Function at 0x1400117b7
Capabilities:
Terminate process

Disassembly:
jmp 0x140021dd0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x4e8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xce
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x508]
mov rax, qword [0x140053038]
xor rax, rbp
mov qword [rbp + 0x4a0], rax
lea rcx, [0x14005d132]
call fcn.140011b36
lea rdx, str.whoami.exe
lea rcx, [rbp + 8]
call fcn.140011523
nop
lea rcx, [rbp + 0x48]
call fcn.140011b13
nop
mov dword [rbp + 0x84], 0xffffffff
mov byte [rbp + 0xa4], 1
mov byte [rbp + 0xc4], 1
lea rcx, [rbp + 8]
call fcn.140011104
mov qword [rbp + 0xe8], rax
lea rcx, [rbp + 8]
call fcn.14001182f
inc rax
mov qword [rbp + 0x108], rax
mov eax, 2
mul qword [rbp + 0x108]
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400114f6
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + 0x328]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x148], 0
lea rcx, str.About_To_Try_Everything_n
call fcn.140011569
mov rax, qword [rbp + 0x108]
dec rax
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xe8]
mov r8, qword [rbp + 0x108]
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0x148]
call qword [sym.imp.ucrtbased.dll_mbstowcs_s]
call fcn.140011695
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.1400113cf
nop
mov rax, qword [rbp + 0x128]
mov qword [0x140054bf0], rax
movzx eax, byte [rbp + 0xc4]
mov dword [section..data], eax
lea rcx, [rbp + 0x48]
call fcn.14001128a
movzx eax, al
test eax, eax
je 0x140021f69
cmp dword [rbp + 0x84], 0xffffffff
je 0x140021f69
mov edx, dword [rbp + 0x84]
lea rcx, [0x140038b68]
call fcn.14001105a
lea rcx, str.Please_use_rpcInterface_parameter_before_defining_exploitId.__r_n
call fcn.14001105a
lea rcx, str.____Exiting..._r_n
call fcn.14001105a
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
lea rcx, [rbp + 0x48]
call fcn.14001128a
movzx eax, al
test eax, eax
je 0x14002200d
cmp dword [rbp + 0x84], 0xffffffff
jne 0x14002200d
lea rax, [rbp + 0x348]
mov qword [rbp + 0x388], rax
lea rdx, [rbp + 0x168]
mov rcx, qword [rbp + 0x388]
call fcn.14001101e
mov qword [rbp + 0x498], rax
mov r9, qword [rbp + 0x498]
movzx r8d, byte [rbp + 0xa4]
mov edx, dword [rbp + 0x84]
mov rcx, qword [rbp + 0x128]
call fcn.1400112c6
mov dword [rbp + 0x3a4], 0
lea rcx, [rbp + 0x168]
call fcn.1400119d3
nop
lea rcx, [rbp + 0x48]
call fcn.140011212
nop
lea rcx, [rbp + 8]
call fcn.140011212
mov eax, dword [rbp + 0x3a4]
jmp 0x1400220ff
lea rdx, str.ms_rprn
lea rcx, [rbp + 0x48]
call fcn.14001148d
movzx eax, al
test eax, eax
je 0x14002206f
lea rax, [rbp + 0x3c8]
mov qword [rbp + 0x408], rax
lea rdx, [rbp + 0x168]
mov rcx, qword [rbp + 0x408]
call fcn.14001101e
mov qword [rbp + 0x498], rax
mov r9, qword [rbp + 0x498]
movzx r8d, byte [rbp + 0xa4]
mov edx, dword [rbp + 0x84]
mov rcx, qword [rbp + 0x128]
call fcn.14001163b
jmp 0x1400220cf
lea rdx, str.ms_efsr
lea rcx, [rbp + 0x48]
call fcn.14001148d
movzx eax, al
test eax, eax
je 0x1400220cf
lea rax, [rbp + 0x428]
mov qword [rbp + 0x468], rax
lea rdx, [rbp + 0x168]
mov rcx, qword [rbp + 0x468]
call fcn.14001101e
mov qword [rbp + 0x498], rax
mov r9, qword [rbp + 0x498]
movzx r8d, byte [rbp + 0xa4]
mov edx, dword [rbp + 0x84]
mov rcx, qword [rbp + 0x128]
call fcn.140011514
mov dword [rbp + 0x484], 0
lea rcx, [rbp + 0x168]
call fcn.1400119d3
nop
lea rcx, [rbp + 0x48]
call fcn.140011212
nop
lea rcx, [rbp + 8]
call fcn.140011212
mov eax, dword [rbp + 0x484]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140037100]
call fcn.140011979
mov rax, rdi
mov rcx, qword [rbp + 0x4a0]
xor rcx, rbp
call fcn.140011596
lea rsp, [rbp + 0x4b8]
pop rdi
pop rbp
ret