Function at 0x4a4acc
Capabilities:
Find taskbar
Hide graphical window
Hide the windows taskbar
Shutdown system

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
xor eax, eax
push ebp
push 0x4a4f90
push dword fs:[eax]
mov dword fs:[eax], esp
mov dx, 0x1e0
mov ax, 0x280
call fcn.00498fb4
push 0
push 0
push 0x4a4fa0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_ShowWindow
push 0
push 0
push 0x4a4fa8
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_ShowWindow
call fcn.00498da4
call fcn.004029e0
mov eax, 0xf4240
call fcn.00402fbc
mov edx, dword [0x4b13b8]
mov dword [edx], eax
push 3
push 4
mov eax, dword [0x4b1218]
mov ecx, 2
mov edx, dword [0x496640]
call fcn.00405b78
add esp, 8
call fcn.004a4974
xor ebx, ebx
call fcn.004951ee
test eax, eax
je 0x4a4b9b
cmp ebx, 3
jne 0x4a4b78
call fcn.00498da4
call fcn.004a5154
jmp 0x4a4f75
call fcn.00498da4
push 0x10
mov ecx, 0x4a4fb8
mov edx, 0x4a4fc0
mov eax, dword [0x4b1268]
mov eax, dword [eax]
call fcn.0045bdd0
inc ebx
cmp ebx, 4
jne 0x4a4b5b
xor ebx, ebx
call fcn.00485900
test eax, eax
je 0x4a4bd3
cmp ebx, 3
jne 0x4a4bb5
call fcn.004a5154
jmp 0x4a4f75
push 0x10
mov ecx, 0x4a4fb8
mov edx, 0x4a4fd0
mov eax, dword [0x4b1268]
mov eax, dword [eax]
call fcn.0045bdd0
inc ebx
cmp ebx, 4
jne 0x4a4b9d
call fcn.004ab36c
xor ebx, ebx
mov edx, dword [0x4b121c]
xor eax, eax
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b0f94]
mov eax, 4
call fcn.0048588c
add ebx, eax
mov ecx, dword [0x4b1080]
mov edx, 0x10
mov eax, 8
call fcn.004858ac
add ebx, eax
mov edx, dword [0x4b1254]
mov eax, 0x18
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b1260]
mov eax, 0x1c
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b0fa0]
mov eax, 0x20
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b1210]
mov eax, 0x24
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b12dc]
mov eax, 0x28
call fcn.0048588c
add ebx, eax
mov edx, dword [0x4b119c]
mov eax, 0x2c
call fcn.0048588c
add ebx, eax
test ebx, ebx
je 0x4a4ca4
push 0x10
mov ecx, 0x4a4fb8
mov edx, 0x4a4fe4
mov eax, dword [0x4b1268]
mov eax, dword [eax]
call fcn.0045bdd0
call fcn.004a5154
jmp 0x4a4f75
mov eax, dword [0x4b1260]
cmp dword [eax], 0
jle 0x4a4cf9
mov eax, dword [0x4b1254]
cmp dword [eax], 0xa
jge 0x4a4ccf
mov eax, dword [0x4b0fa0]
mov eax, dword [eax]
mov edx, dword [0x4b1254]
mov edx, dword [edx]
inc edx
imul edx, edx, 0x64
cmp eax, edx
jge 0x4a4ce6
mov eax, dword [0x4b1254]
cmp dword [eax], 0xa
jne 0x4a4cf9
mov eax, dword [0x4b0fa0]
cmp dword [eax], 0x1388
jl 0x4a4cf9
call fcn.004a5988
test al, al
jne 0x4a4cf9
call fcn.004a5154
jmp 0x4a4f75
mov eax, dword [0x4b1384]
mov edx, 0x4a5000
call fcn.00404664
mov ebx, 1
mov esi, dword [0x4b1384]
add esi, 4
lea edx, [ebp - 8]
mov eax, ebx
call fcn.00408ac4
mov ecx, dword [ebp - 8]
mov eax, esi
mov edx, 0x4a5018
call fcn.00404914
inc ebx
add esi, 4
cmp ebx, 0xd
jne 0x4a4d16
mov dl, 1
mov eax, dword [0x49881c]
call fcn.0049891c
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4a4e81
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 4]
call fcn.004989bc
xor ecx, ecx
mov edx, 0x4a502c
mov eax, dword [ebp - 4]
call fcn.00498a20
test al, al
je 0x4a4d94
lea ecx, [ebp - 0xc]
mov edx, 0x4a506c
mov eax, dword [ebp - 4]
call fcn.00498be8
mov eax, dword [ebp - 0xc]
mov edx, 0x4a5080
call fcn.00404a0c
je 0x4a4df8
xor ecx, ecx
mov edx, 0x4a5090
mov eax, dword [ebp - 4]
call fcn.00498a20
test al, al
je 0x4a4dc6
lea ecx, [ebp - 0x10]
mov edx, 0x4a506c
mov eax, dword [ebp - 4]
call fcn.00498be8
mov eax, dword [ebp - 0x10]
mov edx, 0x4a5080
call fcn.00404a0c
je 0x4a4df8
xor ecx, ecx
mov edx, 0x4a50d0
mov eax, dword [ebp - 4]
call fcn.00498a20
test al, al
je 0x4a4e54
lea ecx, [ebp - 0x14]
mov edx, 0x4a506c
mov eax, dword [ebp - 4]
call fcn.00498be8
mov eax, dword [ebp - 0x14]
mov edx, 0x4a5080
call fcn.00404a0c
jne 0x4a4e54
lea ecx, [ebp - 0x18]
mov edx, 0x4a5110
mov eax, dword [ebp - 4]
call fcn.00498be8
mov eax, dword [ebp - 0x18]
mov edx, dword [0x4b1384]
mov edx, dword [edx]
call fcn.00404a0c
je 0x4a4e63
mov ecx, dword [0x4b1384]
mov ecx, dword [ecx]
mov edx, 0x4a5110
mov eax, dword [ebp - 4]
call fcn.00498bbc
mov ecx, 0x4a5124
mov edx, 0x4a513c
mov eax, dword [ebp - 4]
call fcn.00498bbc
push 0
push 2
call sub.user32.dll_ExitWindowsEx
call fcn.0040411c
jmp 0x4a4f75
call fcn.004a5154
call fcn.0040411c
jmp 0x4a4f75
mov eax, dword [ebp - 4]
call fcn.0049898c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a4e88
mov eax, dword [ebp - 4]
call fcn.004038a4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a4f97
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00404634
ret