Function at 0x52290c
Capabilities:
Check for time delay via gettickcount
Create process on windows
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x26
push 0
push 0
dec ecx
jne 0x522914
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x523905
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x52389d
call fcn.004fe44c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
cmp dword [eax + 0xc], 1
je 0x52389d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
cmp dword [eax + 0xc], 1
je 0x52389d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
cmp dword [eax + 0xc], 1
je 0x52389d
lea edx, [ebp - 0x88]
xor eax, eax
call fcn.00402b04
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.00465bcc
lea eax, [ebp - 0x84]
mov edx, 0x52391c
call fcn.00404a60
mov eax, dword [ebp - 0x84]
call fcn.004658fc
test al, al
je 0x522a58
push 0
mov ecx, 0x523934
mov edx, 0x523944
mov eax, dword [0x53645c]
mov ebx, dword [eax]
call dword [ebx + 8]
test eax, eax
jne 0x522a58
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x400]
cmp eax, dword [ebp - 8]
je 0x522a58
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
xor eax, eax
push ebp
push 0x522a51
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
mov edx, 0x523958
call fcn.00515d3c
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.005218b0
mov edi, eax
dec edi
jne 0x522a43
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0052be60
call fcn.004041ec
jmp 0x52389d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x522a58
ret
xor eax, eax
call fcn.00521610
test al, al
jne 0x522a74
xor eax, eax
call fcn.005227ac
mov eax, 0x2710
call fcn.005151d0
call fcn.004fe44c
mov dword [ebp - 0x5c], eax
push 0xa
mov ecx, 0x523964
mov edx, 0x523944
mov eax, dword [0x53645c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov dword [ebp - 0x24], eax
call fcn.00467140
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x90]
mov eax, 0x523978
call fcn.00467dbc
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov edx, 0x523990
call fcn.00404aa4
mov eax, dword [ebp - 0x8c]
call fcn.0051b014
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c8]
call fcn.0049c8c8
mov eax, dword [ebp - 0x94]
call fcn.0051b014
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d4]
call fcn.0049c8c8
mov eax, dword [ebp - 0x98]
call fcn.0051b014
push 0
push 0x5239a4
call sub.user32.dll_FindWindowA
test eax, eax
ja 0x522b7f
push 5
push 0
push 0x5239b0
lea edx, [ebp - 0xa4]
xor eax, eax
call fcn.00402b04
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0xa0]
call fcn.00465bcc
push dword [ebp - 0xa0]
push 0x5239c4
push 0x5239d4
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00404b18
mov eax, dword [ebp - 0x9c]
call fcn.00404c58
push eax
push 0x5239e8
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, 0x64
call fcn.004feb7c
mov ebx, 0xa
push 0
push 0x5239a4
call sub.user32.dll_FindWindowA
mov dword [0x536524], eax
cmp dword [0x536524], 0
ja 0x522bb5
mov eax, 0x1f4
call fcn.005151d0
dec ebx
jne 0x522b8e
mov eax, dword [0x536524]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xac]
call fcn.004654e0
mov ecx, dword [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov edx, 0x5239f8
call fcn.00404aa4
mov eax, dword [ebp - 0xa8]
call fcn.0051b014
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
mov edx, 0x523958
call fcn.00515d3c
lea edx, [ebp - 0xb0]
mov eax, 1
call fcn.004653f4
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
call fcn.00515d3c
push 0x523a08
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x522c3f
push 0
push 0
push 0x10
push eax
call sub.user32.dll_PostMessageA
jmp 0x522c21
push 0x523a24
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x522c5d
push 0
push 0
push 0x10
push eax
call sub.user32.dll_PostMessageA
jmp 0x522c3f
push 0x523a3c
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x522c7b
push 0
push 0
push 0x10
push eax
call sub.user32.dll_PostMessageA
jmp 0x522c5d
xor edx, edx
push ebp
push 0x523823
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [0x536474], 1
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0052a368
push 0x536468
call sub.user32.dll_GetCursorPos
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.004dbd2c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov dword [eax + 0xc], 1
xor edx, edx
push ebp
push 0x523702
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0x128]
test al, al
je 0x522d09
cmp dword [ebp - 0x20], 1
jg 0x5236a9
lea edx, [ebp - 0xb4]
mov eax, 1
call fcn.004653f4
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
call fcn.00515d3c
mov eax, 0x64
call fcn.005151d0
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.0051baf8
cmp dword [ebp - 0x40], 0
jne 0x522d54
lea eax, [ebp - 0x40]
mov edx, 0x523a58
call fcn.00404820
mov eax, dword [ebp - 0x40]
call fcn.0051b014
push 3
push 0
push 0x523a6c
push dword [0x53652c]
push 0x523a88
lea eax, [ebp - 0xb8]
mov edx, 3
call fcn.00404b18
mov eax, dword [ebp - 0xb8]
call fcn.00404c58
push eax
mov eax, dword [ebp - 0x40]
call fcn.00404c58
push eax
push 0x5239e8
push 0
call sub.shell32.dll_ShellExecuteA
mov esi, eax
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xc0]
call fcn.004654e0
mov ecx, dword [ebp - 0xc0]
lea eax, [ebp - 0xbc]
mov edx, 0x523ac4
call fcn.00404aa4
mov eax, dword [ebp - 0xbc]
call fcn.0051b014
mov ebx, 1
call fcn.00522774
lea edx, [ebp - 0xc8]
mov eax, ebx
call fcn.004653f4
mov ecx, dword [ebp - 0xc8]
lea eax, [ebp - 0xc4]
mov edx, 0x523adc
call fcn.00404aa4
mov eax, dword [ebp - 0xc4]
call fcn.0051b014
push 0x523a08
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x522e2d
push 0x523a24
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x522e41
mov eax, 0x64
call fcn.005151d0
inc ebx
cmp ebx, 0x3d
jne 0x522dda
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xd0]
call fcn.004654e0
mov ecx, dword [ebp - 0xd0]
lea eax, [ebp - 0xcc]
mov edx, 0x523aec
call fcn.00404aa4
mov eax, dword [ebp - 0xcc]
call fcn.0051b014
test esi, esi
je 0x52369c
mov dword [0x536520], esi
mov ebx, 6
push 0
push 0xf030
push 0x112
push esi
call sub.user32.dll_PostMessageA
push esi
call sub.user32.dll_IsZoomed
test eax, eax
jne 0x522eaf
mov eax, 0x3e8
call fcn.005151d0
dec ebx
jne 0x522e86
push esi
call sub.user32.dll_IsZoomed
test eax, eax
jne 0x522ed2
mov eax, 0x523b04
call fcn.0051b014
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
mov eax, 0x3e8
call fcn.005151d0
mov ebx, 0xa
call fcn.00521234
test al, al
je 0x522ef9
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
push esi
call sub.user32.dll_SetForegroundWindow
mov eax, 0xa
call fcn.005151d0
push 0
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x190
mov eax, esi
call fcn.0051cbf0
mov edx, dword [0x53651c]
mov eax, 0x523b20
call fcn.00404da0
test eax, eax
jg 0x522f47
mov edx, dword [0x53651c]
mov eax, 0x523b30
call fcn.00404da0
test eax, eax
jle 0x522f53
mov eax, 0x523b44
call fcn.0051b014
jmp 0x522f60
mov eax, 0x3e8
call fcn.005151d0
dec ebx
jne 0x522ee1
lea eax, [ebp - 0xc]
mov edx, 0x523b60
call fcn.00404820
call fcn.0052127c
dec eax
sete byte [ebp - 0x69]
cmp byte [ebp - 0x69], 0
jne 0x523032
mov eax, 0x523b7c
call fcn.0051b014
mov ebx, 0xa
call fcn.00521234
test al, al
je 0x522fa8
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.0051b618
mov byte [ebp - 0x69], al
cmp byte [ebp - 0x69], 0
jne 0x52300f
push 0x3c
push 0x196
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
mov eax, 0xa
call fcn.005151d0
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.0051b618
mov byte [ebp - 0x69], al
cmp byte [ebp - 0x69], 0
jne 0x52300f
mov eax, 0x3e8
call fcn.005151d0
dec ebx
jne 0x522f90
cmp byte [ebp - 0x69], 0
jne 0x523032
mov eax, 0x523ba0
call fcn.0051b014
xor ecx, ecx
mov dl, 1
mov eax, 0x523ba0
call fcn.0051ab40
jmp 0x52369c
mov bl, 0xd
push 0
push 0
push 0
mov edi, ebx
and edi, 0xff
push edi
call sub.user32.dll_MapVirtualKeyA
push eax
push ebx
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push edi
call sub.user32.dll_MapVirtualKeyA
push eax
push ebx
call sub.user32.dll_keybd_event
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x400]
cmp eax, dword [ebp - 8]
jne 0x5230b5
mov eax, 0x3e8
call fcn.005151d0
xor ecx, ecx
xor edx, edx
mov eax, 0x523bb8
call fcn.0051ab40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
mov dl, 1
call fcn.0048bb24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.004dbd84
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
mov byte [ebp - 0x45], 0
mov eax, 0x5dc
call fcn.005151d0
mov ebx, 1
call fcn.00521234
test al, al
je 0x5230e0
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
lea edx, [ebp - 0xd8]
mov eax, ebx
call fcn.004653f4
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
mov edx, 0x523adc
call fcn.00404aa4
mov eax, dword [ebp - 0xd4]
call fcn.0051b014
push 0
push 0
push 0
push 0
mov cl, 1
mov edx, 0x190
mov eax, esi
call fcn.0051cbf0
mov edi, eax
cmp dword [0x53648c], 0
jne 0x52313f
mov eax, 0x3e8
call fcn.005151d0
inc ebx
cmp ebx, 7
jne 0x5230c8
lea edx, [ebp - 0xdc]
mov eax, 2
call fcn.004653f4
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
call fcn.00515d3c
dec edi
jne 0x5232dd
cmp dword [0x53648c], 0
jne 0x523182
mov eax, 0x523c30
call fcn.0051b014
jmp 0x52369c
xor edi, edi
call fcn.00521234
test al, al
je 0x52319c
call fcn.004041ec
call fcn.004041ec
jmp 0x52389d
cmp dword [0x5364ac], 0
jne 0x523258
mov ebx, dword [0x536490]
lea edx, [ebp - 0xe4]
mov eax, ebx
call fcn.004653f4
mov ecx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe0]
mov edx, 0x523c54
call fcn.00404aa4
mov eax, dword [ebp - 0xe0]
call fcn.0051b014
push ebx
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004bb428
sub eax, 0x16
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
mov eax, 0x64
call fcn.005151d0
mov ebx, 3
push 0
push 0
push 0
push 0
mov cl, 1
mov edx, 0x190
mov eax, esi
call fcn.0051cbf0
cmp dword [0x5364ac], 0
je 0x52324b
mov eax, 0x523c68
call fcn.0051b014
jmp 0x523258
mov eax, 0x3e8
call fcn.005151d0
dec ebx
jne 0x523220
mov eax, dword [0x5364ac]
test eax, eax
je 0x52328c
mov edx, dword [0x5364b0]
push edx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
cmp dword [0x5364ac], 0
jne 0x5232c1
inc edi
cmp edi, 3
jg 0x5232c1
imul eax, edi, 0x7d0
call fcn.005151d0
push 0
push 0
push 0
push 0
mov cl, 1
mov edx, 0x190
mov eax, esi
call fcn.0051cbf0
jmp 0x523184
cmp dword [0x5364ac], 0
jne 0x5235f1
mov eax, 0x523c8c
call fcn.0051b014
jmp 0x5236a9
push 0
push 0
push 0
push 0x7a
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7a
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x7a
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7a
call sub.user32.dll_keybd_event
mov byte [ebp - 0x45], 1
mov eax, 0x1f4
call fcn.005151d0
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004bb428
sub eax, 0x16
mov edx, 0xfa
call fcn.00520a90
mov dword [ebp - 0x38], eax
mov ebx, 0x8c
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004bb428
sub eax, 0x16
mov dword [ebp - 0x34], eax
mov eax, ebx
mov dword [ebp - 0x30], eax
push eax
mov eax, dword [ebp - 0x34]
push eax
call sub.user32.dll_SetCursorPos
mov eax, dword [0x533380]
mov eax, dword [eax]
call fcn.004bc928
lea eax, [ebp - 0x34]
call fcn.00520b1c
mov edi, eax
cmp edi, 0xe0dcda
je 0x52340c
lea edx, [ebp - 0xec]
mov eax, ebx
call fcn.004653f4
push dword [ebp - 0xec]
push 0x523cb8
lea edx, [ebp - 0xf0]
mov eax, edi
call fcn.004653f4
push dword [ebp - 0xf0]
lea eax, [ebp - 0xe8]
mov edx, 3
call fcn.00404b18
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp edi, dword [ebp - 0x38]
je 0x52340c
mov edx, dword [ebp - 0x30]
dec edx
mov eax, dword [ebp - 0x34]
call fcn.00520a90
cmp eax, dword [ebp - 0x38]
je 0x52340c
mov edx, dword [ebp - 0x30]
sub edx, 2
mov eax, dword [ebp - 0x34]
call fcn.00520a90
cmp eax, dword [ebp - 0x38]
je 0x52340c
mov edx, dword [ebp - 0x30]
sub edx, 3
mov eax, dword [ebp - 0x34]
call fcn.00520a90
cmp eax, dword [ebp - 0x38]
je 0x52340c
jmp 0x523416
dec ebx
cmp ebx, 9
jne 0x523336
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004bb428
sub eax, 0x16
mov dword [0x536460], eax
mov eax, ebx
sub eax, 5
mov dword [0x536464], eax
push 0x523cc4
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004ba554
lea edx, [ebp - 0xf8]
call fcn.004653f4
push dword [ebp - 0xf8]
push 0x523cd8
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004ba548
lea edx, [ebp - 0xfc]
call fcn.004653f4
push dword [ebp - 0xfc]
lea eax, [ebp - 0xf4]
mov edx, 4
call fcn.00404b18
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x104]
mov eax, edi
call fcn.004653f4
mov ecx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
mov edx, 0x523ce8
call fcn.00404aa4
mov eax, dword [ebp - 0x100]
call fcn.0051b014
cmp edi, 0xc6c1bd
je 0x523501
cmp edi, 0xfefefe
je 0x523501
cmp edi, 0x757774
je 0x523501
mov ecx, 0xfcfc10
mov edx, 0xfcfae4
mov eax, edi
call fcn.00515638
test al, al
je 0x5235b2
mov eax, dword [0x53364c]
mov eax, dword [eax]
call fcn.004bb428
sub eax, 0x16
mov dword [ebp - 0x2c], eax
mov edi, ebx
sub edi, 5
mov dword [ebp - 0x28], edi
push 0x523cfc
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x2c]
call fcn.004653f4
push dword [ebp - 0x10c]
push 0x523d08
lea edx, [ebp - 0x110]
mov eax, edi
call fcn.004653f4
push dword [ebp - 0x110]
lea eax, [ebp - 0x108]
mov edx, 4
call fcn.00404b18
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push edi
mov eax, dword [ebp - 0x2c]
push eax
call sub.user32.dll_SetCursorPos
mov eax, 0x64
call fcn.005151d0
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
mov eax, 0x64
call fcn.005151d0
mov dword [ebp - 0x2c], 0x62
lea eax, [ebx + 0x39]
mov dword [ebp - 0x28], eax
push eax
mov eax, dword [ebp - 0x2c]
push eax
call sub.user32.dll_SetCursorPos
mov eax, 0x64
call fcn.005151d0
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
mov eax, 0x523d14
call fcn.0051b014
call fcn.00520b3c
dec eax
jne 0x52369c
lea edx, [ebp - 0x114]
mov eax, 3
call fcn.004653f4
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
call fcn.00515d3c
lea ecx, [ebp - 0x18]
mov edx, 0x523d34
mov eax, dword [ebp - 4]
call fcn.00520518
cmp dword [ebp - 0x18], 0
jne 0x52364e
lea edx, [ebp - 0x18]
mov eax, 0x523d34
call fcn.0051ee64
cmp byte [ebp - 0x45], 0
je 0x523688
push 0
push 0
push 0
push 0x7a
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7a
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x7a
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7a
call sub.user32.dll_keybd_event
mov eax, 0xa
call fcn.005151d0
cmp dword [ebp - 0x18], 0
je 0x52369c
push 0
push 0
push 0x10
push esi
call sub.user32.dll_PostMessageA
jmp 0x5236a9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jne 0x522cea
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x523709
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [0x536458]
cmp byte [eax + 0x57], 0
je 0x5236e2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0xc4]
mov eax, dword [0x53646c]
push eax
mov eax, dword [0x536468]
push eax
call sub.user32.dll_SetCursorPos
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
xor edx, edx
mov dword [eax + 0xc], edx
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x52390c
lea eax, [ebp - 0x130]
mov edx, 0x26
call fcn.004047ac
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.004047ac
lea eax, [ebp - 0x90]
mov edx, 4
call fcn.004047ac
lea eax, [ebp - 0x80]
call fcn.0046c790
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.004047ac
lea eax, [ebp - 0x40]
call fcn.00404788
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.004047ac
ret