Function at 0x180007ce4
Capabilities:
Delete file
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2b58]
mov eax, 0x2c30
call fcn.180020ac0
sub rsp, rax
mov rax, qword [0x180052d00]
xor rax, rsp
mov qword [rbp + 0x2b20], rax
mov ebx, 1
mov dword [rsp + 0x50], ebx
lea rdx, [rbp + 0x2430]
lea rdi, [0x180057320]
mov rcx, rdi
call fcn.180008424
nop
lea rdx, [rbp + 0x26a0]
lea rsi, [0x1800574a0]
mov rcx, rsi
call fcn.180008424
nop
xor edx, edx
mov r8d, 0x2220
lea rcx, [rbp - 0x60]
call fcn.18003b660
xor r15d, r15d
movzx eax, word [rbp + 0x28be]
cmp word [rbp + 0x264e], ax
jne 0x180007d9e
movzx eax, word [rbp + 0x28bc]
cmp word [rbp + 0x264c], ax
jne 0x180007d9e
mov eax, dword [rbp + 0x28c0]
cmp dword [rbp + 0x2650], eax
je 0x180007e91
mov qword [rbp + 0x21d8], r15
mov byte [rbp + 0x21f0], r15b
lea rax, vtable.CompareDlg.0
mov qword [rbp + 0x21c0], rax
movups xmm1, xmmword [0x180055898]
movups xmmword [rbp + 0x21f8], xmm1
movsd xmm0, qword [0x1800558a8]
movsd qword [rbp + 0x2208], xmm0
mov rax, qword [0x180055478]
mov qword [rbp + 0x21c8], rax
movq qword [rbp + 0x21d0], xmm1
mov r9d, dword [0x180055268]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x21c0]
call fcn.18001bfb0
nop
mov rcx, qword [rbp + 0x21d8]
cmp eax, 2
lea rax, vtable.StaticDialog.0
mov qword [rbp + 0x21c0], rax
jne 0x180007e5e
test rcx, rcx
je 0x180008319
cmp byte [rbp + 0x21f0], r15b
je 0x180007e53
mov r9, rcx
mov r8, rbx
mov edx, 0x7f4
mov rcx, qword [rbp + 0x21d0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x21d8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x180008319
test rcx, rcx
je 0x180007e91
cmp byte [rbp + 0x21f0], r15b
je 0x180007e8b
mov r9, rcx
mov r8, rbx
mov edx, 0x7f4
mov rcx, qword [rbp + 0x21d0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x21d8]
call qword [sym.imp.USER32.dll_DestroyWindow]
lea rdx, [0x180055690]
lea rcx, [rbp - 0x58]
call fcn.18002e5f8
lea rdx, [rbp + 0x21c0]
mov rcx, rdi
call fcn.180008424
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
lea rcx, [rbp + 0x2910]
call fcn.18002e5f8
lea rcx, [rbp + 0x21c0]
call fcn.180007338
lea rcx, [rbp + 0x2910]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea rdx, [rbp + 0x2910]
lea rcx, [rbp - 0x58]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rdx, [0x1800414c0]
lea rcx, [rbp - 0x58]
call fcn.18002e614
lea rdx, [rbp + 0x21c0]
mov rcx, rsi
call fcn.180008424
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
lea rcx, [rbp + 0x2910]
call fcn.18002e5f8
lea rcx, [rbp + 0x21c0]
call fcn.180007338
lea rcx, [rbp + 0x2910]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea rdx, [rbp + 0x2910]
lea rcx, [rbp - 0x58]
call fcn.18002e614
lea rdx, str..cmp
lea rcx, [rbp - 0x58]
call fcn.18002e614
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x1b0], rax
cmp rax, 0xffffffffffffffff
je 0x180008319
mov ebx, 0xfa001
mov ecx, ebx
call fcn.180020730
mov r12, rax
mov ecx, ebx
call fcn.180020730
mov r13, rax
mov qword [rsp + 0x60], rax
mov rcx, qword [0x1800558a0]
mov qword [0x180055688], rcx
xor r9d, r9d
xor r8d, r8d
mov esi, 0x887
mov edx, esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rsp + 0x68], rax
lea ebx, [rax + 1]
mov dword [rsp + 0x44], ebx
mov rcx, qword [0x1800558a8]
mov qword [0x180055688], rcx
xor r9d, r9d
xor r8d, r8d
mov edx, esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rax
mov qword [rsp + 0x70], rax
lea r8d, [rax + 1]
mov dword [rsp + 0x58], r8d
mov r14d, r15d
mov dword [rsp + 0x4c], r15d
mov edx, edi
cmp r8d, ebx
cmovle edx, eax
mov r10d, 1
add edx, r10d
mov dword [rsp + 0x54], edx
cmp r8d, ebx
cmovle eax, edi
inc eax
mov dword [rsp + 0x5c], eax
test edx, edx
jle 0x1800082ad
mov r11d, 0xfa000
jmp 0x180008055
xor r15d, r15d
mov byte [rsp + 0x40], r15b
xor esi, esi
mov ecx, r14d
neg ecx
lea eax, [rcx + rbx]
cmp eax, r11d
jle 0x18000806e
mov edi, r11d
jmp 0x18000808a
mov eax, 0x10624dd3
imul ebx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xfa000
sub edi, eax
add edi, r10d
lea eax, [rcx + r8]
cmp eax, r11d
jle 0x180008098
mov ebx, r11d
jmp 0x1800080b8
mov eax, 0x10624dd3
imul r8d
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xfa000
mov ebx, r9d
sub ebx, eax
add ebx, r10d
mov dword [rsp + 0x78], r14d
lea eax, [rdi - 1]
mov dword [rsp + 0x7c], eax
mov qword [rbp - 0x80], r12
lea r9, [rsp + 0x78]
xor r8d, r8d
mov edx, 0x872
mov rcx, qword [0x1800558a0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x78], r14d
lea eax, [rbx - 1]
mov dword [rbp - 0x74], eax
mov qword [rbp - 0x70], r13
lea r9, [rbp - 0x78]
xor r8d, r8d
mov edx, 0x872
mov rcx, qword [0x1800558a8]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdi, edi
test rdi, rdi
jle 0x18000819a
movsxd r13, ebx
mov rbx, qword [rsp + 0x60]
sub rbx, r12
mov r14d, 1
cmp rsi, r13
jge 0x180008190
and dword [rsp + 0x48], 0
lea rcx, [rsi + r12]
mov al, byte [rbx + rcx]
cmp byte [rcx], al
je 0x180008145
mov byte [rsp + 0x40], r14b
and dword [rsp + 0x50], 0
add r15d, r14d
add rsi, r14
cmp word [rbp + 0x264e], r14w
je 0x180008166
movsx ecx, word [rbp + 0x264e]
mov eax, r15d
cdq
idiv ecx
test edx, edx
jne 0x18000818b
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
mov r8d, r14d
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov byte [rsp + 0x40], 0
cmp rsi, rdi
jl 0x180008126
mov r14d, dword [rsp + 0x4c]
mov r13, qword [rsp + 0x60]
add r14d, r15d
mov dword [rsp + 0x4c], r14d
mov edx, dword [rsp + 0x54]
cmp r14d, edx
mov r8d, dword [rsp + 0x58]
mov ebx, dword [rsp + 0x44]
mov rdi, qword [rsp + 0x68]
mov r9, qword [rsp + 0x70]
mov r10d, 1
mov r11d, 0xfa000
jl 0x180008052
mov esi, r10d
cmp dword [rsp + 0x50], esi
je 0x1800082aa
and dword [rsp + 0x44], 0
mov byte [rsp + 0x40], sil
movsx ecx, word [rbp + 0x264e]
mov eax, edx
cdq
idiv ecx
mov ebx, eax
mov edi, dword [rsp + 0x5c]
jmp 0x180008222
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x44]
mov r8d, esi
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_WriteFile]
add ebx, esi
movsx ecx, word [rbp + 0x264e]
mov eax, edi
cdq
idiv ecx
cmp ebx, eax
jb 0x1800081f9
mov esi, 0x2220
mov ecx, esi
call fcn.1800206f4
mov rdi, rax
mov ecx, esi
call fcn.1800206f4
mov rbx, rax
test rdi, rdi
je 0x180008292
test rax, rax
je 0x180008292
mov r8d, esi
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.18003afc0
mov r8d, esi
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.18003afc0
mov r8, rbx
mov rdx, rdi
lea rcx, [0x180057320]
call fcn.180008f0c
mov r8, rdi
mov rdx, rbx
lea rcx, [0x1800574a0]
call fcn.180008f0c
jmp 0x180008308
mov rdx, rsi
mov rcx, rdi
call fcn.180020640
mov rdx, rsi
mov rcx, rbx
call fcn.180020640
jmp 0x180008308
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.MsgBox_CompMatch
mov rdx, qword [0x180055898]
mov rcx, qword [0x180055478]
call fcn.180008ad8
test eax, eax
jne 0x1800082f1
xor r9d, r9d
lea r8, [0x180041500]
lea rdx, str.Files_Match.
mov rcx, qword [0x180055898]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, r12
call fcn.180020640
mov rcx, r13
call fcn.180020640
nop
lea rcx, [rbp + 0x26a0]
call fcn.180007338
nop
lea rcx, [rbp + 0x2430]
call fcn.180007338
mov rcx, qword [rbp + 0x2b20]
xor rcx, rsp
call fcn.180020620
lea r11, [rsp + 0x2c30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret