Function at 0x491140
Capabilities:
Delete file
Get common file path
Read .ini file
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x5642af
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x651788]
xor eax, esp
mov dword [esp + 0x26c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x651788]
xor eax, esp
push eax
lea eax, [esp + 0x284]
mov dword fs:[0], eax
mov eax, dword [esp + 0x298]
mov edx, dword [esp + 0x294]
mov ecx, dword [esp + 0x29c]
mov dword [esp + 0x1c], eax
xor ebx, ebx
mov edi, 7
mov eax, edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4911b1
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x2c]
call fcn.00402120
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x60]
push eax
mov dword [esp + 0x294], ebx
call fcn.00471a50
add esp, 8
cmp dword [esp + 0x3c], 8
mov byte [esp + 0x28c], 2
jb 0x491200
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00492573
add esp, 4
push edi
push str.http:__
lea ecx, [esp + 0x48]
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], bx
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x4c], bl
call fcn.00401f00
mov edx, dword [esp + 0x60]
mov edi, 0x10
cmp dword [esp + 0x74], edi
mov byte [esp + 0x28c], 3
jae 0x491247
lea edx, [esp + 0x60]
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x491250
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x48]
call fcn.0041b450
push 0xe
push str..jzbrowser.com
lea ecx, [esp + 0x48]
call fcn.0041b450
push 0x80
call fcn.00492548
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, ebx
mov byte [esp + 0x28c], 4
je 0x4912a2
mov ecx, eax
call fcn.004772a0
mov esi, eax
mov dword [esp + 0x14], esi
jmp 0x4912a8
mov dword [esp + 0x14], ebx
mov esi, ebx
cmp dword [esp + 0x58], edi
mov eax, dword [esp + 0x44]
mov byte [esp + 0x28c], 3
jae 0x4912be
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.004773f0
mov ecx, esi
call fcn.004766b0
mov esi, eax
mov eax, dword [esi + 0x10]
add esi, 0xc
cmp eax, ebx
je 0x4912e4
mov edi, dword [esi + 8]
sub edi, eax
mov dword [esp + 0x18], edi
jne 0x4912f0
mov dword [esp + 0x18], 1
mov edi, dword [esp + 0x18]
add edi, 1
push edi
call fcn.00492578
push edi
mov ebp, eax
push ebx
push ebp
call fcn.004afb50
add esp, 0x10
mov ecx, esi
xor edi, edi
call fcn.00419a40
test eax, eax
jbe 0x49133f
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x491323
mov eax, dword [esi + 8]
sub eax, ecx
cmp edi, eax
jb 0x491328
call fcn.004afdfe
mov edx, dword [esi + 4]
mov al, byte [edi + edx]
mov byte [edi + ebp], al
mov ecx, esi
add edi, 1
call fcn.00419a40
cmp edi, eax
jb 0x491313
mov ecx, dword [esp + 0x14]
cmp ecx, ebx
je 0x49134f
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x206
lea ecx, [esp + 0x7e]
push ebx
push ecx
mov word [esp + 0x84], bx
call fcn.004afb50
add esp, 0xc
lea edx, [esp + 0x78]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [esp + 0x78]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, bx
jne 0x491381
mov ecx, dword [str.jzinfo.ini]
mov edx, dword [0x58409c]
mov dword [eax], ecx
mov ecx, dword [0x5840a0]
push ebx
mov dword [eax + 4], edx
mov edx, dword [0x5840a4]
push 0x80
mov dword [eax + 8], ecx
mov ecx, dword [0x5840a8]
push 1
mov dword [eax + 0xc], edx
mov dx, word [0x5840ac]
push ebx
mov dword [eax + 0x10], ecx
push 1
mov word [eax + 0x14], dx
push 0x40000000
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x491407
mov edx, dword [esp + 0x18]
push ebx
lea ecx, [esp + 0x18]
push ecx
push edx
push ebp
push esi
mov dword [esp + 0x28], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x78]
push eax
push ebx
push 0x584090
push 0x584088
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
lea ecx, [esp + 0x78]
push ecx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, ebx
je 0x491471
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00491940
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x190
call esi
call fcn.00491bd0
push 0x190
call esi
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.00491c20
add esp, 8
push 0x190
call esi
call fcn.00491980
mov esi, 0x10
cmp dword [esp + 0x58], esi
jb 0x491489
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x74], esi
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
jb 0x4914ac
mov edx, dword [esp + 0x60]
push edx
call fcn.00492573
add esp, 4
mov ecx, dword [esp + 0x284]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x26c]
xor ecx, esp
call fcn.004aeca3
add esp, 0x27c
ret 0xc