Function at 0x14002f020
Capabilities:
Delete file
Enumerate files on windows
Get common file path
Move file

Disassembly:
push rbp
push rbx
push rsi
lea rbp, [rsp - 0x1220]
mov eax, 0x1320
call fcn.14005a020
sub rsp, rax
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rbp + 0x1210], rax
mov rsi, rdx
mov dword [rsp + 0x30], Ordinal_266
mov rbx, rcx
xor edx, edx
lea rcx, [rbp + 0xa10]
mov r8d, 0x800
call sub.VCRUNTIME140.dll_memset
test rsi, rsi
jne 0x14002f07b
mov eax, 0x800432b1
jmp 0x14002f7ab
xor edx, edx
lea rcx, [rbp + 0x7f0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x7f0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8023
xor ecx, ecx
call qword [sym.imp.SHFOLDER.dll_SHGetFolderPathA]
test eax, eax
jne 0x14002f157
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002f0ee
lea edx, [rax + 1]
call fcn.140025ed0
mov rcx, qword [rbx + 0x510]
lea rdx, str._t_CProfileConverter::RenameProfileDatabases___started_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
mov edx, 1
call fcn.140025ed0
xor edx, edx
lea rcx, [rbp + 0x900]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r8d, Ordinal_265
lea rdx, [rbp + 0x900]
mov rcx, rbx
call fcn.14002dd60
test al, al
jne 0x14002f161
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002f157
lea rdx, str._t_FAILED__Unable_to_obtain_the_sub_folder_name__The_conversion_process_STOPPED_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
lea rdx, str._t_CProfileConverter::RenameProfileDatabases___ended_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
mov edx, 1
call fcn.140025ed0
mov eax, 0x80043298
jmp 0x14002f7ab
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x6e0]
call qword [sym.imp.USERENV.dll_GetProfilesDirectoryA]
test eax, eax
je 0x14002f7a6
mov r9d, 0x103
mov qword [rsp + 0x1350], rdi
lea r8, [rbp + 0x6e0]
lea rcx, [rbp + 0x5d0]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [0x140065290]
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002f1f0
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002f79e
lea rdx, str.No_profiles_to_convert_
jmp 0x14002f799
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002f23f
mov edx, 1
call fcn.140025ed0
lea rax, [rsp + 0x6c]
or r8, 0xffffffffffffffff
lea r9, str._t__START__User:__s_
mov qword [rsp + 0x20], rax
mov edx, 0x800
lea rcx, [rbp + 0xa10]
call fcn.140008c50
mov rcx, qword [rbx + 0x510]
lea rdx, [rbp + 0xa10]
call fcn.140025be0
lea rdx, [0x140065298]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14002f767
lea rdx, [0x140065c90]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14002f767
test byte [rsp + 0x40], 0x10
je 0x14002f767
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x6e0]
lea rcx, [rbp + 0x190]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [rsp + 0x6c]
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [rbx + 0x55a]
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
lea rdx, str.IntelWirelessWLANProfiles.sav
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
xor edx, edx
lea rcx, [rbp + 0xa10]
mov r8d, 0x800
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0xa10]
mov dword [rsp + 0x28], 0x7ff
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.TGT_VERSION
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
lea rdx, [rbp + 0xa10]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
jne 0x14002f767
xor edx, edx
lea rcx, [rbp + 0x2a0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3b0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x4c0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
lea rdx, [0x140065468]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
test rax, rax
lea rdx, [rbp + 0x190]
lea rax, [rbp + 0x2a0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
je 0x14002f5d1
lea r8, str.ORG_IT_DB_FILE_NAME
call fcn.14002de30
lea rax, [rbp + 0x3b0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.SRC_IT_DB_FILE_NAME
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
lea rax, [rbp + 0x4c0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.TGT_IT_DB_FILE_NAME
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f566
mov edx, 0x104
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f566
mov edx, 0x104
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f54c
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
lea rcx, [rbp + 0x80]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x2a0]
lea rcx, [rbp + 0x80]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea r8, str..bak
mov edx, 0x104
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
lea rcx, [rbp + 0x80]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x3b0]
lea rcx, [rbp + 0x80]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea r8, str..bak
mov edx, 0x104
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8d, 1
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rax, [rbp + 0x2a0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.ORG_SHR_DB_FILE_NAME
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
lea rax, [rbp + 0x3b0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.SRC_SHR_DB_FILE_NAME
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
lea r8, str.TGT_SHR_DB_FILE_NAME
jmp 0x14002f615
lea r8, str.ORG_INDIV_DB_FILE_NAME
call fcn.14002de30
lea rax, [rbp + 0x3b0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea r8, str.SRC_INDIV_DB_FILE_NAME
mov rcx, rbx
lea rdx, [rbp + 0x190]
call fcn.14002de30
lea r8, str.TGT_INDIV_DB_FILE_NAME
lea rax, [rbp + 0x4c0]
mov dword [rsp + 0x28], Ordinal_266
lea r9, [0x140067a24]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x190]
mov rcx, rbx
call fcn.14002de30
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f767
mov edx, 0x104
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f767
mov edx, 0x104
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
test rax, rax
je 0x14002f74d
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8d, Ordinal_265
lea rcx, [rbp + 0x80]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x2a0]
lea rcx, [rbp + 0x80]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea r8, str..bak
mov edx, 0x104
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8d, Ordinal_265
lea rcx, [rbp + 0x80]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x3b0]
lea rcx, [rbp + 0x80]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea r8, str..bak
mov edx, 0x104
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8d, 1
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x14002f1f0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002f79e
lea rdx, str._t_CProfileConverter::RenameProfileDatabases___completed_
call fcn.140025be0
mov rdi, qword [rsp + 0x1350]
mov eax, 0x43297
mov rcx, qword [rbp + 0x1210]
xor rcx, rsp
call fcn.140059ef0
add rsp, 0x1320
pop rsi
pop rbx
pop rbp
ret