Function at 0x407be3
Capabilities:
Delete directory
Get file size
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x658
and dword [ebp - 0x414], 0
and dword [ebp - 4], 0
and dword [ebp - 0x410], 0
or dword [ebp - 0x634], 0xffffffff
and dword [ebp - 0x41c], 0
and dword [ebp - 0x418], 0
and dword [ebp - 0x40c], 0
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [ebp - 8], eax
push 0x412310
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x407cdf
mov dword [ebp - 0x41c], 1
push dword [ebp + 8]
call fcn.00407b99
mov dword [ebp - 0x63c], eax
mov eax, dword [0x4122fc]
mov ax, word [eax]
mov word [ebp - 0x638], ax
mov eax, dword [0x413104]
mov dword [ebp - 0x40c], eax
and dword [ebp - 0x658], 0
jmp 0x407c82
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
mov eax, dword [0x413108]
xor edx, edx
push 6
pop ecx
div ecx
cmp dword [ebp - 0x658], eax
jae 0x407cdf
mov eax, dword [ebp - 0x40c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x63c]
jne 0x407cce
mov eax, dword [ebp - 0x40c]
movzx eax, word [eax + 4]
movzx ecx, word [ebp - 0x638]
cmp eax, ecx
jl 0x407cc2
xor eax, eax
jmp 0x407fb0
mov dword [ebp - 0x418], 1
jmp 0x407cdf
mov eax, dword [ebp - 0x40c]
add eax, 6
mov dword [ebp - 0x40c], eax
jmp 0x407c75
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x634], eax
push 0
push dword [ebp - 0x634]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0
je 0x407d3e
cmp dword [ebp - 0x414], 0xffffffff
je 0x407d3e
cmp dword [ebp - 0x414], 0xa00000
ja 0x407d3e
cmp dword [ebp - 0x414], 0x2800
jae 0x407d54
push dword [ebp - 0x634]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x407fa1
push 0
lea eax, [ebp - 0x654]
push eax
push dword [ebp - 0x634]
call fcn.00402da4
push dword [ebp - 0x634]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x104
push 0
lea eax, [ebp - 0x630]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x5c
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll_strrchr]
pop ecx
pop ecx
inc eax
push eax
push 0x412310
push str._s_s
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 4
push 0
push 0x2e
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
pop ecx
pop ecx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x400
push 0
lea eax, [ebp - 0x408]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x630]
push eax
push dword [ebp + 8]
push 0x412980
push str._s_X__ibck___s____s_
lea eax, [ebp - 0x408]
push eax
call dword [ebp - 8]
add esp, 0x14
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 4]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x408]
push eax
call fcn.0040333d
test eax, eax
je 0x407e2f
cmp dword [ebp - 4], 0
je 0x407e39
jmp 0x407fa1
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x104
push 0
lea eax, [ebp - 0x528]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x630]
push eax
push 0x40ce88
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x528]
push eax
call fcn.00406a6d
push 0x400
push 0
lea eax, [ebp - 0x408]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x630]
push eax
push dword [ebp + 8]
push 0x412980
push str._s_M__ibck__r__o__ep1___s____s_
lea eax, [ebp - 0x408]
push eax
call dword [ebp - 8]
add esp, 0x14
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 4]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x408]
push eax
call fcn.0040333d
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x634], eax
push 1
lea eax, [ebp - 0x654]
push eax
push dword [ebp - 0x634]
call fcn.00402da4
push dword [ebp - 0x634]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x41c], 1
jne 0x407fa1
cmp dword [0x40f804], 0xffffffff
je 0x407fa1
cmp dword [ebp - 0x418], 0
jne 0x407f51
push 2
push 0
push 0
push dword [0x40f804]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x407f6e
push 0
push 0
mov eax, dword [ebp - 0x40c]
sub eax, dword [0x413104]
push eax
push dword [0x40f804]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x410]
push eax
push 6
lea eax, [ebp - 0x63c]
push eax
push dword [0x40f804]
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [ebp - 0x418], 0
jne 0x407fa1
push dword [0x40f804]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
xor eax, eax
leave
ret 4