Function at 0x1800f0330
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x418
mov rax, qword [0x180493728]
xor rax, rsp
mov qword [rsp + 0x400], rax
lea rcx, [0x18049b680]
call fcn.1800e7230
movzx eax, al
test eax, eax
jne 0x1800f036a
xor al, al
jmp 0x1800f093b
lea rdx, [0x1802f0d08]
lea rcx, [0x18049b680]
call fcn.1800e91c0
xor edx, edx
lea rcx, [0x18049b680]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800f0470
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800f0470
mov byte [rsp + 0x120], 0x5b
mov byte [rsp + 0x121], 0x63
mov byte [rsp + 0x122], 0x6f
mov byte [rsp + 0x123], 0x6e
mov byte [rsp + 0x124], 0x66
mov byte [rsp + 0x125], 0x69
mov byte [rsp + 0x126], 0x67
mov byte [rsp + 0x127], 0x2e
mov byte [rsp + 0x128], 0x63
mov byte [rsp + 0x129], 0x70
mov byte [rsp + 0x12a], 0x70
mov byte [rsp + 0x12b], 0x3a
mov byte [rsp + 0x12c], 0x31
mov byte [rsp + 0x12d], 0x31
mov byte [rsp + 0x12e], 0x31
mov byte [rsp + 0x12f], 0x5d
mov byte [rsp + 0x130], 0x20
mov byte [rsp + 0x131], 0
lea rcx, [rsp + 0x120]
call fcn.1800f4cc0
mov r8, rax
mov dl, 3
lea rcx, [0x1803e4c10]
call fcn.180190b90
mov qword [rsp + 0x20], rax
lea rdx, str.failed_to_create_configurations_directory__because_one_or_more_intermediate_directories_dont_exist
mov rcx, qword [rsp + 0x20]
call fcn.180190fa0
xor al, al
jmp 0x1800f093b
mov r9d, 0x10
movabs r8, 0xbaaedcff023465cb
movabs rdx, 0x60c77fe5147990ef
lea rcx, [rsp + 0xd0]
call fcn.1800f1920
mov r9d, 0x14
movabs r8, 0x2b9fff192bd4c83e
movabs rdx, 0xa3a79a6c3023d22e
lea rcx, [rsp + 0xf0]
call fcn.1800f1d20
lea rax, [rsp + 0x110]
mov r8, rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x80]
call fcn.1800f4460
lea rcx, [rsp + 0x30]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x30]
movabs rcx, 0x2d45705400b911e0
call fcn.1800f0b40
mov r9d, 4
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x347e4e7067538409
lea rcx, [rsp + 0x140]
call fcn.1800f1de0
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xb3a78539b1d3ade
lea rcx, [rsp + 0x160]
call fcn.1800f19e0
xor r9d, r9d
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x180]
call fcn.1800f1b70
lea rax, [rsp + 0x1a0]
mov r8, rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x90]
call fcn.1800f4460
lea rcx, [rsp + 0x40]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x40]
movabs rcx, 0xf5fed3478eaca554
call fcn.1800f0b40
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x1b0]
call fcn.1800f1ea0
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x1d0]
call fcn.1800f1aa0
mov r9d, 8
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x1f0]
call fcn.1800f1c30
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x210]
call fcn.1800f1c30
lea rax, [rsp + 0x230]
mov r8, rax
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xa0]
call fcn.1800f4460
lea rcx, [rsp + 0x50]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x50]
movabs rcx, 0x86bbe13ae4189ac0
call fcn.1800f0b40
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x240]
call fcn.1800f1e40
mov r9d, 4
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x260]
call fcn.1800f1a40
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0xd37f4d820606d133
lea rcx, [rsp + 0x280]
call fcn.1800f1a40
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x2a0]
call fcn.1800f1bd0
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x2c0]
call fcn.1800f1bd0
lea rax, [rsp + 0x2e0]
mov r8, rax
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xb0]
call fcn.1800f4460
lea rcx, [rsp + 0x60]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x60]
movabs rcx, 0xe7d21d4cab389ee8
call fcn.1800f0b40
xor r9d, r9d
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x651373fb0724d9ee
lea rcx, [rsp + 0x2f0]
call fcn.1800f1d80
mov r9d, 1
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0xbb6893c6a37c5ac5
lea rcx, [rsp + 0x310]
call fcn.1800f1d80
mov r9d, 6
movabs r8, 0xcd2fd49bc6b014bd
movabs rdx, 0x78da431489bbb8e
lea rcx, [rsp + 0x330]
call fcn.1800f1d80
mov r9d, 8
movabs r8, 0xa00a62a942b20165
movabs rdx, 0x7d985b747f5b7f27
lea rcx, [rsp + 0x350]
call fcn.1800f1980
mov r9d, 0xc
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x4c992570c692c3d5
lea rcx, [rsp + 0x370]
call fcn.1800f1b10
mov r9d, 0x10
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xb73af3b56510b295
lea rcx, [rsp + 0x390]
call fcn.1800f1b10
mov r9d, 0x18
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0xefcde99d626e3d71
lea rcx, [rsp + 0x3b0]
call fcn.1800f1b10
mov r9d, 0x1c
movabs r8, 0x889f8b4975721ba3
movabs rdx, 0x475983f77bbe9181
lea rcx, [rsp + 0x3d0]
call fcn.1800f1b10
lea rax, [rsp + 0x3f0]
mov r8, rax
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0xc0]
call fcn.1800f4460
lea rcx, [rsp + 0x70]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x70]
movabs rcx, 0xbda1aabb6a52704
call fcn.1800f0b40
mov rcx, qword [rsp + 0x430]
call fcn.1800f0df0
movzx eax, al
test eax, eax
jne 0x1800f0934
xor al, al
jmp 0x1800f093b
call fcn.1800f0960
mov al, 1
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.180258fa0
add rsp, 0x418
pop rdi
pop rsi
ret