Function at 0x40db12
Capabilities:
Copy file
Create process on windows
Delete file
Get disk size
Move file
Set current directory

Disassembly:
mov eax, 0x41d932
call fcn.004128c4
sub esp, 0x2dc
push dword [ebp + 0x14]
mov eax, dword [0x4280c8]
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push str.PreUpdate__ulUnzipSpace_d__szInstallDir_s_n
call fcn.0040b1f8
add esp, 0x10
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
jne 0x40db55
or eax, 0xffffffff
jmp 0x40dd43
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push edi
xor edi, edi
mov esi, str.write.test
jmp 0x40db7c
push 5
push 0x70
push dword [ebp + 8]
call fcn.0040b5fc
cmp eax, 2
je 0x40dd3d
push edi
push 0x80
push 2
push edi
push edi
push 0x10000000
push esi
call ebx
cmp eax, 0xffffffff
je 0x40db67
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call ebx
push str.PreUpdate__create_file_ok._n
call fcn.0040b1f8
mov eax, dword [0x4291ac]
pop ecx
mov ecx, 0x4291ac
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push 0x7a
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040b54e
push dword [ebp + 8]
mov esi, str.PreUpdate__warn_text:__s._n
push esi
call fcn.0040b1f8
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shrd eax, ecx, 0x14
shr ecx, 0x14
add eax, 1
adc ecx, edi
push ecx
push eax
mov eax, dword [ebp + 0x14]
movzx eax, word [eax]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0xd8]
push eax
call fcn.00410bc3
lea eax, [ebp - 0xd8]
push eax
push esi
call fcn.0040b1f8
mov esi, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
add esp, 0x24
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
ja 0x40dc7f
jae 0x40dc74
push 5
call fcn.0040b3f5
lea eax, [eax*2 + 0x42a0a0]
push eax
lea eax, [ebp - 0xd8]
push eax
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x40dd38
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
jb 0x40dc35
ja 0x40dc7f
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp + 0xc]
jbe 0x40dc35
push str.PreUpdate__check_free_diskspace_ok._n
call fcn.0040b1f8
pop ecx
call fcn.0040da51
cmp eax, edi
jge 0x40dc9a
mov edi, eax
jmp 0x40dd29
push str.PreUpdate__check_lava.exe_ok._n
call fcn.0040b1f8
pop ecx
xor esi, esi
push dword [esi + 0x420a44]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 1
lea eax, [ebp - 0x2e0]
push eax
push dword [esi + 0x420a44]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 1
push dword [esi + 0x420a44]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x2e0]
push eax
call ebx
add esi, 4
cmp esi, 0x24
jb 0x40dca7
push edi
push str.RemoveService.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.PreUpdate_ok._n
call fcn.0040b1f8
pop ecx
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00402528
mov eax, edi
jmp 0x40dd40
push 0xfffffffffffffffd
pop edi
jmp 0x40dd29
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.004120cb
leave
ret 0x10