Function at 0x4911d0
Capabilities:
Copy file
Create process on windows
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x125c
call fcn.004d4ce0
mov ax, word [0x500df0]
push ebx
push esi
mov edx, dword [0x73ff2c]
push edi
mov word [ebp - 0xc44], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0xc42]
push str.Update.ini
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0xc44]
push 0x104
xor esi, esi
push ecx
push edx
mov dword [ebp - 0x10], esi
stosw word es:[edi], ax
call fcn.004a8e10
lea eax, [ebp - 0xc44]
push esi
push eax
call fcn.004a8e00
add esp, 0x18
test eax, eax
je 0x49185e
lea ecx, [ebp - 0xc44]
push esi
lea edx, [ebp - 4]
push ecx
push edx
mov dword [ebp - 4], esi
call fcn.004ada90
mov ebx, dword [ebp - 4]
add esp, 0xc
cmp ebx, esi
je 0x4917ca
mov dx, word [0x500df0]
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x21a]
mov word [ebp - 0x21c], dx
mov word [ebp - 0x424], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x422]
mov dword [ebp - 0x14], 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x103
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
test eax, eax
jne 0x491406
lea eax, [ebp - 8]
lea ecx, [ebp - 0x424]
push eax
lea edx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x21c]
push edx
push eax
push 0x4ee3bc
push esi
push ebx
call fcn.004adee0
add esp, 0x1c
test eax, eax
je 0x4913ff
mov ebx, dword [ebp + 0x10]
lea ecx, [ebp - 0x424]
push 0x4ee314
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x49139c
lea edx, [ebp - 0x424]
push eax
push edx
mov ecx, ebx
call fcn.004abab0
mov di, ax
lea eax, [ebp - 0x21c]
push 0
push eax
mov ecx, ebx
call fcn.004abab0
cmp ax, di
je 0x49139c
push 0x44
push 0x4f0220
push str.Upgrade_download_successfull__but_this_version_of_TheWorld_Browser_does_not_contain_your_system_local_language__nWould_you_like_to_use_English_version_instead_If_you_choose_no__you_will_not_update.
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
jne 0x491350
mov dword [ebp - 0x14], 0
jmp 0x49139c
mov cx, word [0x500df0]
xor eax, eax
mov word [ebp - 0x62c], cx
mov ecx, 0x81
lea edi, [ebp - 0x62a]
push str.TheWorld.ini
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x73ff2c]
lea edx, [ebp - 0x62c]
push 0x104
push edx
push eax
call fcn.004a8e10
lea ecx, [ebp - 0x62c]
push 0
push ecx
call fcn.004b1f70
add esp, 0x18
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0x21c]
lea edx, [ebp - 8]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [ebp - 0x424]
rep stosd dword es:[edi], eax
mov eax, 0x103
push edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x424]
lea ecx, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x21c]
push ecx
inc esi
push edx
push 0x4ee3bc
push esi
push eax
call fcn.004adee0
add esp, 0x1c
test eax, eax
jne 0x4912de
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4917bc
mov dx, word [0x500df0]
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x62a]
mov word [ebp - 0x62c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x1052]
mov word [ebp - 0x1054], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x125a]
mov word [ebp - 0x125c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0xe4a]
mov word [ebp - 0xe4c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x832]
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov word [ebp - 0x834], dx
mov edx, dword [0x73ff28]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x125c]
push 0x104
push ecx
push 0x162
push edx
xor ebx, ebx
stosw word es:[edi], ax
call esi
mov ecx, dword [0x73ff28]
lea eax, [ebp - 0xe4c]
push 0x104
push eax
push 0x163
push ecx
call esi
mov eax, dword [0x73ff28]
lea edx, [ebp - 0x62c]
push 0x104
push edx
push 0xf
push eax
call esi
mov edx, dword [0x73ff28]
lea ecx, [ebp - 0x1054]
push 0x104
push ecx
push 0x164
push edx
call esi
lea eax, [ebp - 8]
lea ecx, [ebp - 0x424]
push eax
lea edx, [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x21c]
push edx
push eax
push 0x4ee3bc
push ebx
push ecx
call fcn.004adee0
add esp, 0x1c
test eax, eax
je 0x49171a
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [ebp - 0x21c]
lea eax, [ebp - 0x834]
push edx
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
lea ecx, [ebp - 0x834]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 0xc
lea edx, [ebp - 0x21c]
mov word [ebp + eax*2 - 0x836], 0x5f
push 0x20
push edx
call esi
lea eax, [ebp - 0x424]
push 0x20
push eax
call esi
lea ecx, [ebp - 0x834]
push 0x20
push ecx
call esi
mov eax, dword [0x73eebc]
test eax, eax
je 0x491640
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4915d6
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x491626
mov eax, dword [ebp + 8]
test eax, eax
jne 0x491626
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4916b5
lea eax, [ebp - 0x62c]
push 0x41
lea ecx, [ebp - 0x1054]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x491602
jmp 0x49157c
lea edx, [ebp - 0x21c]
push 0
lea eax, [ebp - 0x424]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x424]
push 0
push ecx
call fcn.004b1f70
add esp, 8
jmp 0x4916b5
lea edx, [ebp - 0x21c]
push 0
lea eax, [ebp - 0x424]
push edx
push eax
mov dword [ebp - 0x10], 1
call fcn.004b2440
add esp, 0xc
jmp 0x4916b5
lea ecx, [ebp - 0x21c]
push 0
lea edx, [ebp - 0x424]
push ecx
push edx
call fcn.004b2440
add esp, 0xc
jmp 0x4916b5
mov eax, dword [0x73eec4]
test eax, eax
je 0x49166a
mov eax, dword [ebp + 8]
test eax, eax
je 0x49166a
lea eax, [ebp - 0x21c]
push 0
lea ecx, [ebp - 0x424]
push eax
push ecx
call fcn.004b2440
add esp, 0xc
jmp 0x4916b5
lea edx, [ebp - 0x834]
push 1
lea eax, [ebp - 0x21c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x21c]
push 0
lea edx, [ebp - 0x424]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x424]
push 0
push eax
call fcn.004b1f70
lea ecx, [ebp - 0x834]
push 0
push ecx
call fcn.004b1f70
add esp, 0x10
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0x21c]
lea edx, [ebp - 8]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [ebp - 0x424]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [ebp - 0x834]
rep stosd dword es:[edi], eax
mov eax, 0x103
push edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x424]
lea ecx, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x21c]
push ecx
inc ebx
push edx
push 0x4ee3bc
push ebx
push eax
call fcn.004adee0
add esp, 0x1c
test eax, eax
jne 0x491520
mov eax, dword [ebp + 8]
test eax, eax
jne 0x4917bc
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x49174b
lea ecx, [ebp - 0x62c]
push 0x40
lea edx, [ebp - 0xe4c]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4917bc
lea eax, [ebp - 0x62c]
push 0x24
lea ecx, [ebp - 0x125c]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4917bc
mov ebx, dword [ebp + 0xc]
test ebx, ebx
jne 0x491778
xor edi, edi
jmp 0x4917a5
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
add eax, 3
and al, 0xfc
call fcn.004d4ce0
mov edi, esp
push esi
push edi
push 0xffffffffffffffff
push ebx
push 0
push 0
mov word [edi], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 5
push 0
push str._setupopen
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea edx, [ebp - 4]
push 0
push edx
call fcn.004adc90
add esp, 8
mov ax, word [0x500df0]
mov edx, dword [0x73ff2c]
mov word [ebp - 0xa3c], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0xa3a]
rep stosd dword es:[edi], eax
push 0x4ee314
lea ecx, [ebp - 0xa3c]
push 0x104
push ecx
push edx
stosw word es:[edi], ax
call fcn.004a8e10
lea eax, [ebp - 0xa3c]
push 0
push eax
call fcn.004b1f70
mov edx, dword [0x73ff2c]
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0xa3c]
rep stosd dword es:[edi], eax
push str.TheWorld.ini
lea ecx, [ebp - 0xa3c]
push 0x104
push ecx
push edx
call fcn.004a8e10
lea eax, [ebp - 0xa3c]
push 0
push eax
call fcn.004b1f70
lea ecx, [ebp - 0xc44]
push 0
push ecx
call fcn.004b1f70
add esp, 0x38
lea esp, [ebp - 0x1268]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret