Function at 0x40b4fa
Capabilities:
Copy file
Create process on windows
Delete file
Get disk size
Move file
Set current directory

Disassembly:
mov eax, 0x419720
call fcn.0040fe54
sub esp, 0x2dc
push dword [ebp + 0x14]
mov eax, dword [0x4220b8]
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push str.PreUpdate__ulUnzipSpace_d__szInstallDir_s_n
call fcn.00409014
add esp, 0x10
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
jne 0x40b53d
or eax, 0xffffffff
jmp 0x40b72b
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push edi
xor edi, edi
mov esi, str.write.test
jmp 0x40b564
push 5
push 0x70
push dword [ebp + 8]
call fcn.0040927f
cmp eax, 2
je 0x40b725
push edi
push 0x80
push 2
push edi
push edi
push 0x10000000
push esi
call ebx
cmp eax, 0xffffffff
je 0x40b54f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call ebx
push str.PreUpdate__create_file_ok._n
call fcn.00409014
mov eax, dword [0x422e4c]
pop ecx
mov ecx, 0x422e4c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push 0x7a
lea eax, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.00409223
push dword [ebp + 8]
mov esi, str.PreUpdate__warn_text:__s._n
push esi
call fcn.00409014
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shrd eax, ecx, 0x14
shr ecx, 0x14
add eax, 1
adc ecx, edi
push ecx
push eax
mov eax, dword [ebp + 0x14]
movzx eax, word [eax]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0xd8]
push eax
call fcn.0040e36f
lea eax, [ebp - 0xd8]
push eax
push esi
call fcn.00409014
mov esi, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
add esp, 0x24
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
ja 0x40b667
jae 0x40b65c
push 5
call fcn.00409200
lea eax, [eax*2 + 0x423b30]
push eax
lea eax, [ebp - 0xd8]
push eax
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x40b720
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
jb 0x40b61d
ja 0x40b667
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp + 0xc]
jbe 0x40b61d
push str.PreUpdate__check_free_diskspace_ok._n
call fcn.00409014
pop ecx
call fcn.0040b46c
cmp eax, edi
jge 0x40b682
mov edi, eax
jmp 0x40b711
push str.PreUpdate__check_lava.exe_ok._n
call fcn.00409014
pop ecx
xor esi, esi
push dword [esi + 0x41c990]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 1
lea eax, [ebp - 0x2e0]
push eax
push dword [esi + 0x41c990]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 1
push dword [esi + 0x41c990]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x2e0]
push eax
call ebx
add esi, 4
cmp esi, 0x24
jb 0x40b68f
push edi
push str.RemoveService.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.PreUpdate_ok._n
call fcn.00409014
pop ecx
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040252e
mov eax, edi
jmp 0x40b728
push 0xfffffffffffffffd
pop edi
jmp 0x40b711
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.0040f65e
leave
ret 0x10