Function at 0x140003150
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xe0
call fcn.140002d60
lea rcx, [0x14007fed0]
call fcn.140010060
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
xor ebx, ebx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str._n_n__Welcome_to_Niggers____
lea rcx, [rbp - 0x79]
call fcn.140001d40
nop
mov edi, ebx
mov r14, qword [rbp - 0x61]
mov rsi, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
test r15, r15
je 0x14000320f
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x79]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r15
jne 0x1400031e0
cmp r14, 0xf
jbe 0x140003246
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000323e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, rsi
call fcn.14006382c
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400743f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_41
lea rdx, str._n_n
lea rcx, [rbp - 0x79]
call fcn.140001d40
nop
mov rdi, rbx
mov r14, qword [rbp - 0x61]
mov rsi, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
test r15, r15
je 0x1400032df
nop word [rax + rax]
lea rdx, [rbp - 0x79]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r15
jne 0x1400032b0
cmp r14, 0xf
jbe 0x140003316
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000330e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, rsi
call fcn.14006382c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400743f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rbx
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str._n_n__Credit_:_LEF1337
lea rcx, [rbp - 0x79]
call fcn.140001d40
nop
mov rdi, rbx
mov r14, qword [rbp - 0x61]
mov rsi, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
test r15, r15
je 0x1400033af
nop word [rax + rax]
lea rdx, [rbp - 0x79]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r15
jne 0x140003380
cmp r14, 0xf
jbe 0x1400033e6
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400033de
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, rsi
call fcn.14006382c
lea rcx, str.start_https:__discord.gg_aD4pxP36rB
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400743f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
mov r9d, 0x11000
lea r8, [0x140074464]
lea rdx, [0x140074468]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp - 0x72], reloc.WLDAP32.dll_Ordinal_32
mov dword [rbp - 0x79], 0x20200a0a
mov word [rbp - 0x75], 0x2b5b
mov byte [rbp - 0x73], 0x5d
mov byte [rbp - 0x70], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rbx
lea rax, [rbp - 0x79]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140003490
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.140001d40
nop
mov rdi, rbx
mov r15, qword [rbp - 0x41]
mov r14, qword [rbp - 0x59]
mov r12, qword [rbp - 0x49]
test r12, r12
je 0x1400034ef
nop dword [rax]
lea rdx, [rbp - 0x59]
cmp r15, 0xf
cmova rdx, r14
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r12
jne 0x1400034c0
cmp r15, 0xf
jbe 0x140003526
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000351e
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, r14
call fcn.14006382c
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp - 0x68], reloc.WLDAP32.dll_Ordinal_46
movdqa xmm0, xmmword [0x140075710]
movdqu xmmword [rbp - 0x79], xmm0
mov byte [rbp - 0x69], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x66], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rbx
lea rax, [rbp - 0x79]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003570
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.140001d40
nop
mov rdi, rbx
mov r15, qword [rbp - 0x41]
mov r14, qword [rbp - 0x59]
mov r12, qword [rbp - 0x49]
test r12, r12
je 0x1400035cf
nop dword [rax]
lea rdx, [rbp - 0x59]
cmp r15, 0xf
cmova rdx, r14
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r12
jne 0x1400035a0
cmp r15, 0xf
jbe 0x140003606
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400035fe
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, r14
call fcn.14006382c
movdqa xmm0, xmmword [0x140075730]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x140075760]
movdqa xmmword [rbp - 0x19], xmm1
movdqa xmm0, xmmword [0x1400756a0]
movdqa xmmword [rbp - 9], xmm0
movdqa xmm1, xmmword [0x1400757d0]
movdqa xmmword [rbp + 7], xmm1
movdqa xmm0, xmmword [0x140075800]
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [0x1400757c0]
movdqa xmmword [rbp + 0x27], xmm1
mov dword [rbp + 0x37], 0x9683ced4
mov dword [rbp + 0x3b], 0x96809b
mov byte [rbp + 0x3f], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x41]
xor byte [rbp + rcx - 0x29], al
inc rcx
cmp rcx, 0x67
jb 0x140003670
mov byte [rbp + 0x3f], 0
lea rcx, [rbp - 0x29]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140075730]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [str.7_z67:6_u12_p_a]
movdqa xmmword [rbp - 0x19], xmm1
movdqa xmm0, xmmword [0x1400756b0]
movdqa xmmword [rbp - 9], xmm0
movdqa xmm1, xmmword [0x1400757d0]
movdqa xmmword [rbp + 7], xmm1
movdqa xmm0, xmmword [0x140075800]
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [0x1400757b0]
movdqa xmmword [rbp + 0x27], xmm1
mov dword [rbp + 0x37], 0x84cfd7cf
mov dword [rbp + 0x3b], 0x99819897
mov word [rbp + 0x3f], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x41]
xor byte [rbp + rcx - 0x29], al
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x28], al
lea eax, [rcx + 0x43]
xor byte [rbp + rcx - 0x27], al
lea eax, [rcx + 0x44]
xor byte [rbp + rcx - 0x26], al
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x25], al
lea eax, [rcx + 0x46]
xor byte [rbp + rcx - 0x24], al
lea eax, [rcx + 0x47]
xor byte [rbp + rcx - 0x23], al
lea eax, [rcx + 0x48]
xor byte [rbp + rcx - 0x22], al
lea eax, [rcx + 0x49]
xor byte [rbp + rcx - 0x21], al
lea eax, [rcx + 0x4a]
xor byte [rbp + rcx - 0x20], al
lea eax, [rcx + 0x4b]
xor byte [rbp + rcx - 0x1f], al
lea eax, [rcx + 0x4c]
xor byte [rbp + rcx - 0x1e], al
lea eax, [rcx + 0x4d]
xor byte [rbp + rcx - 0x1d], al
add rcx, 0xd
cmp rcx, 0x68
jb 0x140003700
mov byte [rbp + 0x40], 0
lea rcx, [rbp - 0x29]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140075720]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x140075700]
movdqa xmmword [rbp - 0x19], xmm1
movdqa xmm0, xmmword [0x1400756d0]
movdqa xmmword [rbp - 9], xmm0
movdqa xmm1, xmmword [0x1400757f0]
movdqa xmmword [rbp + 7], xmm1
movdqa xmm0, xmmword [0x1400757e0]
movdqa xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x27], 0xe7eae1bf
mov dword [rbp + 0x2b], 0xedf9a8b5
mov dword [rbp + 0x2f], 0xa2a9baf5
mov dword [rbp + 0x33], 0x100afbb
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x41]
xor byte [rbp + rcx - 0x29], al
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x28], al
add rcx, 2
cmp rcx, 0x5e
jb 0x1400037e0
mov byte [rbp + 0x36], 0
lea rcx, [rbp - 0x29]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov word [rbp - 0x34], Ordinal_50
movdqa xmm0, xmmword [str.taskkill__f__im_HWID_Spoofed_____1__b]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140075790]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x3e32206c
mov byte [rbp - 0x35], Ordinal_41
mov byte [rbp - 0x32], 0
lea rcx, [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x33], 0x657865
movdqa xmm0, xmmword [0x140075780]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140075750]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x65707061
mov word [rbp - 0x35], 0x2e72
mov byte [rbp - 0x2f], 0
lea rcx, [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov word [rbp - 0x30], 0x53
movdqa xmm0, xmmword [0x140075780]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140075770]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x666f6f70
mov dword [rbp - 0x35], 0x532e7265
mov byte [rbp - 0x31], 0x59
mov byte [rbp - 0x2e], 0
lea rcx, [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400743f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0x1f4
mov ecx, 0x1b8
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp - 0x72], reloc.WLDAP32.dll_Ordinal_32
mov dword [rbp - 0x79], 0x20200a0a
mov word [rbp - 0x75], 0x2b5b
mov byte [rbp - 0x73], 0x5d
mov byte [rbp - 0x70], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rbx
lea rax, [rbp - 0x79]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140003926
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.140001d40
nop
mov rdi, rbx
mov r15, qword [rbp - 0x41]
mov r14, qword [rbp - 0x59]
mov r12, qword [rbp - 0x49]
test r12, r12
je 0x14000398f
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x59]
cmp r15, 0xf
cmova rdx, r14
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r12
jne 0x140003960
cmp r15, 0xf
jbe 0x1400039c6
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400039be
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8a
mov rcx, r14
call fcn.14006382c
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp - 0x69], reloc.WLDAP32.dll_Ordinal_33
movdqa xmm0, xmmword [0x1400756f0]
movdqu xmmword [rbp - 0x79], xmm0
mov byte [rbp - 0x67], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rbx
lea rax, [rbp - 0x79]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140003a02
mov r8, rsi
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.140001d40
nop
mov rsi, qword [rbp - 0x41]
mov rdi, qword [rbp - 0x59]
mov r14, qword [rbp - 0x49]
test r14, r14
je 0x140003a5f
nop dword [rax]
lea rdx, [rbp - 0x59]
cmp rsi, 0xf
cmova rdx, rdi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400043a0
mov ecx, Ordinal_26
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
cmp rbx, r14
jne 0x140003a30
cmp rsi, 0xf
jbe 0x140003a99
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140003a91
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14006382c
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400743f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, listen
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.ECHO_OFF
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str._n_n_n__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.Disk_Serial_Number_n_n
call fcn.140002110
lea rcx, str.wmic_diskdrive_get_serialnumber__findstr__v__SerialNumber_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.CPU_Serial_Number_n_n
call fcn.140002110
lea rcx, str._wmic_cpu_get_serialnumber__findstr__v__SerialNumber_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.BIOS_Serial_Number_n_n
call fcn.140002110
lea rcx, str.wmic_bios_get_serialnumber__findstr__v__SerialNumber_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.BaseBoard_Serial_Number_n_n
call fcn.140002110
lea rcx, str.wmic_baseboard_get_serialnumber__findstr__v__SerialNumber_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.UUID_Serial_Number_n_n
call fcn.140002110
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid__findstr__v__UUID_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str._n__
call fcn.140002110
mov edx, 7
mov rcx, qword [0x14007fe40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x140074670]
call fcn.140002110
lea rcx, str.pause_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret