Function at 0x180011b64
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x18003b2e0]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov rbx, rcx
mov r15d, 0x4000
mov r14, r8
mov ecx, r15d
mov edi, edx
call fcn.18001aae0
mov r8d, r15d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.18001b160
lea rcx, [rsp + 0x70]
mov r8d, edi
mov rdx, rbx
call fcn.180013ff0
lea rcx, [rsp + 0x70]
call fcn.180014000
lea rcx, [rsp + 0x70]
mov r8d, r15d
mov rdx, rsi
mov ebx, eax
call fcn.180014098
lea rcx, [rsp + 0x50]
mov edx, 0x200000
call fcn.18000d4c8
lea rcx, [rsp + 0x50]
mov edx, ebx
call fcn.18000d510
lea rdx, [0x18002b000]
mov r8d, r15d
mov rcx, rsi
call fcn.18001c5e0
test eax, eax
jne 0x180011c37
mov rdx, rsi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea r8, [0x18002b004]
mov r9d, 2
mov edx, r15d
mov rcx, rsi
call fcn.18001c4f0
lea rdx, [0x18002b008]
lea rcx, [rsp + 0x50]
mov r8, rsi
call fcn.18000d544
lea rdx, [rbp - 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180011caa
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.could_not_open__s:__d
mov rdx, rsi
mov r8d, eax
call fcn.18000d9a8
lea rcx, [rsp + 0x50]
call fcn.18000d540
lea rcx, [rsp + 0x50]
mov ebx, eax
call fcn.18000d5a4
mov r8d, reloc.WS2_32.dll_shutdown
mov rcx, rax
mov edx, ebx
call r14
mov rcx, rsi
call fcn.18001aaa0
jmp 0x180011db2
mov rcx, rsi
call fcn.18001aaa0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x3c]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
test byte [rbp - 0x50], 0x10
movzx ecx, word [rbp - 0x66]
movzx edx, word [rbp - 0x68]
lea r11, [rbp - 0x24]
je 0x180011d1e
movzx eax, word [rbp - 0x64]
movzx r10d, word [rbp - 0x70]
movzx r9d, word [rbp - 0x6a]
movzx r8d, word [rbp - 0x6e]
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rdx, str.D_t0_t_02d__02d__02d__02d:_02d:_02d_t_s_n
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x20], r10d
call fcn.18000d544
jmp 0x180011d70
mov eax, dword [rbp - 0x30]
movzx r8d, word [rbp - 0x70]
movzx r10d, word [rbp - 0x6a]
movzx r9d, word [rbp - 0x6e]
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x68], eax
mov eax, dword [rbp - 0x34]
mov dword [rsp + 0x6c], eax
movzx eax, word [rbp - 0x64]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov r8, qword [rsp + 0x68]
lea rdx, str.F_t_I64d_t_02d__02d__02d__02d:_02d:_02d_t_s_n
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x20], r10d
call fcn.18000d544
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180011cb2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rcx, [rsp + 0x50]
call fcn.18000d540
lea rcx, [rsp + 0x50]
mov ebx, eax
call fcn.18000d5a4
mov r8d, reloc.WS2_32.dll_shutdown
mov rcx, rax
mov edx, ebx
call r14
lea rcx, [rsp + 0x50]
call fcn.18000d4a4
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.18001ac30
mov rbx, qword [rsp + 0x248]
add rsp, 0x200
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret