Function at 0x14002b520
Capabilities:
Copy file
Enumerate files on windows
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x1000]
mov eax, 0x1100
call fcn.14005a020
sub rsp, rax
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rbp + 0xff0], rax
mov rbx, rcx
mov dword [rsp + 0x30], Ordinal_266
lea rcx, [rbp + 0x7f0]
xor edx, edx
mov r8d, 0x800
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3b0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x3b0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8023
xor ecx, ecx
call qword [sym.imp.SHFOLDER.dll_SHGetFolderPathA]
test eax, eax
jne 0x14002b69e
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
lea r8, [rbp + 0x3b0]
mov edx, 0x104
lea rcx, [rbp + 0x190]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rdx, str.IntelWirelessWLANProfiles.sav
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, str.Profiles.enc
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002b635
mov edx, 1
call fcn.140025ed0
mov rcx, qword [rbx + 0x510]
lea rdx, str._t_CProfileConverter::CopySharedDbToUserDb___started_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
mov edx, 1
call fcn.140025ed0
xor edx, edx
lea rcx, [rbp + 0x6e0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r8d, Ordinal_265
lea rdx, [rbp + 0x6e0]
mov rcx, rbx
call fcn.14002dd60
test al, al
jne 0x14002b6a8
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002b69e
lea rdx, str._t_FAILED__Unable_to_obtain_the_sub_folder_name__The_conversion_process_STOPPED_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
lea rdx, str._t_CProfileConverter::CopySharedDbToUserDb___ended_
call fcn.140025be0
mov rcx, qword [rbx + 0x510]
mov edx, 1
call fcn.140025ed0
mov eax, 0x80043298
jmp 0x14002b8f3
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.USERENV.dll_GetProfilesDirectoryA]
test eax, eax
je 0x14002b8ee
mov r9d, 0x103
mov qword [rsp + 0x1118], rdi
lea r8, [rbp + 0x5d0]
lea rcx, [rbp + 0x4c0]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [0x140065290]
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002b733
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002b8e6
lea rdx, str.No_users_to_copy_shared_profile_database_to_
jmp 0x14002b8e1
lea rdx, [0x140065298]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14002b8af
lea rdx, [0x140065c90]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14002b8af
test byte [rsp + 0x40], 0x10
je 0x14002b8af
xor edx, edx
lea rcx, [rbp + 0x80]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x103
lea r8, [rbp + 0x5d0]
lea rcx, [rbp + 0x80]
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [rsp + 0x6c]
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [rbx + 0x55a]
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
lea rdx, str.IntelWirelessWLANProfiles.sav
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [0x140065468]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
test rax, rax
jne 0x14002b8af
xor edx, edx
lea rcx, [rbp + 0x2a0]
mov r8d, Ordinal_265
call sub.VCRUNTIME140.dll_memset
lea r8, [rbp + 0x80]
mov edx, 0x104
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rdx, str.Profiles.enc
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
xor r8d, r8d
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
cmp qword [rbx + 0x510], 0
je 0x14002b8af
lea rax, [rbp + 0x2a0]
or r8, 0xffffffffffffffff
mov qword [rsp + 0x28], rax
lea r9, str._tCopied_shared_profile_DB__s_to_user_based_profile_DB__s._n
lea rax, [rbp + 0x190]
mov edx, 0x800
lea rcx, [rbp + 0x7f0]
mov qword [rsp + 0x20], rax
call fcn.140008c50
mov rcx, qword [rbx + 0x510]
lea rdx, [rbp + 0x7f0]
call fcn.140025be0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x14002b733
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002b8e6
lea rdx, str._t_CProfileConverter::CopySharedDbToUserDb___completed_
call fcn.140025be0
mov rdi, qword [rsp + 0x1118]
mov eax, 0x43297
mov rcx, qword [rbp + 0xff0]
xor rcx, rsp
call fcn.140059ef0
mov rbx, qword [rsp + 0x1120]
add rsp, 0x1100
pop rbp
ret