Function at 0x140093318
Capabilities:
Get geographical location
Get keyboard layout
Read file via mapping

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
mov r15d, r9d
mov rbp, r8
mov r12, rdx
mov r14, rcx
mov rax, qword [0x14002e420]
mov qword [rsp + 0xd0], rax
call fcn.14009f653
mov qword [0x14002b2b0], r14
mov qword [0x14002b2b8], 0
mov dword [0x14002b2c0], 5
call fcn.14009f9f4
call fcn.14008d2ac
call fcn.14009efb7
call fcn.140091978
call fcn.14009f6b4
test eax, eax
je 0x1400933fb
cmp dword [0x14002bc24], 4
jb 0x140093398
jne 0x1400933ab
cmp dword [0x14002bc30], 2
je 0x1400933ab
lea rcx, str.MSWHEEL_ROLLMSG
call qword [sym.imp.USER32.dll_RegisterWindowMessageA]
mov dword [0x14002e370], eax
call fcn.14009e2b0
lea rcx, str.user32.dll
call fcn.14009f5be
mov rbx, rax
lea rcx, str.winmm.dll
call fcn.14009f5be
mov rsi, rax
test rbx, rbx
je 0x14009341a
lea rdx, str.FlashWindowEx
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
call rdi
mov qword [0x14002b298], rax
lea rdx, str.ToUnicodeEx
mov rcx, rbx
call rdi
jmp 0x140093427
mov rdx, qword [0x140002098]
lea rcx, str._s_Fatal_Error
call fcn.14004714e
mov rsi, rax
lea rdx, str.Windows_refuses_to_report_a_version
jmp 0x140093484
mov qword [0x14002b298], 0
xor eax, eax
mov qword [0x14002b280], rax
test rsi, rsi
je 0x140093445
lea rdx, str.PlaySoundA
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x140093447
xor eax, eax
mov qword [0x14002b090], rax
call fcn.14003971c
mov qword [0x14002b2c8], rax
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
cmp eax, 2
jb 0x1400934c3
mov rdx, qword [0x140002098]
lea rcx, str._s_Fatal_Error
call fcn.14004714e
mov rsi, rax
lea rdx, str.Failed_to_initialize_COM_subsystem
xor ecx, ecx
mov r9d, 0x30
mov r8, rsi
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rsi
call fcn.140047430
mov rcx, qword [rsp + 0xd0]
call fcn.1400a8e70
mov eax, 1
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [0x1400020a0]
mov dword [0x14002b2d0], ecx
call fcn.14004c3dd
mov dword [0x14002b2d4], 0
test rax, rax
je 0x1400934ef
mov eax, dword [rax + 0x94]
mov dword [0x14002b2d4], eax
mov rcx, qword [0x14002b2c8]
xor r13d, r13d
mov edx, 0x78
xor r8d, r8d
call fcn.140039fa7
mov rdx, qword [0x14002b2c8]
xor ecx, ecx
call fcn.1400502ac
mov bl, byte [rbp]
test bl, bl
mov dword [rsp + 0x6c], r15d
je 0x14009353e
lea rsi, [rbp + 2]
movsx ecx, bl
call fcn.1400b898c
test eax, eax
je 0x140093e93
mov bl, byte [rsi - 1]
inc rsi
test bl, bl
jne 0x140093524
xor r15d, r15d
or r15d, r13d
mov rcx, qword [0x14002b2c8]
call fcn.140039682
or r15d, dword [0x14002b2d8]
je 0x140093569
mov rcx, qword [0x14002b2c8]
call fcn.140047d0a
test eax, eax
jne 0x140093576
call fcn.1400919cb
test eax, eax
je 0x140094233
mov rcx, qword [0x14002b2c8]
xor edx, edx
call fcn.140039aa1
mov rcx, rax
call fcn.1400471aa
mov rsi, rax
lea rdx, [0x140008d5f]
mov rcx, rsi
call fcn.1400b9758
lea rbp, [rsi + rax]
cmp byte [rsi + rax], 0
je 0x1400935da
mov edx, pe_nt_image_headers64
mov rcx, rbp
call fcn.1400aa5cc
mov rbx, rax
test rbx, rbx
je 0x1400935da
mov byte [rbx], 0
mov rcx, qword [0x14002b2c8]
mov edx, 0x34
mov r8, rbp
call fcn.14003a13b
inc rbx
mov rbp, rbx
mov edx, 0x3a
mov rcx, rbp
call fcn.140047051
mov rbx, rax
test rbx, rbx
je 0x140093605
lea rcx, [rbx + 1]
mov edx, 0x3a
call fcn.140047051
test rax, rax
jne 0x140093605
mov byte [rbx], 0
mov rax, rsi
jmp 0x140093612
mov byte [rax], cl
inc rax
inc rbp
mov cl, byte [rbp]
cmp cl, 9
je 0x14009360f
cmp cl, 0x20
je 0x14009360f
test cl, cl
jne 0x14009360a
mov byte [rax], 0
mov rcx, qword [0x14002b2c8]
xor edx, edx
mov r8, rsi
call fcn.14003a13b
mov rcx, rsi
call fcn.140047430
test r12, r12
jne 0x1400936b0
lea rsi, [rsp + 0x80]
mov dword [rsi], 0
lea rax, [0x140094398]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], r14
mov edx, 0xc8
mov rcx, r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rsi + 0x20], rax
xor ecx, ecx
mov edx, 0x7f01
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rsi + 0x28], rax
xorps xmm0, xmm0
movups xmmword [rsi + 0x30], xmm0
mov r8, qword [0x140002098]
xor ecx, ecx
xor edx, edx
call fcn.140048177
mov qword [rsi + 0x40], rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_RegisterClassW]
lea rcx, [0x140029af0]
xor edi, edi
xor edx, edx
mov r8d, 0xb18
call fcn.1400aa3a0
mov rcx, qword [0x14002b2c8]
mov edx, 0x64
call fcn.140039937
mov dword [0x14002b2dc], eax
mov rcx, qword [0x14002b2c8]
mov edx, 0x90
call fcn.140039937
mov dword [0x14002b2e0], eax
call fcn.140097e24
mov dword [0x14002a608], 0xa
mov dword [0x14002a60c], 0x14
mov dword [0x14002a610], 0x19
mov dword [0x14002a614], 0x1c
mov rcx, qword [0x14002b2c8]
mov edx, 0x73
call fcn.140039937
lea eax, [rax + rax*4]
lea r12d, [rax + rax + 0x19]
mov ebx, dword [0x14002a614]
mov ebp, dword [0x14002a60c]
mov rcx, qword [0x14002b2c8]
mov edx, 0x74
call fcn.140039937
mov esi, eax
imul esi, ebp
add esi, ebx
mov rbx, qword [0x14002b2b8]
call fcn.140093004
test eax, eax
je 0x140093781
mov edx, 2
mov rcx, rbx
call qword [0x140029ab8]
mov rcx, rax
jmp 0x140093786
mov ecx, 0x12340042
lea rbx, [rsp + 0x80]
mov dword [rbx], 0x28
mov rdx, rbx
call fcn.14009322a
mov r15d, dword [rbx + 0xc]
mov ebp, dword [rbx + 0x10]
sub r15d, dword [rbx + 4]
sub ebp, dword [rbx + 8]
cmp r12d, r15d
cmovle r15d, r12d
cmp esi, ebp
cmovle ebp, esi
mov r8, qword [0x140002098]
xor ecx, ecx
xor edx, edx
call fcn.140048177
mov r12, rax
mov rcx, qword [0x14002b2c8]
mov edx, 0x6d
call fcn.140039937
test eax, eax
mov eax, 0xcf0000
mov ebx, 0xef0000
cmove ebx, eax
mov rcx, qword [0x14002b2c8]
mov edx, 0x6f
call fcn.140039937
mov esi, ebx
and esi, 0xea0000
cmp eax, 1
cmovne esi, ebx
mov rcx, qword [0x14002b2c8]
mov edx, 0x56
call fcn.140039937
xor ebx, ebx
test eax, eax
setne bl
lea r13d, [rbx*8]
mov rcx, qword [0x14002b2c8]
mov edx, 0x7e
call fcn.140039937
test eax, eax
lea ecx, [rbx*8 + 0x200]
cmove ecx, r13d
mov qword [rsp + 0x50], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x38], ebp
mov dword [rsp + 0x30], r15d
mov eax, 0x80000000
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x58], 0
mov rdx, r12
mov r8, r12
mov r9d, esi
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14002b2b8], rax
mov rcx, r12
call fcn.140047430
xor ecx, ecx
xor edx, edx
call fcn.140097f9e
mov rcx, qword [0x14002b2c8]
lea rdx, [0x140029af0]
xor r8d, r8d
call fcn.140081deb
mov qword [0x14002b2a8], rax
mov rdx, qword [0x14002b2c8]
xor ecx, ecx
call fcn.14004492c
mov qword [0x14002b2e8], rax
mov rcx, qword [0x14002b2a8]
mov rdx, rax
call fcn.14008820b
mov rcx, qword [0x14002b2c8]
mov edx, 0x60
call fcn.140039937
mov esi, eax
mov rcx, qword [0x14002b2c8]
mov edx, 0x73
call fcn.140039937
mov ebx, eax
mov rcx, qword [0x14002b2c8]
mov edx, 0x74
call fcn.140039937
mov rcx, qword [0x14002b2a8]
mov edx, eax
mov r8d, ebx
mov r9d, esi
call fcn.140081faa
mov rcx, qword [0x14002b2b8]
lea rbx, [rsp + 0x70]
mov rdx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14002b2b8]
lea rsi, [rsp + 0x80]
mov rdx, rsi
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x14002b2c8]
mov edx, 0x7f
call fcn.140039937
mov dword [0x14002a618], eax
mov dword [0x14002a61c], eax
lea ecx, [rax + rax]
add ecx, dword [rbx + 8]
sub ecx, dword [rbx]
sub ecx, dword [rsi + 8]
add ecx, dword [rsi]
mov dword [0x14002a610], ecx
mov edx, dword [rbx + 0xc]
sub edx, dword [rbx + 4]
sub edx, dword [rsi + 0xc]
add edx, dword [rsi + 4]
lea eax, [rdx + rax*2]
mov dword [0x14002a614], eax
mov rdx, qword [0x14002b2a8]
mov ebp, dword [rdx + 0x168]
mov edx, dword [rdx + 0x16c]
imul edx, dword [0x14002a608]
add edx, ecx
imul ebp, dword [0x14002a60c]
add ebp, eax
mov rcx, qword [0x14002b2b8]
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], edx
mov dword [rsp + 0x30], 0xe
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x14002a608]
lea ecx, [rax + 0xf]
sar ecx, 0x1f
shr ecx, 0x1c
lea eax, [rax + rcx + 0xf]
sar eax, 4
imul eax, dword [0x14002a60c]
add eax, eax
movsxd rbp, eax
mov edx, 1
mov rcx, rbp
call fcn.14004723d
mov rbx, rax
xor edx, edx
mov rcx, rbx
mov r8, rbp
call fcn.1400aa3a0
mov edx, dword [0x14002a60c]
mov ecx, dword [0x14002a608]
mov qword [rsp + 0x20], rbx
mov r8d, 1
mov r9d, 1
call qword [sym.imp.GDI32.dll_CreateBitmap]
mov qword [0x14002a620], rax
mov rcx, rbx
call fcn.140047430
mov r9d, dword [0x14002a60c]
mov r8d, dword [0x14002a608]
mov rdx, qword [0x14002a620]
mov rcx, qword [0x14002b2b8]
call qword [sym.imp.USER32.dll_CreateCaret]
movabs rax, 0x1f0000001c
mov qword [rsi], rax
mov dword [rsi + 8], edi
mov rax, qword [0x14002b2a8]
mov eax, dword [rax + 0x168]
lea ecx, [rax - 1]
mov dword [rsi + 0xc], ecx
mov dword [rsi + 0x10], eax
mov dword [rsi + 0x14], edi
mov rcx, qword [0x14002b2b8]
lea r8, [rsp + 0x80]
mov edx, 1
xor r9d, r9d
call qword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [0x14002a628], edi
mov dword [0x14002a62c], edi
call qword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [0x14002a630], eax
mov rcx, qword [0x14002b2b8]
xor edx, edx
call qword [sym.imp.USER32.dll_GetSystemMenu]
mov qword [0x14002a640], rax
call qword [sym.imp.USER32.dll_CreatePopupMenu]
mov qword [0x14002a648], rax
lea r9, str.Paste
xor edx, edx
mov r8d, 0x190
mov rcx, rax
call qword [sym.imp.USER32.dll_AppendMenuA]
call qword [sym.imp.USER32.dll_CreateMenu]
mov qword [0x14002a650], rax
lea rcx, [0x14002a658]
mov edx, 1
call fcn.1400502b1
call fcn.140098607
mov rbp, qword [sym.imp.USER32.dll_AppendMenuA]
lea r13, str.Clear_Scrollback
lea r14, str.Reset_Terminal
lea r15, str.Full_Screen
lea r12, str.About__s
lea rax, [0x14002a640]
mov rsi, qword [rdi + rax]
mov edx, 0x800
xor r8d, r8d
xor r9d, r9d
mov rcx, rsi
call rbp
xor edx, edx
mov r8d, 0x10
mov rcx, rsi
lea r9, str.Event_Log
call rbp
mov edx, 0x800
xor r8d, r8d
xor r9d, r9d
mov rcx, rsi
call rbp
xor edx, edx
mov r8d, 0x20
mov rcx, rsi
lea r9, str.New_Session...
call rbp
xor edx, edx
mov r8d, 0x30
mov rcx, rsi
lea r9, str.Duplicate_Session
call rbp
mov r8, qword [0x14002a650]
mov edx, 0x10
mov rcx, rsi
lea r9, str.Saved_Sessions
call rbp
xor edx, edx
mov r8d, 0x50
mov rcx, rsi
lea r9, str.Change_Settings...
call rbp
mov edx, 0x800
xor r8d, r8d
xor r9d, r9d
mov rcx, rsi
call rbp
xor edx, edx
mov r8d, 0x170
mov rcx, rsi
lea r9, str.Copy_All_to_Clipboard
call rbp
xor edx, edx
mov r8d, 0x60
mov rcx, rsi
mov r9, r13
call rbp
xor edx, edx
mov r8d, 0x70
mov rcx, rsi
mov r9, r14
call rbp
mov edx, 0x800
xor r8d, r8d
xor r9d, r9d
mov rcx, rsi
call rbp
mov rcx, qword [0x14002b2c8]
mov edx, 0x6f
call fcn.140039937
xor edx, edx
cmp eax, 1
sete dl
mov r8d, 0x180
mov rcx, rsi
mov r9, r15
call rbp
mov edx, 0x800
xor r8d, r8d
xor r9d, r9d
mov rcx, rsi
call rbp
call fcn.14009e491
test eax, eax
je 0x140093c8e
xor edx, edx
mov r8d, 0x140
mov rcx, rsi
lea r9, str.Help
call rbp
mov rcx, r12
mov rdx, qword [0x140002098]
call fcn.14004714e
mov rbx, rax
xor edx, edx
mov r8d, 0x150
mov rcx, rsi
mov r9, rbx
call rbp
mov rcx, rbx
call fcn.140047430
add rdi, 8
cmp rdi, 0x10
jne 0x140093b53
cmp dword [0x14002b2f0], 0
je 0x140093cdd
lea rdx, str.Running_with_restricted_process_ACL
xor ecx, ecx
call fcn.140092645
call fcn.1400986b6
xor esi, esi
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
movzx ecx, ax
lea rdi, [rsp + 0x80]
mov edx, 0x1004
mov r9d, 0x14
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov rcx, rdi
call fcn.1400b78ac
mov dword [0x14002b210], eax
mov rcx, qword [0x14002b2b8]
mov edx, dword [rsp + 0x6c]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14002b2b8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov qword [0x14002a670], rsi
mov qword [0x14002a678], rsi
call fcn.140098932
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor edx, edx
cmp rax, qword [0x14002b2b8]
sete dl
mov rcx, qword [0x14002b2a8]
call fcn.140088213
mov rcx, qword [0x14002b2b8]
call qword [sym.imp.USER32.dll_UpdateWindow]
lea r13, [rsp + 0x70]
mov rsi, qword [sym.imp.USER32.dll_PeekMessageW]
mov r15, qword [sym.imp.USER32.dll_IsWindow]
mov r14, qword [sym.imp.USER32.dll_DispatchMessageW]
mov r12, qword [sym.imp.USER32.dll_IsDialogMessageA]
call fcn.140038369
test eax, eax
mov ebx, 0
jne 0x140093de6
mov dword [rsp + 0x20], 0
xor ebx, ebx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
mov rcx, rdi
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140093de6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor edx, edx
cmp rax, qword [0x14002b2b8]
sete dl
mov rcx, qword [0x14002b2a8]
call fcn.140088213
mov ebx, 0xffffffff
mov rcx, r13
call fcn.14009df3c
mov rbp, rax
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x20], 0x1cff
xor r8d, r8d
mov rdx, rbp
mov r9d, ebx
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
cmp eax, dword [rsp + 0x70]
jae 0x140093e1e
mov eax, eax
mov rcx, qword [rbp + rax*8]
call fcn.14009e0a1
mov rcx, rbp
call fcn.140047430
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
mov rcx, rdi
call rsi
test eax, eax
je 0x140093e7b
cmp dword [rsp + 0x88], 0x12
je 0x140093e85
mov rcx, qword [0x14002b2f8]
call r15
test eax, eax
je 0x140093e68
mov rcx, qword [0x14002b2f8]
mov rdx, rdi
call r12
test eax, eax
jne 0x140093e6e
mov rcx, rdi
call r14
cmp dword [rsp + 0x88], 0x8005
je 0x140093e26
call fcn.140038324
jmp 0x140093d96
mov ecx, dword [rsp + 0x90]
call fcn.1400942c3
ud2
lea rcx, [rsi - 2]
cmp bl, 0x26
jne 0x140093ecb
cmp byte [rsi - 1], 0x52
jne 0x140093f6c
mov al, byte [rsi]
test al, al
je 0x140093eb8
cmp al, 0x26
je 0x140093eb8
cmp al, 0x40
jne 0x140093f6c
call fcn.1400a3eac
mov dword [0x14002b2f0], 1
mov bl, byte [rsi]
jmp 0x140093ece
mov rsi, rcx
test bl, bl
je 0x14009353e
cmp bl, 0x26
je 0x140093f69
cmp bl, 0x40
jne 0x140093ffc
mov rcx, rsi
call fcn.1400b93d0
movsxd rdi, eax
mov rcx, rax
shl rcx, 0x20
movabs rbx, 0xffffffff00000000
mov rbp, rcx
cmp rdi, 2
jl 0x140093f23
movsx ecx, byte [rsi + rdi - 1]
dec rdi
call fcn.1400b898c
lea rcx, [rbp + rbx]
test eax, eax
jne 0x140093f04
sar rbp, 0x20
mov byte [rsi + rbp], 0
mov rdx, qword [0x14002b2c8]
inc rsi
mov rcx, rsi
call fcn.1400502ac
mov rcx, qword [0x14002b2c8]
call fcn.140047d0a
mov r15d, 1
test eax, eax
jne 0x140093541
call fcn.1400919cb
test eax, eax
jne 0x140093541
jmp 0x140094233
mov rcx, rsi
inc rcx
lea rdx, str._p:_u
lea r8, [rsp + 0x80]
lea r9, [rsp + 0x70]
call fcn.14004ab60
cmp eax, 2
jne 0x140093fe4
mov eax, dword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rsi, rax
test rsi, rsi
je 0x140093fe4
mov r8d, dword [rsp + 0x70]
mov rcx, qword [0x14002b2c8]
mov rdx, rsi
call fcn.14003a754
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140093ff1
call fcn.1400919cb
test eax, eax
je 0x140094233
mov r15d, 1
jmp 0x140093541
xor r15d, r15d
lea rsi, [rsp + 0x70]
lea r8, [rsp + 0x80]
xor r9d, r9d
mov rcx, rbp
mov rdx, rsi
call fcn.1400a73ac
mov eax, dword [rsi]
test eax, eax
mov r13d, 0
jle 0x140093541
xor r13d, r13d
lea rdi, str._cleanup
xor ebp, ebp
jmp 0x140094148
mov r8d, 7
mov rcx, rsi
lea rdx, str.telnet:
call fcn.1400b9490
test eax, eax
je 0x14009407e
test bl, bl
je 0x140094125
lea rdi, [rsi + 1]
movsx ecx, bl
call fcn.1400b898c
test eax, eax
jne 0x14009411d
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140094060
jmp 0x140094125
lea r13, [rsi + 7]
cmp byte [rsi + 7], 0x2f
jne 0x140094094
lea rax, [rsi + 9]
cmp byte [rsi + 8], 0x2f
cmove r13, rax
mov rcx, qword [0x14002b2c8]
mov edx, 2
mov r8d, 1
call fcn.140039fa7
mov rcx, r13
lea rdx, [0x14001beee]
call fcn.140046fbc
mov cl, byte [r13 + rax]
test cl, cl
je 0x1400940ea
add rax, r13
mov byte [rax], 0
cmp cl, 0x3a
jne 0x1400940ea
inc rax
mov rcx, rax
call fcn.1400b78ac
mov rcx, qword [0x14002b2c8]
mov edx, 1
mov r8d, eax
jmp 0x1400940fc
mov rcx, qword [0x14002b2c8]
mov edx, 1
mov r8d, 0xffffffff
call fcn.140039fa7
mov rcx, qword [0x14002b2c8]
xor edx, edx
mov r8, r13
call fcn.14003a13b
mov r13d, 1
jmp 0x140094214
test bl, bl
je 0x140094125
mov byte [rdi - 1], 0
mov rcx, qword [0x14002b2c8]
xor edx, edx
mov r8, rsi
call fcn.14003a13b
mov r13d, 1
lea rdi, str._cleanup
jmp 0x140094214
mov rcx, qword [rsp + 0x80]
movsxd rbx, ebp
mov rsi, qword [rcx + rbx*8]
mov r9, qword [0x14002b2c8]
inc ebx
cmp ebx, eax
jge 0x14009416d
movsxd rax, ebx
mov rdx, qword [rcx + rax*8]
jmp 0x14009416f
xor edx, edx
mov r8d, 1
mov rcx, rsi
call fcn.140038400
cmp eax, 1
je 0x140094214
cmp eax, 2
je 0x140094212
cmp eax, 0xfffffffe
je 0x140094227
mov rcx, rsi
mov rdx, rdi
call fcn.1400b90f0
test eax, eax
je 0x14009423c
mov rcx, rsi
lea rdx, str._pgpfp
call fcn.1400b90f0
test eax, eax
je 0x1400942a1
mov bl, byte [rsi]
cmp bl, 0x2d
je 0x1400942b2
test r13d, r13d
je 0x14009403b
mov r9, qword [0x14002b2c8]
mov r8d, 1
lea rcx, [0x140002244]
mov rdx, rsi
call fcn.140038400
cmp eax, 2
je 0x140094214
mov r8d, 0x22a
lea rcx, str.ret__2
lea rdx, str..._windows_window.c
call fcn.1400b5fb0
jmp 0x140094214
mov ebp, ebx
inc ebp
mov eax, dword [rsp + 0x70]
cmp ebp, eax
jl 0x140094148
jmp 0x140093541
lea rcx, str.option___s__requires_an_argument
jmp 0x1400942b9
xor ecx, ecx
call fcn.1400942c3
ud2
mov rdi, qword [0x140002098]
lea rcx, str.This_procedure_will_remove_ALL_Registry_entries_nassociated_with__s__and_will_also_remove_nthe_random_seed_file.__This_only_affects_the_ncurrently_logged_in_user.__n_nTHIS_PROCESS_WILL_DESTROY_YOUR_SAVED_SESSIONS._nAre_you_really_sure_you_want_to_continue_
mov rdx, rdi
call fcn.14004714e
mov rsi, rax
lea rcx, str._s_Warning
mov rdx, rdi
call fcn.14004714e
mov rdi, rax
mov r8d, 0x134
mov r9d, 4
mov rcx, rsi
mov rdx, rdi
call fcn.1400a71fe
cmp eax, 6
jne 0x140094288
call fcn.1400a5ecc
mov rcx, rsi
call fcn.140047430
mov rcx, rdi
call fcn.140047430
xor ecx, ecx
call fcn.1400b4148
ud2
call fcn.1400a72fa
mov ecx, 1
call fcn.1400b4148
ud2
lea rcx, str.unknown_option___s_
mov rdx, rsi
call fcn.140094321
ud2