Function at 0x180010da8
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1f0
mov rdi, rcx
mov r15d, 0x4000
mov r14, r8
mov ecx, r15d
mov ebx, edx
call fcn.18001ab88
mov r8d, r15d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.18001ae30
lea rcx, [rbp - 0x78]
mov r8d, ebx
mov rdx, rdi
call fcn.180014688
lea rcx, [rbp - 0x78]
call fcn.180014698
lea rcx, [rbp - 0x78]
mov r8d, r15d
mov rdx, rsi
mov ebx, eax
call fcn.18001476c
lea rcx, [rsp + 0x70]
mov edx, 0x200000
call fcn.18000d47c
lea rcx, [rsp + 0x70]
mov edx, ebx
call fcn.18000d4ac
lea rdx, [0x1800327e8]
mov r8d, r15d
mov rcx, rsi
call fcn.18001cd60
test eax, eax
jne 0x180010e6e
mov rdx, rsi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea r8, [0x1800327ec]
mov r9d, 2
mov edx, r15d
mov rcx, rsi
call fcn.18001c46c
lea rdx, [0x180032700]
lea rcx, [rsp + 0x70]
mov r8, rsi
call fcn.18000d4dc
lea rdx, [rbp - 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180010edd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rbx + 0x35]
mov rdx, rsi
mov r8d, eax
call fcn.18000e554
lea rcx, [rsp + 0x70]
call fcn.1800146cc
lea rcx, [rsp + 0x70]
mov ebx, eax
call fcn.18000d548
mov r8d, reloc.WS2_32.dll_shutdown
mov rcx, rax
mov edx, ebx
call r14
mov rcx, rsi
call fcn.18001ab48
jmp 0x180011009
mov rcx, rsi
call fcn.18001ab48
lea rdi, [0x1800327a0]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x3c]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
test byte [rbp - 0x50], 0x10
movzx ecx, word [rsp + 0x6a]
movzx edx, word [rsp + 0x68]
movzx r9d, word [rsp + 0x66]
lea r11, [rbp - 0x24]
je 0x180010f64
movzx eax, word [rsp + 0x6c]
movzx r10d, word [rsp + 0x60]
movzx r8d, word [rsp + 0x62]
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
lea rcx, [rsp + 0x70]
lea rdx, str.D_t0_t_02d__02d__02d__s_02d:_02d:_02d_t_s_n
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], r10d
call fcn.18000d4dc
jmp 0x180010fc7
mov eax, dword [rbp - 0x30]
movzx r8d, word [rsp + 0x60]
movzx r10d, word [rsp + 0x62]
mov qword [rsp + 0x58], r11
mov dword [rbp + 0x128], eax
mov eax, dword [rbp - 0x34]
mov dword [rbp + 0x12c], eax
movzx eax, word [rsp + 0x6c]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], edx
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r9d
mov r9, qword [rbp + 0x128]
lea rdx, str.F_s_t_I64d_t_02d__02d__02d_s__02d:_02d:_02d_t_s_n
lea rcx, [rsp + 0x70]
mov r8, rdi
mov dword [rsp + 0x20], r10d
call fcn.18000d4dc
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180010eec
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rcx, [rsp + 0x70]
call fcn.1800146cc
lea rcx, [rsp + 0x70]
mov ebx, eax
call fcn.18000d548
mov r8d, reloc.WS2_32.dll_shutdown
mov rcx, rax
mov edx, ebx
call r14
lea rcx, [rsp + 0x70]
call fcn.18000d458
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret