Function at 0x4265fc
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov eax, ecx
add eax, 4
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x218]
sub esp, 0x370
push dword [0x43da3c]
push str.Mailbox____a_href_javascript:SHTbl_t2_____span_idlt2______span___a__div_idt2_style_display:none____form_namey___input_typehidden_names_value8____input_typetext_namet_size32_maxlength64___input_typesubmit_valueCreate_Folder_____form___div____br___br___form_namex__s
push eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x378], eax
call fcn.0042ca58
mov eax, dword [ebp - 0x36c]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x358]
add esp, 0x18
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
pop ecx
pop ebx
cmp eax, 0xffffffff
je 0x426aaa
sub esp, 0xc
mov esi, eax
push 0x20080
call fcn.0042d128
add esp, 0x10
mov dword [ebp - 0x364], 0
mov ebx, eax
lea eax, [eax + 0x18060]
mov dword [ebp - 0x35c], eax
cmp byte [ebp - 0x32c], 0x2e
je 0x4266e3
test byte [ebp - 0x358], 0x10
je 0x4266e3
mov eax, dword [ebp - 0x36c]
mov edx, str.___wmail___
mov eax, dword [eax + 0xe0]
cmp byte [eax], 0
mov eax, 0x448212
cmove eax, edx
sub esp, 0xc
lea edx, [ebp - 0x32c]
push edx
push edx
push eax
push str._a_href_s_s_____s____a__nbsp_
push dword [ebp - 0x378]
call fcn.0042ca58
add esp, 0x20
jmp 0x4267a3
mov dword [ebp - 0x324], 0x67736d2e
mov eax, dword [ebp - 0x354]
mov edx, dword [ebp - 0x350]
sub eax, 0xfde04000
sbb edx, 0x14f373b
cmp edx, dword [0x430868]
jae 0x426718
div dword [0x430868]
imul edx, edx, 0x33
shr edx, 9
mov edx, dword [ebp - 0x364]
test edx, edx
je 0x42674c
mov ecx, dword [ebx + edx*4 - 4]
cmp ecx, eax
ja 0x42674c
mov dword [ebx + edx*4], ecx
mov ecx, dword [ebx + edx*4 + 0x7ffc]
mov dword [ebx + edx*4 + 0x8000], ecx
mov ecx, dword [ebx + edx*4 + 0xfffc]
mov dword [ebx + edx*4 + 0x10000], ecx
dec edx
jmp 0x42671e
mov dword [ebx + edx*4], eax
sub esp, 0xc
lea eax, [ebp - 0x32c]
lea edi, [edx*4]
push eax
lea edx, [ebx + edi + 0x8000]
mov dword [ebp - 0x360], edx
call fcn.004124a3
mov edx, dword [ebp - 0x360]
add esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0x338]
mov dword [ebx + edi + 0x10000], eax
mov eax, dword [ebp - 0x364]
inc eax
cmp dword [ebp - 0x364], 0x1ffe
mov dword [ebp - 0x364], eax
ja 0x4267bd
lea eax, [ebp - 0x358]
push ecx
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
pop edi
pop edx
test eax, eax
jne 0x426691
sub esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x370], 0
add esp, 0xc
mov ecx, dword [ebp - 0x364]
cmp dword [ebp - 0x370], ecx
je 0x426a9e
mov eax, dword [ebp - 0x370]
sub esp, 0xc
push dword [ebx + eax*4 + 0x8000]
mov eax, dword [ebp - 0x36c]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s_8.8X.msg
push dword [ebp - 0x35c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0
push dword [ebp - 0x35c]
call fcn.0040357d
mov esi, eax
pop eax
pop edx
test esi, esi
js 0x426a93
push eax
push 0x1000
push dword [ebp - 0x35c]
push esi
call fcn.00403603
mov ecx, dword [ebp - 0x35c]
mov byte [ecx + eax], 0
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 0xc
push str._nFrom:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x20
mov dword [ebp - 0x360], 0x44821f
test eax, eax
je 0x426884
add eax, 7
mov dword [ebp - 0x360], eax
push edi
push edi
push str._nTo:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x374], 0x44821f
test eax, eax
je 0x4268b0
add eax, 5
mov dword [ebp - 0x374], eax
push esi
push esi
push str._nDate:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x368], 0x44821f
test eax, eax
je 0x4268dc
add eax, 7
mov dword [ebp - 0x368], eax
push ecx
mov esi, 0x44821f
push ecx
push str._nSubject:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
test eax, eax
je 0x4268fd
lea esi, [eax + 0xa]
push edx
push edx
push 0xa
push dword [ebp - 0x360]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426927
sub esp, 0xc
mov byte [eax], 0
push dword [ebp - 0x360]
call fcn.00426531
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x374]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426951
sub esp, 0xc
mov byte [eax], 0
push dword [ebp - 0x374]
call fcn.00426531
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x368]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426982
mov byte [eax], 0
sub eax, dword [ebp - 0x368]
cmp eax, 0x40
jle 0x426982
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x3e], 0x2e2e
push eax
push eax
push 0xa
push esi
call fcn.004033de
add esp, 0x10
mov edi, eax
test eax, eax
je 0x4269b2
sub esp, 0xc
mov byte [eax], 0
sub edi, esi
push esi
call fcn.00426531
add esp, 0x10
cmp edi, 0x40
jle 0x4269b2
mov dword [esi + 0x3e], 0x2e2e
push eax
push eax
push 0x3c
push dword [ebp - 0x360]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x4269e4
lea edi, [eax + 1]
mov byte [eax], 0
push eax
push eax
push 0x3e
push edi
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x4269f4
mov byte [eax], 0
jmp 0x4269f4
mov edi, dword [ebp - 0x360]
mov dword [ebp - 0x360], 0x448212
mov eax, dword [ebp - 0x374]
push ecx
push ecx
push 0x4483a6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426a13
mov byte [eax], 0x20
jmp 0x4269fa
mov eax, dword [ebp - 0x368]
push edx
push edx
push 0x4483a6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426a32
mov byte [eax], 0x20
jmp 0x426a19
mov eax, esi
push ecx
push ecx
push 0x4483a6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426a4d
mov byte [eax], 0x20
jmp 0x426a34
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x370]
mov eax, dword [ebx + eax*4 + 0x8000]
push edx
push dword [ebx + ecx*4 + 0x10000]
push dword [ebp - 0x368]
push dword [ebp - 0x374]
push edi
push edi
push dword [ebp - 0x360]
push esi
push eax
push eax
push dword [0x43d8f4]
push dword [ebp - 0x378]
call fcn.0042ca58
add esp, 0x30
inc dword [ebp - 0x370]
jmp 0x4267d4
sub esp, 0xc
push ebx
call fcn.0042d10c
add esp, 0x10
push eax
push 0x43ae88
push str.__table___input_typesubmit__value__s_____form__br_
push dword [ebp - 0x378]
call fcn.0042ca58
add esp, 0x10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret