Function at 0x14002a1d0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1400e0180]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r13, rdx
mov r15, rcx
xor esi, esi
call fcn.140029f60
mov rdx, qword [r15 + 0x10]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rdx
cmp rax, 2
jb 0x14002a724
mov r9, r15
cmp qword [r15 + 0x18], 7
jbe 0x14002a238
mov r9, qword [r15]
mov qword [rsp + 0x30], 2
lea rax, [0x1400cf90c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x58]
call fcn.140028d60
nop
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 7
cmova rcx, qword [rbp - 0x58]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14002a6b8
lea rdi, [0x1400f72c0]
lea r14, [0x1400f73a0]
nop
lea rcx, [rbp - 4]
call qword [sym.imp.USER32.dll_CharLowerW]
mov rcx, qword [r15 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x14002a71e
mov r9, r15
cmp qword [r15 + 0x18], 7
jbe 0x14002a2bb
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x1400cf908]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.140028d60
nop
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a2f0
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x48]
call fcn.14002c3e0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14002a378
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a373
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a730
call fcn.14005ff8c
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], si
mov edx, dword [rbp - 0x30]
test dl, 0x10
je 0x14002a4ac
movzx ecx, word [rbp - 4]
movzx eax, word [rbp - 2]
cmp cx, 0x2e
jne 0x14002a405
cmp ax, cx
jne 0x14002a3b1
cmp word [rbp], 0
je 0x14002a3bc
cmp cx, 0x2e
jne 0x14002a405
test ax, ax
jne 0x14002a405
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x14002a699
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a3fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a757
call fcn.14005ff8c
jmp 0x14002a699
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a421
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.1400276b0
lea r8, [rsp + 0x68]
mov rdx, rdi
lea rcx, [0x1400f6f40]
call fcn.140029120
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14002a492
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a48d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a736
call fcn.14005ff8c
cmp rbx, rdi
jne 0x14002a64f
mov rdx, r13
lea rcx, [rbp - 0x78]
call fcn.14002a1d0
jmp 0x14002a64f
test dl, 1
je 0x14002a4c8
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rcx, qword [rbp - 0x78]
and edx, 0xfffffffe
call qword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a4e4
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.1400276b0
lea r8, [rsp + 0x68]
mov rdx, r14
lea rcx, [0x1400f72c0]
call fcn.140029120
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14002a555
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a550
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a736
call fcn.14005ff8c
cmp rbx, r14
jne 0x14002a64f
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
lea rdi, [r13 + 0x40]
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], 0
mov rcx, rdi
call fcn.1400620ec
test eax, eax
jne 0x14002a74c
mov eax, dword [rdi + 0x4c]
cmp eax, 0x7fffffff
je 0x14002a73c
mov byte [rsp + 0x70], 1
mov rax, qword [r13 + 0x38]
inc rax
cmp qword [r13 + 0x28], rax
ja 0x14002a5ad
lea rcx, [r13 + 0x18]
call fcn.14002c1d0
mov rdx, qword [r13 + 0x28]
dec rdx
and qword [r13 + 0x30], rdx
mov r14, qword [r13 + 0x30]
add r14, qword [r13 + 0x38]
and rdx, r14
lea rsi, [rdx*8]
mov rax, qword [r13 + 0x20]
cmp qword [rsi + rax], 0
jne 0x14002a5e8
mov ecx, 0x20
call fcn.14005ff50
mov rcx, qword [r13 + 0x20]
mov qword [rsi + rcx], rax
mov rcx, qword [r13 + 0x28]
dec rcx
and rcx, r14
mov rax, qword [r13 + 0x20]
mov rdx, qword [rax + rcx*8]
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor esi, esi
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x18], rsi
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], si
inc qword [r13 + 0x38]
mov rcx, rdi
call fcn.1400620f4
lea rcx, [r13 + 0x90]
call fcn.140061f28
lea rdi, [0x1400f72c0]
lea r14, [0x1400f73a0]
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x14002a68f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a68a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a757
call fcn.14005ff8c
movabs rbx, 0x7ffffffffffffffe
lea rdx, [rbp - 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x14002a290
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_FindClose]
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x14002a6f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a6ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a72a
call fcn.14005ff8c
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14005ff30
mov rbx, qword [rsp + 0x380]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140020b30
nop
call fcn.140020b30
int3
call fcn.140091b44
nop
call fcn.140091b44
int3
call fcn.140091b44
int3
dec eax
mov dword [rdi + 0x4c], eax
mov ecx, 6
call fcn.1400620a4
int3
mov ecx, 5
call fcn.1400620a4
nop
call fcn.140091b44
int3