Function at 0x4b4b64
Capabilities:
Find taskbar
Hide graphical window
Hide the windows taskbar
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x4b4b6c
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b53d4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
xor edx, edx
call fcn.00433e38
mov eax, dword [0x4b9e88]
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
jne 0x4b4bb0
mov eax, dword [0x4b9e88]
mov eax, dword [eax]
call fcn.004605d0
mov eax, dword [0x4ba11c]
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
jne 0x4b4bf5
mov eax, dword [0x4ba11c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f8]
xor edx, edx
call fcn.00433e38
mov eax, dword [0x4ba11c]
mov eax, dword [eax]
call fcn.00403478
mov ecx, dword [0x4ba11c]
mov eax, dword [0x4b9f14]
mov eax, dword [eax]
mov edx, dword [0x4b0970]
call fcn.00463c00
mov eax, dword [0x4b9c88]
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
jne 0x4b4c0e
mov eax, dword [0x4b9c88]
mov eax, dword [eax]
call fcn.004605d0
mov eax, 0x4bc22c
call fcn.0040432c
mov dl, 1
mov eax, dword [0x4bc098]
call fcn.0045d264
push 0x40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 0xffffffffffffffff
mov eax, dword [0x4bc098]
call fcn.0044a860
push eax
call sub.user32.dll_SetWindowPos
push 0x4bc1c4
push 2
call sub.shell32.dll_Shell_NotifyIconA
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x20]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0a0]
call fcn.004ad964
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x24]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0a4]
call fcn.004ad964
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x28]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0a8]
call fcn.004ad964
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x2c]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0ac]
call fcn.004ad964
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x30]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0b0]
call fcn.004ad964
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x34]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0b4]
call fcn.004ad964
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x38]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0b8]
call fcn.004ad964
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x3c]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0bc]
call fcn.004ad964
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
lea eax, [ebp - 0x40]
mov edx, 0x4b53ec
call fcn.004045f4
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov ecx, 0x19bf
mov edx, dword [0x4bc0c0]
call fcn.004ad964
push 0
mov eax, dword [0x4bb668]
push eax
push 0x4b1a60
push 0xd
call sub.user32.dll_SetWindowsHookExA
mov dword [0x4bc09c], eax
push 0
push 0x4b53f0
call sub.user32.dll_FindWindowA
push 0
push eax
call sub.user32.dll_ShowWindow
cmp dword [0x4bc230], 0
jne 0x4b5375
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x328]
mov eax, ebx
call fcn.00490b04
mov eax, ebx
call fcn.004a4e94
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
push ebp
push 0x4b4f2b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.004a4e94
mov edx, 0x4b5408
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004af100
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x50]
call fcn.00414e58
lea eax, [ebp - 0x50]
push eax
mov eax, ebx
call fcn.004a31d8
mov edx, 0x4b5450
pop ecx
call fcn.0049b2f0
mov eax, ebx
call fcn.00490af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4f59
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
mov edx, dword [eax]
call dword [edx + 0x14c]
test eax, eax
jle 0x4b5375
call sub.gservdati.dll_get_server_datetime
fstp qword [ebp - 0x18]
wait
push dword [0x4bc240]
push dword [0x4bc23c]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004b58c0
movzx eax, ax
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 8]
call fcn.0040a6c4
mov eax, dword [ebp - 8]
call fcn.0040a844
fstp xword [ebp - 0x64]
wait
mov eax, dword [0x4bc244]
call fcn.0040a844
fld xword [ebp - 0x64]
fmulp st(1)
fmul dword [0x4b547c]
call fcn.00402bdc
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
fild qword [ebp - 0x6c]
fdiv dword [0x4b547c]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0xc]
call fcn.0040a6c4
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00408fe4
lea ecx, [ebp - 0x1a]
mov dx, 0x3c
call fcn.0042e328
movzx eax, word [ebp - 0x1a]
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x70]
call fcn.0040a6c4
push dword [ebp - 0x70]
push 0x4b5488
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x74]
call fcn.0040a6c4
push dword [ebp - 0x74]
push 0x4b5498
lea eax, [ebp - 8]
mov edx, 4
call fcn.004046ac
mov eax, dword [0x4bc248]
call fcn.0040a844
fstp xword [ebp - 0x64]
wait
mov eax, dword [ebp - 0xc]
call fcn.0040a844
fld xword [ebp - 0x64]
fcompp
fnstsw ax
sahf
ja 0x4b5089
mov eax, 0x4bc248
mov edx, 0x4b54a8
call fcn.00404380
jmp 0x4b50c0
mov eax, dword [0x4bc248]
call fcn.0040a844
fstp xword [ebp - 0x64]
wait
mov eax, dword [ebp - 0xc]
call fcn.0040a844
fld xword [ebp - 0x64]
fsubrp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x78]
call fcn.0040a6c4
mov edx, dword [ebp - 0x78]
mov eax, 0x4bc248
call fcn.00404380
cmp byte [0x4bc228], 0
je 0x4b50d8
mov eax, 0x4bc248
mov edx, 0x4b54a8
call fcn.00404380
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x328]
mov eax, ebx
call fcn.00490b04
mov eax, ebx
call fcn.004a4e94
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
push ebp
push 0x4b51f7
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4b54b4
push 6
lea eax, [ebp - 0x80]
push eax
call sub.randnum.dll_rand_all_id
push dword [ebp - 0x80]
push 0x4b54dc
lea edx, [ebp - 0x84]
mov eax, dword [0x4bc21c]
call fcn.00408b40
push dword [ebp - 0x84]
push 0x4b54dc
push dword [0x4bc238]
push dword [0x4bc234]
lea eax, [ebp - 0x88]
call fcn.0040b9c4
push dword [ebp - 0x88]
push 0x4b54dc
push dword [0x4bc240]
push dword [0x4bc23c]
lea edx, [ebp - 0x8c]
mov eax, 0x4b54e8
call fcn.0040ba08
push dword [ebp - 0x8c]
push 0x4b54dc
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 0x90]
mov eax, 0x4b54e8
call fcn.0040ba08
push dword [ebp - 0x90]
push 0x4b54fc
push dword [0x4bc24c]
push 0x4b5508
push dword [0x4bc250]
push 0x4b54dc
push dword [0x4bc254]
push 0x4b54fc
push dword [ebp - 0xc]
push 0x4b5514
lea eax, [ebp - 0x7c]
mov edx, 0x13
call fcn.004046ac
mov eax, dword [ebp - 0x7c]
push eax
mov eax, ebx
call fcn.004a4e94
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, ebx
call fcn.004a4dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b5225
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x328]
mov eax, ebx
call fcn.00490b04
mov eax, ebx
call fcn.004a4e94
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
push ebp
push 0x4b529f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.004a4e94
push eax
push 0x4b553c
push dword [0x4bc248]
push 0x4b5568
push dword [0x4bc21c]
push 0x4b5584
lea eax, [ebp - 0x94]
mov edx, 5
call fcn.004046ac
mov edx, dword [ebp - 0x94]
pop eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, ebx
call fcn.004a4dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b52cd
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x328]
mov eax, ebx
call fcn.00490b04
mov eax, ebx
call fcn.004a4e94
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
push ebp
push 0x4b533c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.004a4e94
push eax
push 0x4b55b4
push dword [0x4bc21c]
push 0x4b5584
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.004046ac
mov edx, dword [ebp - 0x98]
pop eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, ebx
call fcn.004a4dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b5367
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
call fcn.00490b04
xor eax, eax
mov dword [0x4bc230], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
xor edx, edx
call fcn.00433e38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b53db
lea eax, [ebp - 0x98]
mov edx, 0xb
call fcn.00404350
lea eax, [ebp - 0x54]
call fcn.0040432c
lea eax, [ebp - 0x50]
call fcn.0041070c
lea eax, [ebp - 0x40]
mov edx, 9
call fcn.00404350
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404350
ret