Function at 0x140002ef0
Capabilities:
Execute command

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
xor edi, edi
mov dword [rbp + 0x67], edi
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140013584]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rbp - 1]
mov qword [rbp + 0x6f], rax
lea rdx, [0x1400134cc]
lea rcx, [rbp - 1]
call fcn.14000e5e0
mov rbx, rax
lea rdx, str.__n_n_nBaseBoard_SN:
lea rcx, [rbp + 0x1f]
call fcn.14000e5e0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.14000f130
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x49]
call fcn.14000ef90
mov dword [rbp + 0x67], 1
lea r9, [fcn.140001e40]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x29]
call fcn.14001026c
lea rdx, [rbp - 0x49]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ecb0
mov dword [rbp + 0x67], edi
lea rcx, [rbp - 0x49]
call fcn.14000e4c0
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1f]
mov qword [rbp + 0x6f], rax
lea rdx, [0x1400134dc]
lea rcx, [rbp + 0x1f]
call fcn.14000e5e0
mov rbx, rax
lea rdx, str._nBios_SN:
lea rcx, [rbp - 1]
call fcn.14000e5e0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.14000f130
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x39]
call fcn.14000ef90
mov dword [rbp + 0x67], 2
lea r9, [fcn.140001e40]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x29]
call fcn.14001026c
lea rdx, [rbp - 0x39]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ecb0
mov dword [rbp + 0x67], edi
lea rcx, [rbp - 0x39]
call fcn.14000e4c0
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1f]
mov qword [rbp + 0x6f], rax
lea rdx, [0x1400134fc]
lea rcx, [rbp + 0x1f]
call fcn.14000e5e0
mov rbx, rax
lea rdx, str._nCpu_SN:
lea rcx, [rbp - 1]
call fcn.14000e5e0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.14000f130
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x39]
call fcn.14000ef90
mov dword [rbp + 0x67], 4
lea r9, [fcn.140001e40]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x29]
call fcn.14001026c
lea rdx, [rbp - 0x39]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ecb0
mov dword [rbp + 0x67], edi
lea rcx, [rbp - 0x39]
call fcn.14000e4c0
lea rcx, str.wmic_cpu_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1f]
mov qword [rbp + 0x6f], rax
lea rdx, [0x140013528]
lea rcx, [rbp + 0x1f]
call fcn.14000e5e0
mov rbx, rax
lea rdx, str._nDiskDrive_SN:
lea rcx, [rbp - 1]
call fcn.14000e5e0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.14000f130
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x39]
call fcn.14000ef90
mov dword [rbp + 0x67], 8
lea r9, [fcn.140001e40]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x29]
call fcn.14001026c
lea rdx, [rbp - 0x39]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ecb0
mov dword [rbp + 0x67], edi
lea rcx, [rbp - 0x39]
call fcn.14000e4c0
lea rcx, str.wmic_diskdrive_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1f]
mov qword [rbp + 0x6f], rax
lea rdx, [0x140013510]
lea rcx, [rbp + 0x1f]
call fcn.14000e5e0
mov rbx, rax
lea rdx, str._n_nGoing_back_to_Dashboard_in_10_Seconds...
lea rcx, [rbp - 1]
call fcn.14000e5e0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.14000f130
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x39]
call fcn.14000ef90
mov dword [rbp + 0x67], 0x10
lea r9, [fcn.140001e40]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x29]
call fcn.14001026c
lea rdx, [rbp - 0x39]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ecb0
nop
lea rcx, [rbp - 0x39]
call fcn.14000e4c0
mov ecx, 0x2710
add rsp, 0xb0
pop rdi
pop rbx
pop rbp
jmp qword [sym.imp.KERNEL32.dll_Sleep]