Function at 0x14006b910
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create thread
Encode data using xor
Hash data using fnv
Link many functions at runtime
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
xor r14d, r14d
mov rbx, qword [0x140151c80]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..5EE81F58_38A6_4637_BCED_C6DE792F8DF2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rbx + 8], rax
cmp rax, 0xffffffffffffffff
jne 0x14006b9ae
movdqa xmm0, xmmword [0x14007a800]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], 0x2b
mov byte [rsp + 0x62], 1
lea rcx, [rsp + 0x50]
call fcn.1400614d0
mov rcx, rax
call fcn.14006ea20
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov word [rbp + 0x100], 0x20
mov byte [rbp + 0x102], r14b
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x20]
call fcn.14006d970
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006ba54
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006ba54
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006ba4f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006ba30
cmp edx, 0x9a9264ad
je 0x14006ba59
test r9d, r9d
jne 0x14006ba10
mov rax, qword [rax]
jmp 0x14006b9e0
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea rcx, [rbp - 0x20]
call rax
lea rdi, [rbp + 0xf8]
mov rsi, qword [rdi]
mov qword [rdi], r14
lea rcx, str.win32u
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserSendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x14006baf8
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserSendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x14006baf8
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.SendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14006bbc1
lea rcx, str.win32u
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserGetAsyncKeyState
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, rax
test rax, rax
jne 0x14006bb67
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserGetAsyncKeyState
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, rax
test rax, rax
jne 0x14006bb67
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1400799e8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, rax
test rax, rax
je 0x14006bbc1
movups xmm0, xmmword [rbx]
movups xmmword [0x140151cf8], xmm0
movsd xmm1, qword [rbx + 0x10]
movsd qword [0x140151d08], xmm1
mov eax, dword [rbx + 0x18]
mov dword [0x140151d10], eax
movzx eax, word [rbx + 0x1c]
mov word [0x140151d14], ax
movups xmm0, xmmword [r8]
movups xmmword [0x140151d18], xmm0
movsd xmm1, qword [r8 + 0x10]
movsd qword [0x140151d28], xmm1
mov eax, dword [r8 + 0x18]
mov dword [0x140151d30], eax
movzx eax, word [r8 + 0x1c]
mov word [0x140151d34], ax
mov qword [rdi], rsi
call fcn.140052900
mov word [rbp - 0x77], 0x31
mov dword [rbp - 0x80], 0x70736552
mov dword [rbp - 0x7c], 0x306e7761
mov byte [rbp - 0x78], 0x30
mov byte [rbp - 0x75], r14b
mov word [rbp - 0x51], 0x73
mov dword [rbp - 0x5c], 0x78657041
mov dword [rbp - 0x58], 0x67654c20
mov word [rbp - 0x54], 0x6e65
mov byte [rbp - 0x52], 0x64
mov byte [rbp - 0x4f], r14b
mov dword [rbp + 0x100], r14d
lea rdx, [rbp - 0x5c]
lea rcx, [rbp - 0x80]
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x14006bc46
lea rdx, [rbp + 0x100]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov qword [0x140151708], rbx
mov edi, dword [rbp + 0x100]
jmp 0x14006be86
mov qword [0x140151708], rbx
nop dword [rax]
mov word [rbp - 0x6b], 0x31
mov dword [rbp - 0x74], 0x70736552
mov dword [rbp - 0x70], 0x306e7761
mov byte [rbp - 0x6c], 0x30
mov byte [rbp - 0x69], r14b
mov word [rsp + 0x7b], 0x73
mov dword [rsp + 0x70], 0x78657041
mov dword [rsp + 0x74], 0x67654c20
mov word [rsp + 0x78], 0x6e65
mov byte [rsp + 0x7a], 0x64
mov byte [rsp + 0x7d], r14b
mov dword [rbp + 0x108], r14d
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x74]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14006bcbf
lea rdx, [rbp + 0x108]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov word [rsp + 0x5b], 0x73
mov dword [rsp + 0x50], 0x78657041
mov dword [rsp + 0x54], 0x67654c20
mov word [rsp + 0x58], 0x6e65
mov byte [rsp + 0x5a], 0x64
mov byte [rsp + 0x5d], r14b
mov word [rbp - 0x5f], 0x31
mov dword [rbp - 0x68], 0x70736552
mov dword [rbp - 0x64], 0x306e7761
mov byte [rbp - 0x60], 0x30
mov byte [rbp - 0x5d], r14b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006bd96
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006bd96
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov ecx, dword [rdx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14006bd91
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14006bd70
cmp r8d, 0xf652bc95
je 0x14006bd9b
test r9d, r9d
jne 0x14006bd50
mov rax, qword [rax]
jmp 0x14006bd20
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call rax
mov qword [0x140151708], rax
mov edi, dword [rbp + 0x108]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006be54
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006be54
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006be4f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006be30
cmp edx, 0x2fa62ca8
je 0x14006be59
test r9d, r9d
jne 0x14006be10
mov rax, qword [rax]
jmp 0x14006bde0
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov ecx, 0xfa0
call rax
cmp qword [0x140151708], r14
je 0x14006bc50
test edi, edi
je 0x14006c3e0
mov rcx, qword [0x140151c80]
mov dword [rcx], edi
mov dword [rbp - 0x44], r14d
mov qword [rbp - 0x30], r14
mov dword [rbp - 0x48], edi
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov dword [rsp + 0x50], 5
lea rax, [rbp - 0x48]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x54], 1
mov dword [rsp + 0x48], 0x10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r14d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 8]
call fcn.14006ecc0
mov rax, qword [rbp - 0x40]
mov qword [0x1401516f0], rax
test rax, rax
je 0x14006bf28
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140048bf0
test al, al
jne 0x14006c022
movdqa xmm0, xmmword [0x14007a7e0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x3b756525
mov word [rsp + 0x64], 0x100
lea rcx, [rsp + 0x50]
call fcn.140061300
mov rcx, rax
call fcn.14006ea20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006bff4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006bff4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006bfef
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006bfd0
cmp edx, 0x2fa62ca8
je 0x14006bff9
test r9d, r9d
jne 0x14006bfb0
mov rax, qword [rax]
jmp 0x14006bf80
mov eax, dword [r11 + 0x24]
add rax, r10
movzx edx, word [rax + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov ecx, 0x1f40
call rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 8
call fcn.14006ee30
lea rcx, [0x14005b430]
mov qword [rax], rcx
mov qword [rbp + 0x100], rax
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14006e410]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14006c3cf
cmp dword [rsp + 0x58], 0
je 0x14006c3c3
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006c3c3
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov ecx, 8
call fcn.14006ee30
lea rcx, [0x140060bc0]
mov qword [rax], rcx
mov qword [rbp + 0x100], rax
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14006e410]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14006c3b2
cmp dword [rsp + 0x58], 0
je 0x14006c3a6
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006c3a6
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
call fcn.1400650b0
test al, al
jne 0x14006c16e
mov word [rsp + 0x67], 0x79
movdqa xmm0, xmmword [0x14007a7d0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x65766f20
mov word [rsp + 0x64], 0x6c72
mov byte [rsp + 0x66], 0x61
mov byte [rsp + 0x69], al
lea rdx, [0x140079be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14006eaa0
lea rdx, [rsp + 0x50]
jmp 0x14006c1c1
call fcn.140064820
test al, al
jne 0x14006c387
mov word [rsp + 0x69], 0x69
movdqa xmm0, xmmword [0x14007a7a0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x657a696c
mov dword [rsp + 0x64], 0x476d4920
mov byte [rsp + 0x68], 0x75
mov byte [rsp + 0x6b], al
lea rdx, [0x140079be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14006eaa0
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.14006eaa0
lea rdx, [0x14006ec80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x64], 0x79616c
movdqa xmm0, xmmword [0x14007a0c0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7265766f
mov byte [rsp + 0x68], 0
lea rdx, [0x140079be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14006eaa0
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.14006eaa0
lea rdx, [0x14006ec80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006c2b4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006c2b4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006c2af
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006c290
cmp edx, 0x2fa62ca8
je 0x14006c2b9
test r9d, r9d
jne 0x14006c270
mov rax, qword [rax]
jmp 0x14006c240
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov ecx, 0x1f40
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006c364
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006c364
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006c35f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006c340
cmp edx, 0xe80fd3a
je 0x14006c369
test r9d, r9d
jne 0x14006c320
mov rax, qword [rax]
jmp 0x14006c2f0
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
xor ecx, ecx
call rax
call fcn.140064420
xor eax, eax
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x58], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x58], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movdqa xmm0, xmmword [0x14007a7f0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x28687225
mov dword [rsp + 0x64], 0x6f647879
mov dword [rsp + 0x68], 0x7c7d68
mov byte [rsp + 0x6c], 1
lea rcx, [rsp + 0x50]
call fcn.14006c4e0
mov rcx, rax
call fcn.14006ea20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14006c4a4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14006c4a4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14006c49f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14006c480
cmp edx, 0x2fa62ca8
je 0x14006c4a9
test r9d, r9d
jne 0x14006c460
mov rax, qword [rax]
jmp 0x14006c430
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov ecx, 0x1f40
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]