Function at 0x4079c0
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x1268
call fcn.004a5d20
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x1264], eax
push esi
push edi
push 0x2745
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push 0x7fc
mov edi, eax
mov dword [esp + 0x26c], 0
lea eax, [esp + 0x270]
push 0
push eax
call fcn.0048e770
mov esi, dword [sym.imp.user32.dll_SendMessageW]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call esi
lea ecx, [esp + 0x268]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push edi
mov dword [esp + 0x38], 0x400
call esi
cmp word [esp + 0x268], 0
mov ecx, 0x4ad090
jne 0x407ab5
mov edx, 0x4ad0cc
call fcn.004773a0
push eax
lea eax, [esp + 0xa6c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0xa68]
mov edx, 0x4adc40
push 0x30
push eax
mov ecx, 0x4ad090
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_MessageBoxW]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x1264]
xor ecx, esp
call fcn.0048d815
mov esp, ebp
pop ebp
ret
mov edx, 0x4adc48
call fcn.004773a0
push eax
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x60]
mov edx, 0x4adc50
push 0x24
push eax
mov ecx, 0x4ad090
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_MessageBoxW]
cmp eax, 6
jne 0x407a9f
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call esi
lea ecx, [esp + 0x268]
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push edi
mov dword [esp + 0x28], 0
mov dword [esp + 0x38], 0x400
call esi
lea eax, [esp + 0x268]
push eax
call fcn.00492273
add esp, 4
test eax, eax
jne 0x407c51
push 0x4deb78
call fcn.00492273
add esp, 4
mov edx, 0x4adc58
mov ecx, 0x4ad090
call fcn.004773a0
push eax
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x60]
mov edx, 0x4adc60
push 0x24
push eax
mov ecx, 0x4ad090
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_MessageBoxW]
cmp eax, 6
jne 0x407c2e
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x268]
movaps xmmword [esp + 0x10], xmm0
push eax
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
call dword [sym.imp.kernel32.dll_lstrlenW]
xor ecx, ecx
cmp word [esp + eax*2 + 0x266], 0x5c
jne 0x407bda
mov word [esp + eax*2 + 0x266], cx
jmp 0x407be2
mov word [esp + eax*2 + 0x26a], cx
mov eax, dword [0x4def88]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x268]
mov dword [esp + 0x18], eax
mov eax, 0x454
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edx, dword [esp + 0xc]
mov ecx, 0x2745
call fcn.00407df0
jmp 0x407ce2
lea eax, [esp + 0x10]
mov dword [esp + 0x20], 0xb
push eax
push dword [esp + 0x10]
mov dword [esp + 0x24], 1
push 0x102b
jmp 0x407cdf
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x268]
movaps xmmword [esp + 0x10], xmm0
push eax
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
call dword [sym.imp.kernel32.dll_lstrlenW]
xor ecx, ecx
cmp word [esp + eax*2 + 0x266], 0x5c
jne 0x407c93
mov word [esp + eax*2 + 0x266], cx
jmp 0x407c9b
mov word [esp + eax*2 + 0x26a], cx
mov eax, dword [0x4def88]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x268]
mov dword [esp + 0x18], eax
mov eax, 0x454
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push 0
push dword [esp + 0x10]
push 0x1008
push edi
call esi
cmp dword [esp + 0xc], 0xffffffff
jne 0x407af3
push 0x4cddd0
call dword [sym.imp.kernel32.dll_DeleteFileW]
push 0
push 0
push 0x1004
push edi
call esi
mov esi, eax
test esi, esi
je 0x407dce
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push 0x4cddd0
call dword [sym.imp.kernel32.dll_CreateFileW]
mov dword [esp + 0xc], eax
cmp eax, 0xffffffff
jne 0x407d50
or eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x1264]
xor ecx, esp
call fcn.0048d815
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0xa68]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], eax
dec esi
lea eax, [esp + 0x10]
mov dword [esp + 0x28], 0x400
push eax
push esi
push 0x1073
push edi
call dword [sym.imp.user32.dll_SendMessageW]
push 0
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xa70]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
add eax, eax
push eax
lea eax, [esp + 0xa74]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.kernel32.dll_WriteFile]
push 0
lea eax, [esp + 0x60]
push eax
push 4
push 0x4ad24c
push dword [esp + 0x1c]
call dword [sym.imp.kernel32.dll_WriteFile]
test esi, esi
jne 0x407d50
push dword [esp + 0xc]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, dword [esp + 0x126c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0048d815
mov esp, ebp
pop ebp
ret