Function at 0x401000
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x360
nop
mov eax, 0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + 8]
cmp eax, ecx
jge 0x401054
jmp 0x401032
mov eax, dword [ebp - 8]
mov ecx, eax
add eax, 1
mov dword [ebp - 8], eax
jmp 0x401012
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, str.__d_:_s_n
push eax
call sub.msvcrt.dll_printf
add esp, 0xc
jmp 0x401025
mov eax, dword [ebp + 8]
cmp eax, 1
jg 0x401078
mov eax, 0
push eax
call fcn.00402155
add esp, 4
mov eax, 1
jmp 0x40158a
mov eax, 1
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + 8]
cmp eax, ecx
jge 0x401106
jmp 0x4010a0
mov eax, dword [ebp - 8]
mov ecx, eax
add eax, 1
mov dword [ebp - 8], eax
jmp 0x401080
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
movsx ecx, byte [eax]
cmp ecx, 0x2d
jne 0x401104
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
add eax, 1
movsx ecx, byte [eax]
cmp ecx, 0x68
je 0x4010f6
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
add eax, 1
movsx ecx, byte [eax]
cmp ecx, 0x48
je 0x4010f6
jmp 0x401104
mov eax, 1
push eax
call fcn.00402155
add esp, 4
jmp 0x401093
mov eax, dword [ebp + 8]
mov ecx, dword [0x403004]
sub eax, ecx
cmp eax, 1
jg 0x401132
mov eax, 0
push eax
call fcn.00402155
add esp, 4
mov eax, 1
jmp 0x40158a
mov eax, 0x403024
push eax
mov eax, str.PackageMp3.bin
push eax
call sub.msvcrt.dll_fopen
add esp, 8
mov dword [ebp - 0x10], eax
cmp eax, 0
jne 0x40115c
mov eax, 0
jmp 0x40158a
mov eax, 0x20
push eax
mov eax, 0
push eax
mov eax, 0x403660
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0x8502
mov word [0x403660], ax
mov eax, 1
mov byte [0x403662], al
mov eax, 0xfde
push eax
mov eax, 0
push eax
mov eax, 0x40368c
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0xfde
mov word [0x403680], ax
mov eax, 0
mov ecx, eax
and ecx, 1
shl ecx, 7
movzx edx, byte [0x40368d]
and edx, 0xffffff7f
or ecx, edx
mov byte [0x40368d], cl
mov eax, 0
mov byte [0x40368e], al
mov eax, 0xffe
push eax
mov eax, 0
push eax
mov eax, 0x40466a
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, str.Create_Date__2014_04_29_nBuild_By_Merlin_n
push eax
mov eax, 0x40466a
push eax
call sub.msvcrt.dll_strcpy
add esp, 8
mov eax, 0xffe
mov word [0x403682], ax
mov eax, 0xff8
push eax
mov eax, 0
push eax
mov eax, 0x405668
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0xff8
mov dword [0x403684], eax
mov eax, 0
mov dword [0x403688], eax
mov eax, 0x800
push eax
mov eax, 0
push eax
mov eax, 0x406660
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0x800
mov dword [0x403008], eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040158c
add esp, 4
mov eax, 0x403052
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x403062
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 1
mov dword [ebp - 8], eax
mov eax, 0
mov dword [ebp - 0xc], eax
mov eax, 0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + 8]
cmp eax, ecx
jge 0x401528
jmp 0x4012cf
mov eax, dword [ebp - 8]
mov ecx, eax
add eax, 1
mov dword [ebp - 8], eax
jmp 0x4012af
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
movsx ecx, byte [eax]
cmp ecx, 0x2d
je 0x401523
mov eax, 0
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
lea eax, [ebp - 0x15c]
push eax
mov eax, dword [ecx]
push eax
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, 0xffffffff
je 0x4014bc
mov eax, dword [ebp - 0x13c]
push eax
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x15c]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, str._02d_::__04xh_:_s_size:_06xh_n
push eax
call sub.msvcrt.dll_printf
add esp, 0x14
mov eax, dword [ebp - 0x15c]
and eax, 0xff
cmp eax, 0x20
jne 0x401480
mov eax, dword [ebp - 0xc]
mov ecx, eax
add eax, 1
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ecx]
push eax
call fcn.00401700
add esp, 8
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x260]
push eax
call sub.msvcrt.dll_strcpy
add esp, 8
mov eax, 0x4030a3
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.004017df
add esp, 8
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x360]
push eax
call sub.msvcrt.dll_strcpy
add esp, 8
mov eax, 0x4030a7
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004017df
add esp, 8
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00401f61
add esp, 8
jmp 0x40141c
mov eax, dword [ebp - 0xc]
sub eax, 1
mov ecx, dword [0x403008]
push ecx
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00402203
add esp, 0x10
mov eax, dword [ebp - 0xc]
sub eax, 1
shl eax, 3
mov ecx, 0x406660
add ecx, eax
mov eax, dword [0x403008]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc]
sub eax, 1
shl eax, 3
mov ecx, 0x406660
add ecx, eax
add ecx, 4
mov eax, dword [ecx]
shl eax, 8
mov ecx, dword [0x403008]
add ecx, eax
mov dword [0x403008], ecx
mov eax, 1
mov byte [ebp - 0x19], al
lea eax, [ebp - 0x15c]
push eax
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_FindNextFileA
test eax, eax
je 0x4014a0
jmp 0x4014b7
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_FindClose
mov eax, 0xffffffff
mov dword [ebp - 0x160], eax
jmp 0x401310
movsx eax, byte [ebp - 0x19]
test eax, eax
je 0x401507
mov eax, dword [ebp - 0xc]
sub eax, 1
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, str._2d:
push eax
call sub.msvcrt.dll_printf
add esp, 0xc
mov eax, dword [ebp - 0x14]
shl eax, 1
mov ecx, 0x403690
add ecx, eax
mov eax, dword [ebp - 0xc]
sub eax, 1
mov word [ecx], ax
mov eax, dword [ebp - 0x14]
mov ecx, eax
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x401523
mov eax, dword [ebp - 8]
shl eax, 2
mov ecx, dword [ebp + 0xc]
add ecx, eax
mov eax, dword [ecx]
push eax
mov eax, 0x4030c4
push eax
call sub.msvcrt.dll_printf
add esp, 8
jmp 0x4012c2
mov eax, str._n
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, dword [ebp - 0xc]
push eax
mov eax, 0x403104
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, dword [0x403688]
add eax, 0x2fe0
mov dword [0x403664], eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040158c
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
call sub.msvcrt.dll_fclose
add esp, 4
mov eax, 0x403119
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0
jmp 0x40158a
leave
ret