Function at 0x140003240
Capabilities:
Encode data using xor
Execute command
Generate random numbers using a mersenne twister
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
mov eax, 0x1430
call fcn.140005ff0
sub rsp, rax
movaps xmmword [rsp + 0x1420], xmm6
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rsp + 0x1410], rax
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str._nEnter_the_cookie:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003890
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140003a70
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400021c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400024fa
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x60]
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rsp + 0x70]
cmp r8, 0xe
jne 0x1400025d7
lea rdx, str.Invalid_Cookie
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400025d7
mov edx, 0xc
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nInvalid_cookie_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str._nChecking_for_pending_2FA_requests..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str._n_WARNING__If_there_is_no_pending_2FA_request__an_old_one_will_be_returned_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x1404], 0xffffffff
mov dword [rsp + 0x84], eax
mov edx, 1
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x84], eax
inc rdx
cmp rdx, 0x270
jb 0x140002630
mov dword [rsp + 0x80], 0x270
lea rcx, [rsp + 0x80]
call fcn.1400040e0
mov ecx, eax
imul rbx, rcx, 0xdbba0
cmp ebx, 0x28d7f
ja 0x14000269e
nop dword [rax + rax]
lea rcx, [rsp + 0x80]
call fcn.1400040e0
mov ecx, eax
imul rbx, rcx, 0xdbba0
cmp ebx, 0x28d80
jb 0x140002680
shr rbx, 0x20
add ebx, 0x800186a0
btc ebx, 0x1f
lea rdx, str._n_n2FA_Code:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov edx, 0xa
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, ebx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
nop
cmp rsi, 0xf
jbe 0x14000277f
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140002776
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002776
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400050dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400027bf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
mov rcx, qword [rsp + 0x1410]
xor rcx, rsp
call fcn.140004fb0
lea r11, [rsp + 0x1430]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rdi
ret
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
mov eax, 0x1430
call fcn.140005ff0
sub rsp, rax
movaps xmmword [rsp + 0x1420], xmm6
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rsp + 0x1410], rax
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str._nEnter_the_cookie:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003890
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140003a70
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400021c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400028fa
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x60]
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rsp + 0x70]
cmp r8, 0xe
jne 0x1400029d7
lea rdx, str.Invalid_Cookie
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400029d7
mov edx, 0xc
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nInvalid_cookie_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str._nChecking_for_pincode..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x1404], 0xffffffff
mov dword [rsp + 0x84], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x84], eax
inc rdx
cmp rdx, 0x270
jb 0x140002a20
mov dword [rsp + 0x80], 0x270
lea rcx, [rsp + 0x80]
call fcn.1400040e0
mov ecx, eax
imul rbx, rcx, 0x2328
cmp ebx, 0x14af
ja 0x140002a8e
nop dword [rax + rax]
lea rcx, [rsp + 0x80]
call fcn.1400040e0
mov ecx, eax
imul rbx, rcx, 0x2328
cmp ebx, 0x14b0
jb 0x140002a70
shr rbx, 0x20
add ebx, 0x800003e8
btc ebx, 0x1f
lea rdx, str._n_nPincode:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov edx, 0xa
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, ebx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
nop
cmp rsi, 0xf
jbe 0x140002b6f
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140002b66
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400050dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002baf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002baa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002baa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
mov rcx, qword [rsp + 0x1410]
xor rcx, rsp
call fcn.140004fb0
lea r11, [rsp + 0x1430]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rdi
ret
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0xa0
movaps xmmword [rsp + 0x90], xmm6
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rsp + 0x80], rax
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str._nEnter_the_cookie:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003890
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140003a70
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400021c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002cea
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002cdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x60]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x78]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x70]
cmp r8, 0xe
jne 0x140002d42
lea rdx, str.Invalid_Cookie
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140002d42
mov edx, 0xc
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nInvalid_cookie_
jmp 0x140002d5b
mov edx, 0xa
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nCookie_is_valid_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
nop
cmp rdi, 0xf
jbe 0x140002e67
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002e5e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400050dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002ea7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ea2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ea2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140004fb0
mov rbx, qword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa0
pop rdi
ret
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
movaps xmmword [rsp + 0x90], xmm6
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rbp + 0x37], rax
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rbp + 0x27], xmm6
mov byte [rbp + 0x17], 0
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str._nEnter_the_cookie:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [rbp + 0x17]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003890
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rbp + 0x17]
lea rcx, [rbp - 0x29]
call fcn.140003a70
nop
mov rdx, rax
lea rcx, [rbp - 9]
call fcn.1400021c0
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140002fce
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
movdqa xmm6, xmmword [0x140007cc0]
movdqu xmmword [rbp - 0x19], xmm6
mov byte [rbp - 0x29], 0
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rcx, qword [rbp - 9]
mov r8, qword [rbp + 7]
cmp r8, 0xe
jne 0x14000304b
lea rdx, str.Invalid_Cookie
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000304b
mov edx, 0xc
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nInvalid_cookie_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x1400030e3
mov edx, 0xa
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nCookie_is_valid_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 7
mov rcx, qword [0x14000b798]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._nRefreshed_cookie:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov r8, qword [rbp + 7]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003f20
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
lea rdx, str._nPress_any_key_to_continue..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007964]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._ndP____dP__________dP_______________________888888ba_________________________________________________nY8.__.8P__________88_______________________88_____8b________________________________________________n_Y8aa8P__88d888b._88_.d8888b._88d888b.____a88aaaa8P_.d8888b._dP___.dP_.d8888b._88d8b.d8b._88d888b._nd8___8b_88___88_88_88___88_88___88_____88____8b._88ooood8_88___d8_88___88_88_88_88_88___88_n88____88_88.__.88_88_88.__.88_88___________88_____88_88.__..._88_.88__88.__.88_88__88__88_88.__.88_ndP____dP_88Y888P_dP__88888P_dP___________dP_____dP__88888P_8888P____88888P8_dP__dP__dP_88Y888P_n_________88________________________________________________________________________________88_______n_________dP________________________________________________________________________________dP_______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
lea rdx, str.___________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
call fcn.140003240
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x1400031c4
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400031bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
mov qword [rbp + 7], 0
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140003216
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003211
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400050dc
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140004fb0
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa0
pop rbp
ret
sub rsp, 0x28
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nPlease_select_what_you_want_to_do:_n
call fcn.140003670
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n1._Bypass_2FA_n2._Bypass_pin_n3._Check_cookie_n4._Refresh_cookie_n0._Exit_n
call fcn.140003670
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nEnter_your_choice:
call fcn.140003670
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [0x14000b790]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [0x14000b790]
cmp eax, 4
ja 0x1400032e1
test eax, eax
jne 0x1400032a9
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 1
jne 0x1400032b7
add rsp, 0x28
jmp 0x1400023f0
cmp eax, 2
jne 0x1400032c5
add rsp, 0x28
jmp 0x1400027f0
cmp eax, 3
jne 0x1400032d3
add rsp, 0x28
jmp 0x140002be0
cmp eax, 4
jne 0x140003338
add rsp, 0x28
jmp 0x140002ed0
mov rcx, qword [0x14000b798]
mov edx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nYour_choice_is_out_of_range_
call fcn.140003670
lea rdx, [0x140003850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14000b798]
mov edx, 7
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xbb8
add rsp, 0x28
jmp qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x28
ret