Function at 0x58f310
Capabilities:
Check for time delay via gettickcount
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ab8eb
mov eax, dword fs:[0]
push eax
mov eax, 0x1e5c
call fcn.0055d410
mov eax, dword [0x61de38]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1e58], ebx
xor ecx, ecx
mov byte [ebp - 0x40e], 0
mov dl, 0xa
lea esi, [ecx + 2]
nop dword [eax + eax]
mov al, byte [ecx + 0x5ec4f5]
lea ecx, [ecx - 1]
add dl, 0xa
add al, dl
mov byte [ebp + ecx - 0x40e], al
sub esi, 1
jne 0x58f360
xor ecx, ecx
mov byte [ebp - 0x607], 0
mov dl, 0xa
lea esi, [ecx + 9]
nop dword [eax + eax]
mov al, byte [ecx + 0x5ec520]
lea ecx, [ecx - 1]
add dl, 0xa
add al, dl
mov byte [ebp + ecx - 0x607], al
sub esi, 1
jne 0x58f390
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x610]
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x58f518
mov dword [ebp - 0x1e2c], esi
mov dword [ebp - 0x1e28], esi
mov dword [ebp - 0x1e24], esi
mov edx, 0x5ec504
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x1e2c]
call fcn.004043e0
mov ecx, dword [ebp - 0x1e28]
mov eax, 0xdd67c8a7
mov esi, dword [ebp - 0x1e2c]
sub ecx, esi
imul ecx
push 0x200
add edx, ecx
lea ecx, [ebx + 0x125b8]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebx + 0x123c8], eax
lea eax, [ebp - 0x1010]
push eax
call fcn.00423b28
push 0x200
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebx + 0x12638]
call fcn.00423b28
sub esp, 8
lea eax, [ebp - 0x210]
push ebx
push ecx
push eax
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebx + 0xa8]
call fcn.00587960
test eax, eax
jne 0x58f4b8
test esi, esi
je 0x590111
mov ecx, dword [ebp - 0x1e24]
mov eax, 0xdd67c8a7
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x128
mov eax, esi
cmp ecx, 0x1000
jb 0x58f4a9
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x59012f
push ecx
push esi
call fcn.0055c9a5
add esp, 8
jmp 0x590111
push 0
mov ecx, ebx
call fcn.00427b9a
test esi, esi
je 0x58f50e
mov ecx, dword [ebp - 0x1e24]
mov eax, 0xdd67c8a7
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x128
mov eax, esi
cmp ecx, 0x1000
jb 0x58f504
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x590134
push ecx
push esi
call fcn.0055c9a5
add esp, 8
mov eax, 1
jmp 0x590113
cmp dword [0x63527c], 0
je 0x58f531
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x590111
push str.psapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov dword [ebp - 0x1e4c], esi
test esi, esi
je 0x58f67b
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.EnumProcesses
push esi
call edi
mov dword [ebp - 0x1e54], eax
test eax, eax
je 0x58f67b
push str.GetProcessImageFileNameW
push esi
call edi
test eax, eax
je 0x58f67b
push str.EnumProcessModules
push esi
call edi
mov dword [ebp - 0x1e60], eax
test eax, eax
je 0x58f67b
push str.GetModuleBaseNameA
push esi
call edi
mov dword [ebp - 0x1e64], eax
test eax, eax
je 0x58f67b
lea eax, [ebp - 0x1e5c]
push eax
push 0x1000
lea eax, [ebp - 0x1e10]
push eax
call dword [ebp - 0x1e54]
test eax, eax
je 0x58f67b
mov eax, dword [ebp - 0x1e5c]
xor esi, esi
shr eax, 2
mov dword [ebp - 0x1e68], eax
test eax, eax
je 0x58f66f
nop
mov eax, dword [ebp + esi*4 - 0x1e10]
cmp eax, 0xa
jb 0x58f662
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x58f662
lea eax, [ebp - 0x1e24]
push eax
push 4
lea eax, [ebp - 0x1e54]
push eax
push edi
call dword [ebp - 0x1e60]
test eax, eax
jne 0x58f628
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12b
jne 0x58f67b
push 0x104
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x1e54]
push edi
call dword [ebp - 0x1e64]
lea ecx, [ebp - 0x118]
call fcn.004043b0
push str.R2Client.exe
push eax
call fcn.00562045
add esp, 8
test eax, eax
je 0x58f6f6
inc esi
cmp esi, dword [ebp - 0x1e68]
jb 0x58f5e0
push dword [ebp - 0x1e4c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push 0x5ec5a4
push 0x5ec59c
call esi
test eax, eax
je 0x58f7b8
mov esi, dword [sym.imp.USER32.dll_GetWindow]
push 5
push eax
call esi
push 0
push eax
call esi
mov ebx, eax
test ebx, ebx
je 0x590111
mov edi, dword [sym.imp.USER32.dll_GetWindowTextA]
push 2
push ebx
call esi
mov ebx, eax
lea eax, [ebp - 0x110]
push 0x100
push eax
push ebx
call edi
mov ecx, str.Start
lea eax, [ebp - 0x110]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x58f71e
test dl, dl
je 0x58f6f2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x58f71e
add eax, 2
add ecx, 2
test dl, dl
jne 0x58f6d6
xor eax, eax
jmp 0x58f723
cmp dword [ebp + esi*4 - 0x1e10], 0xffffffff
je 0x58f67b
push 0x1388
mov dword [0x63527c], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x590111
sbb eax, eax
or eax, 1
test eax, eax
je 0x58f730
test ebx, ebx
jne 0x58f6b5
jmp 0x590111
test ebx, ebx
je 0x590111
lea eax, [ebp - 0x1e28]
mov dword [ebp - 0x1e28], 0x25
push eax
push ebx
mov dword [ebp - 0x1e24], 0x21
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e24]
push dword [ebp - 0x1e28]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1b58
call edi
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
push 0x210025
push 0
push 0x200
push ebx
call esi
push 0x210025
push 0
push 0x201
push ebx
call esi
push 0x210025
push 0
push 0x202
push ebx
call esi
push 0x1388
call edi
jmp 0x590111
push 0x5ec5a8
push str.plframewindow
call esi
test eax, eax
je 0x58f897
mov esi, dword [sym.imp.USER32.dll_GetWindow]
push 5
push eax
call esi
push 0
push eax
call esi
mov ebx, eax
test ebx, ebx
je 0x590111
mov edi, dword [sym.imp.USER32.dll_GetWindowTextA]
nop dword [eax]
push 2
push ebx
call esi
mov ebx, eax
lea eax, [ebp - 0x110]
push 0x100
push eax
push ebx
call edi
mov ecx, 0x5ec5bc
lea eax, [ebp - 0x110]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x58f831
test dl, dl
je 0x58f82d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x58f831
add eax, 2
add ecx, 2
test dl, dl
jne 0x58f811
xor eax, eax
jmp 0x58f836
sbb eax, eax
or eax, 1
test eax, eax
je 0x58f843
test ebx, ebx
jne 0x58f7f0
jmp 0x590111
test ebx, ebx
je 0x590111
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1b58
call edi
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
push 0x210025
push 0
push 0x200
push ebx
call esi
push 0x210025
push 0
push 0x201
push ebx
call esi
push 0x210025
push 0
push 0x202
push ebx
call esi
push 0x2710
call edi
jmp 0x590111
cmp dword [ebx + 0x12cf0], 0
jne 0x590111
cmp dword [0x627894], 0
jne 0x590111
lea ecx, [ebp - 0x1e48]
call fcn.00584190
push str.Webzen
call fcn.00583e60
test eax, eax
je 0x58f8e4
push 0
push 0
push 0x5ec5d8
mov ecx, ebx
call fcn.0041ebfc
mov eax, 1
jmp 0x590113
push 0x5ec610
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58f938
push 0x5ec5e8
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58f938
push 0x5ec630
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58f938
push 0x5ec620
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
je 0x590111
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1e2c], 0
mov dword [ebp - 0x1e28], 0x7d0
mov dword [ebp - 0x1e24], 0x7d0
mov dword [ebp - 0x1e30], 0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
jne 0x58f9c9
lea ecx, [ebp - 0x1e48]
call fcn.00583ca0
test eax, eax
je 0x58f9b7
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
push 0x3e8
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
je 0x58f993
lea eax, [ebp - 0x1e20]
push eax
lea ecx, [ebp - 0x1e48]
call fcn.00583c00
mov eax, dword [ebp - 0x1e18]
sub eax, dword [ebp - 0x1e20]
cmp eax, 0x4c8
jne 0x58fa01
mov eax, dword [ebp - 0x1e14]
sub eax, dword [ebp - 0x1e1c]
cmp eax, 0x300
je 0x58fa16
sub esp, 0x10
lea ecx, [ebp - 0x1e48]
call fcn.00583c80
push 0x3e8
call ebx
mov esi, dword [ebp - 0x1e58]
lea eax, [ebp - 0xa10]
push 0x400
push eax
lea ecx, [esi + 0x12a38]
call fcn.00423b28
push 0x400
lea eax, [ebp - 0xe10]
push eax
lea ecx, [esi + 0x12ab8]
call fcn.00423b28
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push str._h_::_WEBZEN
lea ecx, [ebp - 0x1e48]
mov dword [ebp - 4], 2
call fcn.00583e60
test eax, eax
jne 0x58faaf
push str.http:__r2.hangame.com____h_::_WEBZEN
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58faaf
push str.Webzen___Games_Portal
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58faaf
push 0x5ec680
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
je 0x59010b
push 0x7d0
call ebx
mov dword [ebp - 0x1e28], 0x1b58
mov dword [ebp - 0x1e24], 0x1b58
mov dword [ebp - 0x1e30], 0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
jne 0x58fb2a
lea ecx, [ebp - 0x1e48]
call fcn.00583ca0
test eax, eax
je 0x58fb18
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
push 0x3e8
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
je 0x58faf4
push 0xbb8
call ebx
mov esi, dword [ebp - 0x1e44]
lea eax, [ebp - 0x1e38]
push eax
push esi
mov dword [ebp - 0x1e38], 0x4f
mov dword [ebp - 0x1e34], 0x80
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e34]
push dword [ebp - 0x1e38]
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x3e8
call ebx
push esi
sub esp, 8
call fcn.00583e20
push 0xbb8
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0xbb8
call ebx
push ecx
push esi
lea eax, [ebp - 0xa10]
push eax
call fcn.00583d20
push 0xbb8
call ebx
push ecx
push esi
push 9
call fcn.00583d70
push 0xbb8
call ebx
push ecx
push esi
lea eax, [ebp - 0xe10]
push eax
call fcn.00583d20
push 0xbb8
call ebx
push ecx
push esi
push 0xd
call fcn.00583d70
push 0xbb8
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
jne 0x58fcb5
nop word [eax + eax]
lea ecx, [ebp - 0x1e48]
call fcn.00583960
test eax, eax
jne 0x58fca7
lea ecx, [ebp - 0x1e48]
call fcn.00583ca0
test eax, eax
je 0x58fc93
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
push 0x3e8
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
je 0x58fc60
jmp 0x58fcb5
push ecx
push dword [ebp - 0x1e44]
push 0x1b
call fcn.00583d70
push 0x1388
call ebx
mov esi, dword [ebp - 0x1e58]
push 0
push 0
push 0
push 0x5ec6b0
push 0
push dword [esi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x2710
call ebx
push str.___R2
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
jne 0x58fd89
push 0
push 0
push 0
push str.http:__r2.webzen.co.kr_Main_
push 0
push dword [esi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
jne 0x58fd71
nop dword [eax]
lea ecx, [ebp - 0x1e48]
call fcn.005839a0
lea ecx, [ebp - 0x1e48]
call fcn.00583ca0
test eax, eax
je 0x58fd5f
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
push 0x12c
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
je 0x58fd30
push str.___R2
lea ecx, [ebp - 0x1e48]
call fcn.00583e60
test eax, eax
je 0x58fcf7
push 0x7d0
call ebx
push ecx
push dword [ebp - 0x1e44]
push 0x74
call fcn.00583d70
push 0x1388
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
jne 0x58fe06
lea ecx, [ebp - 0x1e48]
call fcn.005839a0
lea ecx, [ebp - 0x1e48]
call fcn.00583ca0
test eax, eax
je 0x58fdf4
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ea0
push 0x12c
call ebx
call edi
push eax
lea ecx, [ebp - 0x1e30]
call fcn.00406ed0
test eax, eax
je 0x58fdc5
push 0x7d0
call ebx
push 0x7d0
call ebx
cmp byte [0x6279a9], 1
mov edi, dword [ebp - 0x1e44]
jne 0x58fea9
lea eax, [ebp - 0x1e38]
mov dword [ebp - 0x1e38], 0x139
push eax
push edi
mov dword [ebp - 0x1e34], 0x126
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e34]
push dword [ebp - 0x1e38]
call dword [sym.imp.USER32.dll_SetCursorPos]
push edi
push 0x126
push 0x139
call fcn.00583dc0
push 0x5dc
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x64
call ebx
push ecx
push edi
push 0xd
call fcn.00583d70
push 0x3e8
call ebx
mov eax, dword [ebp - 0x1e18]
sub eax, dword [ebp - 0x1e20]
cdq
sub eax, edx
mov dword [ebp - 0x1e34], 0x1b
mov esi, eax
lea eax, [ebp - 0x1e38]
push eax
sar esi, 1
push edi
mov dword [ebp - 0x1e38], esi
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e34]
push dword [ebp - 0x1e38]
call dword [sym.imp.USER32.dll_SetCursorPos]
push edi
push 0x1b
push esi
call fcn.00583dc0
push 0x3e8
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x12c
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x12c
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x12c
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x12c
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x12c
call ebx
push ecx
push edi
push 9
call fcn.00583d70
push 0x3e8
call ebx
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x1e28], 0
mov dword [ebp - 0x1e24], 0
mov dword [ebp - 0x1e2c], 0x6279a8
lea eax, [ebp - 0x1e2c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1e48]
call fcn.00583aa0
push eax
call fcn.00583b90
test eax, eax
je 0x58ffb8
push 0x5ec6d0
lea ecx, [ebp - 0x1e2c]
call fcn.00402e80
test eax, eax
jne 0x5900cf
push str.PLauncher
push 0x5ec708
call esi
test eax, eax
jne 0x5900e0
push 0x5ec748
push str.32770
call esi
test eax, eax
jne 0x5900e0
lea eax, [ebp - 0x1e20]
push eax
lea ecx, [ebp - 0x1e48]
call fcn.00583c00
lea eax, [ebp - 0x1e20]
push eax
lea ecx, [ebp - 0x1e48]
call fcn.00583c00
mov esi, dword [ebp - 0x1e18]
lea eax, [ebp - 0x1e50]
push eax
add esi, 0xffffffb0
mov dword [ebp - 0x1e4c], 0x50
push edi
mov dword [ebp - 0x1e50], esi
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e4c]
push dword [ebp - 0x1e50]
call dword [sym.imp.USER32.dll_SetCursorPos]
push edi
push 0x50
push esi
call fcn.00583dc0
push 0xbb8
call ebx
mov eax, dword [ebp - 0x1e18]
sub eax, dword [ebp - 0x1e20]
cdq
sub eax, edx
mov dword [ebp - 0x1e4c], 0x136
mov esi, eax
lea eax, [ebp - 0x1e50]
sar esi, 1
push eax
add esi, 0x1d5
push edi
mov dword [ebp - 0x1e50], esi
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x1e4c]
push dword [ebp - 0x1e50]
call dword [sym.imp.USER32.dll_SetCursorPos]
push edi
push 0x136
push esi
call fcn.00583dc0
push 0x1388
call ebx
cmp dword [ebp - 0x1e28], 0
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
je 0x58ff62
push dword [ebp - 0x1e2c]
call fcn.0041a8f9
add esp, 4
jmp 0x58ff5c
sub esp, 8
call fcn.0058b540
mov ecx, eax
call fcn.0058b130
jmp 0x5900f4
mov ecx, str.iexplore.exe
call fcn.00406230
mov dword [0x627894], 1
cmp dword [ebp - 0x1e28], 0
je 0x59010b
push dword [ebp - 0x1e2c]
call fcn.0041a8f9
add esp, 4
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
call fcn.00561e63
call fcn.00561e63
int3