Function at 0x14000ead8
Capabilities:
Move file
Print debug messages

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x198]
sub rsp, 0x298
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov r15, r9
mov r13, r8
mov r14, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov ebx, 0x104
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memset
or rsi, 0xffffffffffffffff
mov r9, rsi
mov r8, qword [r14]
mov edx, ebx
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rcx, [rsp + 0x60]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea rcx, [rsp + 0x60]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov r9, rsi
lea r8, str.ProfileM.enc
mov edx, ebx
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcat_s]
lea rbx, [rdi + 0x218]
mov esi, 1
lea r9d, [rsi + 2]
mov r8d, esi
mov rdx, qword [r13]
mov rcx, rbx
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::EnableEncryption_char_const____ptr64__enum_DBE_HASH_ALG__enum_DBE_ENCRYPT_ALG____ptr64]
test eax, eax
je 0x14000ebda
mov rcx, r14
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov rcx, r13
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov rcx, r15
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov eax, 2
jmp 0x14000eee0
lea r12, [rdi + 0x308]
mov r9d, 3
mov r8d, esi
mov rdx, qword [r15]
mov rcx, r12
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::EnableEncryption_char_const____ptr64__enum_DBE_HASH_ALG__enum_DBE_ENCRYPT_ALG____ptr64]
test eax, eax
jne 0x14000ebb3
mov esi, 0x1770
mov r9d, esi
mov r8, qword [r14]
lea rdx, str.951C05EC_6DA8_43C3_8F2B_869B02EA52B9
mov rcx, rbx
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::Open_char_const____ptr64__char_const____ptr64__unsigned_long_int____ptr64]
test eax, eax
jne 0x14000ebb3
mov r9d, esi
lea r8, [rsp + 0x60]
lea rdx, str.951C05EC_6DA8_43C3_8F2B_869B02EA52B9
mov rcx, r12
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::Open_char_const____ptr64__char_const____ptr64__unsigned_long_int____ptr64]
test eax, eax
je 0x14000ec3f
mov ebx, 2
jmp 0x14000eec1
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], eax
lea r9d, [rax + 0x14]
lea r8, [rsp + 0x40]
mov esi, dword [rbp + 0x200]
mov edx, esi
mov rcx, rdi
call fcn.140010320
mov edx, 0x14
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov rcx, r12
test rax, rax
jne 0x14000ec84
xor edx, edx
jmp 0x14000ec89
lea rdx, [rsp + 0x40]
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::SetDatabaseVersion_char_const____ptr64____ptr64]
mov r8d, Ordinal_265
lea rdx, [rbp + 0x70]
mov rcx, rbx
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::GetDatabaseVersion_char____ptr64__unsigned_int____ptr64]
test esi, esi
jne 0x14000eccf
mov edx, 0x104
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14000ecd8
lea rdx, str.11.5.1.0
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14000ecd8
mov ebx, 2
cmp esi, ebx
jne 0x14000ed0e
mov edx, esi
mov rcx, rdi
call fcn.14000a96c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
mov edx, esi
mov rcx, rdi
call fcn.14000b01c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
mov edx, esi
mov rcx, rdi
call fcn.14000b6f4
jmp 0x14000ed60
test esi, esi
jne 0x14000ed27
lea rdx, str.12.0.0.0
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14000ed2c
cmp esi, 1
jne 0x14000ed6b
mov edx, esi
mov rcx, rdi
call fcn.14000acc4
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
mov edx, esi
mov rcx, rdi
call fcn.14000b388
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
mov edx, esi
mov rcx, rdi
call fcn.14000ba4c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000bda4
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000c10c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000c3b4
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000c65c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000c904
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000cbac
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000ce54
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000d0fc
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000d3a4
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000d64c
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000d8f4
mov ebx, eax
cmp eax, 0x17
je 0x14000ee42
xor edx, edx
mov rcx, rdi
call fcn.14000db9c
mov ebx, eax
lea rcx, [rdi + 0x218]
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::Close_void____ptr64]
mov rcx, r12
call qword [sym.imp.DbEngine.dll_public:_int___cdecl_CSecureDbEngine::Close_void____ptr64]
cmp ebx, 0x17
je 0x14000eec1
mov edi, 1
mov r8d, edi
mov rdx, qword [r14]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
je 0x14000eec1
lea rcx, str.CChangeDbKey::ConvertDb___Successfully_converted_database
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
or r9, 0xffffffffffffffff
lea r8, str..bak
mov edx, 0x104
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcat_s]
lea rdx, str..bak
mov rcx, r14
call qword [sym.imp.mfc140.dll_Ordinal_1674]
mov r8d, edi
mov rdx, qword [r14]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
nop
mov rcx, r14
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov rcx, r13
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov rcx, r15
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov eax, ebx
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.140059ef0
add rsp, 0x298
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret