Function at 0x1400112f8
Capabilities:
Enumerate files on windows

Disassembly:
jmp 0x140021020
push rbp
push rdi
sub rsp, 0x748
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x13a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140036040]
xor rax, rbp
mov qword [rbp + 0x718], rax
lea rcx, [0x14003e106]
call fcn.140011b27
nop
lea rcx, [rbp + 8]
call fcn.140011a6e
nop
lea r8, str.Scripts
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x48]
call fcn.1400118c5
nop
mov edx, 0x20
lea rcx, [rbp + 0x88]
call fcn.1400110f5
lea rcx, [rbp + 0x88]
call fcn.140011460
nop
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0xc8]
call fcn.1400117cb
nop
lea r8, [0x14002f74c]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x658]
call fcn.1400119d8
mov qword [rbp + 0x708], rax
mov rcx, qword [rbp + 0x708]
call fcn.1400113bb
lea rdx, [rbp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rbp + 0x378], rax
lea rcx, [rbp + 0x658]
call fcn.14001199c
nop
cmp qword [rbp + 0x378], 0xffffffffffffffff
jne 0x14002114e
lea rdx, str.Scripts_folder_does_not_exist._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
nop
lea rcx, [rbp + 0xc8]
call fcn.14001199c
nop
lea rcx, [rbp + 0x88]
call fcn.140011acd
nop
lea rcx, [rbp + 0x48]
call fcn.1400111f9
nop
lea rcx, [rbp + 8]
call fcn.1400111f9
nop
jmp 0x140021436
mov eax, dword [rbp + 0x110]
and eax, 0x10
test eax, eax
jne 0x1400211c5
lea rdx, [rbp + 0x13c]
lea rcx, [rbp + 0x698]
call fcn.1400113ac
nop
lea rdx, [rbp + 0x698]
lea rcx, [rbp + 0x6d8]
call fcn.140011659
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
mov rdx, qword [rbp + 0x710]
lea rcx, [rbp + 0x88]
call fcn.1400113de
nop
lea rcx, [rbp + 0x6d8]
call fcn.1400111f9
nop
lea rcx, [rbp + 0x698]
call fcn.14001199c
nop
lea rdx, [rbp + 0x110]
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14002114e
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rbp + 0x398]
call fcn.140011b13
nop
xor eax, eax
cmp eax, 1
je 0x1400213fb
lea rdx, str.Available_scripts:_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
nop
mov qword [rbp + 0x3d8], 0
jmp 0x140021239
mov rax, qword [rbp + 0x3d8]
inc rax
mov qword [rbp + 0x3d8], rax
lea rcx, [rbp + 0x88]
call fcn.1400113f2
cmp qword [rbp + 0x3d8], rax
jae 0x1400212b8
mov rdx, qword [rbp + 0x3d8]
lea rcx, [rbp + 0x88]
call fcn.14001133e
mov qword [rbp + 0x708], rax
mov rcx, qword [rbp + 0x3d8]
inc rcx
mov rdx, rcx
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14002f798]
mov rcx, rax
call fcn.14001112c
mov rcx, qword [rbp + 0x708]
mov rdx, rcx
mov rcx, rax
call fcn.1400119f1
lea rdx, [0x14002f688]
mov rcx, rax
call fcn.14001112c
nop
jmp 0x140021228
lea rdx, str.Type_the_number_of_the_script_to_execute_or_back_to_return:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
nop
lea rdx, [rbp + 0x398]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011613
nop
lea rdx, str.back
lea rcx, [rbp + 0x398]
call fcn.14001147e
movzx eax, al
test eax, eax
je 0x14002133a
lea rcx, [rbp + 0x398]
call fcn.1400111f9
nop
lea rcx, [rbp + 0xc8]
call fcn.14001199c
nop
lea rcx, [rbp + 0x88]
call fcn.140011acd
nop
lea rcx, [rbp + 0x48]
call fcn.1400111f9
nop
lea rcx, [rbp + 8]
call fcn.1400111f9
nop
jmp 0x140021436
mov r8d, 0xa
xor edx, edx
lea rcx, [rbp + 0x398]
call fcn.14001138e
mov dword [rbp + 0x704], eax
mov eax, dword [rbp + 0x704]
mov dword [rbp + 0x3f4], eax
cmp dword [rbp + 0x3f4], 1
jl 0x1400213e0
lea rcx, [rbp + 0x88]
call fcn.1400113f2
movsxd rcx, dword [rbp + 0x3f4]
cmp rcx, rax
ja 0x1400213e0
lea rdx, str.Executing
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
mov qword [rbp + 0x708], rax
mov eax, dword [rbp + 0x3f4]
dec eax
cdqe
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14001133e
mov rdx, rax
mov rcx, qword [rbp + 0x708]
call fcn.1400119f1
mov qword [rbp + 0x710], rax
lea rdx, str...._n
mov rcx, qword [rbp + 0x710]
call fcn.14001112c
nop
jmp 0x1400213f4
lea rdx, str.Invalid_script_number._Please_try_again._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
nop
jmp 0x1400213f6
jmp 0x1400211fc
lea rcx, [rbp + 0x398]
call fcn.1400111f9
nop
lea rcx, [rbp + 0xc8]
call fcn.14001199c
nop
lea rcx, [rbp + 0x88]
call fcn.140011acd
nop
lea rcx, [rbp + 0x48]
call fcn.1400111f9
nop
lea rcx, [rbp + 8]
call fcn.1400111f9
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x14002deb0]
call fcn.140011933
mov rcx, qword [rbp + 0x718]
xor rcx, rbp
call fcn.14001155a
lea rsp, [rbp + 0x728]
pop rdi
pop rbp
ret