Function at 0x401849
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rdi
push rbx
mov eax, 0x49e0
call fcn.004042b0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.00402ee0
lea rdx, [rbp + 0x4860]
mov eax, 0
mov ecx, 6
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x4830]
mov eax, 0
mov ecx, 6
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x4800]
mov eax, 0
mov ecx, 6
mov rdi, rdx
rep stosq qword [rdi], rax
mov word [rbp + 0x47e0], 0x6c
mov word [rbp + 0x47e2], 0x6c
mov word [rbp + 0x47e4], 0x64
mov word [rbp + 0x47e6], 0x2e
mov word [rbp + 0x47e8], 0x33
mov word [rbp + 0x47ea], 0x32
mov word [rbp + 0x47ec], 0x65
mov word [rbp + 0x47ee], 0x73
mov word [rbp + 0x47f0], 0x55
mov word [rbp + 0x47f2], 0
mov word [rbp + 0x47c0], 0x6c
mov word [rbp + 0x47c2], 0x6c
mov word [rbp + 0x47c4], 0x64
mov word [rbp + 0x47c6], 0x2e
mov word [rbp + 0x47c8], 0x32
mov word [rbp + 0x47ca], 0x33
mov word [rbp + 0x47cc], 0x6c
mov word [rbp + 0x47ce], 0x65
mov word [rbp + 0x47d0], 0x6e
mov word [rbp + 0x47d2], 0x72
mov word [rbp + 0x47d4], 0x65
mov word [rbp + 0x47d6], 0x4b
mov word [rbp + 0x47d8], 0
mov word [rbp + 0x47a0], 0x6c
mov word [rbp + 0x47a2], 0x6c
mov word [rbp + 0x47a4], 0x64
mov word [rbp + 0x47a6], 0x2e
mov word [rbp + 0x47a8], 0x6c
mov word [rbp + 0x47aa], 0x6c
mov word [rbp + 0x47ac], 0x64
mov word [rbp + 0x47ae], 0x74
mov word [rbp + 0x47b0], 0x6e
mov word [rbp + 0x47b2], 0
lea rax, [rbp + 0x47e0]
mov rcx, rax
call fcn.0040172d
lea rax, [rbp + 0x47c0]
mov rcx, rax
call fcn.0040172d
lea rax, [rbp + 0x47a0]
mov rcx, rax
call fcn.0040172d
mov byte [rbp + 0x4795], 0x6c
mov byte [rbp + 0x4796], 0x6c
mov byte [rbp + 0x4797], 0x44
mov byte [rbp + 0x4798], 0x64
mov byte [rbp + 0x4799], 0x61
mov byte [rbp + 0x479a], 0x6f
mov byte [rbp + 0x479b], 0x4c
mov byte [rbp + 0x479c], 0x72
mov byte [rbp + 0x479d], 0x64
mov byte [rbp + 0x479e], 0x4c
mov byte [rbp + 0x479f], 0
mov byte [rbp + 0x478b], 0x6c
mov byte [rbp + 0x478c], 0x6c
mov byte [rbp + 0x478d], 0x64
mov byte [rbp + 0x478e], 0x2e
mov byte [rbp + 0x478f], 0x6c
mov byte [rbp + 0x4790], 0x6c
mov byte [rbp + 0x4791], 0x64
mov byte [rbp + 0x4792], 0x74
mov byte [rbp + 0x4793], 0x6e
mov byte [rbp + 0x4794], 0
mov byte [rbp + 0x477e], 0x6c
mov byte [rbp + 0x477f], 0x6c
mov byte [rbp + 0x4780], 0x64
mov byte [rbp + 0x4781], 0x2e
mov byte [rbp + 0x4782], 0x32
mov byte [rbp + 0x4783], 0x33
mov byte [rbp + 0x4784], 0x6c
mov byte [rbp + 0x4785], 0x65
mov byte [rbp + 0x4786], 0x6e
mov byte [rbp + 0x4787], 0x72
mov byte [rbp + 0x4788], 0x65
mov byte [rbp + 0x4789], 0x4b
mov byte [rbp + 0x478a], 0
lea rax, [rbp + 0x4795]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x478b]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x477e]
mov rcx, rax
call fcn.004016b0
lea rdx, [rbp + 0x47e0]
lea rax, [rbp + 0x48b0]
mov rcx, rax
call fcn.004015e6
lea rdx, [rbp + 0x47c0]
lea rax, [rbp + 0x48a0]
mov rcx, rax
call fcn.004015e6
lea rdx, [rbp + 0x47a0]
lea rax, [rbp + 0x4890]
mov rcx, rax
call fcn.004015e6
mov dword [rbp + 0x4860], 0x30
mov qword [rbp + 0x4868], 0
mov dword [rbp + 0x4878], 0x40
lea rax, [rbp + 0x48b0]
mov qword [rbp + 0x4870], rax
mov qword [rbp + 0x4880], 0
mov qword [rbp + 0x4888], 0
mov dword [rbp + 0x4830], 0x30
mov qword [rbp + 0x4838], 0
mov dword [rbp + 0x4848], 0x40
lea rax, [rbp + 0x48a0]
mov qword [rbp + 0x4840], rax
mov qword [rbp + 0x4850], 0
mov qword [rbp + 0x4858], 0
mov dword [rbp + 0x4800], 0x30
mov qword [rbp + 0x4808], 0
mov dword [rbp + 0x4818], 0x40
lea rax, [rbp + 0x4890]
mov qword [rbp + 0x4810], rax
mov qword [rbp + 0x4820], 0
mov qword [rbp + 0x4828], 0
mov byte [rbp + 0x4760], 0x41
mov byte [rbp + 0x4761], 0x65
mov byte [rbp + 0x4762], 0x6c
mov byte [rbp + 0x4763], 0x64
mov byte [rbp + 0x4764], 0x6e
mov byte [rbp + 0x4765], 0x61
mov byte [rbp + 0x4766], 0x48
mov byte [rbp + 0x4767], 0x65
mov byte [rbp + 0x4768], 0x6c
mov byte [rbp + 0x4769], 0x75
mov byte [rbp + 0x476a], 0x64
mov byte [rbp + 0x476b], 0x6f
mov byte [rbp + 0x476c], 0x4d
mov byte [rbp + 0x476d], 0x74
mov byte [rbp + 0x476e], 0x65
mov byte [rbp + 0x476f], 0x47
mov byte [rbp + 0x4770], 0
lea rax, [rbp + 0x4760]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x477e]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x4760]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x4950], rax
mov byte [rbp + 0x4751], 0x73
mov byte [rbp + 0x4752], 0x73
mov byte [rbp + 0x4753], 0x65
mov byte [rbp + 0x4754], 0x72
mov byte [rbp + 0x4755], 0x64
mov byte [rbp + 0x4756], 0x64
mov byte [rbp + 0x4757], 0x41
mov byte [rbp + 0x4758], 0x63
mov byte [rbp + 0x4759], 0x6f
mov byte [rbp + 0x475a], 0x72
mov byte [rbp + 0x475b], 0x50
mov byte [rbp + 0x475c], 0x74
mov byte [rbp + 0x475d], 0x65
mov byte [rbp + 0x475e], 0x47
mov byte [rbp + 0x475f], 0
lea rax, [rbp + 0x4751]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x477e]
mov rdx, qword [rbp + 0x4950]
mov rcx, rax
call rdx
mov rcx, rax
lea rax, [rbp + 0x4751]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x4948], rax
mov byte [rbp + 0x4744], 0x63
mov byte [rbp + 0x4745], 0x6f
mov byte [rbp + 0x4746], 0x6c
mov byte [rbp + 0x4747], 0x6c
mov byte [rbp + 0x4748], 0x41
mov byte [rbp + 0x4749], 0x6c
mov byte [rbp + 0x474a], 0x61
mov byte [rbp + 0x474b], 0x75
mov byte [rbp + 0x474c], 0x74
mov byte [rbp + 0x474d], 0x72
mov byte [rbp + 0x474e], 0x69
mov byte [rbp + 0x474f], 0x56
mov byte [rbp + 0x4750], 0
lea rax, [rbp + 0x4744]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x477e]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x4744]
mov r8, qword [rbp + 0x4948]
mov rdx, rax
call r8
mov qword [rbp + 0x4940], rax
mov byte [rbp + 0x4735], 0x74
mov byte [rbp + 0x4736], 0x63
mov byte [rbp + 0x4737], 0x65
mov byte [rbp + 0x4738], 0x74
mov byte [rbp + 0x4739], 0x6f
mov byte [rbp + 0x473a], 0x72
mov byte [rbp + 0x473b], 0x50
mov byte [rbp + 0x473c], 0x6c
mov byte [rbp + 0x473d], 0x61
mov byte [rbp + 0x473e], 0x75
mov byte [rbp + 0x473f], 0x74
mov byte [rbp + 0x4740], 0x72
mov byte [rbp + 0x4741], 0x69
mov byte [rbp + 0x4742], 0x56
mov byte [rbp + 0x4743], 0
lea rax, [rbp + 0x4735]
mov rcx, rax
call fcn.004016b0
lea rax, [rbp + 0x477e]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x4735]
mov r8, qword [rbp + 0x4948]
mov rdx, rax
call r8
mov qword [rbp + 0x4938], rax
lea rax, [rbp + 0x478b]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x4795]
mov r8, qword [rbp + 0x4948]
mov rdx, rax
call r8
mov qword [rbp + 0x4930], rax
mov byte [rbp + 0x4733], 0x49
mov byte [rbp + 0x4734], 0xbb
mov byte [rbp + 0x472b], 0xde
mov byte [rbp + 0x472c], 0xad
mov byte [rbp + 0x472d], 0xbe
mov byte [rbp + 0x472e], 0xef
mov byte [rbp + 0x472f], 0xde
mov byte [rbp + 0x4730], 0xad
mov byte [rbp + 0x4731], 0xbe
mov byte [rbp + 0x4732], 0xef
mov byte [rbp + 0x4727], 0x41
mov byte [rbp + 0x4728], 0xff
mov byte [rbp + 0x4729], 0xe3
mov byte [rbp + 0x472a], 0xc3
mov rax, qword [rbp + 0x4930]
add rax, 5
mov qword [rbp + 0x4928], rax
lea rax, [rbp + 0x472b]
mov rdx, qword [rbp + 0x4928]
mov qword [rax], rdx
mov rax, qword [rbp + 0x4940]
mov r9d, 4
mov r8d, 0x3000
mov edx, 0x13
mov ecx, 0
call rax
mov qword [rbp + 0x4920], rax
mov rax, qword [rbp + 0x4920]
mov r8d, 5
lea rdx, section..rdata
mov rcx, rax
call fcn.00401550
mov rax, qword [rbp + 0x4920]
lea rcx, [rax + 5]
lea rax, [rbp + 0x4733]
mov r8d, 2
mov rdx, rax
call fcn.00401550
mov rax, qword [rbp + 0x4920]
lea rcx, [rax + 7]
lea rax, [rbp + 0x472b]
mov r8d, 8
mov rdx, rax
call fcn.00401550
mov rax, qword [rbp + 0x4920]
lea rcx, [rax + 0xf]
lea rax, [rbp + 0x4727]
mov r8d, 4
mov rdx, rax
call fcn.00401550
mov dword [rbp + 0x4720], 0
lea rdx, [rbp + 0x4720]
mov rcx, qword [rbp + 0x4920]
mov rax, qword [rbp + 0x4938]
mov r9, rdx
mov r8d, 0x20
mov edx, 0x1e
call rax
mov rax, qword [rbp + 0x4920]
mov qword [rbp + 0x4918], rax
mov qword [rbp + 0x4718], 0
lea rcx, [rbp + 0x4718]
lea rdx, [rbp + 0x48b0]
mov rax, qword [rbp + 0x4918]
mov r9, rcx
mov r8, rdx
mov edx, 0
mov ecx, 0
call rax
mov qword [rbp + 0x4710], 0
lea rcx, [rbp + 0x4710]
lea rdx, [rbp + 0x48a0]
mov rax, qword [rbp + 0x4918]
mov r9, rcx
mov r8, rdx
mov edx, 0
mov ecx, 0
call rax
mov qword [rbp + 0x4708], 0
lea rcx, [rbp + 0x4708]
lea rdx, [rbp + 0x4890]
mov rax, qword [rbp + 0x4918]
mov r9, rcx
mov r8, rdx
mov edx, 0
mov ecx, 0
call rax
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp + 0x4751]
mov r8, qword [rbp + 0x4948]
mov rdx, rax
call r8
mov qword [rbp + 0x4910], rax
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp + 0x4744]
mov r8, qword [rbp + 0x4910]
mov rdx, rax
call r8
mov qword [rbp + 0x4908], rax
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp + 0x4735]
mov r8, qword [rbp + 0x4910]
mov rdx, rax
call r8
mov qword [rbp + 0x4900], rax
mov byte [rbp + 0x46f0], 0x79
mov byte [rbp + 0x46f1], 0x72
mov byte [rbp + 0x46f2], 0x6f
mov byte [rbp + 0x46f3], 0x6d
mov byte [rbp + 0x46f4], 0x65
mov byte [rbp + 0x46f5], 0x4d
mov byte [rbp + 0x46f6], 0x73
mov byte [rbp + 0x46f7], 0x73
mov byte [rbp + 0x46f8], 0x65
mov byte [rbp + 0x46f9], 0x63
mov byte [rbp + 0x46fa], 0x6f
mov byte [rbp + 0x46fb], 0x72
mov byte [rbp + 0x46fc], 0x50
mov byte [rbp + 0x46fd], 0x65
mov byte [rbp + 0x46fe], 0x74
mov byte [rbp + 0x46ff], 0x69
mov byte [rbp + 0x4700], 0x72
mov byte [rbp + 0x4701], 0x57
mov byte [rbp + 0x4702], 0
lea rax, [rbp + 0x46f0]
mov rcx, rax
call fcn.004016b0
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp + 0x46f0]
mov r8, qword [rbp + 0x4910]
mov rdx, rax
call r8
mov qword [rbp + 0x48f8], rax
mov byte [rbp + 0x46d0], 0x73
mov byte [rbp + 0x46d1], 0x73
mov byte [rbp + 0x46d2], 0x65
mov byte [rbp + 0x46d3], 0x63
mov byte [rbp + 0x46d4], 0x6f
mov byte [rbp + 0x46d5], 0x72
mov byte [rbp + 0x46d6], 0x50
mov byte [rbp + 0x46d7], 0x74
mov byte [rbp + 0x46d8], 0x6e
mov byte [rbp + 0x46d9], 0x65
mov byte [rbp + 0x46da], 0x72
mov byte [rbp + 0x46db], 0x72
mov byte [rbp + 0x46dc], 0x75
mov byte [rbp + 0x46dd], 0x43
mov byte [rbp + 0x46de], 0x74
mov byte [rbp + 0x46df], 0x65
mov byte [rbp + 0x46e0], 0x47
mov byte [rbp + 0x46e1], 0
lea rax, [rbp + 0x46d0]
mov rcx, rax
call fcn.004016b0
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp + 0x46d0]
mov r8, qword [rbp + 0x4910]
mov rdx, rax
call r8
mov qword [rbp + 0x48f0], rax
lea rax, [rbp + 0x3ed0]
lea rdx, str.healers
mov ecx, 0x800
mov r8, rcx
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rax, [rbp + 0x1f60]
lea rdx, str.myologies
mov ecx, 0x1f70
mov r8, rcx
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rbp + 0x495c], 0
jmp 0x402368
mov dword [rbp + 0x4958], 0
jmp 0x402355
mov eax, dword [rbp + 0x4958]
cdqe
mov rdx, qword [rbp + rax*8 + 0x3ed0]
mov eax, dword [rbp + 0x495c]
cdqe
mov rax, qword [rbp + rax*8 + 0x1f60]
cmp rdx, rax
jne 0x40234e
mov eax, dword [rbp + 0x4958]
mov edx, eax
mov eax, dword [rbp + 0x495c]
cdqe
mov byte [rbp + rax - 0x10], dl
jmp 0x402361
add dword [rbp + 0x4958], 1
cmp dword [rbp + 0x4958], 0xff
jle 0x402313
add dword [rbp + 0x495c], 1
mov eax, dword [rbp + 0x495c]
cmp eax, 0x1f6f
jbe 0x402307
mov dword [rbp + 0x48ec], 0x3ee
movabs rax, 0x4658565556524f67
mov qword [rbp - 0x30], rax
movabs rax, 0x6e6f6a74484c516b
mov qword [rbp - 0x28], rax
mov byte [rbp - 0x20], 0
mov dword [rbp + 0x48e8], 0x11
mov r8d, dword [rbp + 0x48e8]
mov edx, dword [rbp + 0x48ec]
lea rcx, [rbp - 0x30]
lea rax, [rbp - 0x10]
mov r9, r8
mov r8, rcx
mov rcx, rax
call fcn.004017bc
mov eax, dword [rbp + 0x48ec]
mov qword [rbp + 0x48e0], rax
mov qword [rbp + 0x48d8], 0
mov byte [rbp - 0x3d], 0x43
mov byte [rbp - 0x3c], 0x50
mov byte [rbp - 0x3b], 0x41
mov byte [rbp - 0x3a], 0x72
mov byte [rbp - 0x39], 0x65
mov byte [rbp - 0x38], 0x73
mov byte [rbp - 0x37], 0x55
mov byte [rbp - 0x36], 0x65
mov byte [rbp - 0x35], 0x75
mov byte [rbp - 0x34], 0x65
mov byte [rbp - 0x33], 0x75
mov byte [rbp - 0x32], 0x51
mov byte [rbp - 0x31], 0
lea rax, [rbp - 0x3d]
mov rcx, rax
call fcn.004016b0
mov rcx, qword [rbp + 0x4710]
lea rax, [rbp - 0x3d]
mov r8, qword [rbp + 0x4910]
mov rdx, rax
call r8
mov qword [rbp + 0x48d0], rax
mov byte [rbp - 0x49], 0x74
mov byte [rbp - 0x48], 0x72
mov byte [rbp - 0x47], 0x65
mov byte [rbp - 0x46], 0x6c
mov byte [rbp - 0x45], 0x41
mov byte [rbp - 0x44], 0x74
mov byte [rbp - 0x43], 0x73
mov byte [rbp - 0x42], 0x65
mov byte [rbp - 0x41], 0x54
mov byte [rbp - 0x40], 0x74
mov byte [rbp - 0x3f], 0x4e
mov byte [rbp - 0x3e], 0
lea rax, [rbp - 0x49]
mov rcx, rax
call fcn.004016b0
mov rcx, qword [rbp + 0x4708]
lea rax, [rbp - 0x49]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x48c8], rax
mov rdx, qword [rbp + 0x48e0]
mov rax, qword [rbp + 0x4908]
mov r9d, 4
mov r8d, 0x3000
mov ecx, 0
call rax
mov qword [rbp + 0x48d8], rax
movabs rcx, 0xde0b6b3a7640859
call fcn.00401654
lea r8, [rbp - 0x50]
mov rdx, qword [rbp + 0x48e0]
mov rcx, qword [rbp + 0x48d8]
mov rax, qword [rbp + 0x4900]
mov r9, r8
mov r8d, 0x20
call rax
movabs rcx, 0xde0b6b3a7640801
call fcn.00401654
lea r8, [rbp - 0x50]
mov rdx, qword [rbp + 0x48e0]
mov rcx, qword [rbp + 0x48d8]
mov rax, qword [rbp + 0x4900]
mov r9, r8
mov r8d, 0x40
call rax
movabs rcx, 0xde0b6b3a76409b1
call fcn.00401654
mov ebx, dword [rbp + 0x48ec]
mov rax, qword [rbp + 0x48f0]
call rax
mov r10, rax
lea rcx, [rbp - 0x10]
mov rdx, qword [rbp + 0x48d8]
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x48f8]
mov r9, rbx
mov r8, rcx
mov rcx, r10
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rdx, rax
mov rcx, qword [rbp + 0x48d8]
mov rax, qword [rbp + 0x48d0]
mov r8d, 0
call rax
mov rax, qword [rbp + 0x48c8]
call rax
mov eax, 0
add rsp, 0x49e0
pop rbx
pop rdi
pop rbp
ret