Function at 0x1800d0930
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x7e0
lea rbp, [rsp + 0x20]
mov rax, qword [0x180371940]
xor rax, rbp
mov qword [rbp + 0x7b0], rax
lea rcx, [0x180378530]
call fcn.1800c83c0
movzx eax, al
test eax, eax
jne 0x1800d096f
xor al, al
jmp 0x1800d0f1f
lea rdx, str.settings_
lea rcx, [0x180378530]
call fcn.1800c28a0
xor edx, edx
lea rcx, [0x180378530]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800d0a66
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800d0a66
mov byte [rbp + 0x248], 0x5b
mov byte [rbp + 0x249], 0x63
mov byte [rbp + 0x24a], 0x6f
mov byte [rbp + 0x24b], 0x6e
mov byte [rbp + 0x24c], 0x66
mov byte [rbp + 0x24d], 0x69
mov byte [rbp + 0x24e], 0x67
mov byte [rbp + 0x24f], 0x2e
mov byte [rbp + 0x250], 0x63
mov byte [rbp + 0x251], 0x70
mov byte [rbp + 0x252], 0x70
mov byte [rbp + 0x253], 0x3a
mov byte [rbp + 0x254], 0x31
mov byte [rbp + 0x255], 0x31
mov byte [rbp + 0x256], 0x31
mov byte [rbp + 0x257], 0x5d
mov byte [rbp + 0x258], 0x20
mov byte [rbp + 0x259], 0
lea rcx, [rbp + 0x248]
call fcn.1800cefd0
mov r8, rax
mov dl, 3
lea rcx, [0x1802c2df8]
call fcn.18015eb60
mov qword [rbp + 0x7a8], rax
lea rdx, str.failed_to_create_configurations_directory__because_one_or_more_intermediate_directories_dont_exist
mov rcx, qword [rbp + 0x7a8]
call fcn.18015e890
xor al, al
jmp 0x1800d0f1f
mov r9d, 0x10
movabs r8, 0xbaaedcff023465cb
movabs rdx, 0x60c77fe5147990ef
lea rcx, [rbp + 0x760]
call fcn.1800cab50
mov r9d, 0x14
movabs r8, 0x2b9fff192bd4c83e
movabs rdx, 0xa3a79a6c3023d22e
lea rcx, [rbp + 0x780]
call fcn.1800cb070
lea rax, [rbp + 0x7a0]
mov r8, rax
lea rdx, [rbp + 0x760]
lea rcx, [rbp + 0x278]
call fcn.1800ce120
lea rcx, [rbp + 0x370]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x370]
movabs rcx, 0x2d45705400b911e0
call fcn.1800ce8c0
mov r9d, 4
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x347e4e7067538409
lea rcx, [rbp + 0x6e0]
call fcn.1800cb170
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xb3a78539b1d3ade
lea rcx, [rbp + 0x700]
call fcn.1800cac50
xor r9d, r9d
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rbp + 0x720]
call fcn.1800cae80
lea rax, [rbp + 0x740]
mov r8, rax
lea rdx, [rbp + 0x6e0]
lea rcx, [rbp + 0x2a8]
call fcn.1800ce120
lea rcx, [rbp + 0x3a0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x3a0]
movabs rcx, 0xf5fed3478eaca554
call fcn.1800ce8c0
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rbp + 0x640]
call fcn.1800cb270
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rbp + 0x660]
call fcn.1800cad50
mov r9d, 8
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rbp + 0x680]
call fcn.1800caf80
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rbp + 0x6a0]
call fcn.1800caf80
lea rax, [rbp + 0x6c0]
mov r8, rax
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x2d8]
call fcn.1800ce120
lea rcx, [rbp + 0x3d0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x3d0]
movabs rcx, 0x86bbe13ae4189ac0
call fcn.1800ce8c0
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rbp + 0x580]
call fcn.1800cb1f0
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rbp + 0x5a0]
call fcn.1800cacd0
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xd37f4d820606d133
lea rcx, [rbp + 0x5c0]
call fcn.1800cacd0
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rbp + 0x5e0]
call fcn.1800caf00
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rbp + 0x600]
call fcn.1800caf00
lea rax, [rbp + 0x620]
mov r8, rax
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x308]
call fcn.1800ce120
lea rcx, [rbp + 0x400]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x400]
movabs rcx, 0xe7d21d4cab389ee8
call fcn.1800ce8c0
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rbp + 0x460]
call fcn.1800cb0f0
mov r9d, 1
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0xbb6893c6a37c5ac5
lea rcx, [rbp + 0x480]
call fcn.1800cb0f0
mov r9d, 6
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x78da431489bbb8e
lea rcx, [rbp + 0x4a0]
call fcn.1800cb0f0
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rbp + 0x4c0]
call fcn.1800cabd0
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rbp + 0x4e0]
call fcn.1800cae00
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xb73af3b56510b295
lea rcx, [rbp + 0x500]
call fcn.1800cae00
mov r9d, 0x18
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xefcde99d626e3d71
lea rcx, [rbp + 0x520]
call fcn.1800cae00
mov r9d, 0x1c
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rbp + 0x540]
call fcn.1800cae00
lea rax, [rbp + 0x560]
mov r8, rax
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x338]
call fcn.1800ce120
lea rcx, [rbp + 0x430]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x430]
movabs rcx, 0xbda1aabb6a52704
call fcn.1800ce8c0
mov rcx, qword [rbp + 0x7e0]
call fcn.1800ce9c0
movzx eax, al
test eax, eax
jne 0x1800d0f18
xor al, al
jmp 0x1800d0f1f
call fcn.1800cfd30
mov al, 1
mov rcx, qword [rbp + 0x7b0]
xor rcx, rbp
call fcn.180225d60
lea rsp, [rbp + 0x7c0]
pop rdi
pop rsi
pop rbp
ret