Function at 0x480cc0
Capabilities:
Access peb ldr_data
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x57b9fe
mov eax, dword fs:[0]
push eax
sub esp, 0x6e0
mov eax, dword [0x5e95e0]
xor eax, esp
mov dword [esp + 0x6d8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5e95e0]
xor eax, esp
push eax
lea eax, [esp + 0x6f4]
mov dword fs:[0], eax
mov eax, dword [esp + 0x704]
mov esi, ecx
mov edi, edx
xor ebp, ebp
push esi
lea ecx, [esp + 0x40]
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], ebp
call fcn.00402390
push 0x5958a8
push eax
lea ecx, [esp + 0x30]
push ecx
mov dword [esp + 0x708], ebp
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x6fc], 2
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x480d60
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
lea ecx, [esp + 0x3c]
call fcn.00402390
push 0x5a0648
push eax
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x708], 3
call fcn.00401ba0
mov eax, dword [eax]
add esp, 0xc
lea edx, [esp + 0x44]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x480db5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6fc], 2
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x480ddd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, 0xffffffff
je 0x48102f
mov ecx, 0x5925cc
lea eax, [esp + 0x70]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x480e16
cmp dx, bp
je 0x480e12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x480e16
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x480df0
xor eax, eax
jmp 0x480e1b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x48101b
mov ecx, 0x59a8a0
lea eax, [esp + 0x70]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x480e56
cmp dx, bp
je 0x480e52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x480e56
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x480e30
xor eax, eax
jmp 0x480e5b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x48101b
test byte [esp + 0x44], 0x10
jne 0x48101b
lea ecx, [esp + 0x70]
push str..lnk
push ecx
call fcn.00552eeb
add esp, 8
test eax, eax
je 0x48101b
mov edx, dword [edi]
mov ecx, dword [edx]
lea eax, [esp + 0x1c]
push eax
push 0x591bf8
push edi
mov dword [esp + 0x28], ebp
call ecx
cmp dword [esp + 0x1c], ebp
je 0x480edf
lea edx, [esp + 0x70]
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x6fc], 4
mov eax, dword [eax]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
or dword [esp + 0x18], 1
push ebp
push eax
mov eax, dword [edx + 0x14]
push ecx
call eax
test eax, eax
jne 0x480edf
mov bl, 1
jmp 0x480ee1
xor bl, bl
mov dword [esp + 0x6fc], 2
test byte [esp + 0x18], 1
je 0x480f18
mov eax, dword [esp + 0x34]
and dword [esp + 0x18], 0xfffffffe
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x480f18
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x48101b
mov ecx, dword [edi]
mov edx, dword [ecx + 0x4c]
push 0x79
push ebp
push edi
call edx
test eax, eax
jl 0x48100f
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
push 2
lea ecx, [esp + 0x298]
push ecx
push 0x104
lea edx, [esp + 0x4f0]
push edx
push edi
call eax
test eax, eax
jl 0x48100f
lea ecx, [esp + 0x4e4]
push ecx
lea ecx, [esp + 0x24]
call fcn.00402390
lea edi, [esp + 0x20]
mov byte [esp + 0x6fc], 5
call fcn.0048c530
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], ebp
jl 0x480fe3
push str.TANGO3.EXE
push eax
call fcn.00552eeb
add esp, 8
cmp eax, ebp
je 0x480fe3
sub eax, dword [esp + 0x20]
sar eax, 1
js 0x480fe3
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
mov edx, dword [edx + 0x28]
push 0x103
lea ecx, [esp + 0x4e8]
push ecx
push eax
mov word [esp + 0x4f0], bp
call edx
test eax, eax
jl 0x480fe3
cmp word [esp + 0x4e4], bp
je 0x480fe3
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x4e4]
push edx
push eax
call fcn.005390d4
mov byte [esp + 0x6fc], 2
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48100b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x480de6
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esp + 0x6fc], 0xffffffff
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x481061
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x6f4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6d8]
xor ecx, esp
call fcn.00552101
add esp, 0x6ec
ret