Function at 0x57ea00
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb14
mov eax, dword [0x6a1da0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
lea eax, [ebp - 0x310]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
mov eax, dword [ebp - 0xb14]
test eax, eax
je 0x57ea55
mov byte [eax - 1], 0
lea eax, [ebp - 0x108]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.005b2b0b
add esp, 8
test eax, eax
je 0x57eab9
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xb10]
push str.Updater_current_directory___s__is_different_from_working_directory___s_
push eax
call fcn.00582750
add esp, 0x10
lea eax, [ebp - 0xb10]
push 0x30
push str.Warning
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
call fcn.005aeae3
mov esp, ebp
pop ebp
ret

Function at 0x57eb50
Capabilities:
Inspect load icon resource
Print debug messages
Terminate process

Disassembly:
push 5
push dword [0x6a994c]
call dword [sym.imp.USER32.dll_LoadIconA]
push str._generate
push 0x6a9960
mov dword [0x6a9954], eax
mov dword [0x6a0bd8], 0
call fcn.005af860
add esp, 8
test eax, eax
je 0x57eb98
call fcn.0057dcf0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
ret
push esi
push str.GlobalWarZ_Updater_001
push 0
push 0x100002
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov esi, eax
test esi, esi
je 0x57ebdb
push str.Updater_is_already_running
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
push str.GlobalWarZ_Updater_001
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x74dbf0], eax
call fcn.0057ea00
call fcn.0057ead0
test al, al
jne 0x57ec24
push 0x40
push str.UAC_problem
push str.Updater_must_be_run_from_administrator
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
call fcn.00583570
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x74dbf4
push 0x674d80
push 0x17
push 0
push 0x65c844
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x74dbf4]
xor edx, edx
test eax, eax
push str._cmdLine
cmovs ecx, edx
push 0x6a9960
mov dword [0x74dbf4], ecx
call fcn.005af860
movzx ecx, byte [0x74d737]
add esp, 8
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
test eax, eax
mov edx, 1
cmovne ecx, edx
push 0x7f00
push 0
mov byte [0x74d737], cl
call esi
push 0x7f89
push 0
mov dword [0x74db58], eax
call esi
push 0x209
push 0x74d740
push 0x12f
push 0
mov dword [0x74db54], eax
call dword [sym.imp.USER32.dll_LoadStringW]
pop esi
ret