Function at 0x407a70
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x1268
call fcn.004ac5b0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1264], eax
push esi
push edi
push 0x2745
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x7fc
mov edi, eax
mov dword [esp + 0x26c], 0
lea eax, [esp + 0x270]
push 0
push eax
call fcn.0048fb10
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call esi
lea ecx, [esp + 0x268]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push edi
mov dword [esp + 0x38], 0x400
call esi
cmp word [esp + 0x268], 0
mov ecx, 0x4b32d0
jne 0x407b65
mov edx, 0x4b330c
call fcn.00478640
push eax
lea eax, [esp + 0xa6c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0xa68]
mov edx, 0x4b3e80
push 0x30
push eax
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x1264]
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret
mov edx, 0x4b3e88
call fcn.00478640
push eax
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x60]
mov edx, 0x4b3e90
push 0x24
push eax
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x407b4f
push 2
push 0xffffffffffffffff
push 0x100c
push edi
call esi
lea ecx, [esp + 0x268]
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push edi
mov dword [esp + 0x28], 0
mov dword [esp + 0x38], 0x400
call esi
lea eax, [esp + 0x268]
push eax
call fcn.00493613
add esp, 4
test eax, eax
jne 0x407d01
push 0x4e5c20
call fcn.00493613
add esp, 4
mov edx, 0x4b3e98
mov ecx, 0x4b32d0
call fcn.00478640
push eax
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x60]
mov edx, 0x4b3ea0
push 0x24
push eax
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x407cde
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x268]
movaps xmmword [esp + 0x10], xmm0
push eax
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ecx, ecx
cmp word [esp + eax*2 + 0x266], 0x5c
jne 0x407c8a
mov word [esp + eax*2 + 0x266], cx
jmp 0x407c92
mov word [esp + eax*2 + 0x26a], cx
mov eax, dword [0x4e6030]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x268]
mov dword [esp + 0x18], eax
mov eax, 0x454
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edx, dword [esp + 0xc]
mov ecx, 0x2745
call fcn.00407ea0
jmp 0x407d92
lea eax, [esp + 0x10]
mov dword [esp + 0x20], 0xb
push eax
push dword [esp + 0x10]
mov dword [esp + 0x24], 1
push 0x102b
jmp 0x407d8f
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x268]
movaps xmmword [esp + 0x10], xmm0
push eax
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ecx, ecx
cmp word [esp + eax*2 + 0x266], 0x5c
jne 0x407d43
mov word [esp + eax*2 + 0x266], cx
jmp 0x407d4b
mov word [esp + eax*2 + 0x26a], cx
mov eax, dword [0x4e6030]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x268]
mov dword [esp + 0x18], eax
mov eax, 0x454
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push 0
push dword [esp + 0x10]
push 0x1008
push edi
call esi
cmp dword [esp + 0xc], 0xffffffff
jne 0x407ba3
push 0x4d4e10
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
push 0x1004
push edi
call esi
mov esi, eax
test esi, esi
je 0x407e7e
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push 0x4d4e10
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0xc], eax
cmp eax, 0xffffffff
jne 0x407e00
or eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x1264]
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0xa68]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], eax
dec esi
lea eax, [esp + 0x10]
mov dword [esp + 0x28], 0x400
push eax
push esi
push 0x1073
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xa70]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
lea eax, [esp + 0xa74]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [esp + 0x60]
push eax
push 4
push 0x4b348c
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test esi, esi
jne 0x407e00
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x126c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret