Function at 0x7fef4841048
Capabilities:
Accept command line arguments
Parse credit card information
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
mov rcx, qword [section..data]
mov r8d, edx
xor edx, edx
mov rax, rcx
div rcx
movabs rax, 0x642c8590b21642c9
mov r13d, 0x2c3
mov rsi, rdx
mov edi, 0x35e
mul rdx
mov rax, rsi
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x2e
sub rsi, rax
movzx ebp, si
mov ebx, ebp
and ebx, 0x4fc28
or rbx, r13
cmp r8d, 1
jne 0x7fef48416d6
mov r12, qword [rsp + 0x188]
mov r15, qword [rsp + 0x188]
mov r14d, dword [rsp + 0x178]
cmp rbx, r13
jne 0x7fef48410e3
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r12, rax
jmp 0x7fef4841115
cmp rbx, 0x60
jae 0x7fef48410fc
mov eax, 0x35e
mov r8d, ebx
mov edx, eax
mov ecx, eax
call 0x7fef4843748
mov ebx, eax
cmp rbx, 0x3c
jae 0x7fef4841110
imul edi, ebx, 0x35e
xor edi, 0x60
jmp 0x7fef48411b4
cmp rbx, r13
jne 0x7fef484112e
lea rdx, [rsp + 0x178]
mov rcx, r12
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r15, rax
jmp 0x7fef48411b4
cmp rbx, 0x26
jb 0x7fef4841606
cmp rbx, 0x62
jne 0x7fef484114b
mov edx, 0x35e
mov rcx, rbp
jmp 0x7fef48412a3
cmp rbx, 0xe
jae 0x7fef484116b
movzx edx, si
mov rcx, rbx
call 0x7fef484705c
xor edx, edx
mov eax, 0x184
div rbp
mov rbx, rax
jmp 0x7fef48411b4
cmp rbx, 0x30
jae 0x7fef4841186
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movzx esi, ax
imul rbx, rbx, 0x16e
jmp 0x7fef48411b4
cmp rbx, 0x3d
jne 0x7fef4841199
mov edx, 0x35e
mov rcx, rbx
jmp 0x7fef4841360
cmp rbx, 0x30
jne 0x7fef48411a9
mov edx, ebx
mov rcx, rbp
jmp 0x7fef4841345
cmp rbx, 0x36
jne 0x7fef48411b4
mov esi, 0x37b
movsxd rax, dword [rsp + 0x178]
mov ecx, edi
xor rcx, 0x3b3
mov r8d, edi
sub rcx, 0xec
cmp rax, rcx
jbe 0x7fef48416d6
cmp rbx, 0x16
jb 0x7fef48411f6
cmp rbx, 0x24
jne 0x7fef484128a
movzx eax, si
xor rax, 0xffffffffffffffdc
mov qword [section..data], rax
mov ebp, 0x3e
mov r9d, 0x4a
mov eax, edi
xor rax, 0x51
mov edx, r14d
or rax, 0x284
mov rax, qword [r15 + rax*8 - 0x1c70]
cmp word [rax + rdx*2], 0
je 0x7fef4841582
imul rax, rbx, 0x135
mov ecx, 0x3565e
sub rcx, rax
cmp rdx, rcx
je 0x7fef4841582
mov r8d, 0x2e
cmp si, r8w
ja 0x7fef4841606
lea r9d, [r8 + 0x25]
cmp si, r9w
ja 0x7fef48413ae
cmp si, 0x29
jae 0x7fef48415e1
lea eax, [r8 + 0x27]
cmp si, ax
jbe 0x7fef484137c
movzx ecx, si
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, 0x2e
mov edi, eax
lea r9d, [r8 + 0x25]
jmp 0x7fef48413ae
mov eax, 0x5a
cmp rbx, rax
jb 0x7fef4841606
cmp rbx, 0xb
ja 0x7fef48412b1
mov edx, ebx
mov rcx, rbx
movzx r8d, si
call 0x7fef4843748
jmp 0x7fef4841606
cmp rbx, 0x59
jbe 0x7fef4841606
mov ebp, 0x3e
cmp rbx, r13
jne 0x7fef48412ce
movzx r14d, si
jmp 0x7fef48411fb
cmp rbx, rbp
jae 0x7fef48412eb
mov eax, 0x21d
movzx ecx, di
imul ecx, eax
mov esi, 0x31b
sub si, cx
jmp 0x7fef48411fb
cmp rbx, 0x5e
jne 0x7fef4841316
xor edx, edx
mov rax, r8
div r8
movabs rax, 0x21e2e1069e4ff34b
mul rdx
shr rdx, 7
mov qword [0x7fef4873030], rdx
jmp 0x7fef48411fb
cmp rbx, 0x3f
jae 0x7fef484133a
mov edx, edi
mov rcx, r8
call 0x7fef484705c
movzx edi, si
mov rbx, rax
imul edi, eax
sub edi, 0x16ec8
jmp 0x7fef48411fb
cmp rbx, 0x36
jae 0x7fef484134f
mov edx, ebx
mov rcx, rbx
call 0x7fef484705c
jmp 0x7fef4841606
mov r9d, 0x4a
cmp rbx, r9
jne 0x7fef484136b
mov rdx, r8
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x7fef4841606
cmp rbx, 0xa
jne 0x7fef4841201
mov eax, ebx
jmp 0x7fef48416db
cmp si, 0x19
ja 0x7fef48413ae
test si, si
jne 0x7fef484139a
mov rax, qword [r15 + 8]
mov r10d, 0x10
mov cl, byte [rax + rdx*2]
mov byte [rsp + rdx + 0x30], cl
jmp 0x7fef48413d4
cmp si, 0x40
je 0x7fef4841656
cmp si, 6
ja 0x7fef484156f
mov r10d, 0x10
cmp si, r10w
jae 0x7fef4841673
lea eax, [r10 + 0x27]
cmp si, ax
je 0x7fef4841574
test si, si
jne 0x7fef48414ef
cmp edi, 0x45
je 0x7fef48411fb
cmp edi, 0x35e
jne 0x7fef48413fc
mov r9d, 0x4a
cmp rbx, r13
jne 0x7fef4841201
inc r14d
jmp 0x7fef4841201
cmp edi, 0x21
ja 0x7fef4841414
mov r8d, edi
mov edx, ebx
xor ecx, ecx
call 0x7fef4843748
mov ebx, eax
jmp 0x7fef48411fb
cmp edi, r8d
jae 0x7fef484142f
lea rax, [rbx + 0x99]
xor rax, rbx
mov qword [0x7fef4873010], rax
jmp 0x7fef48411fb
cmp edi, 0x4f
jae 0x7fef4841445
mov ecx, edi
mov edx, edi
call 0x7fef484705c
mov rbx, rax
jmp 0x7fef48411fb
cmp edi, 0xc
jne 0x7fef484146c
movabs rax, 0x1b7d6c3dda338b2b
mul rbx
mov rdi, rdx
shr rdi, 4
xor edi, 0xc
and edi, 0x2be
jmp 0x7fef48411fb
cmp edi, r9d
jne 0x7fef484147c
imul edi, ebx, 0x293
jmp 0x7fef48411fb
cmp edi, 0x3c
ja 0x7fef484148e
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edi, eax
jmp 0x7fef48411fb
cmp edi, 0x64
jae 0x7fef48414b0
mov r8d, edi
mov edx, edi
mov rcx, rbx
call 0x7fef4843748
movzx esi, ax
mov ebx, esi
and ebx, 0x249
jmp 0x7fef48411fb
cmp edi, r10d
jne 0x7fef48414d8
mov r9, r10
mov qword [rsp + 0x20], r10
mov r8d, r10d
mov rdx, r10
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, eax
neg rbx
mov edi, eax
jmp 0x7fef48411fb
cmp edi, 0x44
je 0x7fef4841606
cmp edi, 0x51
je 0x7fef4841606
jmp 0x7fef48411fb
cmp si, 0x25
je 0x7fef484167c
mov eax, 0x5a
cmp si, ax
ja 0x7fef4841677
cmp si, 0x52
jbe 0x7fef484151e
mov ecx, edi
mov r8d, edi
mov edx, ebx
call 0x7fef4843748
jmp 0x7fef4841487
cmp si, 8
ja 0x7fef4841606
mov eax, 0x2b
cmp si, ax
je 0x7fef48416db
cmp si, 0x28
jae 0x7fef484167c
lea r9d, [rax + 0x1f]
cmp si, r9w
jne 0x7fef484155f
mov r8d, r9d
mov edx, ebx
mov rcx, rbx
call 0x7fef4843748
movzx esi, ax
jmp 0x7fef48411fb
cmp si, bp
jne 0x7fef4841201
mov eax, ebp
jmp 0x7fef48416db
mov rcx, rbx
jmp 0x7fef4841577
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x7fef4841606
cmp rbx, 0x39
jb 0x7fef48416c9
cmp rbx, 0x15
jbe 0x7fef48416d6
cmp rbx, 0x32
je 0x7fef48416d6
cmp rbx, r13
je 0x7fef48416b7
cmp rbx, 0x4c
je 0x7fef48416d6
cmp rbx, 0x31
je 0x7fef48416a6
cmp rbx, 0x1f
je 0x7fef484167c
cmp rbx, 5
je 0x7fef48416d6
cmp rbx, 0x58
je 0x7fef4841699
cmp rbx, 0x34
jne 0x7fef48415e9
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x7fef4841606
cmp rbx, 0x63
jb 0x7fef4841606
cmp rbx, r9
jbe 0x7fef4841680
mov eax, 0x55
cmp rbx, rax
ja 0x7fef48416d6
mov rcx, qword [section..data]
xor edx, edx
mov rax, rcx
mov edi, 0x35e
div rcx
movabs rax, 0x642c8590b21642c9
mov rcx, rdx
mul rdx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x2e
sub rcx, rax
movzx esi, cx
mov ebx, esi
mov ebp, esi
and ebx, 0x4fc28
or rbx, r13
jmp 0x7fef48410d3
xor edx, edx
lea eax, [rdx + 0x2b]
div rbx
mov rax, rdx
xor edx, edx
div rbx
xor rax, 0x277
mov qword [0x7fef4873020], rax
mov eax, ebx
jmp 0x7fef48416db
movzx eax, si
jmp 0x7fef48416db
mov eax, edi
jmp 0x7fef48416db
mov ecx, edi
mov r8d, ebx
movzx r9d, si
mov rdx, rbx
mov qword [rsp + 0x20], rcx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x7fef48416d6
mov edx, edi
movzx ecx, si
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x7fef48416d6
mov eax, edi
sub rax, 0x40b00
mov qword [0x7fef4873028], rax
jmp 0x7fef48416d6
movzx edx, si
lea rcx, [rsp + 0x30]
add edx, r14d
call fcn.7fef48416fc
jmp 0x7fef48416d6
movzx ecx, si
add rcx, rcx
mov qword [0x7fef4873030], rcx
mov eax, 1
mov rbx, qword [rsp + 0x170]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret