Function at 0x14003e380
Capabilities:
Delete file
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140063040]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
lea rcx, str.Localappdata
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140001680
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rbp + 0xb0]
sub rax, r13
cmp rax, 0x17
jb 0x14003ebfc
lea rax, [rbp + 0xa0]
mov r15, qword [rbp + 0xa0]
mov r12, qword [rbp + 0xb8]
cmp r12, 0xf
cmova rax, r15
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
lea r14, [r13 + 0x17]
mov ebx, 0xf
mov edi, ebx
lea rsi, [rbp + 0x70]
movabs rdx, 0x8000000000000000
lea r8d, [rbx + 7]
cmp r14, rbx
jbe 0x14003e4bf
mov rdi, r14
or rdi, rbx
cmp rdi, rcx
jbe 0x14003e482
mov rdi, rcx
lea rax, [rdx + 0x27]
mov rcx, rax
call fcn.14004e7e0
test rax, rax
je 0x14003e55a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rsp + 0x30]
jmp 0x14003e4bb
cmp rdi, r8
cmovb rdi, r8
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14003e4a5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ec02
jmp 0x14003e45e
test rcx, rcx
je 0x14003e4b9
call fcn.14004e7e0
mov rsi, rax
mov rax, qword [rsp + 0x30]
jmp 0x14003e4bb
xor esi, esi
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], rdi
mov r8, r13
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.TakumoLoaderuser.data]
movups xmmword [rsi + r13], xmm0
mov eax, dword [0x140057eb8]
mov dword [rsi + r13 + 0x10], eax
movzx eax, word [0x140057ebc]
mov word [rsi + r13 + 0x14], ax
movzx eax, byte [0x140057ebe]
mov byte [rsi + r13 + 0x16], al
mov byte [rsi + r14], 0
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], rbx
cmova rcx, qword [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rdx, qword [rbp + 0x88]
cmp rdx, rbx
jbe 0x14003e566
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e561
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004e81c
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
lea rsi, [rbp + 0xa0]
cmp r12, rbx
cmova rsi, r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
lea rdi, [rbp + 0x70]
cmp r14, rbx
jbe 0x14003e62e
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14003e5e9
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14004e7e0
test rax, rax
je 0x14003e612
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003e62a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003e619
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ec08
jmp 0x14003e5ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003e628
call fcn.14004e7e0
mov rdi, rax
jmp 0x14003e62a
xor edi, edi
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], rbx
mov r8, r13
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.TakumoLoaderuser.data]
movups xmmword [rdi + r13], xmm0
mov eax, dword [0x140057eb8]
mov dword [rdi + r13 + 0x10], eax
movzx eax, word [0x140057ebc]
mov word [rdi + r13 + 0x14], ax
movzx eax, byte [0x140057ebe]
mov byte [rdi + r13 + 0x16], al
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0xc0]
call fcn.14003ec10
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14003e6de
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e6d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e6d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004e81c
lea rax, [rbp - 0x38]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x38], 0
xor eax, eax
mov qword [rbp - 0x30], rax
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.140041760
mov byte [rbp - 0x38], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov ecx, 0x20
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, str.server
mov rcx, rbx
call fcn.140001680
nop
mov qword [rbp - 0x30], rbx
xor edi, edi
mov qword [rbp - 0x28], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x20], dil
xor eax, eax
mov qword [rbp - 0x18], rax
movsxd rbx, dword [0x140064130]
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140041760
mov byte [rbp - 0x20], 5
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rdi
lea rax, [rbp - 0x38]
mov qword [rbp + 0x70], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp]
call fcn.14003fce0
mov qword [rbp + 0x10], rdi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x68], dil
xor eax, eax
mov qword [rsp + 0x70], rax
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140041760
mov byte [rsp + 0x68], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea ecx, [rdi + 0x20]
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, str.path
mov rcx, rbx
call fcn.140001680
nop
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x80], dil
xor eax, eax
mov qword [rbp - 0x78], rax
xor edx, edx
lea rcx, [rbp - 0x78]
call fcn.140041760
mov byte [rbp - 0x80], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea ecx, [rdi + 0x20]
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, [0x140051815]
mov rcx, rbx
call fcn.140001680
nop
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rdi
lea rax, [rsp + 0x68]
mov qword [rbp + 0x70], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x18]
call fcn.14003fce0
mov qword [rbp + 0x28], rdi
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov byte [rsp + 0x38], dil
xor eax, eax
mov qword [rsp + 0x40], rax
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140041760
mov byte [rsp + 0x38], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea ecx, [rdi + 0x20]
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, str.CustomServer
mov rcx, rbx
call fcn.140001680
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x50], dil
xor eax, eax
mov qword [rsp + 0x58], rax
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140041760
mov byte [rsp + 0x50], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea ecx, [rdi + 0x20]
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, [0x140051815]
mov rcx, rbx
call fcn.140001680
nop
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x38]
mov qword [rbp + 0x70], rax
lea rax, [rsp + 0x68]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.14003fce0
mov qword [rbp + 0x40], rdi
lea rax, [rbp - 0x68]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x68], dil
xor eax, eax
mov qword [rbp - 0x60], rax
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.140041760
mov byte [rbp - 0x68], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea ecx, [rdi + 0x20]
call fcn.14004e7e0
mov rbx, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rbx
lea rdx, str.ActiveTheme
mov rcx, rbx
call fcn.140001680
nop
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x50], dil
xor eax, eax
mov qword [rbp - 0x48], rax
movsxd rbx, dword [0x140064340]
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140041760
mov byte [rbp - 0x50], 5
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rdi
lea rax, [rbp - 0x68]
mov qword [rbp + 0x70], rax
lea rax, [rbp - 0x38]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x48]
call fcn.14003fce0
mov qword [rbp + 0x58], rdi
lea rax, [rbp]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x90]
call fcn.14003fce0
nop
lea r9, [fcn.14003e360]
lea edx, [rdi + 0x18]
lea r8d, [rdi + 4]
lea rcx, [rbp]
call fcn.14004ec0c
nop
lea r9, [fcn.14003e360]
lea edx, [rdi + 0x18]
lea r8d, [rdi + 2]
lea rcx, [rbp - 0x68]
call fcn.14004ec0c
nop
lea r9, [fcn.14003e360]
lea edx, [rdi + 0x18]
lea r8d, [rdi + 2]
lea rcx, [rsp + 0x38]
call fcn.14004ec0c
nop
lea r9, [fcn.14003e360]
lea edx, [rdi + 0x18]
lea r8d, [rdi + 2]
lea rcx, [rsp + 0x68]
call fcn.14004ec0c
nop
lea r9, [fcn.14003e360]
lea edx, [rdi + 0x18]
lea r8d, [rdi + 2]
lea rcx, [rbp - 0x38]
call fcn.14004ec0c
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x90]
call fcn.14003f9f0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14003ead1
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xc0]
call fcn.1400466c0
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14003eb24
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003eb1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003eb1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004e81c
nop
movzx edx, byte [rbp + 0x90]
lea rcx, [rbp + 0x98]
call fcn.140041760
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xc8]
call fcn.14003f910
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
cmp r12, 0xf
jbe 0x14003ebcc
lea rdx, [r12 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14003ebc4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ebc4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14004e81c
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.14004e7c0
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001210
nop
call fcn.140001170
int3
call fcn.140001170
int3