Function at 0x1800ba0d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x18]
sub rsp, 0x118
mov rax, qword [0x1804762b8]
xor rax, rsp
mov qword [rbp + 8], rax
mov r13d, dword [rbp + 0x80]
mov r14, rdx
mov r12, qword [rbp + 0x88]
mov r10, r9
mov qword [rbp - 0x78], rdx
mov r15, r8
xor edx, edx
mov qword [rsp + 0x70], r9
lea esi, [r13 + 0xa]
mov qword [rbp - 0x70], r8
mov qword [rsp + 0x78], rcx
mov r11, rcx
mov qword [rbp - 0x68], r12
mov edi, r13d
mov dword [rsp + 0x60], r13d
lea r9, [0x180000000]
cmp r13d, esi
jae 0x1800ba46a
movzx eax, byte [rsp + 0x30]
mov ecx, dword [rsp + 0x60]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x34], ecx
nop word [rax + rax]
lea eax, [rdi - 0xda]
cmp eax, 0x2d
ja case.0x1800ba183.228
movzx eax, byte [r9 + rax + 0xbab9c]
mov ecx, dword [r9 + rax*4 + 0xbab70]
add rcx, r9
jmp rcx
mov rax, qword [0x18047a728]
cmp qword [0x18047a720], rax
jne case.0x1800ba183.228
lea r9, [0x18047a720]
xor r8d, r8d
xor edx, edx
mov ecx, 0x108
call fcn.1800136d0
jmp 0x1800ba439
cmp dword [r10], 0
jle case.0x1800ba183.228
mov rax, qword [r14]
cmp byte [rax], 0x2d
jne case.0x1800ba183.228
cmp byte [rax + 1], 0x72
jne case.0x1800ba183.228
cmp byte [rax + 2], 0
jne case.0x1800ba183.228
mov eax, 0x4b
cmp eax, 0x4b
je 0x1800ba1f8
cmp eax, 0x3345
jne 0x1800ba1fd
add r14, 8
dec dword [r10]
jmp 0x1800ba1fd
mov byte [rsp + 0x30], 1
add eax, 0x32fa
cmp eax, 0x65f4
jbe 0x1800ba1e3
mov qword [rbp - 0x78], r14
jmp case.0x1800ba183.228
add r14, 8
dec dword [r10]
mov qword [rbp - 0x78], r14
jmp case.0x1800ba183.228
mov eax, dword [r14]
cmp eax, 0xfffffffc
je 0x1800ba307
cmp eax, 0xf
je 0x1800ba2bc
cmp eax, 0x1a
je case.0x1800ba183.222
cmp eax, 0x21
je 0x1800ba24f
cmp eax, 0x22
je 0x1800ba280
jmp 0x1800ba344
mov ecx, 0xce
mov eax, ecx
sub eax, 0xce
je 0x1800ba268
cmp eax, 1
je case.0x1800ba4c4.221
jmp 0x1800ba276
mov rax, qword [0x1804765d0]
mov qword [r10], rax
mov dword [rsp + 0x50], edx
inc ecx
cmp ecx, 0xd0
jb 0x1800ba254
mov ecx, 0xcd
mov eax, ecx
sub eax, 0xcd
je 0x1800ba2a4
sub eax, 1
je 0x1800ba29e
cmp eax, 1
je case.0x1800ba4c4.221
jmp 0x1800ba2b2
mov dword [rsp + 0x50], edx
jmp 0x1800ba2b2
mov eax, dword [r10 + 0x10]
test eax, eax
je case.0x1800ba183.222
dec eax
mov dword [r10 + 0x10], eax
inc ecx
cmp ecx, 0xd0
jb 0x1800ba285
mov eax, 0xbe
cmp eax, 0xbe
je 0x1800ba461
add eax, 0x97
cmp eax, 0x155
jb 0x1800ba2c1
mov eax, dword [r14]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rdx
mov r9d, 0x5a
xor edx, edx
mov dword [rsp + 0x40], eax
mov rcx, r10
mov edi, 0xe6
call fcn.180030580
mov dword [rsp + 0x50], eax
jmp 0x1800ba439
mov eax, 0xc0
nop dword [rax]
cmp eax, 0xc0
je 0x1800ba331
cmp eax, 0x8a00
je 0x1800ba32b
cmp eax, 0x11340
je case.0x1800ba4c4.221
jmp 0x1800ba338
mov dword [rsp + 0x50], edx
jmp 0x1800ba338
cmp dword [r10 + 0x10], 0
jne case.0x1800ba183.222
add eax, 0x8940
cmp eax, 0x19bc0
jbe 0x1800ba310
mov ebx, 0xb7
nop dword [rax]
mov eax, ebx
sub eax, 0xb7
je 0x1800ba364
cmp eax, 1
je case.0x1800ba4c4.221
jmp 0x1800ba399
mov eax, dword [r14]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x28], 0xae
mov r9, r15
mov rdx, r11
mov dword [rsp + 0x40], eax
mov rcx, r12
mov qword [rsp + 0x20], r10
call fcn.1800912a0
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x78]
mov dword [rsp + 0x50], eax
inc ebx
cmp ebx, 0xb9
jb 0x1800ba350
jmp 0x1800ba439
mov dword [rsp + 0x50], edx
jmp case.0x1800ba183.228
xor edx, edx
mov qword [rsp + 0x20], r10
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x59]
call fcn.18004f870
jmp 0x1800ba435
mov r8d, 5
xor dl, dl
mov dword [rsp + 0x34], r8d
mov byte [rsp + 0x30], dl
jmp 0x1800ba44a
movzx eax, byte [r10]
mov ecx, eax
cmp al, 0x7f
jbe 0x1800ba3ed
mov ecx, dword [r9 + rax*4 + 0x10ca10]
mov dword [r14 + 0xc], ecx
jmp case.0x1800ba183.228
mov qword [rsp + 0x28], rdx
lea rbx, [r10 + 0x60]
mov r8, rbx
mov dword [rsp + 0x20], 0x26
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call fcn.180070aa0
xor eax, eax
lea r9, [0x18047a720]
mov qword [rsp + 0x28], rax
mov r8, rbx
mov edx, 0xc0
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.1800dfb20
mov byte [rsp + 0x50], al
lea r9, [0x180000000]
mov r8d, dword [rsp + 0x34]
movzx edx, byte [rsp + 0x30]
mov r10, qword [rsp + 0x70]
inc edi
mov r11, qword [rsp + 0x78]
cmp edi, esi
jae 0x1800ba47d
xor edx, edx
jmp 0x1800ba160
mov dword [rsp + 0x50], edx
jmp case.0x1800ba4c4.221
movzx edx, byte [rsp + 0x30]
mov r8d, dword [rsp + 0x60]
mov byte [rsp + 0x30], dl
mov dword [rsp + 0x34], r8d
lea ebx, [r13 + 0xb]
mov dword [rsp + 0x40], ebx
cmp r13d, ebx
jae case.0x1800ba4c4.221
mov esi, 0x48
movabs rdi, 0x100003600
nop dword [rax]
lea eax, [r13 - 0xda]
cmp eax, 0x39
ja case.0x1800ba4c4.224
movzx eax, byte [r9 + rax + 0xbabe8]
mov ecx, dword [r9 + rax*4 + 0xbabcc]
add rcx, r9
jmp rcx
mov r12d, 1
mov dword [rsp + 0x68], r12d
cmp r8d, r12d
jl 0x1800ba884
mov r13d, dword [rbp - 0x80]
xor edi, edi
mov r14d, edi
mov r15d, GetAcceptLanguagesW
nop dword [rax]
cmp r14d, 0xd
ja case.default.0x1800ba508
mov eax, r14d
mov ecx, dword [r9 + rax*4 + 0xbac24]
add rcx, r9
jmp rcx
mov ebx, 0x41
nop
lea r9, [rbp - 0x50]
mov dword [rsp + 0x48], 2
mov r8d, 0x30
lea rdx, [rsp + 0x48]
xor ecx, ecx
call fcn.1800b7b90
test eax, eax
lea rcx, [0x18046a2a4]
mov edx, 0x54
cmovne edx, esi
call fcn.1800e8a20
sub rbx, 1
jne 0x1800ba510
jmp case.0x1800ba508.12
lea rcx, str.__Again:
jmp 0x1800ba833
mov esi, edi
nop dword [rax]
mov ebx, 0x114
cmp ebx, 0x114
je 0x1800ba59e
cmp ebx, 0x5754
jne 0x1800ba5df
lea ecx, [rsi + 1]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x16
cmp ecx, eax
jne 0x1800ba5df
lea rcx, [0x18046a2a8]
call fcn.1800e8a20
jmp 0x1800ba5d8
movsx ecx, byte [rbp + rdi - 0x30]
mov eax, ecx
and eax, 3
test ecx, ecx
jns 0x1800ba5b2
add ecx, 3
sub eax, 4
cdqe
sar ecx, 2
movsx r8d, byte [rax + r9 + 0x47ab48]
movsxd rax, ecx
lea rcx, str.__c_c
movsx edx, byte [rax + r9 + 0x47ab38]
call fcn.1800e8a20
lea r9, [0x180000000]
add ebx, 0x5640
cmp ebx, 0xac80
jbe 0x1800ba565
inc esi
inc rdi
cmp rdi, 0x34
jl 0x1800ba560
xor edi, edi
lea esi, [rdi + 0x48]
jmp case.default.0x1800ba508
lea rcx, [0x18046a1bc]
call fcn.1800e8a20
lea rcx, str.__Coins:
jmp 0x1800ba833
mov edx, r12d
lea rcx, str.MUCManager
call fcn.1800e8a20
lea rcx, str.__32bit:
jmp 0x1800ba833
lea rcx, str.__Rolls:
call fcn.1800e8a20
mov ebx, 0x21
nop
lea r9, [rbp - 0x50]
mov dword [rsp + 0x48], 6
mov r8d, 0x30
lea rdx, [rsp + 0x48]
xor ecx, ecx
call fcn.1800b7b90
lea rcx, [0x18046a30c]
lea edx, [rax + 1]
call fcn.1800e8a20
sub rbx, 1
jne 0x1800ba650
jmp case.default.0x1800ba508
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], 0xfffffffffffffffa
xor edx, edx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x48]
lea r8d, [r9 + 5]
call fcn.1800d48e0
mov ebx, 6
nop word [rax + rax]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [rbp - 0x50]
xor edx, edx
mov ecx, pe_nt_image_headers64
call fcn.180048ea0
mov edx, eax
lea rcx, str._0x_08x
call fcn.1800e8a20
sub rbx, 1
jne 0x1800ba6c0
jmp case.default.0x1800ba508
lea rcx, [0x18046a1bc]
call fcn.1800e8a20
mov eax, edi
lea rcx, [rbp - 0x30]
mov byte [rcx], al
lea rcx, [rcx + 1]
inc eax
cmp eax, 0x34
jl 0x1800ba703
jmp case.default.0x1800ba508
movzx r12d, byte [rsp + 0x38]
lea rdi, [rbp + 3]
mov esi, 0x34
mov ebx, 0x4f
nop dword [rax]
mov eax, ebx
sub eax, 0x4c
je 0x1800ba77a
sub eax, 1
je 0x1800ba76e
sub eax, 1
je 0x1800ba763
cmp eax, 1
jne 0x1800ba77d
lea r9, [rbp - 0x50]
mov dword [rsp + 0x48], esi
lea r8d, [rax + 0x2f]
xor ecx, ecx
lea rdx, [rsp + 0x48]
call fcn.1800b7b90
mov r13d, eax
jmp 0x1800ba77d
movsxd rax, r13d
movzx r12d, byte [rbp + rax - 0x30]
jmp 0x1800ba77d
movzx eax, byte [rdi]
movsxd rcx, r13d
mov byte [rbp + rcx - 0x30], al
jmp 0x1800ba77d
mov byte [rdi], r12b
dec ebx
cmp ebx, 0x4b
ja 0x1800ba730
dec esi
mov byte [rsp + 0x38], r12b
dec rdi
mov dword [rbp - 0x80], r13d
cmp esi, 1
jg 0x1800ba724
mov r12d, dword [rsp + 0x68]
xor edi, edi
lea esi, [rdi + 0x48]
jmp case.default.0x1800ba508
lea rcx, str.__Cards:
jmp 0x1800ba833
mov dword [rbp - 0x38], 0x514a5439
mov eax, dword [rbp - 0x38]
mov dword [rbp - 0x40], 0x34333241
mov dword [rbp - 0x3c], 0x38373635
movsd xmm0, qword [rbp - 0x40]
mov dword [0x18047ab40], eax
mov dword [rsp + 0x58], 0x73646368
mov eax, dword [rsp + 0x58]
mov dword [0x18047ab48], eax
movsd qword [0x18047ab38], xmm0
mov byte [0x18047ab44], 0x4b
jmp case.default.0x1800ba508
mov ebx, 6
nop dword [rax]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [rbp - 0x50]
xor edx, edx
mov ecx, pe_nt_image_headers64
call fcn.180048ea0
mov edx, eax
lea rcx, str._0x_08x
call fcn.1800e8a20
sub rbx, 1
jne 0x1800ba800
lea rcx, [0x18046a1bc]
call fcn.1800e8a20
inc r14d
lea r9, [0x180000000]
sub r15, 1
jne 0x1800ba4f0
mov r8d, dword [rsp + 0x34]
lea r9, [0x180000000]
inc r12d
mov dword [rsp + 0x68], r12d
cmp r12d, r8d
jle 0x1800ba4e0
mov r13d, dword [rsp + 0x60]
movabs rdi, 0x100003600
mov r14, qword [rbp - 0x78]
mov r15, qword [rbp - 0x70]
mov ebx, dword [rsp + 0x40]
mov r12, qword [rbp - 0x68]
mov dword [rsp + 0x50], 0
jmp case.0x1800ba4c4.224
mov rax, qword [r11]
mov qword [rsp + 0x50], rax
jmp case.0x1800ba4c4.224
test dl, dl
je 0x1800ba919
mov ebx, 0x7f
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x7f
je 0x1800ba8e9
cmp eax, 5
jne 0x1800ba908
mov rax, qword [rbp - 0x58]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
mov rax, qword [rbp - 0x60]
lea rcx, [rbp - 0x50]
mov r9d, 0xb5
mov qword [rsp + 0x48], rax
call fcn.1800e27e0
jmp 0x1800ba908
xor r9d, r9d
mov qword [rsp + 0x48], 0x10
lea r8, [rbp - 0x60]
mov edx, 0xfd
lea rcx, [rsp + 0x48]
call fcn.180061670
add ebx, 5
cmp ebx, 0x89
jb 0x1800ba8b0
mov ebx, dword [rsp + 0x40]
jmp 0x1800ba944
mov r9d, 0xb5
mov qword [rsp + 0x60], 0x36
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], 0x2a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x50]
call fcn.1800e27e0
mov edx, 0x10
lea rcx, str.DWT_transform_block_cannot_be_inverted_unless_all_output_components_can_be_computed_by_downstream_transform_blocks_in_the_multi_component_transform_network__or_by_the_application_supplying_them.
call fcn.1800e8a20
mov r8d, dword [rsp + 0x34]
jmp case.0x1800ba4c4.224
mov rax, qword [r12]
cmp qword [r11], rax
jae 0x1800bab03
nop dword [rax]
mov r9d, 0x29
cmp r9d, 0x29
je 0x1800ba991
cmp r9d, 0xa17
jne 0x1800baadd
inc qword [r11]
jmp 0x1800baadd
mov rax, qword [r11]
movsx rcx, byte [r15 + rax]
cmp cl, 0x20
ja 0x1800ba9a8
bt rdi, rcx
jb 0x1800baadd
mov r8d, 0x2f
nop
mov eax, r8d
sub eax, 0x2c
je 0x1800baafe
sub eax, 1
je 0x1800baac1
sub eax, 1
je 0x1800baab4
cmp eax, 1
jne 0x1800baad0
mov rax, qword [r11]
movzx ecx, byte [r15 + rax]
cmp cl, 0x22
jne 0x1800baa52
mov edx, 0x24
nop dword [rax]
cmp edx, 0x24
je 0x1800baa3c
cmp edx, 0xb4
je 0x1800baa24
cmp edx, 0x144
je 0x1800baa13
cmp edx, 0x1d4
je 0x1800baafe
jmp 0x1800baa3f
mov rax, qword [r10 + 0x78]
mov rcx, qword [rax + 0x18]
add rcx, qword [r11]
mov qword [r14 + 8], rcx
jmp 0x1800baa3f
mov dword [r10 + 0x88], 0x61
mov dword [r10 + 0x8c], 0x5c
jmp 0x1800baa3f
inc qword [r11]
add edx, 0x90
cmp edx, 0x240
jbe 0x1800ba9f0
jmp 0x1800baad0
cmp cl, 0x27
jne 0x1800baad0
mov edx, 0x127
nop dword [rax]
mov eax, edx
sub eax, 0x124
je 0x1800baafe
sub eax, 1
je 0x1800baa99
sub eax, 1
je 0x1800baa8c
cmp eax, 1
jne 0x1800baaa8
inc qword [r11]
mov dword [r10 + 0x88], 0x64
jmp 0x1800baaa8
mov dword [r10 + 0x8c], 0x5c
jmp 0x1800baaa8
mov rax, qword [r10 + 0x78]
mov rcx, qword [rax + 0x18]
add rcx, qword [r11]
mov qword [r14 + 8], rcx
dec edx
cmp edx, 0x123
ja 0x1800baa60
jmp 0x1800baad0
mov dword [r10 + 0x88], 0x5d
jmp 0x1800baad0
mov rax, qword [r10 + 0x78]
mov rcx, qword [rax + 0x18]
add rcx, qword [r11]
mov qword [r14 + 8], rcx
dec r8d
cmp r8d, 0x2b
ja 0x1800ba9b0
add r9d, 0x9ee
cmp r9d, 0x13dc
jbe 0x1800ba976
mov rax, qword [r12]
cmp qword [r11], rax
jb 0x1800ba970
mov r8d, dword [rsp + 0x34]
mov r13d, 0x111
jmp case.0x1800ba4c4.224
cmp dword [r10], 0
jle case.0x1800ba4c4.224
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov r8d, eax
mov dword [rsp + 0x34], eax
mov r10, qword [rsp + 0x70]
lea r9, [0x180000000]
mov r11, qword [rsp + 0x78]
inc r13d
movzx edx, byte [rsp + 0x30]
mov dword [rsp + 0x60], r13d
cmp r13d, ebx
jb 0x1800ba4a0
mov rax, qword [rsp + 0x50]
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1800e9340
add rsp, 0x118
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret