Function at 0x1800c2560
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
lea ebx, [rcx + 0xe9f]
mov rdi, r9
mov dword [rbp + 0x67], ebx
mov r13, r8
mov r12, rdx
mov esi, ecx
cmp ecx, ebx
jae 0x1800c298f
mov r15, qword [rbp - 9]
lea rcx, str.CNVEnvironmentVariableAction::ValidateAction
mov r14, qword [rbp - 9]
lea rdx, str.:_icons_clear_filters
nop word [rax + rax]
cmp esi, 0x1be
ja 0x1800c26c1
je 0x1800c298f
cmp esi, 0xca
ja 0x1800c268d
je 0x1800c2a65
cmp esi, 5
je 0x1800c2a65
cmp esi, 0x1e
je 0x1800c2644
cmp esi, 0x34
je 0x1800c2609
cmp esi, 0x7e
jne 0x1800c2a65
mov r15, qword [rbp - 9]
jmp 0x1800c2a65
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8d, dword [r12]
xor r9d, r9d
mov rcx, rax
mov qword [rsp + 0x20], 0
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c2a57
mov dword [rbp - 0x11], 0xfffffff6
jmp 0x1800c298f
mov qword [rbp - 0x11], 0xffffffffffffffff
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x1800c2653
mov dword [rbp - 0x19], eax
lea r8, [rbp - 0x11]
lea rax, [rbp - 0x19]
mov dword [rbp - 0x21], 0
mov r9, rdi
mov qword [rsp + 0x20], rax
mov edx, 0xfe
lea rcx, [rbp - 0x21]
call fcn.180051000
mov qword [rbp - 0x11], rax
jmp 0x1800c2a57
mov eax, esi
sub eax, 0xe3
je 0x1800c298f
sub eax, 0x16
je 0x1800c26b5
cmp eax, 0x4a
jne 0x1800c2a65
mov rax, qword [rbp - 9]
mov qword [rbp - 9], rax
jmp 0x1800c2a65
mov dword [rbp - 0x11], 0
jmp 0x1800c2a65
cmp esi, 0x457
ja 0x1800c2948
je 0x1800c28bd
mov eax, esi
sub eax, 0x208
je 0x1800c2813
sub eax, 0x4c
je 0x1800c2a65
sub eax, 0x79
je 0x1800c27c5
cmp eax, 0xc5
jne 0x1800c2a65
test r15, r15
jne 0x1800c2768
mov ebx, 0x68
nop word [rax + rax]
mov eax, ebx
sub eax, 0x67
je 0x1800c2a78
cmp eax, 1
jne 0x1800c275e
mov qword [rsp + 0x20], rcx
lea r9d, [rax + 0x23]
lea rcx, [rbp - 0x21]
mov dword [rbp - 0x21], 2
xor r8d, r8d
mov rdx, rdi
call fcn.180023820
mov r8, rdi
mov dword [rbp - 0x21], 0
mov edx, 0x11d
lea rcx, [rbp - 0x21]
call fcn.1800d0f60
lea rcx, str.CNVEnvironmentVariableAction::ValidateAction
dec ebx
cmp ebx, 0x66
ja 0x1800c2710
mov ebx, dword [rbp + 0x67]
mov rax, qword [rdi + 0x60]
lea r8, [rbp - 0x29]
mov qword [rsp + 0x40], rax
mov r9, r15
mov rax, qword [rbp - 9]
mov edx, 0x21
mov qword [rsp + 0x38], rax
xor ecx, ecx
lea rax, [rbp - 0x21]
mov dword [rbp - 0x29], 0
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x21], 0
mov dword [rbp - 0x19], 1
call fcn.18003a650
mov r14, rax
jmp 0x1800c2a57
mov rax, qword [r13]
lea rcx, [rbp - 1]
mov qword [rsp + 0x28], 0
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xe0
call fcn.1800a3a80
mov r8, qword [rdi + 0x60]
lea r9, [rbp + 7]
mov qword [rbp - 9], rax
lea rdx, [rbp - 9]
mov eax, dword [rbp - 1]
mov ecx, 0x52
mov dword [rbp + 7], eax
call fcn.180011c50
mov r15, rax
jmp 0x1800c2a57
cmp dword [r12], 1
jl 0x1800c2837
mov r8, qword [r13]
xor edx, edx
lea ecx, [rdx + 0x30]
call fcn.180054480
test eax, eax
jne 0x1800c2a57
lea rdx, str.:_icons_clear_filters
mov ebx, 0xef
nop dword [rax]
cmp ebx, 0xef
je 0x1800c2867
cmp ebx, 0xa272
je 0x1800c285e
cmp ebx, 0x143f5
je 0x1800c298f
jmp 0x1800c28a0
mov dword [rbp - 0x11], 0
jmp 0x1800c28a0
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x29]
mov rdx, rdi
mov dword [rbp - 0x29], 2
mov r9d, 0x24
xor r8d, r8d
call fcn.180023820
mov r8, rdi
mov dword [rbp - 0x29], 0
mov edx, 0x11d
lea rcx, [rbp - 0x29]
call fcn.1800d0f60
add ebx, 0xa183
lea rdx, str.:_icons_clear_filters
cmp ebx, 0x1e489
jbe 0x1800c2840
mov ebx, dword [rbp + 0x67]
jmp 0x1800c2a57
test r14, r14
jne 0x1800c292f
mov ebx, SHRegGetIntW
cmp ebx, 0x115
je 0x1800c28ee
cmp ebx, 0xb05f
je 0x1800c28e5
cmp ebx, 0x15fa9
je 0x1800c298f
jmp 0x1800c291e
mov dword [rbp - 0x11], 0
jmp 0x1800c291e
mov r9, qword [rbp - 9]
lea r8, str.jo_naudoti_kita_programa._U
mov edx, 1
mov rcx, rdi
call fcn.180105d30
mov r8, rdi
mov dword [rbp - 0x29], 0
mov edx, 0x11d
lea rcx, [rbp - 0x29]
call fcn.1800d0f60
add ebx, 0xaf4a
cmp ebx, 0x20dde
jbe 0x1800c28c7
mov ebx, dword [rbp + 0x67]
mov r9, qword [rdi + 0x60]
lea r8, [rbp + 0xf]
mov edx, 0x16
xor ecx, ecx
call fcn.1800ce010
jmp 0x1800c2a57
cmp esi, 0x51c
je 0x1800c29da
cmp esi, 0x5e1
je 0x1800c29b4
cmp esi, 0x6a6
jne 0x1800c2a65
mov ecx, 0x84
nop dword [rax]
mov eax, ecx
sub eax, 0x83
je 0x1800c298f
cmp eax, 1
jne 0x1800c2985
mov dword [rbp - 0x11], 0
dec ecx
cmp ecx, 0x82
ja 0x1800c2970
mov rax, qword [rbp - 0x11]
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r8, r15
mov rdx, r14
mov ecx, 0x29
call fcn.1800b41d0
mov r9d, 0x107
lea rcx, [rbp + 0xf]
xor r8d, r8d
xor edx, edx
call fcn.18007f710
jmp 0x1800c2a57
lea r9, [rbp + 0xf]
mov r8d, 0xa9
mov rdx, r15
mov rcx, r14
call fcn.1800f3500
mov eax, dword [rbp + 0x1f]
cmp eax, 1
jae 0x1800c2a11
mov r8, rdi
mov dword [rbp - 0x29], 0
mov edx, 0x11d
lea rcx, [rbp - 0x29]
call fcn.1800d0f60
jmp 0x1800c2a57
cmp dword [r12], 1
jle 0x1800c2a2e
mov rcx, qword [r13 + 8]
mov edx, 0x6e
call fcn.1800d2700
mov dword [rbp - 0x19], eax
mov eax, dword [rbp + 0x1f]
jmp 0x1800c2a35
mov dword [rbp - 0x19], 0
mov rcx, qword [rbp + 0x17]
lea rdx, [rbp - 0x29]
mov dword [rbp - 0x29], eax
mov r9, rdi
lea rax, [rbp - 0x19]
mov r8d, 0x102
mov qword [rsp + 0x20], rax
call fcn.180049810
lea rdx, str.:_icons_clear_filters
lea rcx, str.CNVEnvironmentVariableAction::ValidateAction
add esi, 0xc5
cmp esi, ebx
jb 0x1800c25c0
jmp 0x1800c298f
mov dword [rbp - 0x11], 0
jmp 0x1800c298f