Function at 0x1800d6410
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x418
mov rax, qword [0x1803dc740]
xor rax, rsp
mov qword [rsp + 0x400], rax
lea rcx, [0x1803e45f0]
call fcn.1800cf680
movzx eax, al
test eax, eax
jne 0x1800d644a
xor al, al
jmp 0x1800d6a1b
lea rdx, str.settings_
lea rcx, [0x1803e45f0]
call fcn.1800d1500
xor edx, edx
lea rcx, [0x1803e45f0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800d6550
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800d6550
mov byte [rsp + 0x120], 0x5b
mov byte [rsp + 0x121], 0x63
mov byte [rsp + 0x122], 0x6f
mov byte [rsp + 0x123], 0x6e
mov byte [rsp + 0x124], 0x66
mov byte [rsp + 0x125], 0x69
mov byte [rsp + 0x126], 0x67
mov byte [rsp + 0x127], 0x2e
mov byte [rsp + 0x128], 0x63
mov byte [rsp + 0x129], 0x70
mov byte [rsp + 0x12a], 0x70
mov byte [rsp + 0x12b], 0x3a
mov byte [rsp + 0x12c], 0x31
mov byte [rsp + 0x12d], 0x31
mov byte [rsp + 0x12e], 0x31
mov byte [rsp + 0x12f], 0x5d
mov byte [rsp + 0x130], 0x20
mov byte [rsp + 0x131], 0
lea rcx, [rsp + 0x120]
call fcn.180054750
mov r8, rax
mov dl, 3
lea rcx, [0x18032dc10]
call fcn.180158c90
mov qword [rsp + 0x20], rax
lea rdx, str.failed_to_create_configurations_directory__because_one_or_more_intermediate_directories_dont_exist
mov rcx, qword [rsp + 0x20]
call fcn.1801590a0
xor al, al
jmp 0x1800d6a1b
mov r9d, 0x10
movabs r8, 0xbaaedcff023465cb
movabs rdx, 0x60c77fe5147990ef
lea rcx, [rsp + 0xd0]
call fcn.1800d79d0
mov r9d, 0x14
movabs r8, 0x2b9fff192bd4c83e
movabs rdx, 0xa3a79a6c3023d22e
lea rcx, [rsp + 0xf0]
call fcn.1800d79d0
lea rax, [rsp + 0x110]
mov r8, rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x80]
call fcn.18003bb20
lea rcx, [rsp + 0x30]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x30]
movabs rcx, 0x2d45705400b911e0
call fcn.1800d6c20
mov r9d, 4
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x347e4e7067538409
lea rcx, [rsp + 0x140]
call fcn.1800d7a80
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xb3a78539b1d3ade
lea rcx, [rsp + 0x160]
call fcn.1800d79d0
xor r9d, r9d
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x180]
call fcn.1800d79d0
lea rax, [rsp + 0x1a0]
mov r8, rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x90]
call fcn.18003bb20
lea rcx, [rsp + 0x40]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x40]
movabs rcx, 0xf5fed3478eaca554
call fcn.1800d6c20
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x1b0]
call fcn.1800d7a80
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x1d0]
call fcn.1800d79d0
mov r9d, 8
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x1f0]
call fcn.1800d79d0
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x210]
call fcn.1800d79d0
lea rax, [rsp + 0x230]
mov r8, rax
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xa0]
call fcn.18003bb20
lea rcx, [rsp + 0x50]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x50]
movabs rcx, 0x86bbe13ae4189ac0
call fcn.1800d6c20
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x240]
call fcn.1800d7a80
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x260]
call fcn.1800d79d0
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xd37f4d820606d133
lea rcx, [rsp + 0x280]
call fcn.1800d79d0
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x2a0]
call fcn.1800d79d0
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x2c0]
call fcn.1800d79d0
lea rax, [rsp + 0x2e0]
mov r8, rax
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xb0]
call fcn.18003bb20
lea rcx, [rsp + 0x60]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x60]
movabs rcx, 0xe7d21d4cab389ee8
call fcn.1800d6c20
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x2f0]
call fcn.1800d7a80
mov r9d, 1
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0xbb6893c6a37c5ac5
lea rcx, [rsp + 0x310]
call fcn.1800d7a80
mov r9d, 6
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x78da431489bbb8e
lea rcx, [rsp + 0x330]
call fcn.1800d7a80
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x350]
call fcn.1800d79d0
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x370]
call fcn.1800d79d0
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xb73af3b56510b295
lea rcx, [rsp + 0x390]
call fcn.1800d79d0
mov r9d, 0x18
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xefcde99d626e3d71
lea rcx, [rsp + 0x3b0]
call fcn.1800d79d0
mov r9d, 0x1c
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x3d0]
call fcn.1800d79d0
lea rax, [rsp + 0x3f0]
mov r8, rax
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0xc0]
call fcn.18003bb20
lea rcx, [rsp + 0x70]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x70]
movabs rcx, 0xbda1aabb6a52704
call fcn.1800d6c20
mov rcx, qword [rsp + 0x430]
call fcn.1800d6ed0
movzx eax, al
test eax, eax
jne 0x1800d6a14
xor al, al
jmp 0x1800d6a1b
call fcn.1800d6a40
mov al, 1
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.18021fab0
add rsp, 0x418
pop rdi
pop rsi
ret