Function at 0x1800325d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov rax, qword [0x180041118]
xor rax, rsp
mov qword [rbp + 0x17], rax
imul eax, edx, 0x348
mov rsi, r8
mov qword [rbp - 0x61], r8
mov rbx, rcx
mov dword [rbp - 0x69], edx
mov edi, edx
mov qword [rbp - 0x71], rcx
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x48], eax
cmp edx, eax
ja 0x1800326d0
movzx r14d, byte [rsp + 0x30]
mov r13d, 0x321d
nop
cmp edi, 0x6691
ja 0x1800326b4
je 0x180032664
mov eax, edi
sub eax, 0x59
je 0x180032c16
sub eax, 0x35
je 0x180032bd7
cmp eax, 0x4b
jne 0x180032bba
mov dword [rsp + 0x40], 5
jmp 0x180032bba
dec dword [rbx]
add rsi, 8
mov ecx, dword [rbx]
mov byte [rsp + 0x30], 0
mov qword [rbp - 0x61], rsi
test ecx, ecx
jle 0x180032bba
mov rax, qword [rsi]
cmp byte [rax], 0x2d
jne 0x180032bba
cmp byte [rax + 1], 0x72
jne 0x180032bba
cmp byte [rax + 2], 0
jne 0x180032bba
add rsi, 8
mov byte [rsp + 0x30], 1
lea eax, [rcx - 1]
mov qword [rbp - 0x61], rsi
mov dword [rbx], eax
jmp 0x180032bba
cmp edi, 0xcc49
je 0x180032707
cmp edi, 0x13201
je 0x1800326fb
cmp edi, 0x197b9
jne 0x180032bba
mov rax, qword [rbp - 0x59]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800387b0
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp - 0x59], 0
jmp 0x180032bba
cmp dword [rbx], 0
jle 0x18003271e
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov r15d, eax
mov dword [rsp + 0x40], eax
jmp 0x180032723
mov r15d, dword [rsp + 0x40]
cmp byte [rsp + 0x30], 0
je 0x1800327d3
mov r8d, 0x72
mov qword [rsp + 0x38], 0x10
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x38]
call fcn.18001f380
mov rdi, qword [rbp - 0x49]
xor r12d, r12d
mov rsi, qword [rbp - 0x51]
mov ebx, 0x6a
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x66
je 0x1800327ac
sub eax, 2
je 0x18003279c
sub eax, 1
je 0x18003277c
cmp eax, 1
jne 0x1800327c6
mov qword [rbp - 0x41], r12
jmp 0x1800327c6
lea rax, [rdi + rdi]
mov ecx, 0xf7
or rax, 1
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x39], rax
call fcn.180024910
add qword [rbp - 0x41], rsi
jmp 0x1800327c6
lea rdx, [rbp - 0x41]
mov ecx, 0xf7
call fcn.180024910
jmp 0x1800327c6
movzx ecx, word [rbp - 0x41]
movzx eax, r13w
imul ecx, eax
lea rax, [rbp - 0x41]
or ax, 1
add cx, ax
mov word [rbp - 0x41], cx
dec ebx
cmp ebx, 0x66
ja 0x180032760
mov edi, dword [rsp + 0x44]
jmp 0x180032846
mov ebx, 0x6a
mov eax, ebx
sub eax, 0x66
je 0x180032825
sub eax, 2
je 0x180032815
sub eax, 1
je 0x1800327f8
cmp eax, 1
jne 0x18003283f
mov qword [rbp - 0x41], 0
jmp 0x18003283f
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x39], 0x6d
mov ecx, 0xf7
call fcn.180024910
add qword [rbp - 0x41], 0x2a
jmp 0x18003283f
lea rdx, [rbp - 0x41]
mov ecx, 0xf7
call fcn.180024910
jmp 0x18003283f
movzx ecx, word [rbp - 0x41]
movzx eax, r13w
imul ecx, eax
lea rax, [rbp - 0x41]
or ax, 1
add cx, ax
mov word [rbp - 0x41], cx
dec ebx
cmp ebx, 0x66
ja 0x1800327d8
mov edx, 0x10
lea rcx, str.PslQSort_struct_PsFieldTypeRelation_struct_CPsLookupRelationMetadataImpl_class_CPsLookupFieldTypeMetadata_long_long_struct_PsFieldTypeRelation_struct_PsCacheFieldRecord_::CPsFullRelationCompare_
call fcn.180038160
mov r13d, 1
mov dword [rbp - 0x79], r13d
cmp r15d, r13d
jl 0x180032bb0
nop word [rax + rax]
xor r15d, r15d
lea r12d, [r15 + 8]
nop word [rax + rax]
cmp r15d, 7
ja case.default.0x18003289c
lea rdx, [0x180000000]
mov ecx, dword [rdx + r15*4 + 0x32c40]
add rcx, rdx
jmp rcx
lea rcx, [0x18003aa68]
call fcn.180038160
lea rcx, str.__Rolls:
jmp 0x180032b88
mov ebx, 0x21
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x38], 6
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], 0
mov edx, 0x91
lea rcx, [rbp - 0x41]
call fcn.18002ff40
lea rcx, [0x18003aa6c]
lea edx, [rax + 1]
call fcn.180038160
sub rbx, 1
jne 0x1800328c0
lea rcx, [0x18003aa68]
call fcn.180038160
xor eax, eax
lea rcx, [rbp - 0x21]
nop
mov byte [rcx], al
lea rcx, [rcx + 1]
inc eax
cmp eax, 0x34
jl 0x180032910
mov esi, 0x34
lea rdi, [rbp + 0x12]
nop word [rax + rax]
mov ebx, 0x6e
mov eax, ebx
sub eax, 0x6e
je 0x180032946
cmp eax, 1
jne 0x180032979
mov byte [rdi], r14b
jmp 0x180032979
xor r9d, r9d
mov dword [rsp + 0x38], esi
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], 0
mov edx, 0x91
lea rcx, [rbp - 0x41]
call fcn.18002ff40
movsxd rcx, eax
movzx eax, byte [rdi]
movzx r14d, byte [rbp + rcx - 0x21]
mov byte [rbp + rcx - 0x21], al
inc ebx
cmp ebx, 0x70
jb 0x180032935
dec esi
dec rdi
cmp esi, 1
jg 0x180032930
jmp case.default.0x18003289c
lea rcx, [0x18003aa68]
call fcn.180038160
lea rcx, str.__Again:
call fcn.180038160
lea r8, [rbp - 0x41]
mov qword [rsp + 0x38], 0xfffffffffffffffa
mov edx, 0x49
lea rcx, [rsp + 0x38]
call fcn.1800337d0
jmp case.default.0x18003289c
mov edx, r13d
lea rcx, str.Extraction
call fcn.180038160
lea rcx, str.__32bit:
call fcn.180038160
mov ebx, 6
nop dword [rax + rax]
xor edx, edx
lea rcx, [rbp - 0x41]
mov r8d, 0x101
call fcn.180028f10
mov edx, eax
lea rcx, str._0x_08x
call fcn.180038160
sub rbx, 1
jne 0x1800329f0
jmp case.default.0x18003289c
lea rcx, str.__Cards:
call fcn.180038160
mov dword [rbp - 0x29], 0x514a5439
mov eax, dword [rbp - 0x29]
mov dword [rbp - 0x31], 0x34333241
mov dword [rbp - 0x2d], 0x38373635
movsd xmm0, qword [rbp - 0x31]
mov dword [0x180041370], eax
mov dword [rsp + 0x34], 0x73646368
mov eax, dword [rsp + 0x34]
mov dword [0x180041378], eax
movsd qword [0x180041368], xmm0
mov byte [0x180041374], 0x4b
jmp case.default.0x18003289c
mov ebx, 6
xor edx, edx
lea rcx, [rbp - 0x41]
mov r8d, 0x101
call fcn.180028f10
mov edx, eax
lea rcx, str._0x_08x
call fcn.180038160
sub rbx, 1
jne 0x180032a74
lea rcx, [0x18003aa68]
call fcn.180038160
lea rcx, str.__Coins:
call fcn.180038160
mov ebx, 0x41
lea r13d, [rbx + 7]
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x38], 2
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], 0
mov edx, 0x91
lea rcx, [rbp - 0x41]
call fcn.18002ff40
test eax, eax
lea rcx, [0x18003aa7c]
mov edx, 0x54
cmovne edx, r13d
call fcn.180038160
sub rbx, 1
jne 0x180032ac0
mov r13d, dword [rbp - 0x79]
jmp case.default.0x18003289c
xor ebx, ebx
lea edi, [rbx + 1]
movsx ecx, byte [rbp + rbx - 0x21]
mov eax, ecx
and eax, 3
test ecx, ecx
jns 0x180032b26
add ecx, 3
sub eax, 4
cdqe
sar ecx, 2
movsx r8d, byte [rax + rdx + 0x41378]
movsxd rax, ecx
lea rcx, str.__c_c
movsx edx, byte [rax + rdx + 0x41368]
call fcn.180038160
mov eax, 0x2e8ba2e9
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul ecx, edx, 0x16
cmp edi, ecx
jne 0x180032b6f
lea rcx, [0x18003aa64]
call fcn.180038160
inc edi
lea rdx, [0x180000000]
inc rbx
cmp rbx, 0x34
jl 0x180032b12
lea rcx, [0x18003aa68]
call fcn.180038160
inc r15d
sub r12, 1
jne 0x180032880
inc r13d
mov dword [rbp - 0x79], r13d
cmp r13d, dword [rsp + 0x40]
jle 0x180032870
mov edi, dword [rsp + 0x44]
mov rbx, qword [rbp - 0x71]
mov r13d, 0x321d
imul eax, dword [rbp - 0x69], 0x78
add edi, eax
mov dword [rsp + 0x44], edi
cmp edi, dword [rsp + 0x48]
ja 0x1800326d0
mov rsi, qword [rbp - 0x61]
jmp 0x180032630
xor r8d, r8d
mov r9, rbx
xor ecx, ecx
lea edx, [r8 + 0x74]
call fcn.180024e90
test al, al
jne 0x1800326d0
imul ecx, dword [rsi], 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
mov r9, rbx
xor ecx, ecx
lea edx, [r8 + 0x74]
call fcn.180024e90
test al, al
je 0x180032bf0
jmp 0x1800326d0
mov rax, qword [rbx]
lea r8, [rbp - 0x71]
mov edx, 0x98
mov qword [rbp - 0x71], rax
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x48], 0
call fcn.180033610
jmp 0x1800326d4