Function at 0x40e409
Capabilities:
Copy file
Create process on windows
Delete file
Get disk size
Move file
Set current directory

Disassembly:
mov eax, 0x41e386
call fcn.004132a4
sub esp, 0x2dc
push dword [ebp + 0x14]
mov eax, dword [0x4290c8]
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push str.PreUpdate__ulUnzipSpace_d__szInstallDir_s_n
call fcn.0040b9f0
add esp, 0x10
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
jne 0x40e44c
or eax, 0xffffffff
jmp 0x40e63a
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push edi
xor edi, edi
mov esi, str.write.test
jmp 0x40e473
push 5
push 0x70
push dword [ebp + 8]
call fcn.0040beee
cmp eax, 2
je 0x40e634
push edi
push 0x80
push 2
push edi
push edi
push 0x10000000
push esi
call ebx
cmp eax, 0xffffffff
je 0x40e45e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call ebx
push str.PreUpdate__create_file_ok._n
call fcn.0040b9f0
mov eax, dword [0x42a1ac]
pop ecx
mov ecx, 0x42a1ac
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push 0x7a
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040be40
push dword [ebp + 8]
mov esi, str.PreUpdate__warn_text:__s._n
push esi
call fcn.0040b9f0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shrd eax, ecx, 0x14
shr ecx, 0x14
add eax, 1
adc ecx, edi
push ecx
push eax
mov eax, dword [ebp + 0x14]
movzx eax, word [eax]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0xd8]
push eax
call fcn.004114b3
lea eax, [ebp - 0xd8]
push eax
push esi
call fcn.0040b9f0
mov esi, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
add esp, 0x24
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
ja 0x40e576
jae 0x40e56b
push 5
call fcn.0040bce7
lea eax, [eax*2 + 0x42b0a0]
push eax
lea eax, [ebp - 0xd8]
push eax
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x40e62f
lea eax, [ebp - 0x2e8]
push eax
push edi
push edi
push edi
call esi
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp + 0x10]
jb 0x40e52c
ja 0x40e576
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp + 0xc]
jbe 0x40e52c
push str.PreUpdate__check_free_diskspace_ok._n
call fcn.0040b9f0
pop ecx
call fcn.0040e348
cmp eax, edi
jge 0x40e591
mov edi, eax
jmp 0x40e620
push str.PreUpdate__check_lava.exe_ok._n
call fcn.0040b9f0
pop ecx
xor esi, esi
push dword [esi + 0x421a54]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 1
lea eax, [ebp - 0x2e0]
push eax
push dword [esi + 0x421a54]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 1
push dword [esi + 0x421a54]
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x2e0]
push eax
call ebx
add esi, 4
cmp esi, 0x24
jb 0x40e59e
push edi
push str.RemoveService.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.PreUpdate_ok._n
call fcn.0040b9f0
pop ecx
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00402528
mov eax, edi
jmp 0x40e637
push 0xfffffffffffffffd
pop edi
jmp 0x40e620
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00412aab
leave
ret 0x10