Function at 0x401203
Capabilities:
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa68
mov esi, esp
mov dword [esi + 0xa50], ebp
lea eax, [esi + 0xa58]
mov dword [esi + 0x3c], ecx
mov dword [eax - 4], esp
or dword [eax + 8], 0xffffffff
mov dword [eax + 4], 0x439740
mov edx, dword fs:[0]
mov dword [eax], edx
mov dword fs:[0], eax
and dword [esi + 0x7c], 0
and dword [esi + 0x84], 0
and dword [eax + 8], 0
mov edi, dword [ecx + 0x28]
mov edx, dword [ecx + 0x2c]
mov ecx, edi
mov dword [esi], edi
mov dword [esi + 8], edx
call fcn.0042bd80
test eax, eax
je 0x401c66
mov edi, edx
lea ecx, [esi + 0x5c]
mov edx, eax
push edi
call fcn.00435900
pop eax
mov ecx, dword [esi]
mov edx, dword [esi + 8]
mov dword [esi + 0xa60], 1
call fcn.00423d70
test al, al
je 0x40129f
mov edx, dword [esi]
lea ecx, [esi + 0x68]
push dword [esi + 8]
call fcn.0042c0b0
pop eax
jmp 0x4012f6
lea ecx, [esi + 0x5a0]
call fcn.00423350
lea ecx, [esi + 0x348]
lea edx, [esi + 0x5a0]
push 0x44a6bc
call fcn.00405d3e
pop eax
mov edx, dword [esi]
mov dword [esi + 0xa60], 0x13
lea ecx, [esi + 0x348]
push dword [esi + 8]
call fcn.00429430
pop eax
movsd xmm0, qword [esi + 0x348]
movsd xmm1, qword [esi + 0x350]
movsd qword [esi + 0x70], xmm1
movsd qword [esi + 0x68], xmm0
mov ecx, dword [esi + 0x6c]
mov edx, dword [esi + 0x70]
mov dword [esi + 0xa60], 2
call fcn.0042aa00
mov ecx, eax
push 0x44a6cc
call fcn.00405ca4
pop ecx
mov ebx, edx
test edx, edx
je 0x401c7e
test ebx, ebx
js 0x401c8d
mov edi, eax
mov al, byte [0x45fae8]
xor edx, edx
mov ecx, ebx
inc edx
call fcn.00439610
test eax, eax
je 0x401c97
push ebx
push edi
mov dword [esi + 8], eax
push eax
call fcn.0043acb0
add esp, 0xc
mov al, byte [0x45fae8]
xor edx, edx
mov ecx, ebx
inc edx
mov dword [esi], edx
call fcn.00439610
test eax, eax
je 0x401ca6
mov ecx, edi
mov edi, eax
push ebx
push ecx
push eax
call fcn.0043acb0
add esp, 0xc
lea ecx, [esi + 0x5a0]
mov dword [esi + 0x4c], ebx
mov dword [esi + 0xa60], 6
mov edx, str.fatal_runtime_error:_I_O_error:_operation_failed_to_complete_synchronously_nYQE
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov byte [ecx + 0xc], 0
push 1
call fcn.00429430
pop eax
lea ecx, [esi + 0x5a0]
mov byte [esi + 7], 1
mov dword [esi + 0xa60], 4
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov edi, dword [ecx + 8]
mov dword [esi + 0x30], eax
mov dword [esi + 0x2c], edx
push edi
call fcn.00421cd0
pop eax
mov eax, dword [esi + 0x5a0]
mov ebx, dword [esi + 0x5a4]
mov ecx, dword [esi + 0x5a8]
cmp eax, 0x80000000
je 0x401cc3
lea edx, [esi + 0x5a0]
mov byte [esi + 7], 1
mov dword [edx], eax
mov dword [edx + 8], ecx
mov dword [edx + 4], ebx
lea ecx, [esi + 0xf4]
push 1
call fcn.00428c00
pop eax
mov eax, dword [esi + 0xf4]
mov ebx, dword [esi + 0xf8]
cmp eax, 0x80000000
mov dword [esi + 0x50], eax
je 0x401cc8
push 0x250
push 0
lea edi, [esi + 0x5a0]
push edi
call fcn.0043b230
add esp, 0xc
push edi
mov dword [esi + 0x28], ebx
push ebx
call dword [sym.imp.kernel32.dll_FindFirstFileW]
mov edi, eax
cmp eax, 0xffffffff
lea ebx, [esi + 0xf4]
je 0x4014bf
mov al, byte [0x45fae8]
push 0x18
pop ecx
push 4
pop edx
call fcn.00439610
test eax, eax
je 0x401d3b
xor ecx, ecx
mov edx, dword [esi + 0x4c]
mov dword [esi + 0x54], eax
inc ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
and dword [eax + 0x14], 0
mov dword [eax + 0x10], edx
lea ecx, [esi + 0x5a8]
mov eax, dword [ecx - 8]
mov ecx, dword [ecx - 4]
mov dword [esi + 0x20], eax
shrd eax, ecx, 8
mov dword [esi + 0x14], ecx
lea ecx, [esi + 0x348]
mov dword [esi + 0x44], eax
push 0x248
lea eax, [esi + 0x5a8]
push eax
push ecx
call fcn.0043acb0
add esp, 0xc
jmp 0x4014d4
push 2
pop eax
mov dword [esi], eax
mov dword [esi + 0x20], 0
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esi + 0x14], eax
cmp dword [esi + 0x50], 0
je 0x4014e5
push 2
pop edx
mov ecx, dword [esi + 0x28]
call fcn.00439670
cmp dword [esi + 0x30], 0
je 0x4014f6
mov ecx, dword [esi + 0x2c]
xor edx, edx
inc edx
call fcn.00439670
cmp edi, 0xffffffff
jne 0x401509
mov ecx, dword [esi + 8]
xor edx, edx
inc edx
call fcn.00439670
xor edi, edi
dec edi
cmp dword [esi], 2
mov dword [esi + 0x48], edi
je 0x401cfa
mov eax, dword [esi + 0x44]
movzx edi, byte [esi + 0x20]
lea ecx, [esi + 0x5ac]
shl eax, 8
or edi, eax
lea eax, [esi + 0x348]
push 0x248
push eax
push ecx
call fcn.0043acb0
add esp, 0xc
mov eax, dword [esi + 0x54]
lea ecx, [esi + 0x5ac]
mov dword [ecx + 0x248], eax
mov eax, dword [esi + 0x48]
mov dword [ecx + 0x24c], eax
mov eax, dword [esi + 0x14]
mov dword [ecx - 8], edi
lea edi, [esi + 0x5d6]
mov dword [ecx - 4], eax
movzx eax, word [edi - 4]
movzx edx, word [edi - 2]
mov dword [esi + 0x4c], eax
xor eax, 0x2e
mov word [esi + 0x5a], dx
or ax, dx
movzx eax, word [edi - 6]
mov edx, dword [esi]
sete byte [esi + 0x1f]
mov word [esi + 0x28], ax
cmp word [esi + 0x4c], 0
sete al
cmp word [esi + 0x28], 0x2e
sete cl
and dword [esi + 0x5a0], 0
cmp edx, 1
jne 0x401612
or al, byte [esi + 0x1f]
and cl, al
jne 0x401612
mov ebx, dword [esi + 0x54]
lock inc dword [ebx]
jle 0x401d53
push 0x24
lea eax, [esi + 0x5ac]
push eax
lea eax, [esi + 0xd0]
push eax
call fcn.0043acb0
add esp, 0xc
push 0x21e
lea eax, [esi + 0x5d6]
push eax
lea eax, [esi + 0x800]
push eax
call fcn.0043acb0
add esp, 0xc
movzx eax, word [esi + 0x28]
mov edx, dword [esi + 0x44]
mov edi, dword [esi + 0x14]
mov word [esi + 0x3a], ax
mov eax, dword [esi + 0x4c]
mov word [esi + 0x38], ax
movzx eax, word [esi + 0x5a]
mov dword [esi + 8], edx
mov word [esi + 0x36], ax
mov eax, dword [esi + 0x20]
mov ecx, eax
jmp 0x4016ec
push 0x250
push 0
push ebx
call fcn.0043b230
add esp, 0xc
push ebx
mov edi, dword [esi + 0x48]
push edi
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
je 0x40165a
cmp word [esi + 0x120], 0x2e
jne 0x401675
movzx eax, word [esi + 0x122]
test ax, ax
je 0x401657
cmp ax, 0x2e
jne 0x401675
cmp word [esi + 0x124], 0
jne 0x401675
push ebx
jmp 0x401626
mov edi, dword [sym.imp.kernel32.dll_GetLastError]
call edi
cmp eax, 0x12
je 0x401bb7
xor ebx, ebx
call edi
mov edi, eax
xor ecx, ecx
jmp 0x4016ec
mov ebx, dword [esi + 0x54]
lock inc dword [ebx]
jle 0x401d53
mov eax, dword [esi + 0xf4]
mov edi, dword [esi + 0xf8]
mov dword [esi], eax
shrd eax, edi, 8
mov dword [esi + 8], eax
push 0x24
lea eax, [esi + 0xfc]
push eax
lea eax, [esi + 0xd0]
push eax
call fcn.0043acb0
add esp, 0xc
movzx eax, word [esi + 0x120]
mov word [esi + 0x3a], ax
movzx eax, word [esi + 0x122]
mov word [esi + 0x38], ax
movzx eax, word [esi + 0x124]
mov word [esi + 0x36], ax
push 0x21e
lea eax, [esi + 0x126]
push eax
lea eax, [esi + 0x800]
push eax
call fcn.0043acb0
mov ecx, dword [esi]
add esp, 0xc
lea edx, [esi + 0x88]
test ebx, ebx
je 0x401749
push 0x24
lea eax, [esi + 0xd0]
push eax
push edx
mov dword [esi], edi
mov edi, ecx
call fcn.0043acb0
add esp, 0xc
push 0x21e
lea eax, [esi + 0x800]
push eax
lea eax, [esi + 0xf4]
push eax
call fcn.0043acb0
mov ecx, edi
mov edi, dword [esi]
lea edx, [esi + 0x88]
add esp, 0xc
movzx eax, word [esi + 0x3a]
mov word [esi + 0x30], ax
movzx eax, word [esi + 0x38]
mov word [esi + 0x50], ax
movzx eax, word [esi + 0x36]
mov word [esi + 0x2c], ax
mov eax, dword [esi + 8]
movzx ecx, cl
mov dword [esi + 0x34c], ebx
mov dword [esi + 0x354], edi
shl eax, 8
or ecx, eax
mov dword [esi + 0x350], ecx
push 0x24
push edx
lea eax, [esi + 0x358]
push eax
call fcn.0043acb0
add esp, 0xc
movzx eax, word [esi + 0x30]
mov word [esi + 0x37c], ax
movzx eax, word [esi + 0x50]
mov word [esi + 0x37e], ax
movzx eax, word [esi + 0x2c]
mov word [esi + 0x380], ax
push 0x21e
lea eax, [esi + 0xf4]
push eax
lea eax, [esi + 0x382]
push eax
call fcn.0043acb0
add esp, 0xc
test ebx, ebx
mov dword [esi + 0x348], 1
je 0x4018f3
push 0x250
lea eax, [esi + 0x350]
push eax
lea eax, [esi + 0xf8]
push eax
call fcn.0043acb0
add esp, 0xc
mov dword [esi + 0xf4], ebx
lea edx, [esi + 0xf4]
mov ecx, dword [ebx + 0x10]
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xa60], 0xd
mov dword [esi + 0x18], ecx
lea ecx, [esi + 0xd0]
mov dword [esi + 0x10], eax
call fcn.00429340
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0xd4]
mov ecx, dword [esi + 0xd8]
mov edi, 1
test edx, edx
mov dword [esi], eax
mov dword [esi + 0xc], ecx
je 0x40184e
js 0x401c3b
mov al, byte [0x45fae8]
mov ecx, edx
mov edi, edx
xor edx, edx
inc edx
call fcn.00439610
mov edx, edi
mov edi, eax
test eax, eax
je 0x401c4f
push edx
push dword [esi + 0x10]
push edi
mov ebx, edx
call fcn.0043acb0
add esp, 0xc
mov edx, dword [esi]
mov dword [esi + 0x88], ebx
mov dword [esi + 0x8c], edi
mov dword [esi + 0x90], ebx
mov byte [esi + 0x94], 0
mov dword [esi + 0xa60], 0xf
lea ecx, [esi + 0x88]
push dword [esi + 0xc]
call fcn.00429430
pop eax
mov eax, dword [esi + 0x88]
mov ebx, dword [esi + 0x8c]
mov edi, dword [esi + 0x90]
cmp dword [esi + 0xd0], 0
mov dword [esi + 0x18], eax
je 0x4018b9
mov ecx, dword [esi]
xor edx, edx
inc edx
call fcn.00439670
mov dword [esi + 0xa60], 0x10
lea ecx, [esi + 0x88]
mov dword [esi], ebx
mov edx, ebx
push edi
call fcn.0042ac60
pop eax
mov eax, dword [esi + 0x88]
lea ebx, [esi + 0xf4]
xor eax, 2
or eax, dword [esi + 0x8c]
jne 0x401915
mov eax, dword [esi + 0x90]
jmp 0x40193f
lea eax, [esi + 0x350]
mov dword [esi + 0xa60], 7
push eax
call fcn.004055e7
pop eax
lea ebx, [esi + 0xf4]
jmp 0x401bb0
mov eax, dword [esi + 0xc8]
bt eax, 0xa
setae cl
bt dword [esi + 0xcc], 0x1d
setae dl
or dl, cl
test al, 0x10
sete al
and al, dl
movzx eax, al
shl eax, 8
or eax, 4
cmp al, 4
je 0x401996
cmp al, 3
jne 0x401996
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x94]
mov ecx, dword [eax]
mov dword [esi + 0xc], eax
mov eax, dword [eax + 4]
mov dword [esi + 0xa60], 0x11
mov dword [esi + 0x24], ecx
push ecx
mov dword [esi + 0x10], eax
call dword [eax]
add esp, 4
mov eax, dword [esi + 0x10]
cmp dword [eax + 4], 0
je 0x401982
mov edx, dword [eax + 8]
mov ecx, dword [esi + 0x24]
call fcn.00439670
mov ecx, dword [esi + 0xc]
push 4
pop edx
call fcn.00439670
mov eax, dword [esi + 0x40]
lea ebx, [esi + 0xf4]
mov ecx, dword [esi + 0x18]
mov edx, dword [esi]
mov edi, eax
call fcn.0040ea17
mov eax, edi
cmp al, 4
jne 0x401ba9
and eax, 0xff00
je 0x401ba9
mov edi, dword [esi + 0xf4]
push 0x250
lea eax, [esi + 0xf8]
push eax
lea eax, [esi + 0x800]
push eax
call fcn.0043acb0
add esp, 0xc
test edi, edi
je 0x401bb0
push 0x250
lea eax, [esi + 0x800]
push eax
lea eax, [esi + 0xf8]
push eax
call fcn.0043acb0
add esp, 0xc
lea ecx, [esi + 0x348]
mov edx, ebx
mov dword [esi + 0xf4], edi
mov dword [esi + 0xa60], 0xc
call fcn.00429340
lea ecx, [esi + 0xf4]
call fcn.004058ba
mov eax, dword [esi + 0x348]
cmp eax, 0x80000000
je 0x401bc1
mov dword [esi + 0x18], eax
mov edx, dword [esi + 0x34c]
mov eax, dword [esi + 0x350]
mov dword [esi + 0xa60], 8
lea ecx, [esi + 0x800]
mov dword [esi + 0x10], edx
push eax
call fcn.00435900
pop eax
mov ecx, dword [esi + 0x804]
mov edx, dword [esi + 0x808]
mov eax, dword [esi + 0x60]
mov edi, dword [esi + 0x64]
mov dword [esi + 0xa60], 0xa
mov dword [esi], ecx
mov dword [esi + 0xc], edx
push edi
push eax
call fcn.0040ef42
pop ecx
pop edx
test al, al
je 0x401b89
mov edi, dword [esi + 0xc]
mov ecx, dword [esi]
mov edx, edi
push 3
push 0x4510bc
call fcn.00414035
pop ecx
pop edx
lea ecx, [edi - 3]
test al, al
mov dword [esi + 0x348], 0x44a6ec
mov dword [esi + 0x34c], 2
mov byte [esi + 0x1e], al
lea eax, [esi + 0x5c]
lea edx, [esi + 0x348]
cmove ecx, edi
and dword [esi + 0x358], 0
mov dword [esi + 0x88], eax
lea eax, [esi + 0x88]
mov dword [esi + 0x8c], 0x409899
mov dword [esi + 0xc], ecx
lea ecx, [esi + 0xf4]
mov dword [esi + 0x350], eax
mov dword [esi + 0x354], 1
call fcn.00409054
mov eax, dword [esi + 0xf4]
mov edi, dword [esi + 0xf8]
mov ecx, dword [esi]
mov edx, dword [esi + 0xc]
mov dword [esi + 0xa60], 0xb
mov dword [esi + 0x24], eax
mov eax, dword [esi + 0xfc]
mov dword [esi + 0x78], eax
push eax
mov dword [esi + 0x40], edi
push edi
call fcn.0040ef42
pop ecx
pop edx
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x40]
mov ebx, eax
call fcn.0040ea17
test bl, bl
je 0x401b89
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x78]
lea ecx, [esi + 0x348]
sub eax, edx
add edx, dword [esi]
push eax
call fcn.00413510
pop eax
cmp byte [esi + 0x348], 0
jne 0x401b89
movzx eax, byte [esi + 0x1e]
mov edx, dword [esi + 0x34c]
mov dword [esi + 0xa60], 9
lea ecx, [esi + 0x7c]
push eax
call fcn.004088ea
pop eax
mov ecx, dword [esi + 0x800]
mov edx, dword [esi]
call fcn.004057f7
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x10]
lea ebx, [esi + 0xf4]
call fcn.0040ea17
jmp 0x401bb0
mov ecx, ebx
call fcn.004058ba
xor edx, edx
jmp 0x401586
mov dword [esi + 0xa60], 0x14
lea edi, [esi + 0x5a0]
mov ecx, edi
call fcn.0040582e
movsd xmm0, qword [esi + 0x7c]
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x6c]
movsd qword [edi], xmm0
mov dword [edi + 8], eax
call fcn.0040ea17
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0x60]
call fcn.004057f7
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0xa60], 0x14
add ecx, 0x44
mov dword [esi + 0x3c], ecx
call fcn.0040524c
mov eax, dword [esi + 0x5a8]
mov ecx, dword [esi + 0x3c]
movsd xmm0, qword [esi + 0x5a0]
mov dword [ecx + 8], eax
movsd qword [ecx], xmm0
mov ecx, dword [esi + 0xa58]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0xa60], 0xe
call fcn.0040e480
jmp 0x401d53
xor ecx, ecx
mov dword [esi + 0xa60], 0xe
inc ecx
call fcn.004485d0
jmp 0x401d53
push 0x14
pop edx
mov ecx, str.basepath.file_name__C:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_file_rotate_0.7.5_src_suffix.rs
push 0x44a6ac
call fcn.00448af0
pop eax
jmp 0x401d53
push 3
pop eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x20], 0
jmp 0x401cfa
call fcn.0040e480
jmp 0x401d53
xor ecx, ecx
mov edx, ebx
inc ecx
call fcn.004485d0
jmp 0x401d53
xor ecx, ecx
mov edx, ebx
mov byte [esi + 6], 1
mov dword [esi + 0xa60], 3
inc ecx
call fcn.004485d0
jmp 0x401d53
mov dword [esi + 0x14], ecx
jmp 0x401cd1
mov eax, dword [esi + 0xfc]
mov dword [esi + 0x14], eax
mov eax, ebx
shr eax, 8
cmp dword [esi + 0x30], 0
mov dword [esi + 0x44], eax
je 0x401cea
mov ecx, dword [esi + 0x2c]
xor edx, edx
inc edx
call fcn.00439670
mov ecx, dword [esi + 8]
xor edx, edx
inc edx
call fcn.00439670
mov eax, ebx
mov dword [esi + 0x20], eax
mov ecx, dword [esi + 0x44]
movzx eax, byte [esi + 0x20]
lea edi, [esi + 0x5a0]
mov dword [esi + 0xa60], 0x12
shl ecx, 8
or eax, ecx
mov ecx, dword [esi + 0x14]
mov dword [edi], eax
mov dword [edi + 4], ecx
push 0x2b
pop edx
mov ecx, str.called__Result::unwrap____on_an__Err__value
push 0x44a6dc
push 0x44a79c
push edi
call fcn.00448a70
add esp, 0xc
jmp 0x401d53
mov dword [esi + 0x48], edi
mov dword [esi + 0xa60], 5
push 4
pop ecx
push 0x18
pop edx
call fcn.004485d0
ud2