Function at 0x14002a8f0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1c50
call fcn.14005a020
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov rax, qword [0x140092690]
xor rax, rsp
mov qword [rsp + 0x1c40], rax
mov r15, r9
mov rsi, r8
mov r13, rdx
mov rbx, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], r9
mov r14d, 0x43297
mov rdx, qword [rcx + 0x510]
lea rcx, [rsp + 0x40]
call fcn.14004c240
nop
xor edi, edi
test r13, r13
je 0x14002ae56
test rsi, rsi
je 0x14002ae56
mov dword [r15], edi
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002a99a
lea edx, [rdi + 1]
call fcn.140025ed0
lea rdx, str._t_CProfileConverter::ConvertProfiles___started_
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
or r9, 0xffffffffffffffff
mov r8, r13
mov edx, 0x104
lea rcx, [rsp + 0x1330]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, str..profile
lea rcx, [rsp + 0x1330]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r12, rax
mov qword [rsp + 0x50], rax
cmp rax, 0xffffffffffffffff
jne 0x14002aa52
cmp qword [rbx + 0x510], rdi
je 0x14002aa3e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x1330]
mov qword [rsp + 0x20], rax
lea r9, str._tInvalid_File_Handle_from_FindFirstFile__s_._GetLastError_reports__d
or r8, r12
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
nop
lea rcx, [rsp + 0x40]
call fcn.14004c260
mov eax, 0x80043298
jmp 0x14002ae65
lea rax, vtable.CEncrypter.0
mov qword [rsp + 0x80], rax
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.14002df70
cmp eax, 0x43297
je 0x14002aa94
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rsp + 0x40]
call fcn.14004c260
mov eax, 0x80043298
jmp 0x14002ae65
mov rsi, qword [rsp + 0x38]
nop dword [rax]
test byte [rsp + 0x290], 0x10
jne 0x14002adf7
or r9, 0xffffffffffffffff
mov r8, r13
mov edx, 0x104
lea rcx, [rsp + 0x1220]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsnbcpy_s]
lea rdx, [rsp + 0x2bc]
lea rcx, [rsp + 0x1220]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rcx, [rsp + 0x3d0]
call fcn.14003d494
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002ab3f
mov edx, 1
call fcn.140025ed0
lea rax, [rsp + 0x1220]
mov qword [rsp + 0x20], rax
lea r9, str._tConverting_profile_in_file_named__s
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
lea r8, [rsp + 0x3d0]
lea rdx, [rsp + 0x1220]
lea rcx, [rsp + 0x40]
call fcn.14004c480
cmp eax, 0x43297
jne 0x14002ade4
inc dword [r15]
cmp qword [rbx + 0x510], 0
je 0x14002abaf
lea rax, [rsp + 0x3d4]
mov qword [rsp + 0x20], rax
lea r9, str._tSaving_Converted_profile_named__s
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
mov qword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.PfMgrApi.dll_Ordinal_50
cmp eax, 0x43297
jne 0x14002abec
xor r8d, r8d
lea rdx, [rsp + 0x3d0]
mov rcx, rbx
call fcn.14002fde0
mov r14d, eax
call sub.PfMgrApi.dll_Ordinal_52
mov rax, qword [rsi + 0x510]
cmp r14d, 0x43297
jne 0x14002acd8
test rax, rax
je 0x14002ac81
lea rax, [rsp + 0x3d4]
mov qword [rsp + 0x20], rax
lea r9, str._tSuccessfully_saved_profile_named__s
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
lea rax, [rsp + 0x1220]
mov qword [rsp + 0x20], rax
lea r9, str._tDeleting_profile_file_named__s
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
lea rcx, [rsp + 0x1220]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x3d4]
mov rcx, rbx
call fcn.14002dce0
movsxd rcx, eax
cmp ecx, 0xffffffff
jle 0x14002adc6
mov rax, qword [rbx + 0x528]
test rax, rax
je 0x14002adc6
mov rdx, rcx
mov byte [rcx + rax], 1
mov rcx, qword [rbx + 0x530]
mov eax, dword [rsp + 0x498]
mov dword [rcx + rdx*4], eax
jmp 0x14002adc6
cmp r14d, 0x80043aa0
jne 0x14002acf3
test rax, rax
je 0x14002adc6
lea r9, str._t_FAILED__Failed_to_save_profile_named__s_because_it_exists_in_the_database_
jmp 0x14002ad27
cmp r14d, 0x80043a9d
jne 0x14002ad0e
test rax, rax
je 0x14002adc6
lea r9, str._t_FAILED__Failed_to_save_profile_named__s_because_the_profile_database_is_locked_by_another_component_
jmp 0x14002ad27
cmp r14d, 0x800432b2
jne 0x14002ad60
test rax, rax
je 0x14002adc6
lea r9, str._t_FAILED__Failed_to_save_profile_named__s_because_the_data_in_the_profile_is_invalid_
lea rax, [rsp + 0x3d4]
mov qword [rsp + 0x20], rax
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
jmp 0x14002adc6
test rax, rax
je 0x14002adc6
lea rax, [rsp + 0x3d4]
mov qword [rsp + 0x20], rax
lea r9, str._t_FAILED__Failed_to_save_profile_named__s
or r8, 0xffffffffffffffff
mov edx, 0x800
lea rcx, [rsp + 0x1440]
call fcn.140008c50
lea rdx, [rsp + 0x1440]
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
mov r8d, r14d
lea rdx, str._t_FAILED__Error_code_from_Profile_Manager_API:
mov rcx, qword [rbx + 0x510]
call fcn.140025cb0
mov rcx, qword [rbx + 0x510]
call fcn.140025dc0
nop
jmp 0x14002ade4
lea rdx, [rsp + 0x290]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov edi, eax
test edi, edi
jne 0x14002aaa0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rbx
call fcn.14002bbd0
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x14002ae47
lea edx, [rdi + 1]
call fcn.140025ed0
lea rdx, str._t_CProfileConverter::ConvertProfiles___completed_
mov rcx, qword [rbx + 0x510]
call fcn.140025be0
lea edx, [rdi + 1]
mov rcx, qword [rbx + 0x510]
call fcn.140025ed0
nop
lea rcx, [rsp + 0x40]
call fcn.14004c260
mov eax, r14d
jmp 0x14002ae65
lea rcx, [rsp + 0x40]
call fcn.14004c260
mov eax, 0x800432b1
mov rcx, qword [rsp + 0x1c40]
xor rcx, rsp
call fcn.140059ef0
add rsp, 0x1c50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret