Function at 0x40c34d
Capabilities:
Copy file
Create process on windows
Delete file
Get disk size
Move file
Set current directory

Disassembly:
mov eax, 0x41a798
call fcn.00410f20
sub esp, 0x2dc
push dword [ebp + 0x14]
mov eax, dword [0x4240b8]
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push str.PreUpdate__ulUnzipSpace_d__szInstallDir_s_n
call fcn.00409adb
add esp, 0x10
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
jne 0x40c390
or eax, 0xffffffff
jmp 0x40c57e
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push edi
xor edi, edi
mov esi, str.write.test
jmp 0x40c3b7
push 5
push 0x70
push dword [ebp + 8]
call fcn.00409edf
cmp eax, 2
je 0x40c578
push edi
push 0x80
push 2
push edi
push edi
push 0x10000000
push esi
call ebx
cmp eax, 0xffffffff
je 0x40c3a2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call ebx
push str.PreUpdate__create_file_ok._n
call fcn.00409adb
mov eax, dword [0x424e6c]
pop ecx
mov ecx, 0x424e6c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push 0x7a
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.00409e31
push dword [ebp + 8]
mov esi, str.PreUpdate__warn_text:__s._n
push esi
call fcn.00409adb
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shrd eax, ecx, 0x14
shr ecx, 0x14
add eax, 1
adc ecx, edi
push ecx
push eax
mov eax, dword [ebp + 0x14]
movzx eax, word [eax]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0xd8]
push eax
call fcn.0040f32f
lea eax, [ebp - 0xd8]
push eax
push esi
call fcn.00409adb
mov esi, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
add esp, 0x24
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
ja 0x40c4ba
jae 0x40c4af
push 5
call fcn.00409cd8
lea eax, [eax*2 + 0x425b50]
push eax
lea eax, [ebp - 0xd8]
push eax
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x40c573
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
jb 0x40c470
ja 0x40c4ba
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp + 0xc]
jbe 0x40c470
push str.PreUpdate__check_free_diskspace_ok._n
call fcn.00409adb
pop ecx
call fcn.0040c28c
cmp eax, edi
jge 0x40c4d5
mov edi, eax
jmp 0x40c564
push str.PreUpdate__check_lava.exe_ok._n
call fcn.00409adb
pop ecx
xor esi, esi
push dword [esi + 0x41d98c]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 1
lea eax, [ebp - 0x2e0]
push eax
push dword [esi + 0x41d98c]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 1
push dword [esi + 0x41d98c]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x2e0]
push eax
call ebx
add esi, 4
cmp esi, 0x24
jb 0x40c4e2
push edi
push str.RemoveService.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.PreUpdate_ok._n
call fcn.00409adb
pop ecx
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040252d
mov eax, edi
jmp 0x40c57b
push 0xfffffffffffffffd
pop edi
jmp 0x40c564
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00410727
leave
ret 0x10