Function at 0x1400db6e0
Capabilities:
Enumerate files on windows
Get common file path
Set file attributes

Disassembly:
push rbp
lea rbp, [rsp - 0x1020]
mov eax, 0x1120
call fcn.14024c240
sub rsp, rax
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x1130], rbx
mov qword [rsp + 0x1138], rsi
mov qword [rsp + 0x1140], rdi
mov qword [rsp + 0x1148], r12
mov rax, qword [0x140398250]
xor rax, rsp
mov qword [rbp + 0x1010], rax
xor r8d, r8d
lea rdx, str.CBaseOSSpecTypeWin2K::ReadOnlyCancellation
lea rcx, [rsp + 0x38]
call fcn.1400075a0
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x5c0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1a0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x3b0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xe00]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x9e0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x50]
call fcn.14024b970
mov edi, 1
mov r12d, edi
mov dword [rsp + 0x30], 0
nop dword [rax]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xbf0]
call fcn.14024b970
mov rcx, qword [0x1403b9758]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r9, qword [rax]
lea r8, [rsp + 0x30]
mov edx, r12d
mov rcx, rax
call qword [r9 + 0x3c0]
mov r11d, dword [rsp + 0x30]
cmp r11d, 3
je 0x1400db820
cmp r11d, 5
jne 0x1400db834
lea rdx, str.Windows_x64
jmp 0x1400db827
lea rdx, str.Windows_NT_x86
lea rcx, [rbp + 0xbf0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov rcx, qword [0x1403b9758]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r9, qword [rax]
lea r8, [rbp + 0xbf0]
lea rdx, [rbp + 0x5c0]
mov rcx, rax
call qword [r9 + 0x238]
test eax, eax
je 0x1400dbd90
lea r8, [0x1402f35b0]
mov edx, 0x104
lea rcx, [rbp + 0xe00]
call fcn.140246628
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1a0]
call fcn.14024b970
lea r11, [rbp + 0xe00]
mov qword [rsp + 0x20], r11
lea r9, [rbp + 0x5c0]
lea r8, [0x1402dd6b0]
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246778
mov r9d, dword [rsp + 0x30]
lea r8, str._t_t_tAttribute_cancellation_object_cVer____d_____
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea r9, [rbp + 0x1a0]
lea r8, str._t_t_tPrinterDriverDir_Path____s_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov r9, rsi
lea r8, str._t_t_tFindFile____d_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
mov r9d, ebx
lea r8, str._t_t_tGetLastError____d_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
cmp rsi, 0xffffffffffffffff
je 0x1400db9a6
test edi, edi
je 0x1400db99d
nop dword [rax]
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x5c0]
lea r8, [0x1402dd6b0]
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call fcn.140246778
mov edx, 0x20
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400db950
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1a0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x9e0]
call fcn.14024b970
lea r11, [rbp + 0xe00]
mov qword [rsp + 0x28], r11
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x5c0]
lea r8, str._s_d_s
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246778
mov r11d, dword [rsp + 0x30]
mov dword [rsp + 0x20], r11d
lea r9, [rbp + 0x5c0]
lea r8, str._s_d
mov edx, 0x104
lea rcx, [rbp + 0x9e0]
call fcn.140246778
lea r11, [rbp + 0x1a0]
mov qword [rsp + 0x20], r11
mov r9d, dword [rsp + 0x30]
lea r8, str._t_t_tPrinterDriverDircVer__d__Path____s_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea r11, [rbp + 0x9e0]
mov qword [rsp + 0x20], r11
mov r9d, dword [rsp + 0x30]
lea r8, str._t_t_tPrinterDriverDircVer__d__szcVerPath____s_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov r9, rdi
lea r8, str._t_t_tFindFile____d_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
mov r9d, ebx
lea r8, str._t_t_tGetLastError____d_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
cmp rdi, 0xffffffffffffffff
je 0x1400dbb26
nop dword [rax]
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x9e0]
lea r8, [0x1402dd6b0]
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call fcn.140246778
mov edx, 0x20
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400dbad0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edi, 1
cmp dword [rsp + 0x30], 3
jne 0x1400dbd90
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x7d0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1a0]
call fcn.14024b970
mov edx, 0x208
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea r8, str.SpoolDrivers
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246470
lea r8, [0x1402e5094]
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246470
lea r8, str.Color
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246470
lea r8, [rbp + 0x1a0]
mov edx, 0x104
lea rcx, [rbp + 0x7d0]
call fcn.140246628
lea r8, [0x14030b150]
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246470
lea r8, str._t_t_tcVer__Win2K_.ICC_
lea edx, [rdi + 6]
lea rcx, [rsp + 0x38]
call fcn.140007780
lea r9, [rbp + 0x1a0]
lea r8, str._t_t_tspooldrivercolor_Path____s_
lea edx, [rdi + 6]
lea rcx, [rsp + 0x38]
call fcn.140007780
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400dbc8a
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7d0]
lea r8, [0x1402dd6b0]
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call fcn.140246778
mov edx, 0x20
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, eax
test eax, eax
jne 0x1400dbc32
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1a0]
call fcn.14024b970
lea r8, [rbp + 0x7d0]
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246628
lea r8, str..prf
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.140246470
lea r8, str._t_t_tcVer__Win2K_.PRF_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea r9, [rbp + 0x1a0]
lea r8, str._t_t_tspooldrivercolor_Path____s_
mov edx, 7
lea rcx, [rsp + 0x38]
call fcn.140007780
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400dbd78
test edi, edi
je 0x1400dbd6f
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7d0]
lea r8, [0x1402dd6b0]
mov edx, 0x104
lea rcx, [rbp + 0x3b0]
call fcn.140246778
mov edx, 0x20
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, eax
test eax, eax
jne 0x1400dbd20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea r8, [rbp + 0x1a0]
mov edx, 0x104
lea rcx, [rbp + 0x7d0]
call fcn.140246628
add r12d, r12d
cmp r12d, 0x20
jbe 0x1400db7d0
lea r8, [0x1402dc4e0]
mov edx, 2
lea rcx, [rsp + 0x38]
call fcn.140007780
nop
lea rcx, [rsp + 0x38]
call fcn.140007730
mov rcx, qword [rbp + 0x1010]
xor rcx, rsp
call fcn.140245660
lea r11, [rsp + 0x1120]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r12, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret