Function at 0x140006770
Capabilities:
Enumerate files on windows
Set current directory

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x350
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x1400a20c0]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov rsi, rdx
mov r14, rcx
xor r12d, r12d
lea rcx, [0x140092c58]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
lea r8d, [r12 + 2]
lea rdx, [0x140092e90]
lea rcx, [rsp + 0x68]
call fcn.140026400
nop
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 7
jbe 0x1400067fe
mov rcx, qword [rsi]
mov rdx, rcx
lea r8, [rcx + rax*2]
jmp 0x140006805
lea r8, [rsi + rax*2]
mov rdx, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
cmp rdx, r8
jne 0x140006831
movdqa xmm0, xmmword [0x140094720]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r12w
jmp 0x140006842
sub r8, rdx
sar r8, 1
lea rcx, [rsp + 0x48]
call fcn.140026400
nop
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x48]
lea rcx, [rbp - 0x58]
call fcn.140027690
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 7
cmova rcx, qword [rbp - 0x58]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x1400068b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ba2
call fcn.140054120
movdqa xmm0, xmmword [0x140094720]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], r12w
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140006905
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ba8
call fcn.140054120
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x140006946
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bae
call fcn.140054120
cmp r15, 0xffffffffffffffff
je 0x140006b62
movabs r13, 0x7ffffffffffffffe
lea rbx, [0x140092e98]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140006980
lea rdx, [rbp - 4]
lea rcx, [rbp - 0x78]
call fcn.140026400
nop
mov rcx, qword [rsi + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 1
jb 0x140006b9c
mov r9, rsi
cmp qword [rsi + 0x18], 7
jbe 0x1400069ba
mov r9, qword [rsi]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.140027860
nop
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rdx, qword [rbp - 0x78]
mov r8, qword [rbp - 0x68]
lea rcx, [rsp + 0x48]
call fcn.1400221f0
movups xmm7, xmmword [rax]
movups xmmword [rsp + 0x68], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm6
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140006a57
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bb4
call fcn.140054120
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r12w
lea rax, [rbp - 0x78]
mov rbx, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x60]
cmp rdi, 7
cmova rax, rbx
cmp word [rax], 0x2e
jne 0x140006a9c
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 7
jbe 0x140006b0d
movq rcx, xmm7
jmp 0x140006ada
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
je 0x140006aba
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.140022560
add qword [r14 + 8], 0x20
jmp 0x140006acb
lea r8, [rsp + 0x68]
mov rdx, rax
mov rcx, r14
call fcn.1400284f0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x140006b0d
mov rcx, qword [rsp + 0x68]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140006b07
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bba
call fcn.140054120
nop
cmp rdi, 7
jbe 0x140006b44
lea rdx, [rdi*2 + 2]
cmp rdx, 0x1000
mov rax, rbx
jb 0x140006b3c
mov rbx, qword [rbx - 8]
sub rax, rbx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b96
mov rcx, rbx
call fcn.140054120
lea rdx, [rbp - 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14000695a
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140054100
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14006a6c0
nop
call fcn.1400015e0
nop
call fcn.14006a6c0
nop
call fcn.14006a6c0
nop
call fcn.14006a6c0
nop
call fcn.14006a6c0
nop
call fcn.14006a6c0
int3