Function at 0x408140
Capabilities:
Delete file
Write file on windows

Disassembly:
mov eax, 0x124c
call fcn.004a5e30
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x1248], eax
push ebx
push edi
push 0x2740
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x7fc
mov edi, eax
mov dword [esp + 0x4c], 0
lea eax, [esp + 0x50]
push 0
push eax
call fcn.0048e880
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call ebx
lea ecx, [esp + 0x48]
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
push 0x1073
push edi
mov dword [esp + 0x34], 0x400
call ebx
cmp word [esp + 0x48], 0
mov ecx, 0x4ad090
jne 0x408226
mov edx, 0x4ad0cc
call fcn.00477440
push eax
lea eax, [esp + 0xa54]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0xa50]
mov edx, 0x4adc40
push 0x30
push eax
mov ecx, 0x4ad090
call fcn.00477440
push eax
push dword [0x4def88]
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1248]
xor ecx, esp
call fcn.0048d925
add esp, 0x124c
ret
mov edx, 0x4adc48
call fcn.00477440
push eax
lea eax, [esp + 0x84c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x848]
mov edx, 0x4adc70
push 0x24
push eax
mov ecx, 0x4ad090
call fcn.00477440
push eax
push dword [0x4def88]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x40820d
push esi
push ebp
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call ebx
mov ebp, eax
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x50]
mov dword [esp + 0x2c], 0x400
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push ebp
push 0x1073
push edi
call ebx
cmp ebp, 0xffffffff
je 0x40842f
lea eax, [esp + 0x50]
push eax
call esi
cmp word [esp + eax*2 + 0x4e], 0x5d
jne 0x4083aa
mov edx, 0x4adc58
mov ecx, 0x4ad090
call fcn.00477440
push eax
lea eax, [esp + 0x854]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x850]
mov edx, 0x4adc78
push 0x24
push eax
mov ecx, 0x4ad090
call fcn.00477440
push eax
push dword [0x4def88]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x408387
lea eax, [esp + 0x50]
push eax
call esi
lea eax, [eax*2 - 2]
cmp eax, 0x800
jae 0x40850f
xor ecx, ecx
mov word [esp + eax + 0x50], cx
lea eax, [esp + 0x50]
push 0x5c
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
lea ecx, [esp + 0x50]
sub eax, ecx
and eax, 0xfffffffe
cmp eax, 0x800
jae 0x40850f
xor ecx, ecx
lea esi, [esp + 0x52]
push str.chNameOfFolder
push ecx
push ecx
mov word [esp + eax + 0x5c], cx
add esi, eax
push ecx
lea ecx, [esp + 0x62]
call fcn.00478540
mov edx, esi
mov ecx, eax
call fcn.00476910
add esp, 0x10
mov edx, ebp
mov ecx, 0x2740
call fcn.00407e40
jmp 0x40826c
lea eax, [esp + 0x14]
mov dword [esp + 0x24], 0xb
push eax
push ebp
push 0x102b
push edi
mov dword [esp + 0x30], 1
call ebx
jmp 0x408272
push 0x5c
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov esi, eax
lea eax, [esp + 0x50]
push 0x5d
push 0
sub esi, eax
push eax
sar esi, 1
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
lea ecx, [esp + 0x50]
add esi, esi
sub eax, ecx
sar eax, 1
cmp esi, 0x800
jae 0x40850f
xor ecx, ecx
add eax, eax
mov word [esp + esi + 0x50], cx
cmp eax, 0x800
jae 0x40850f
push str.chNameOfFolder
push ecx
push ecx
mov word [esp + eax + 0x5c], cx
push ecx
lea ecx, [esp + 0x62]
add eax, ecx
push eax
mov eax, ecx
add esi, eax
call fcn.00478540
mov edx, esi
mov ecx, eax
call fcn.00476350
add esp, 0x14
push 0
push ebp
push 0x1008
push edi
call ebx
jmp 0x40826c
push 0x4cd5d0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
push 0x1004
push edi
call ebx
mov esi, eax
test esi, esi
je 0x4084f1
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push 0x4cd5d0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x408480
or eax, eax
jmp 0x4084f6
lea eax, [esp + 0xa58]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x28], eax
dec esi
lea eax, [esp + 0x14]
mov dword [esp + 0x2c], 0x400
push eax
push esi
push 0x1073
push edi
call ebx
push 0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0xa60]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
lea eax, [esp + 0xa64]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [esp + 0x14]
push eax
push 4
push 0x4ad24c
push ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
test esi, esi
jne 0x408480
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov ecx, dword [esp + 0x1258]
pop ebp
pop esi
pop edi
pop ebx
xor ecx, esp
call fcn.0048d925
add esp, 0x124c
ret
call fcn.0048da55
int3