Function at 0x57e9b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb14
mov eax, dword [0x6c9db0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
lea eax, [ebp - 0x310]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
mov eax, dword [ebp - 0xb14]
test eax, eax
je 0x57ea05
mov byte [eax - 1], 0
lea eax, [ebp - 0x108]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.005b2e0b
add esp, 8
test eax, eax
je 0x57ea69
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xb10]
push str.Updater_current_directory___s__is_different_from_working_directory___s_
push eax
call fcn.005826f0
add esp, 0x10
lea eax, [ebp - 0xb10]
push 0x30
push str.Warning
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
call fcn.005aede3
mov esp, ebp
pop ebp
ret

Function at 0x57eb00
Capabilities:
Inspect load icon resource
Print debug messages
Terminate process

Disassembly:
push 5
push dword [0x6d196c]
call dword [sym.imp.USER32.dll_LoadIconA]
push str._generate
push 0x6d1980
mov dword [0x6d1974], eax
mov dword [0x6a0bd8], 0
call fcn.005afb60
add esp, 8
test eax, eax
je 0x57eb48
call fcn.0057dca0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
ret
push esi
push str.GlobalWarZ_Updater_001
push 0
push 0x100002
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov esi, eax
test esi, esi
je 0x57eb8b
push str.Updater_is_already_running
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
push str.GlobalWarZ_Updater_001
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x775c10], eax
call fcn.0057e9b0
call fcn.0057ea80
test al, al
jne 0x57ebd4
push 0x40
push str.UAC_problem
push str.Updater_must_be_run_from_administrator
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
call fcn.00583510
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x775c14
push 0x674de8
push 0x17
push 0
push 0x65c864
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x775c14]
xor edx, edx
test eax, eax
push str._cmdLine
cmovs ecx, edx
push 0x6d1980
mov dword [0x775c14], ecx
call fcn.005afb60
movzx ecx, byte [0x775757]
add esp, 8
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
test eax, eax
mov edx, 1
cmovne ecx, edx
push 0x7f00
push 0
mov byte [0x775757], cl
call esi
push 0x7f89
push 0
mov dword [0x775b78], eax
call esi
push 0x209
push 0x775760
push 0x12f
push 0
mov dword [0x775b74], eax
call dword [sym.imp.USER32.dll_LoadStringW]
pop esi
ret