Function at 0x4248c2
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov eax, ecx
add eax, 4
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x218]
lea edi, [ebp - 0x358]
sub esp, 0x370
push dword [0x43805c]
mov dword [ebp - 0x368], ecx
push str.Mailbox____a_href_javascript:SHTbl_t2_____span_idlt2______span___a__div_idt2_style_display:none____form_namey___input_typehidden_names_value8____input_typetext_namet_size32_maxlength64___input_typesubmit_valueCreate_Folder_____form___div____br___br___form_namex__s
push eax
mov dword [ebp - 0x378], eax
call fcn.004287ba
mov eax, dword [ebp - 0x368]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
pop ebx
pop esi
je 0x424d55
sub esp, 0xc
mov ebx, eax
lea esi, [ebp - 0x32c]
push 0x20080
call fcn.00428e70
mov dword [ebp - 0x35c], eax
add eax, 0x18060
add esp, 0x10
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x36c], edi
cmp byte [ebp - 0x32c], 0x2e
je 0x4249b2
test byte [ebp - 0x358], 0x10
je 0x4249b2
mov eax, dword [ebp - 0x368]
mov edx, str.___wmail___
mov eax, dword [eax + 0xe0]
cmp byte [eax], 0
mov eax, 0x442252
cmove eax, edx
sub esp, 0xc
push esi
push esi
push eax
push str._a_href_s_s_____s____a__nbsp_
push dword [ebp - 0x378]
call fcn.004287ba
add esp, 0x20
jmp 0x424a80
mov dword [ebp - 0x324], 0x67736d2e
mov eax, dword [ebp - 0x354]
mov edx, dword [ebp - 0x350]
sub eax, 0xfde04000
sbb edx, 0x14f373b
cmp edx, dword [0x42c5e0]
jae 0x4249e7
div dword [0x42c5e0]
imul edx, edx, 0x33
shr edx, 9
mov ecx, dword [ebp - 0x35c]
mov edi, dword [ebp - 0x364]
lea edx, [ecx + edi*4]
mov ecx, edi
test ecx, ecx
je 0x424a23
mov edi, dword [edx - 4]
cmp edi, eax
ja 0x424a23
mov dword [edx], edi
mov edi, dword [edx + 0x7ffc]
dec ecx
sub edx, 4
mov dword [edx + 0x8004], edi
mov edi, dword [edx + 0x10000]
mov dword [edx + 0x10004], edi
jmp 0x4249f8
mov edx, dword [ebp - 0x35c]
lea edi, [ecx*4]
sub esp, 0xc
mov dword [edx + ecx*4], eax
lea edx, [edx + edi + 0x8000]
push esi
mov dword [ebp - 0x370], edx
call fcn.00410c16
mov edx, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x35c]
add esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0x338]
mov dword [ecx + edi + 0x10000], eax
mov eax, dword [ebp - 0x364]
inc eax
cmp dword [ebp - 0x364], 0x1ffe
mov dword [ebp - 0x364], eax
ja 0x424a99
push edi
push edi
push dword [ebp - 0x36c]
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
pop edx
pop ecx
jne 0x424966
sub esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x36c], 0
add esp, 0xc
mov ecx, dword [ebp - 0x364]
cmp dword [ebp - 0x36c], ecx
je 0x424d44
mov eax, dword [ebp - 0x35c]
mov esi, dword [ebp - 0x36c]
sub esp, 0xc
push dword [eax + esi*4 + 0x8000]
mov eax, dword [ebp - 0x368]
push dword [eax + 0xe0]
push dword [eax + 0x14]
push str._smbox_.128s_8.8X.msg
push dword [ebp - 0x360]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0
push dword [ebp - 0x360]
call fcn.00403579
test eax, eax
mov ebx, eax
pop ecx
pop esi
js 0x424d39
push eax
push 0x1000
push dword [ebp - 0x360]
push ebx
call fcn.004035ff
mov ecx, dword [ebp - 0x360]
mov byte [ecx + eax], 0
push edx
push edx
push ebx
mov ebx, 0x44225f
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 0xc
push str._nFrom:
push dword [ebp - 0x360]
call fcn.004034d9
add esp, 0x18
lea esi, [eax + 7]
test eax, eax
push str._nTo:
push dword [ebp - 0x360]
cmove esi, ebx
call fcn.004034d9
pop ecx
pop edi
lea edx, [eax + 5]
push str._nDate:
test eax, eax
push dword [ebp - 0x360]
cmove edx, ebx
mov dword [ebp - 0x374], edx
call fcn.004034d9
pop edx
pop ecx
lea edx, [eax + 7]
push str._nSubject:
test eax, eax
push dword [ebp - 0x360]
cmove edx, ebx
mov dword [ebp - 0x370], edx
call fcn.004034d9
pop edi
pop edx
lea edx, [eax + 0xa]
push 0xa
push esi
test eax, eax
cmovne ebx, edx
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x424bd4
sub esp, 0xc
mov byte [eax], 0
push esi
call fcn.004247fb
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x374]
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x424bfe
sub esp, 0xc
mov byte [eax], 0
push dword [ebp - 0x374]
call fcn.004247fb
add esp, 0x10
push eax
push eax
push 0xa
push dword [ebp - 0x370]
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x424c2f
mov byte [eax], 0
sub eax, dword [ebp - 0x370]
cmp eax, 0x40
jle 0x424c2f
mov eax, dword [ebp - 0x370]
mov dword [eax + 0x3e], 0x2e2e
push eax
push eax
push 0xa
push ebx
call fcn.004033da
add esp, 0x10
test eax, eax
mov edi, eax
je 0x424c5f
sub esp, 0xc
mov byte [eax], 0
sub edi, ebx
push ebx
call fcn.004247fb
add esp, 0x10
cmp edi, 0x40
jle 0x424c5f
mov dword [ebx + 0x3e], 0x2e2e
push eax
push eax
push 0x3c
push esi
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x424c8c
lea edi, [eax + 1]
mov byte [eax], 0
push eax
push eax
push 0x3e
push edi
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x424c93
mov byte [eax], 0
jmp 0x424c93
mov edi, esi
mov esi, 0x442252
mov eax, dword [ebp - 0x374]
push ecx
push ecx
push 0x4423e6
push eax
call fcn.0040343e
add esp, 0x10
test eax, eax
jne 0x424cb5
mov eax, dword [ebp - 0x370]
jmp 0x424cbd
mov byte [eax], 0x20
jmp 0x424c99
mov byte [eax], 0x20
push edx
push edx
push 0x4423e6
push eax
call fcn.0040343e
add esp, 0x10
test eax, eax
jne 0x424cba
mov eax, ebx
push ecx
push ecx
push 0x4423e6
push eax
call fcn.0040343e
add esp, 0x10
test eax, eax
je 0x424cec
mov byte [eax], 0x20
jmp 0x424cd3
mov ecx, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x35c]
mov eax, dword [eax + ecx*4 + 0x8000]
push edx
mov ecx, dword [ebp - 0x35c]
mov edx, dword [ebp - 0x36c]
push dword [ecx + edx*4 + 0x10000]
push dword [ebp - 0x370]
push dword [ebp - 0x374]
push edi
push edi
push esi
push ebx
push eax
push eax
push dword [0x437f14]
push dword [ebp - 0x378]
call fcn.004287ba
add esp, 0x30
inc dword [ebp - 0x36c]
jmp 0x424ab0
sub esp, 0xc
push dword [ebp - 0x35c]
call fcn.00428e54
add esp, 0x10
push eax
push 0x4354a8
push str.__table___input_typesubmit__value__s_____form__br_
push dword [ebp - 0x378]
call fcn.004287ba
add esp, 0x10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret