Function at 0x140017a55
Capabilities:
Terminate process

Disassembly:
jmp 0x14002b8b0
push rbp
push rdi
sub rsp, 0x278
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x66
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1401d0080]
xor rax, rbp
mov qword [rbp + 0x240], rax
lea rcx, reloc.d2d1.dll_Ordinal_1
call fcn.140018428
nop
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 8], rax
mov dword [rbp + 0x164], 0
cmp qword [rbp + 8], 0
je 0x14002b946
mov dword [rbp + 0x30], 0x11c
mov rax, qword [rbp + 8]
mov qword [rbp + 0x238], rax
lea rcx, [rbp + 0x30]
call qword [rbp + 0x238]
nop
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 0x164], eax
mov eax, dword [rbp + 0x164]
mov dword [rbp + 0x234], eax
cmp dword [rbp + 0x234], 0x47ba
ja 0x14002b9e8
cmp dword [rbp + 0x234], 0x47ba
je 0x14002bb26
cmp dword [rbp + 0x234], 0x3fab
ja 0x14002b9c3
cmp dword [rbp + 0x234], 0x3fab
je 0x14002bbb9
cmp dword [rbp + 0x234], 0x295a
je 0x14002bc46
cmp dword [rbp + 0x234], 0x3839
je 0x14002bc18
cmp dword [rbp + 0x234], 0x3ad7
je 0x14002bbea
jmp 0x14002bc74
cmp dword [rbp + 0x234], 0x42ee
je 0x14002bb88
cmp dword [rbp + 0x234], 0x4563
je 0x14002bb57
jmp 0x14002bc74
cmp dword [rbp + 0x234], 0x47bb
je 0x14002baf5
cmp dword [rbp + 0x234], 0x4a61
je 0x14002bac4
cmp dword [rbp + 0x234], 0x4a62
je 0x14002ba93
cmp dword [rbp + 0x234], 0x4a63
je 0x14002ba62
cmp dword [rbp + 0x234], 0x55f0
je 0x14002ba31
jmp 0x14002bc74
mov qword [0x1401d09f0], 0x5a8
mov qword [0x1401d09f8], 0x440
mov qword [0x1401d0a00], 0x520
mov qword [0x1401d0a08], 0x448
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x5a8
mov qword [0x1401d09f8], 0x440
mov qword [0x1401d0a00], 0x520
mov qword [0x1401d0a08], 0x448
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x5a8
mov qword [0x1401d09f8], 0x440
mov qword [0x1401d0a00], 0x520
mov qword [0x1401d0a08], 0x448
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x5a8
mov qword [0x1401d09f8], 0x440
mov qword [0x1401d0a00], 0x520
mov qword [0x1401d0a08], 0x448
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e8
mov qword [0x1401d0a00], 0x3c8
mov qword [0x1401d0a08], 0x2f0
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e8
mov qword [0x1401d0a00], 0x3c8
mov qword [0x1401d0a08], 0x2f0
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e0
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2e8
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e0
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2e8
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e0
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2e8
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e0
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2e8
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e8
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2f0
jmp 0x14002bc90
mov qword [0x1401d09f0], 0x450
mov qword [0x1401d09f8], 0x2e8
mov qword [0x1401d0a00], 0x3c0
mov qword [0x1401d0a08], 0x2f0
jmp 0x14002bc90
mov edx, dword [rbp + 0x164]
lea rcx, str.____No_Support_for__d__n_check_https:__www.vergiliusproject.com_kernels_x64_Windows_2011_Insider_20Preview_20_Jun_202021___EPROCESS_to_update_the_code_n
call fcn.140017988
nop
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov edx, dword [rbp + 0x164]
lea rcx, str.___Found_offsets_for__d__n
call fcn.140017988
nop
lea rcx, [rbp - 0x20]
lea rdx, reloc.d2d1.dll_Ordinal_1
call fcn.14001807c
mov rcx, qword [rbp + 0x240]
xor rcx, rbp
call fcn.1400179c9
lea rsp, [rbp + 0x258]
pop rdi
pop rbp
ret