Function at 0x14002f9a0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x360], rbx
mov rax, qword [0x140127190]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov rdi, rdx
mov r14, rcx
xor r12d, r12d
mov esi, r12d
mov dword [rsp + 0x40], r12d
mov rcx, rdx
call fcn.14002f5a0
lea r8, [0x1401079f4]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.140031400
nop
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rcx, qword [rbp - 0x70]
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14002fe03
lea r13, [0x1401351a0]
lea rcx, [rbp - 0x24]
call qword [sym.imp.USER32.dll_CharLowerW]
nop
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r12w
or esi, 2
mov dword [rsp + 0x40], esi
mov rdx, qword [rdi + 0x10]
inc rdx
lea rcx, [rsp + 0x48]
call fcn.140031f90
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14002fa7a
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x48]
call fcn.14002b210
mov r8d, 1
lea rdx, [0x1401079f0]
lea rcx, [rsp + 0x48]
call fcn.14002b210
lea rax, [rbp - 0x24]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002fab0
lea rdx, [rbp - 0x24]
lea rcx, [rsp + 0x48]
call fcn.14002b210
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or esi, 4
and esi, 0xfffffffd
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14002fb39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fb34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe7b
call fcn.1400765f0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r12w
mov edx, dword [rbp - 0x50]
test dl, 0x10
je 0x14002fcaf
movzx edx, word [rbp - 0x24]
movzx ecx, word [rbp - 0x22]
cmp dx, word [0x1401079fc]
jne 0x14002fb80
cmp cx, word [0x1401079fe]
jne 0x14002fb80
movzx eax, word [rbp - 0x20]
cmp ax, word [0x140107a00]
je 0x14002fb92
cmp dx, word [0x140107a04]
jne 0x14002fbdb
cmp cx, word [0x140107a06]
jne 0x14002fbdb
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14002fde4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fddf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe6f
jmp 0x14002fddf
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r12w
lea rax, [rbp - 0x24]
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14002fc00
lea rcx, [rsp + 0x20]
cmp rdx, 7
ja 0x14002fc32
mov qword [rsp + 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp - 0x24]
call fcn.14009a510
mov word [rsp + rbx + 0x20], r12w
jmp 0x14002fc3b
lea r9, [rbp - 0x24]
call fcn.14002d410
lea r8, [rsp + 0x20]
mov rdx, r13
lea rcx, [0x140134e20]
call fcn.14002e650
mov rbx, rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14002fc94
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fc8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe81
call fcn.1400765f0
cmp rbx, r13
jne 0x14002fda3
lea rdx, [rsp + 0x70]
mov rcx, r14
call fcn.14002f9a0
jmp 0x14002fda3
test dl, 1
je 0x14002fccd
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
and edx, 0xfffffffe
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r12w
lea rax, [rbp - 0x24]
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14002fcf0
lea rcx, [rsp + 0x20]
cmp rdx, 7
ja 0x14002fd22
mov qword [rsp + 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp - 0x24]
call fcn.14009a510
mov word [rsp + rbx + 0x20], r12w
jmp 0x14002fd2b
lea r9, [rbp - 0x24]
call fcn.14002d410
lea r8, [rsp + 0x20]
lea rdx, [0x140135280]
lea rcx, [0x1401351a0]
call fcn.14002e650
mov rbx, rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14002fd88
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fd83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe87
call fcn.1400765f0
lea rax, [0x140135280]
cmp rbx, rax
jne 0x14002fda3
mov r8d, dword [r14 + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140027cd0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14002fde4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fddf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe69
call fcn.1400765f0
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14002fa36
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14002fe3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002fe75
call fcn.1400765f0
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140076590
mov rbx, qword [rsp + 0x360]
add rsp, 0x310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.1400a3864
int3
call fcn.1400a3864
int3
call fcn.1400a3864
int3