Function at 0x42679c
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov eax, ecx
add eax, 4
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x218]
sub esp, 0x370
push dword [0x43db7c]
push str.Mailbox____a_href_javascript:SHTbl_t2_____span_idlt2______span___a__div_idt2_style_display:none____form_namey___input_typehidden_names_value8____input_typetext_namet_size32_maxlength64___input_typesubmit_valueCreate_Folder_____form___div____br___br___form_namex__s
push eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x378], eax
call fcn.0042ce14
mov eax, dword [ebp - 0x36c]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x358]
add esp, 0x18
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
pop ecx
pop ebx
cmp eax, 0xffffffff
je 0x426c4a
sub esp, 0xc
mov esi, eax
push 0x20080
call fcn.0042d4e4
add esp, 0x10
mov dword [ebp - 0x364], 0
mov ebx, eax
lea eax, [eax + 0x18060]
mov dword [ebp - 0x35c], eax
cmp byte [ebp - 0x32c], 0x2e
je 0x426883
test byte [ebp - 0x358], 0x10
je 0x426883
mov eax, dword [ebp - 0x36c]
mov edx, str.___wmail___
mov eax, dword [eax + 0xe0]
cmp byte [eax], 0
mov eax, 0x449252
cmove eax, edx
sub esp, 0xc
lea edx, [ebp - 0x32c]
push edx
push edx
push eax
push str._a_href_s_s_____s____a__nbsp_
push dword [ebp - 0x378]
call fcn.0042ce14
add esp, 0x20
jmp 0x426943
mov dword [ebp - 0x324], 0x67736d2e
mov eax, dword [ebp - 0x354]
mov edx, dword [ebp - 0x350]
sub eax, 0xfde04000
sbb edx, 0x14f373b
cmp edx, dword [0x430870]
jae 0x4268b8
div dword [0x430870]
imul edx, edx, 0x33
shr edx, 9
mov edx, dword [ebp - 0x364]
test edx, edx
je 0x4268ec
mov ecx, dword [ebx + edx*4 - 4]
cmp ecx, eax
ja 0x4268ec
mov dword [ebx + edx*4], ecx
mov ecx, dword [ebx + edx*4 + 0x7ffc]
mov dword [ebx + edx*4 + 0x8000], ecx
mov ecx, dword [ebx + edx*4 + 0xfffc]
mov dword [ebx + edx*4 + 0x10000], ecx
dec edx
jmp 0x4268be
mov dword [ebx + edx*4], eax
sub esp, 0xc
lea eax, [ebp - 0x32c]
lea edi, [edx*4]
push eax
lea edx, [ebx + edi + 0x8000]
mov dword [ebp - 0x360], edx
call fcn.00412537
mov edx, dword [ebp - 0x360]
add esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0x338]
mov dword [ebx + edi + 0x10000], eax
mov eax, dword [ebp - 0x364]
inc eax
cmp dword [ebp - 0x364], 0x1ffe
mov dword [ebp - 0x364], eax
ja 0x42695d
lea eax, [ebp - 0x358]
push ecx
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
pop edi
pop edx
test eax, eax
jne 0x426831
sub esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x370], 0
add esp, 0xc
mov ecx, dword [ebp - 0x364]
cmp dword [ebp - 0x370], ecx
je 0x426c3e
mov eax, dword [ebp - 0x370]
sub esp, 0xc
push dword [ebx + eax*4 + 0x8000]
mov eax, dword [ebp - 0x36c]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s_8.8X.msg
push dword [ebp - 0x35c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0
push dword [ebp - 0x35c]
call fcn.0040357d
mov esi, eax
pop eax
pop edx
test esi, esi
js 0x426c33
push eax
push 0x1000
push dword [ebp - 0x35c]
push esi
call fcn.00403603
mov ecx, dword [ebp - 0x35c]
mov byte [ecx + eax], 0
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 0xc
push str._nFrom:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x20
mov dword [ebp - 0x360], 0x44925f
test eax, eax
je 0x426a24
add eax, 7
mov dword [ebp - 0x360], eax
push edi
push edi
push str._nTo:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x374], 0x44925f
test eax, eax
je 0x426a50
add eax, 5
mov dword [ebp - 0x374], eax
push esi
push esi
push str._nDate:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x368], 0x44925f
test eax, eax
je 0x426a7c
add eax, 7
mov dword [ebp - 0x368], eax
push ecx
mov esi, 0x44925f
push ecx
push str._nSubject:
push dword [ebp - 0x35c]
call fcn.004034dd
add esp, 0x10
test eax, eax
je 0x426a9d
lea esi, [eax + 0xa]
push edx
push edx
push 0xa
push dword [ebp - 0x360]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426ac7
sub esp, 0xc
mov byte [eax], 0
push dword [ebp - 0x360]
call fcn.004266d1
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x374]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426af1
sub esp, 0xc
mov byte [eax], 0
push dword [ebp - 0x374]
call fcn.004266d1
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x368]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426b22
mov byte [eax], 0
sub eax, dword [ebp - 0x368]
cmp eax, 0x40
jle 0x426b22
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x3e], 0x2e2e
push eax
push eax
push 0xa
push esi
call fcn.004033de
add esp, 0x10
mov edi, eax
test eax, eax
je 0x426b52
sub esp, 0xc
mov byte [eax], 0
sub edi, esi
push esi
call fcn.004266d1
add esp, 0x10
cmp edi, 0x40
jle 0x426b52
mov dword [esi + 0x3e], 0x2e2e
push eax
push eax
push 0x3c
push dword [ebp - 0x360]
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426b84
lea edi, [eax + 1]
mov byte [eax], 0
push eax
push eax
push 0x3e
push edi
call fcn.004033de
add esp, 0x10
test eax, eax
je 0x426b94
mov byte [eax], 0
jmp 0x426b94
mov edi, dword [ebp - 0x360]
mov dword [ebp - 0x360], 0x449252
mov eax, dword [ebp - 0x374]
push ecx
push ecx
push 0x4493e6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426bb3
mov byte [eax], 0x20
jmp 0x426b9a
mov eax, dword [ebp - 0x368]
push edx
push edx
push 0x4493e6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426bd2
mov byte [eax], 0x20
jmp 0x426bb9
mov eax, esi
push ecx
push ecx
push 0x4493e6
push eax
call fcn.00403442
add esp, 0x10
test eax, eax
je 0x426bed
mov byte [eax], 0x20
jmp 0x426bd4
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x370]
mov eax, dword [ebx + eax*4 + 0x8000]
push edx
push dword [ebx + ecx*4 + 0x10000]
push dword [ebp - 0x368]
push dword [ebp - 0x374]
push edi
push edi
push dword [ebp - 0x360]
push esi
push eax
push eax
push dword [0x43da34]
push dword [ebp - 0x378]
call fcn.0042ce14
add esp, 0x30
inc dword [ebp - 0x370]
jmp 0x426974
sub esp, 0xc
push ebx
call fcn.0042d4c8
add esp, 0x10
push eax
push 0x43afc8
push str.__table___input_typesubmit__value__s_____form__br_
push dword [ebp - 0x378]
call fcn.0042ce14
add esp, 0x10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret