Function at 0x55ce90
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x601694]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x255], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x264], 0
mov eax, dword [ebp + 8]
push eax
call fcn.0056e720
add esp, 4
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
add ecx, 0xa
push ecx
call fcn.0056660b
add esp, 4
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jne 0x55cf03
or eax, 0xffffffff
jmp 0x55d3ed
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x260]
push eax
call fcn.0056e620
add esp, 8
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], ecx
jmp 0x55cf33
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x55cf59
mov edx, dword [ebp - 0x25c]
movsx eax, byte [edx]
cmp eax, 0x2f
jne 0x55cf57
mov ecx, dword [ebp - 0x25c]
mov byte [ecx], 0x5c
jmp 0x55cf24
cmp dword [ebp - 0x26c], 0
jne 0x55cf76
push 0x601660
mov edx, dword [ebp - 0x260]
push edx
call fcn.0056e620
add esp, 8
cmp dword [ebp - 0x26c], 2
jne 0x55cfd6
mov eax, 1
shl eax, 0
mov ecx, dword [ebp - 0x260]
movsx edx, byte [ecx + eax]
cmp edx, 0x3a
jne 0x55cfd6
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x260]
movsx eax, byte [edx + ecx]
push eax
call fcn.005643c4
add esp, 4
test eax, eax
je 0x55cfd6
mov ecx, dword [ebp - 0x25c]
mov byte [ecx], 0x5c
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
mov byte [eax], 0
cmp dword [ebp - 0x26c], 1
jne 0x55d011
mov ecx, 1
imul edx, ecx, 0xffffffff
mov eax, dword [ebp - 0x25c]
movsx ecx, byte [eax + edx]
cmp ecx, 0x2e
jne 0x55d011
push 0x601664
mov edx, dword [ebp - 0x260]
push edx
call fcn.0056e620
add esp, 8
mov byte [ebp - 0x255], 1
cmp dword [ebp - 0x26c], 0
jle 0x55d059
mov eax, 1
imul ecx, eax, 0xffffffff
mov edx, dword [ebp - 0x25c]
movsx eax, byte [edx + ecx]
cmp eax, 0x5c
jne 0x55d059
mov ecx, dword [ebp - 0x25c]
mov byte [ecx], 0x2a
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
mov byte [eax], 0
mov byte [ebp - 0x255], 1
cmp dword [ebp - 0x26c], 1
jle 0x55d0a9
mov ecx, 1
imul edx, ecx, 0xffffffff
mov eax, dword [ebp - 0x25c]
movsx ecx, byte [eax + edx]
cmp ecx, 0x2e
jne 0x55d0a9
mov edx, 1
imul eax, edx, 0xfffffffe
mov ecx, dword [ebp - 0x25c]
movsx edx, byte [ecx + eax]
cmp edx, 0x5c
jne 0x55d0a9
mov eax, 1
imul ecx, eax, 0xffffffff
mov edx, dword [ebp - 0x25c]
mov byte [edx + ecx], 0x2a
mov byte [ebp - 0x255], 1
movsx eax, byte [ebp - 0x255]
test eax, eax
jne 0x55d0e6
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0x294]
and edx, 0x10
je 0x55d0e6
push 0x601668
mov eax, dword [ebp - 0x25c]
push eax
call fcn.0056e620
add esp, 8
mov dword [ebp - 0x27c], 0
push 0
push 0
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.0056e720
add esp, 4
push eax
mov edx, dword [ebp - 0x260]
push edx
call fcn.00535d30
add esp, 0x10
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
add eax, 1
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x270]
shl ecx, 1
push ecx
call fcn.0056660b
add esp, 4
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x27c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.0056e720
add esp, 4
push eax
mov edx, dword [ebp - 0x260]
push edx
call fcn.00535d30
add esp, 0x10
mov dword [ebp - 0x270], eax
xor eax, eax
mov ecx, dword [ebp - 0x270]
mov edx, dword [ebp - 0x27c]
mov word [edx + ecx*2], ax
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x288], eax
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00560469
add esp, 4
cmp dword [ebp - 0x288], 0xffffffff
jne 0x55d1fa
mov eax, dword [ebp - 0x260]
push eax
call fcn.00560469
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x12
je 0x55d1e4
mov dword [ebp - 0x268], 0xffffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x264]
mov dword [ecx], edx
mov eax, dword [ebp - 0x268]
jmp 0x55d3ed
lea eax, [ebp - 0x228]
push eax
call fcn.0056ee29
add esp, 4
mov dword [ebp - 0x280], eax
imul ecx, dword [ebp - 0x280], 5
add ecx, 1
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x28c]
add edx, 1
push edx
call fcn.0056660b
add esp, 4
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x280]
push eax
lea ecx, [ebp - 0x228]
push ecx
mov edx, dword [ebp - 0x28c]
push edx
mov eax, dword [ebp - 0x278]
push eax
call fcn.00535ef0
add esp, 0x10
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x278]
add ecx, dword [ebp - 0x280]
mov byte [ecx], 0
mov edx, dword [ebp - 0x254]
and edx, 0x10
je 0x55d28f
push 0x60166c
mov eax, dword [ebp - 0x278]
push eax
call fcn.0056e630
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x55d2aa
mov ecx, dword [ebp - 0x278]
push ecx
call dword [ebp + 0x10]
add esp, 4
test eax, eax
je 0x55d367
mov edx, dword [ebp - 0x268]
cmp edx, dword [ebp - 0x274]
jne 0x55d32e
mov eax, dword [ebp - 0x274]
add eax, 0x21
push eax
push 4
call fcn.0056045e
add esp, 8
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x274], 0
je 0x55d2fb
mov ecx, dword [ebp - 0x274]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.005849d0
add esp, 0xc
cmp dword [ebp - 0x264], 0
je 0x55d313
mov ecx, dword [ebp - 0x264]
push ecx
call fcn.00560469
add esp, 4
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x274]
add eax, 0x20
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x264]
mov eax, dword [ebp - 0x278]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x268]
add ecx, 1
mov dword [ebp - 0x268], ecx
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0x264]
mov dword [eax + edx*4], 0
jmp 0x55d376
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.00560469
add esp, 4
lea edx, [ebp - 0x254]
push edx
mov eax, dword [ebp - 0x288]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x55d1fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x260]
push edx
call fcn.00560469
add esp, 4
cmp dword [ebp + 0x14], 0
je 0x55d3dc
mov eax, dword [ebp + 0x14]
push eax
push 4
mov ecx, dword [ebp - 0x268]
push ecx
mov edx, dword [ebp - 0x264]
push edx
call fcn.0056bbb0
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x264]
mov dword [eax], ecx
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0055e98a
mov esp, ebp
pop ebp
ret