
mov dl, 1
mov eax, dword [0x439440]
call fcn.004397f4
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x44acf2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x44af80
mov edx, 0x44aed8
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x14]
call fcn.00449d20
push 0
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x44aec0
mov edx, 0x44aed8
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
call fcn.00449d20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44acf9
mov eax, dword [ebp - 0x2c]
call fcn.00404cc4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ad92
mov eax, dword [ebp - 0x28]
push eax
call sub.user32.dll_CloseDesktop
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ae16
lea eax, [ebp - 0x68]
mov edx, 0xf
call fcn.00406840
lea eax, [ebp - 8]
call fcn.004091ec
lea eax, [ebp - 4]
call fcn.00406838
ret