Function at 0x140005b70
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rbx
push r12
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x14002f198]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov r15d, r8d
mov dword [rsp + 0x20], r8d
mov ebx, edx
mov qword [rsp + 0x30], rcx
mov r14, rcx
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x80]
call fcn.140007550
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, 0x104
call fcn.140007550
mov ecx, ebx
mov dword [rsp + 0x24], r15d
call fcn.1400011f0
mov r12d, eax
test r14, r14
je 0x140005fd0
test eax, eax
je 0x140005fd0
mov edx, eax
mov qword [rsp + 0x3f0], rsi
mov qword [rsp + 0x3b8], rdi
sub edx, 1
je 0x140005c5f
cmp edx, 1
je 0x140005c56
mov rcx, qword [0x14002fc48]
lea rdx, str._IntelFWUpdateService_:_Unknown_file_type__n
call fcn.1400018b0
mov eax, 1
mov rsi, qword [rsp + 0x3f0]
mov rdi, qword [rsp + 0x3b8]
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.1400067e0
add rsp, 0x3c0
pop r15
pop r14
pop r12
pop rbx
pop rbp
ret
lea rsi, str.dg__.bin
jmp 0x140005c66
lea rsi, str.dg__.rom
mov edi, 0x104
mov byte [rbp + 0x190], 0
lea rbx, [rbp + 0x190]
mov edx, edi
mov rcx, rbx
mov r8, r14
call fcn.140005ff0
mov r8, rsi
mov edx, edi
mov rcx, rbx
call fcn.140005ff0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rcx, qword [0x14002fc48]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140005ccd
lea r8, [rbp + 0x190]
lea rdx, str._IntelFWUpdateService_:_Error_locating_the_Search_folder_:__s_n
call fcn.1400018b0
jmp 0x140005c22
lea r8, [rsp + 0x6c]
mov qword [rsp + 0x3b0], r13
lea rdx, str._IntelFWUpdateService_:_FileName_:__s_n
call fcn.1400018b0
movsxd rdi, r15d
imul r13, rdi, 0x130
imul rsi, rdi, 0x114
mov qword [rsp + 0x28], r13
nop dword [rax]
mov r8, qword [rsp + 0x30]
lea rcx, [rbp + 0x80]
mov edx, 0x104
mov byte [rbp + 0x80], 0
call fcn.140005ff0
lea r8, [rsp + 0x6c]
mov edx, 0x104
lea rcx, [rbp + 0x80]
call fcn.140005ff0
mov rcx, qword [0x14002fc48]
lea r8, [rbp + 0x80]
lea rdx, str._IntelFWUpdateService_:Searching_for_image_in_path:___s__n
call fcn.1400018b0
lea rcx, [rbp + 0x80]
call fcn.140001340
movzx ebx, al
mov ecx, ebx
call fcn.1400011f0
cmp eax, r12d
jne 0x140005fa2
cmp bl, 2
je 0x140005deb
cmp bl, 5
jne 0x140005fa2
mov rcx, qword [0x140030e68]
lea rdx, [rbp + 0x80]
movsxd rax, r15d
imul rbx, rax, 0x114
add rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rax, qword [0x140030e68]
lea rcx, [rbp + 0x80]
mov dword [rsi + rax + 0x104], 5
mov rdx, qword [0x140030e68]
add rdx, 0x108
add rdx, rbx
call fcn.140001220
mov rax, qword [0x140030e68]
inc r15d
mov dword [rsi + rax + 0x110], 0xff
add rsi, 0x114
jmp 0x140005fa2
lea rdx, [0x140020314]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.SHLWAPI.dll_StrStrA]
test rax, rax
je 0x140005e09
mov edi, 1
jmp 0x140005e27
lea rdx, [0x140020318]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.SHLWAPI.dll_StrStrA]
test rax, rax
jne 0x140005eed
lea edi, [rax + 2]
movsxd rax, dword [rsp + 0x24]
lea rdx, [rbp + 0x80]
mov rcx, qword [0x140030e80]
imul rbx, rax, 0x130
add rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rax, qword [0x140030e80]
lea rcx, [rbp + 0x80]
mov edx, 2
mov dword [rax + r13 + 0x124], 3
mov rax, qword [0x140030e80]
mov dword [rax + r13 + 0x128], 2
mov rax, qword [0x140030e80]
lea r9, [rax + 0x114]
lea r8, [rax + 0x11c]
add r9, rbx
add r8, rbx
call fcn.1400013e0
mov rax, qword [0x140030e80]
inc dword [rsp + 0x24]
mov qword [rax + r13 + 0x108], 0
mov rax, qword [0x140030e80]
mov dword [rax + r13 + 0x110], 0
mov rax, qword [0x140030e80]
mov dword [rax + r13 + 0x12c], 0xff
add r13, 0x130
cmp edi, 2
mov edi, dword [rsp + 0x20]
jne 0x140005fa2
mov rcx, qword [0x140030e78]
lea rdx, [rbp + 0x80]
movsxd rax, edi
imul rbx, rax, 0x130
add rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rax, qword [0x140030e78]
mov edx, 1
mov rcx, qword [rsp + 0x28]
mov dword [rcx + rax + 0x124], 4
mov rax, qword [0x140030e78]
mov dword [rcx + rax + 0x128], 1
lea rcx, [rbp + 0x80]
mov rax, qword [0x140030e78]
lea r9, [rax + 0x114]
lea r8, [rax + 0x11c]
add r9, rbx
add r8, rbx
call fcn.1400013e0
mov rdx, qword [0x140030e78]
lea rcx, [rbp + 0x80]
add rdx, rbx
call section..text
mov rcx, qword [rsp + 0x28]
inc edi
mov rax, qword [0x140030e78]
mov dword [rsp + 0x20], edi
mov dword [rcx + rax + 0x12c], 0xff
add rcx, 0x130
mov qword [rsp + 0x28], rcx
lea rdx, [rsp + 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140005d00
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r13, qword [rsp + 0x3b0]
xor eax, eax
jmp 0x140005c27
mov rcx, qword [0x14002fc48]
lea rdx, str._IntelFWUpdateService_:_Wrong_file_type_n
call fcn.1400018b0
mov eax, 1
jmp 0x140005c37