Function at 0x426010
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402516
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c8
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4020e0
xor edx, edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], edx
mov ecx, 0x50
xor eax, eax
lea edi, [ebp - 0x16c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x1b8], edx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x11
push 0x4066ac
lea eax, [ebp - 0x1d0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x19c], eax
mov ecx, 0x4008
mov dword [ebp - 0x1a4], ecx
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x198]
mov dword [edx + 0xc], eax
push 1
push 0x408518
mov ecx, dword [0x42c064]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x16c]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
push 0x406658
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x170]
call edi
push eax
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1b8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ebx, dword [ebp - 0x1b8]
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x170]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
cmp ebx, 0xffffffff
je 0x426295
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
lea edx, [ebp - 0x140]
mov dword [ebp - 0x1c4], edx
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x1b8], eax
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a4], 0x6011
push 0x409
push 0x40
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x184]
mov dword [ecx], edx
mov eax, dword [ebp - 0x180]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x17c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x178]
mov dword [ecx + 0xc], eax
push 1
push 0x408960
mov ecx, dword [0x42c060]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call edi
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov edx, dword [ebp - 0x24]
push edx
push 0x406670
call esi
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov eax, dword [ebp - 0x24]
push eax
push 0x406668
call esi
neg eax
sbb eax, eax
inc eax
or ebx, eax
jne 0x42626a
test byte [ebp - 0x16c], 0x10
jne 0x4262e3
lea ecx, [ebp - 0x16c]
push ecx
mov ebx, dword [ebp - 0x28]
push ebx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
mov dword [ebp - 0x1b8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x1b8]
test eax, eax
jne 0x426185
push ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x19c], eax
mov ecx, 0x4008
mov dword [ebp - 0x1a4], ecx
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x198]
mov dword [edx + 0xc], eax
push 1
push 0x407724
mov ecx, dword [0x42c064]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x1c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x426331
jmp 0x426320
lea ecx, [ebp - 0x20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x24]
call esi
ret