Function at 0x57ea90
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb14
mov eax, dword [0x6b9da0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
lea eax, [ebp - 0x310]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
mov eax, dword [ebp - 0xb14]
test eax, eax
je 0x57eae5
mov byte [eax - 1], 0
lea eax, [ebp - 0x108]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.005b2d8b
add esp, 8
test eax, eax
je 0x57eb49
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xb10]
push str.Updater_current_directory___s__is_different_from_working_directory___s_
push eax
call fcn.00582800
add esp, 0x10
lea eax, [ebp - 0xb10]
push 0x30
push str.Warning
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
call fcn.005aec30
mov esp, ebp
pop ebp
ret

Function at 0x57ebe0
Capabilities:
Inspect load icon resource
Print debug messages
Terminate process

Disassembly:
push 5
push dword [0x77edcc]
call dword [sym.imp.USER32.dll_LoadIconA]
push str._generate
push 0x77ede0
mov dword [0x77edd4], eax
mov dword [0x6b8bd8], 0
call fcn.005af9f0
add esp, 8
test eax, eax
je 0x57ec28
call fcn.0057dd80
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
ret
push esi
push str.GlobalWarZ_Updater_001
push 0
push 0x100002
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov esi, eax
test esi, esi
je 0x57ec6b
push str.Updater_is_already_running
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
push str.GlobalWarZ_Updater_001
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x827bf0], eax
call fcn.0057ea90
call fcn.0057eb60
test al, al
jne 0x57ecb4
push 0x40
push str.UAC_problem
push str.Updater_must_be_run_from_administrator
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
ret
call fcn.00583640
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x827bf4
push 0x68b968
push 0x17
push 0
push 0x670964
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [0x827bf4]
xor edx, edx
test eax, eax
push str._cmdLine
cmovs ecx, edx
push 0x77ede0
mov dword [0x827bf4], ecx
call fcn.005af9f0
movzx ecx, byte [0x827737]
add esp, 8
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
test eax, eax
mov edx, 1
cmovne ecx, edx
push 0x7f00
push 0
mov byte [0x827737], cl
call esi
push 0x7f89
push 0
mov dword [0x827b58], eax
call esi
push 0x209
push 0x827740
push 0x12f
push 0
mov dword [0x827b54], eax
call dword [sym.imp.USER32.dll_LoadStringW]
pop esi
ret