Function at 0x4609b0
Capabilities:
Enumerate files on windows

Disassembly:
push 0x468
mov eax, 0x4c2085
call fcn.0048f706
mov edi, ecx
lea ecx, [ebp - 0x468]
call fcn.004026b1
and dword [ebp - 4], 0
lea ecx, [ebp - 0x464]
and dword [ebp - 0x470], 0
call fcn.004026b1
mov byte [ebp - 4], 1
lea esi, [edi + 0x3ec]
mov eax, dword [esi]
lea ebx, [edi + 0x198]
cmp dword [eax - 0xc], 0
jne 0x460a39
push ebx
push 0x100
lea eax, [ebp - 0x210]
push eax
push 0x4dea70
push 0x4c7330
push str.Setting
call fcn.0043f0d0
lea eax, [ebp - 0x210]
push eax
call fcn.00494153
add esp, 0x1c
mov ecx, esi
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.00402053
push ebx
push 0x100
lea eax, [ebp - 0x210]
mov esi, 0x4c5940
push eax
push esi
push 0x4cdc98
push str.Setting
call fcn.0043f0d0
lea eax, [ebp - 0x210]
mov ebx, str._s_s.lang
push eax
push dword [edi + 0x3b8]
lea eax, [ebp - 0x468]
push ebx
push eax
call fcn.00402a35
push str.English
push dword [edi + 0x3b8]
lea eax, [edi + 0x17c]
push ebx
push eax
call fcn.00402a35
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.004944db
add esp, 0x40
test eax, eax
je 0x460af0
push dword [ebp - 0x468]
call fcn.0043f1b7
pop ecx
test eax, eax
je 0x460af0
lea eax, [ebp - 0x210]
push eax
call fcn.00494153
pop ecx
push eax
lea eax, [ebp - 0x210]
push eax
lea ecx, [edi + 0x3f0]
call fcn.00402053
lea eax, [ebp - 0x210]
push eax
push dword [edi + 0x3b8]
lea eax, [edi + 0x178]
push ebx
push eax
jmp 0x460d0b
mov esi, dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
lea ebx, [edi + 0x3b0]
call esi
push eax
push str.0x_04X
push ebx
call fcn.00402a35
add esp, 0xc
call esi
push dword [edi + 0x3b8]
and eax, 0x3ff
mov dword [ebp - 0x474], eax
lea eax, [ebp - 0x468]
push str._s.lang
push eax
call fcn.00402a35
add esp, 0xc
lea eax, [ebp - 0x460]
push eax
push dword [ebp - 0x468]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x460ca8
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x460], 0x10
je 0x460c85
inc eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x470], eax
call fcn.004026b1
mov byte [ebp - 4], 2
lea eax, [ebp - 0x434]
push eax
push dword [edi + 0x3b8]
lea eax, [ebp - 0x46c]
push str._s_s
push eax
call fcn.00402a35
push dword [ebp - 0x46c]
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0x4c5940
push str.LOCALE_ID
push 0x4cdc98
call fcn.0043f0d0
lea eax, [ebp - 0x434]
push 0x2e
push eax
call fcn.004911e0
add esp, 0x30
test eax, eax
je 0x460bd9
xor ecx, ecx
mov word [eax], cx
push dword [edi + 0x3b0]
lea eax, [ebp - 0x210]
push eax
call fcn.00492190
pop ecx
pop ecx
test eax, eax
je 0x460c32
lea eax, [ebp - 0x434]
push eax
call fcn.00494153
pop ecx
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [edi + 0x3f0]
call fcn.00402053
lea eax, [ebp - 0x434]
push eax
push dword [edi + 0x3b8]
lea eax, [edi + 0x178]
push str._s_s.lang
push eax
call fcn.00402a35
add esp, 0x10
push 0x10
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.0049a119
and eax, 0x3ff
add esp, 0xc
cmp word [ebp - 0x474], ax
jne 0x460c73
lea eax, [ebp - 0x434]
push eax
call fcn.00494153
pop ecx
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x464]
call fcn.00402053
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x46c]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
lea eax, [ebp - 0x460]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x460ca8
mov eax, dword [ebp - 0x470]
cmp eax, 0xff
jle 0x460b58
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea esi, [edi + 0x3f0]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x460d13
mov eax, dword [ebp - 0x464]
lea ebx, [edi + 0x178]
cmp dword [eax - 0xc], 0
jne 0x460ceb
push str.English
call fcn.00494153
pop ecx
push eax
push str.English
mov ecx, esi
call fcn.00402053
push dword [esi]
jmp 0x460cff
lea eax, [ebp - 0x464]
mov ecx, esi
push eax
call fcn.00401717
push dword [ebp - 0x464]
push dword [edi + 0x3b8]
push str._s_s.lang
push ebx
call fcn.00402a35
add esp, 0x10
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x464]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x468]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
call fcn.0048f6b5
ret