Function at 0x180104483
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
jmp 0x18012e630
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x6f8
lea rbp, [rsp + 0x20]
mov rdi, rsp
mov ecx, 0x1be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x718]
mov qword [rbp + 0x688], 0xfffffffffffffffe
mov rax, qword [0x1803bb0a8]
xor rax, rbp
mov qword [rbp + 0x6c0], rax
mov dword [rbp + 0x664], 0
lea rcx, [0x1803e7045]
call fcn.18010520c
mov rdx, qword [rbp + 0x6f0]
lea rcx, [rbp + 8]
call fcn.18010b814
nop
lea rdx, [0x180334768]
mov rcx, qword [rbp + 0x6f0]
call fcn.18010a57c
mov rcx, qword [rbp + 0x6f0]
call fcn.18010b01c
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbp + 0x1a8], rax
cmp qword [rbp + 0x1a8], 0xffffffffffffffff
jne 0x18012e709
mov dword [rbp + 0x484], 0xffffffff
lea rcx, [rbp + 8]
call fcn.180107ce1
nop
mov rcx, qword [rbp + 0x6f0]
call fcn.180107ce1
mov eax, dword [rbp + 0x484]
jmp 0x18012e9c4
lea rdx, [0x18033476c]
lea rcx, [rbp + 0x4c8]
call fcn.18010c67e
mov qword [rbp + 0x698], rax
mov rax, qword [rbp + 0x698]
mov qword [rbp + 0x6a0], rax
mov eax, dword [rbp + 0x664]
or eax, 1
mov dword [rbp + 0x664], eax
mov rdx, qword [rbp + 0x6a0]
lea rcx, [rbp + 0x7c]
call fcn.180106337
movzx eax, al
test eax, eax
je 0x18012e7b1
lea rdx, [0x180334770]
lea rcx, [rbp + 0x508]
call fcn.18010c67e
mov qword [rbp + 0x6a8], rax
mov rax, qword [rbp + 0x6a8]
mov qword [rbp + 0x6b0], rax
mov eax, dword [rbp + 0x664]
or eax, 2
mov dword [rbp + 0x664], eax
mov rdx, qword [rbp + 0x6b0]
lea rcx, [rbp + 0x7c]
call fcn.180106337
movzx eax, al
test eax, eax
je 0x18012e7b1
mov dword [rbp + 0x6b8], 1
jmp 0x18012e7bb
mov dword [rbp + 0x6b8], 0
movzx eax, byte [rbp + 0x6b8]
mov byte [rbp + 0x4a4], al
mov eax, dword [rbp + 0x664]
and eax, 2
test eax, eax
je 0x18012e7e9
and dword [rbp + 0x664], 0xfffffffd
lea rcx, [rbp + 0x508]
call fcn.180107ce1
nop
mov eax, dword [rbp + 0x664]
and eax, 1
test eax, eax
je 0x18012e809
and dword [rbp + 0x664], 0xfffffffe
lea rcx, [rbp + 0x4c8]
call fcn.180107ce1
movzx eax, byte [rbp + 0x4a4]
test eax, eax
je 0x18012e978
mov eax, dword [rbp + 0x50]
and eax, 0x10
test eax, eax
je 0x18012e8c2
lea r8, [rbp + 0x7c]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x548]
call fcn.180108493
mov qword [rbp + 0x698], rax
mov rax, qword [rbp + 0x698]
mov qword [rbp + 0x6a0], rax
lea r8, [0x180334774]
mov rdx, qword [rbp + 0x6a0]
lea rcx, [rbp + 0x1c8]
call fcn.18010b378
nop
lea rcx, [rbp + 0x548]
call fcn.180107ce1
lea rax, [rbp + 0x588]
mov qword [rbp + 0x5c8], rax
lea rdx, [rbp + 0x1c8]
mov rcx, qword [rbp + 0x5c8]
call fcn.18010b814
mov qword [rbp + 0x698], rax
mov edx, dword [rbp + 0x6f8]
mov rcx, qword [rbp + 0x698]
call fcn.180104483
nop
lea rcx, [rbp + 0x1c8]
call fcn.180107ce1
jmp 0x18012e978
lea r8, [rbp + 0x7c]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x208]
call fcn.180108493
nop
cmp dword [rbp + 0x6f8], 1
jne 0x18012e92e
lea rdx, [0x180334130]
lea rcx, [0x1803c14b0]
call fcn.18010aaa4
movzx eax, al
test eax, eax
je 0x18012e92e
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x628], rax
lea rdx, [rbp + 0x208]
mov rcx, qword [rbp + 0x628]
call fcn.18010b814
mov qword [rbp + 0x698], rax
mov rcx, qword [rbp + 0x698]
call fcn.180108803
cmp dword [rbp + 0x6f8], 1
jne 0x18012e96c
lea rdx, [0x180334130]
lea rcx, [0x1803c1550]
call fcn.18010aaa4
movzx eax, al
test eax, eax
je 0x18012e96c
lea rcx, [rbp + 0x208]
call fcn.18010b01c
mov edx, 6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
nop
lea rcx, [rbp + 0x208]
call fcn.180107ce1
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x18012e709
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rbp + 0x644], 0
lea rcx, [rbp + 8]
call fcn.180107ce1
nop
mov rcx, qword [rbp + 0x6f0]
call fcn.180107ce1
mov eax, dword [rbp + 0x644]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x180331158]
call fcn.18010bfdf
mov rax, rdi
mov rcx, qword [rbp + 0x6c0]
xor rcx, rbp
call fcn.180105df6
lea rsp, [rbp + 0x6d8]
pop rdi
pop rbp
ret