Function at 0x14002a1e0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1400e0180]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r13, rdx
mov r15, rcx
xor esi, esi
call fcn.140029f70
mov rdx, qword [r15 + 0x10]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rdx
cmp rax, 2
jb 0x14002a734
mov r9, r15
cmp qword [r15 + 0x18], 7
jbe 0x14002a248
mov r9, qword [r15]
mov qword [rsp + 0x30], 2
lea rax, [0x1400cf90c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x58]
call fcn.140028d70
nop
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 7
cmova rcx, qword [rbp - 0x58]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14002a6c8
lea rdi, [0x1400f72c0]
lea r14, [0x1400f73a0]
nop
lea rcx, [rbp - 4]
call qword [sym.imp.USER32.dll_CharLowerW]
mov rcx, qword [r15 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x14002a72e
mov r9, r15
cmp qword [r15 + 0x18], 7
jbe 0x14002a2cb
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x1400cf908]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.140028d70
nop
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a300
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x48]
call fcn.14002c3f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14002a388
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a383
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a740
call fcn.14005ff0c
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], si
mov edx, dword [rbp - 0x30]
test dl, 0x10
je 0x14002a4bc
movzx ecx, word [rbp - 4]
movzx eax, word [rbp - 2]
cmp cx, 0x2e
jne 0x14002a415
cmp ax, cx
jne 0x14002a3c1
cmp word [rbp], 0
je 0x14002a3cc
cmp cx, 0x2e
jne 0x14002a415
test ax, ax
jne 0x14002a415
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x14002a6a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a40b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a767
call fcn.14005ff0c
jmp 0x14002a6a9
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a431
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.1400276c0
lea r8, [rsp + 0x68]
mov rdx, rdi
lea rcx, [0x1400f6f40]
call fcn.140029130
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14002a4a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a49d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a746
call fcn.14005ff0c
cmp rbx, rdi
jne 0x14002a65f
mov rdx, r13
lea rcx, [rbp - 0x78]
call fcn.14002a1e0
jmp 0x14002a65f
test dl, 1
je 0x14002a4d8
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rcx, qword [rbp - 0x78]
and edx, 0xfffffffe
call qword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14002a4f4
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x68]
call fcn.1400276c0
lea r8, [rsp + 0x68]
mov rdx, r14
lea rcx, [0x1400f72c0]
call fcn.140029130
mov rbx, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14002a565
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a560
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a746
call fcn.14005ff0c
cmp rbx, r14
jne 0x14002a65f
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
lea rdi, [r13 + 0x40]
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], 0
mov rcx, rdi
call fcn.14006206c
test eax, eax
jne 0x14002a75c
mov eax, dword [rdi + 0x4c]
cmp eax, 0x7fffffff
je 0x14002a74c
mov byte [rsp + 0x70], 1
mov rax, qword [r13 + 0x38]
inc rax
cmp qword [r13 + 0x28], rax
ja 0x14002a5bd
lea rcx, [r13 + 0x18]
call fcn.14002c1e0
mov rdx, qword [r13 + 0x28]
dec rdx
and qword [r13 + 0x30], rdx
mov r14, qword [r13 + 0x30]
add r14, qword [r13 + 0x38]
and rdx, r14
lea rsi, [rdx*8]
mov rax, qword [r13 + 0x20]
cmp qword [rsi + rax], 0
jne 0x14002a5f8
mov ecx, 0x20
call fcn.14005fed0
mov rcx, qword [r13 + 0x20]
mov qword [rsi + rcx], rax
mov rcx, qword [r13 + 0x28]
dec rcx
and rcx, r14
mov rax, qword [r13 + 0x20]
mov rdx, qword [rax + rcx*8]
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor esi, esi
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x18], rsi
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], si
inc qword [r13 + 0x38]
mov rcx, rdi
call fcn.140062074
lea rcx, [r13 + 0x90]
call fcn.140061ea8
lea rdi, [0x1400f72c0]
lea r14, [0x1400f73a0]
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x14002a69f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a69a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a767
call fcn.14005ff0c
movabs rbx, 0x7ffffffffffffffe
lea rdx, [rbp - 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x14002a2a0
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_FindClose]
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x14002a704
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a6ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a73a
call fcn.14005ff0c
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14005feb0
mov rbx, qword [rsp + 0x380]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140020b30
nop
call fcn.140020b30
int3
call fcn.140091ac4
nop
call fcn.140091ac4
int3
call fcn.140091ac4
int3
dec eax
mov dword [rdi + 0x4c], eax
mov ecx, 6
call fcn.140062024
int3
mov ecx, 5
call fcn.140062024
nop
call fcn.140091ac4
int3