Function at 0x57e9a0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb14
mov eax, dword [0x6a1da0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
lea eax, [ebp - 0x310]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
mov eax, dword [ebp - 0xb14]
test eax, eax
je 0x57e9f5
mov byte [eax - 1], 0
lea eax, [ebp - 0x108]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.005b328b
add esp, 8
test eax, eax
je 0x57ea59
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xb10]
push str.Updater_current_directory___s__is_different_from_working_directory___s_
push eax
call fcn.00582a00
add esp, 0x10
lea eax, [ebp - 0xb10]
push 0x30
push str.Warning
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
call fcn.005af2c3
mov esp, ebp
pop ebp
ret

Function at 0x57eaf0
Capabilities:
Inspect load icon resource
Print debug messages
Terminate process

Disassembly:
push 5
push dword [0x6a994c]
call dword [sym.imp.USER32.dll_LoadIconA]
push str._generate
push 0x6a9960
mov dword [0x6a9954], eax
mov dword [0x6a0bd8], 0
call fcn.005b0040
add esp, 8
test eax, eax
je 0x57eb38
call fcn.0057dc90
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
ret
push esi
push str.GlobalWarZ_Updater_001
push 0
push 0x100002
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov esi, eax
test esi, esi
je 0x57eb7b
push str.Updater_is_already_running
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
push str.GlobalWarZ_Updater_001
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x74dbe0], eax
call fcn.0057e9a0
call fcn.0057ea70
test al, al
jne 0x57ebc4
push 0x40
push str.UAC_problem
push str.Updater_must_be_run_from_administrator
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
call fcn.00583850
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x74dbe4
push 0x674e1c
push 0x17
push 0
push 0x65c864
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x74dbe4]
xor edx, edx
test eax, eax
push str._cmdLine
cmovs ecx, edx
push 0x6a9960
mov dword [0x74dbe4], ecx
call fcn.005b0040
movzx ecx, byte [0x74d727]
add esp, 8
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
test eax, eax
mov edx, 1
cmovne ecx, edx
push 0x7f00
push 0
mov byte [0x74d727], cl
call esi
push 0x7f89
push 0
mov dword [0x74db48], eax
call esi
push 0x209
push 0x74d730
push 0x12f
push 0
mov dword [0x74db44], eax
call dword [sym.imp.USER32.dll_LoadStringW]
pop esi
ret