Function at 0x1400c7f3b
Capabilities:
Terminate process

Disassembly:
jmp 0x14020ee70
push rbp
push rdi
sub rsp, 0x278
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x66
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14044aff8]
xor rax, rbp
mov qword [rbp + 0x240], rax
lea rcx, reloc.d2d1.dll_Ordinal_1
call fcn.1400c9dfe
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 8], rax
mov dword [rbp + 0x164], 0
cmp qword [rbp + 8], 0
je 0x14020ef04
mov dword [rbp + 0x30], 0x11c
mov rax, qword [rbp + 8]
mov qword [rbp + 0x238], rax
lea rcx, [rbp + 0x30]
call qword [rbp + 0x238]
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 0x164], eax
mov eax, dword [rbp + 0x164]
mov dword [rbp + 0x234], eax
cmp dword [rbp + 0x234], 0x47ba
ja 0x14020efa6
cmp dword [rbp + 0x234], 0x47ba
je 0x14020f13a
cmp dword [rbp + 0x234], 0x3fab
ja 0x14020ef81
cmp dword [rbp + 0x234], 0x3fab
je 0x14020f1cd
cmp dword [rbp + 0x234], 0x295a
je 0x14020f25a
cmp dword [rbp + 0x234], 0x3839
je 0x14020f22c
cmp dword [rbp + 0x234], 0x3ad7
je 0x14020f1fe
jmp 0x14020f288
cmp dword [rbp + 0x234], 0x42ee
je 0x14020f19c
cmp dword [rbp + 0x234], 0x4563
je 0x14020f16b
jmp 0x14020f288
cmp dword [rbp + 0x234], 0x4a63
ja 0x14020eff7
cmp dword [rbp + 0x234], 0x4a63
je 0x14020f076
cmp dword [rbp + 0x234], 0x47bb
je 0x14020f109
cmp dword [rbp + 0x234], 0x4a61
je 0x14020f0d8
cmp dword [rbp + 0x234], 0x4a62
je 0x14020f0a7
jmp 0x14020f288
cmp dword [rbp + 0x234], 0x4a64
je 0x14020f045
cmp dword [rbp + 0x234], 0x55f0
je 0x14020f014
jmp 0x14020f288
mov qword [0x140453e38], 0x5a8
mov qword [0x140453e40], 0x440
mov qword [0x140453e48], 0x520
mov qword [0x140453e50], 0x448
jmp 0x14020f2a2
mov qword [0x140453e38], 0x5a8
mov qword [0x140453e40], 0x440
mov qword [0x140453e48], 0x520
mov qword [0x140453e50], 0x448
jmp 0x14020f2a2
mov qword [0x140453e38], 0x5a8
mov qword [0x140453e40], 0x440
mov qword [0x140453e48], 0x520
mov qword [0x140453e50], 0x448
jmp 0x14020f2a2
mov qword [0x140453e38], 0x5a8
mov qword [0x140453e40], 0x440
mov qword [0x140453e48], 0x520
mov qword [0x140453e50], 0x448
jmp 0x14020f2a2
mov qword [0x140453e38], 0x5a8
mov qword [0x140453e40], 0x440
mov qword [0x140453e48], 0x520
mov qword [0x140453e50], 0x448
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e8
mov qword [0x140453e48], 0x3c8
mov qword [0x140453e50], 0x2f0
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e8
mov qword [0x140453e48], 0x3c8
mov qword [0x140453e50], 0x2f0
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e0
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2e8
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e0
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2e8
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e0
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2e8
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e0
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2e8
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e8
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2f0
jmp 0x14020f2a2
mov qword [0x140453e38], 0x450
mov qword [0x140453e40], 0x2e8
mov qword [0x140453e48], 0x3c0
mov qword [0x140453e50], 0x2f0
jmp 0x14020f2a2
mov edx, dword [rbp + 0x164]
lea rcx, str.____No_Support_for__d__n_check_https:__www.vergiliusproject.com_kernels_x64_Windows_2011_Insider_20Preview_20_Jun_202021___EPROCESS_to_update_the_code_n
call fcn.1400c7cf7
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
mov edx, dword [rbp + 0x164]
lea rcx, str.___Found_offsets_for__d__n
call fcn.1400c7cf7
lea rcx, [rbp - 0x20]
lea rdx, reloc.d2d1.dll_Ordinal_1
call fcn.1400c9386
mov rcx, qword [rbp + 0x240]
xor rcx, rbp
call fcn.1400c7dba
lea rsp, [rbp + 0x258]
pop rdi
pop rbp
ret