Function at 0x14000f4e0
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
sub rsp, 0x368
mov rax, qword [0x14007c0c0]
xor rax, rsp
mov qword [rsp + 0x350], rax
lea rdx, [0x14007420a]
xor ecx, ecx
call fcn.14004e164
nop
lea rax, [rsp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x21]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x21]
movzx edx, byte [rsp + 0x3a]
lea rcx, [rsp + 0x120]
call fcn.14000fc70
mov rcx, rax
call fcn.140010440
mov rcx, rax
call fcn.140002af0
nop
lea rax, [rsp + 0x22]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x23]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x3b]
lea rcx, [rsp + 0x320]
call fcn.14000fca0
nop
lea rax, [rsp + 0x140]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x320]
call fcn.140010280
mov rdx, rax
mov rcx, qword [rsp + 0x78]
call fcn.140003ed0
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x80]
call fcn.140001400
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x320]
call fcn.1400102a0
nop
cmp qword [rsp + 0x50], 0
jne 0x14000f662
lea rax, [rsp + 0x24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x25]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x25]
movzx edx, byte [rsp + 0x3c]
lea rcx, [rsp + 0x160]
call fcn.14000fcd0
mov rcx, rax
call fcn.140010240
mov rcx, rax
call fcn.140002af0
nop
mov ecx, 0x834
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rcx, qword [rsp + 0x50]
call fcn.140001550
mov byte [rsp + 0x26], al
movzx eax, byte [rsp + 0x26]
test eax, eax
jne 0x14000f854
lea rax, [rsp + 0x27]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x28]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x28]
movzx edx, byte [rsp + 0x3d]
lea rcx, [rsp + 0x180]
call fcn.14000fd00
mov rcx, rax
call fcn.140010200
mov rcx, rax
call fcn.140002af0
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov edx, 0x18
lea rcx, [rsp + 0x2c0]
call fcn.140003ae0
lea rcx, [rsp + 0x3e]
call fcn.1400025e0
mov r8, rax
mov edx, 0x1e00
lea rcx, [rsp + 0x2c0]
call fcn.140003e50
nop
lea rcx, [rsp + 0x2c0]
call fcn.140003d60
lea rcx, [0x140081130]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x1e00
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x100]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x2c0]
mov rcx, qword [rsp + 0x88]
call fcn.140003da0
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x90]
call fcn.140002fc0
movzx eax, al
test eax, eax
jne 0x14000f7e8
lea rax, [rsp + 0x29]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x2a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x29]
movzx r8d, byte [rsp + 0x2a]
movzx edx, byte [rsp + 0x3f]
lea rcx, [rsp + 0x1a0]
call fcn.14000fd30
mov rcx, rax
call fcn.1400101c0
mov rcx, rax
call fcn.140002af0
nop
lea rcx, [0x140083870]
call fcn.140010070
mov ecx, 0x834
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
lea rax, [rsp + 0x2b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x2c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x2b]
movzx r8d, byte [rsp + 0x2c]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x1c0]
call fcn.14000fd60
mov rcx, rax
call fcn.140010030
mov rcx, rax
call fcn.140002af0
nop
mov rcx, qword [rsp + 0x50]
call fcn.140001690
nop
lea rcx, [rsp + 0x2c0]
call fcn.140003d80
nop
jmp 0x14000f8a5
lea rax, [rsp + 0x2d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x2e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x2d]
movzx r8d, byte [rsp + 0x2e]
movzx edx, byte [rsp + 0x41]
lea rcx, [rsp + 0x1e0]
call fcn.14000fd90
mov rcx, rax
call fcn.14000fff0
mov rcx, rax
call fcn.140002af0
nop
lea rax, [rsp + 0x2f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x2f]
movzx r8d, byte [rsp + 0x30]
movzx edx, byte [rsp + 0x42]
lea rcx, [rsp + 0x290]
call fcn.14000fdc0
mov rcx, rax
call fcn.14000ffb0
mov rcx, rax
call fcn.140002af0
nop
lea rcx, [0x140083870]
call fcn.140010070
nop
lea rax, [rsp + 0x200]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x31]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x32]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x31]
movzx r8d, byte [rsp + 0x32]
movzx edx, byte [rsp + 0x43]
lea rcx, [rsp + 0xd0]
call fcn.14000fdf0
mov rcx, rax
call fcn.14000ff70
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call fcn.140003ed0
mov qword [rsp + 0xa0], rax
mov rcx, qword [rsp + 0xa0]
call fcn.14001bdf0
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0
jne 0x14000f9f9
lea rax, [rsp + 0x33]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x33]
movzx r8d, byte [rsp + 0x34]
movzx edx, byte [rsp + 0x44]
lea rcx, [rsp + 0x220]
call fcn.14000fe20
mov rcx, rax
call fcn.14000ff30
mov rcx, rax
call fcn.140002af0
nop
mov ecx, 0x834
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov ecx, 0x10
call fcn.140045c80
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14000fa3c
mov edx, 0x10
mov rcx, qword [rsp + 0x60]
call fcn.140003ae0
mov eax, dword [rsp + 0x48]
mov r8d, eax
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
call fcn.140013280
mov qword [rsp + 0x68], rax
jmp 0x14000fa45
mov qword [rsp + 0x68], 0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x140084e50], rax
mov rax, qword [0x140084e50]
mov qword [0x140084e58], rax
lea rcx, [rsp + 0xe0]
call fcn.14000f440
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0x2f8]
mov rcx, qword [rsp + 0xc0]
call fcn.140007d40
nop
lea rcx, [rsp + 0xe0]
call fcn.140007d90
nop
lea r8, str._testik.dll
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x2d8]
call fcn.140013010
nop
lea rcx, [rsp + 0x2d8]
call fcn.140002150
mov rcx, rax
call fcn.140014d90
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x14000fb75
lea rax, [rsp + 0x35]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x36]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x35]
movzx r8d, byte [rsp + 0x36]
movzx edx, byte [rsp + 0x45]
lea rcx, [rsp + 0x260]
call fcn.14000fe50
mov rcx, rax
call fcn.14000fef0
mov rcx, rax
call fcn.140002af0
nop
mov ecx, 0x834
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
lea rax, [rsp + 0x37]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x38]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rsp + 0x37]
movzx r8d, byte [rsp + 0x38]
movzx edx, byte [rsp + 0x46]
lea rcx, [rsp + 0x240]
call fcn.14000fe80
mov rcx, rax
call fcn.14000feb0
mov rcx, rax
call fcn.140002af0
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0x39], 1
movzx edx, byte [rsp + 0x39]
mov rcx, qword [rsp + 0x70]
call fcn.140014e40
test eax, eax
jne 0x14000fc12
lea rcx, str._n_Cronos__Injection_failed.
call fcn.140002af0
mov ecx, 0x834
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
lea rcx, str._Cronos__Successfully_injected_
call fcn.140002af0
lea rcx, [0x140083870]
call fcn.140010070
nop
mov dword [rsp + 0x58], 0
lea rcx, [rsp + 0x2d8]
call fcn.140002170
nop
lea rcx, [rsp + 0x2f8]
call fcn.140002170
mov eax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x350]
xor rcx, rsp
call fcn.140045b30
add rsp, 0x368
pop rdi
pop rsi
ret