Function at 0x14002ac70
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1400e9180]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r15, rdx
mov r14, rcx
xor r13d, r13d
call fcn.14002aa00
mov rdx, qword [r14 + 0x10]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rdx
cmp rax, 2
jb 0x14002b1b7
mov r9, r14
cmp qword [r14 + 0x18], 8
jb 0x14002acd9
mov r9, qword [r14]
mov qword [rsp + 0x30], 2
lea rax, [0x1400d8b5c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x58]
call fcn.140029800
nop
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rcx, qword [rbp - 0x58]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14002b14b
lea rdi, [0x140100400]
lea rsi, [0x1401004e0]
lea rcx, [rbp - 4]
call qword [sym.imp.USER32.dll_CharLowerW]
mov rcx, qword [r14 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x14002b1b1
mov r9, r14
cmp qword [r14 + 0x18], 8
jb 0x14002ad5b
mov r9, qword [r14]
mov qword [rsp + 0x30], 1
lea rax, [0x1400d8b58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.140029800
nop
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002ad90
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x48]
call fcn.14002c820
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14002ae19
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ae14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1c3
call fcn.14006459c
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r13w
mov edx, dword [rbp - 0x30]
test dl, 0x10
je 0x14002af4e
movzx ecx, word [rbp - 4]
movzx eax, word [rbp - 2]
cmp cx, 0x2e
jne 0x14002aea7
cmp ax, cx
jne 0x14002ae53
cmp word [rbp], 0
je 0x14002ae5e
cmp cx, 0x2e
jne 0x14002aea7
test ax, ax
jne 0x14002aea7
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14002b12c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ae9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1d7
call fcn.14006459c
jmp 0x14002b12c
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14002aec3
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.140028870
lea r8, [rsp + 0x68]
mov rdx, rdi
lea rcx, [0x140100080]
call fcn.140029bc0
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14002af34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002af2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1c9
call fcn.14006459c
cmp rbx, rdi
jne 0x14002b0e2
mov rdx, r15
lea rcx, [rbp - 0x78]
call fcn.14002ac70
jmp 0x14002b0e2
test dl, 1
je 0x14002af6a
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
and edx, 0xfffffffe
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002af90
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.140028870
lea r8, [rsp + 0x68]
mov rdx, rsi
lea rcx, [0x140100400]
call fcn.140029bc0
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14002b001
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002affc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1c9
call fcn.14006459c
cmp rbx, rsi
jne 0x14002b0e2
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
lea rdi, [r15 + 0x40]
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], 0
mov rcx, rdi
call fcn.140066a90
test eax, eax
jne 0x14002b1cf
mov byte [rsp + 0x70], 1
mov rax, qword [r15 + 0x38]
inc rax
cmp qword [r15 + 0x28], rax
ja 0x14002b04b
lea rcx, [r15 + 0x18]
call fcn.14002c620
mov r8, qword [r15 + 0x28]
dec r8
and qword [r15 + 0x30], r8
mov rdx, qword [r15 + 0x30]
add rdx, qword [r15 + 0x38]
and r8, rdx
lea rsi, [r8*8]
mov rax, qword [r15 + 0x20]
cmp qword [rsi + rax], 0
jne 0x14002b086
mov ecx, 0x20
call fcn.140064560
mov rcx, qword [r15 + 0x20]
mov qword [rsi + rcx], rax
mov rax, qword [r15 + 0x20]
mov rdx, qword [rsi + rax]
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r13w
inc qword [r15 + 0x38]
mov rcx, rdi
call fcn.140066ab4
lea rcx, [r15 + 0x90]
call fcn.14006663c
lea rdi, [0x140100400]
lea rsi, [0x1401004e0]
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14002b122
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b11d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1d7
call fcn.14006459c
movabs rbx, 0x7ffffffffffffffe
lea rdx, [rbp - 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14002ad30
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14002b187
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b182
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b1bd
call fcn.14006459c
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140064540
mov rbx, qword [rsp + 0x380]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400217a0
nop
call fcn.1400217a0
int3
call fcn.1400987f4
nop
call fcn.1400987f4
int3
call fcn.1400987f4
int3
mov ecx, eax
call fcn.1400667d0
nop
call fcn.1400987f4
int3