Function at 0x401ff0
Capabilities:
Check if file exists
Enumerate files on windows
Get file attributes
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x40f310
mov eax, dword fs:[0]
push eax
sub esp, 0x348
mov eax, dword [0x414084]
xor eax, esp
mov dword [esp + 0x340], eax
push ebx
push esi
push edi
mov eax, dword [0x414084]
xor eax, esp
push eax
lea eax, [esp + 0x358]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
push edi
mov eax, 0x412240
mov dword [esp + 0x40], esi
call fcn.004031c0
lea ebx, [esp + 0xb4]
call fcn.004038b0
mov dword [esp + 0x360], edi
cmp dword [esp + 0xc8], 8
mov eax, dword [esp + 0xb4]
jae 0x402069
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x402079
test al, 0x10
jne 0x402094
cmp dword [esp + 0xc8], 8
jb 0x402729
mov eax, dword [esp + 0xb4]
push eax
jmp 0x402721
push str.QTalk.exe
lea ecx, [esp + 0xb8]
push ecx
lea edx, [esp + 0x84]
push edx
call fcn.00403630
add esp, 0xc
mov byte [esp + 0x360], 1
mov eax, dword [esp + 0x7c]
mov ebx, 8
cmp dword [esp + 0x90], ebx
jae 0x4020cf
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40213f
push edi
lea eax, [esp + 0xb8]
push eax
or eax, 0xffffffff
mov ecx, esi
call fcn.00402ed0
cmp dword [esp + 0x90], ebx
jb 0x402103
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.00404547
add esp, 4
xor edx, edx
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], dx
cmp dword [esp + 0xc8], ebx
jb 0x402135
mov eax, dword [esp + 0xb4]
push eax
call fcn.00404547
add esp, 4
mov eax, 1
jmp 0x40272b
push 0x250
lea ecx, [esp + 0x100]
push edi
push ecx
call fcn.00408ee0
add esp, 0xc
xor edx, edx
push 3
mov eax, 0x412290
lea esi, [esp + 0x48]
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], edi
mov word [esp + 0x48], dx
call fcn.004031c0
mov eax, esi
push eax
lea edx, [esp + 0xb8]
lea ecx, [esp + 0x9c]
mov byte [esp + 0x364], 2
call fcn.00403fc0
add esp, 4
cmp dword [esp + 0x58], ebx
jb 0x4021ac
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00404547
add esp, 4
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xac], ebx
jae 0x4021c3
lea eax, [esp + 0x98]
lea edx, [esp + 0xfc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov eax, 1
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov byte [esp + 0x360], 5
cmp ebx, 0xffffffff
je 0x402295
cmp eax, edi
je 0x402295
cmp word [esp + 0x128], 0x2e
je 0x402281
test byte [esp + 0xfc], 0x10
je 0x402281
xor eax, eax
mov word [esp + 0x44], ax
lea eax, [esp + 0x128]
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x402230
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x12c]
lea esi, [esp + 0x48]
call fcn.004031c0
mov ecx, esi
lea edi, [esp + 0x2c]
mov byte [esp + 0x360], 6
call fcn.00402cf0
mov byte [esp + 0x360], 5
cmp dword [esp + 0x58], 8
jb 0x40227f
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00404547
add esp, 4
xor edi, edi
lea edx, [esp + 0xfc]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x4021f6
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor ebx, ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], edi
mov byte [esp + 0x360], 7
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x2c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], eax
je 0x40240b
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
mov ebx, 7
lea esp, [esp]
mov eax, dword [esp + 0x18]
push edi
xor edx, edx
push eax
or eax, 0xffffffff
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], dx
call fcn.00402ed0
xor ecx, ecx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe0], edi
mov word [esp + 0xd0], cx
push edi
mov eax, 0x412240
lea esi, [esp + 0xd4]
mov byte [esp + 0x364], 9
call fcn.004031c0
mov dword [esp + 0xec], edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf8], edi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x5c], esp
mov byte [esp + 0x37c], 0xa
push edi
lea eax, [esp + 0x64]
xor edx, edx
push eax
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00402ed0
mov ecx, esi
call fcn.00401710
add esp, 0x1c
cmp eax, edi
je 0x4023a7
mov ecx, esi
lea ebx, [esp + 0x1c]
call fcn.00402c10
mov ebx, 7
mov esi, 8
cmp dword [esp + 0xe4], esi
jb 0x4023c5
mov ecx, dword [esp + 0xd0]
push ecx
call fcn.00404547
add esp, 4
xor edx, edx
mov byte [esp + 0x360], 7
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe0], edi
mov word [esp + 0xd0], dx
cmp dword [esp + 0x58], esi
jb 0x4023f8
mov eax, dword [esp + 0x44]
push eax
call fcn.00404547
add esp, 4
add dword [esp + 0x18], 0x1c
dec dword [esp + 0x10]
jne 0x4022f0
mov ebx, dword [esp + 0x20]
mov ecx, ebx
sub ecx, dword [esp + 0x1c]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x40251a
jmp 0x402430
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x48]
call fcn.00401990
add esp, 4
mov byte [esp + 0x360], 0xb
xor eax, eax
push edi
lea ecx, [esp + 0xb8]
mov word [esp + 0x64], ax
push ecx
mov ebx, 7
or eax, 0xffffffff
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
call fcn.00402ed0
push edi
lea edx, [esp + 0x48]
push edx
or eax, 0xffffffff
lea esi, [esp + 0x68]
mov byte [esp + 0x368], 0xc
call fcn.00401430
push 0xe
mov eax, str.BinQTalk.exe
mov ecx, esi
call fcn.00401240
mov eax, dword [esp + 0x60]
mov esi, 8
cmp dword [esp + 0x74], esi
jae 0x4024ad
lea eax, [esp + 0x60]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x40274f
cmp dword [esp + 0x74], esi
jb 0x4024cf
mov eax, dword [esp + 0x60]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov byte [esp + 0x360], 7
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], edi
mov word [esp + 0x60], cx
cmp dword [esp + 0x58], esi
jb 0x4024f9
mov edx, dword [esp + 0x44]
push edx
call fcn.00404547
add esp, 4
mov ebx, dword [esp + 0x20]
mov ecx, ebx
sub ecx, dword [esp + 0x1c]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x402430
mov dword [esp + 0x10], edi
cmp dword [esp + 0x14], edi
jbe 0x402622
mov ebx, dword [esp + 0x2c]
lea esp, [esp]
push edi
xor edx, edx
mov esi, 7
push ebx
or eax, 0xffffffff
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], esi
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], dx
call fcn.00402ed0
mov byte [esp + 0x360], 0xe
xor eax, eax
push edi
lea ecx, [esp + 0xb8]
mov word [esp + 0x64], ax
push ecx
or eax, 0xffffffff
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], edi
call fcn.00402ed0
push edi
lea edx, [esp + 0x48]
push edx
or eax, 0xffffffff
lea esi, [esp + 0x68]
mov byte [esp + 0x368], 0xf
call fcn.00401430
push 0xe
mov eax, str.BinQTalk.exe
mov ecx, esi
call fcn.00401240
cmp dword [esp + 0x74], 8
mov eax, dword [esp + 0x60]
jae 0x4025b3
mov eax, esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x402874
mov esi, 8
cmp dword [esp + 0x74], esi
jb 0x4025da
mov eax, dword [esp + 0x60]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov byte [esp + 0x360], 7
mov dword [esp + 0x74], 7
mov dword [esp + 0x70], edi
mov word [esp + 0x60], cx
cmp dword [esp + 0x58], esi
jb 0x402608
mov edx, dword [esp + 0x44]
push edx
call fcn.00404547
add esp, 4
mov eax, dword [esp + 0x10]
inc eax
add ebx, 0x1c
mov dword [esp + 0x10], eax
cmp eax, dword [esp + 0x14]
jb 0x402530
mov ebx, dword [esp + 0x20]
cmp dword [esp + 0x1c], edi
je 0x402664
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x402657
cmp dword [esi + 0x14], 8
jb 0x402641
mov eax, dword [esi]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov word [esi], cx
add esi, 0x2c
cmp esi, ebx
jne 0x402630
mov edx, dword [esp + 0x1c]
push edx
call fcn.00404547
add esp, 4
cmp dword [esp + 0x2c], edi
je 0x4026aa
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
cmp esi, ebx
je 0x40269d
cmp dword [esi + 0x14], 8
jb 0x402687
mov eax, dword [esi]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov word [esi], cx
add esi, 0x1c
cmp esi, ebx
jne 0x402676
mov edx, dword [esp + 0x2c]
push edx
call fcn.00404547
add esp, 4
mov esi, 8
cmp dword [esp + 0xac], esi
jb 0x4026c8
mov eax, dword [esp + 0x98]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov ebx, 7
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edi
mov word [esp + 0x98], cx
cmp dword [esp + 0x90], esi
jb 0x4026fb
mov edx, dword [esp + 0x7c]
push edx
call fcn.00404547
add esp, 4
xor eax, eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], ax
cmp dword [esp + 0xc8], esi
jb 0x402729
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.00404547
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x358]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x340]
xor ecx, esp
call fcn.00404552
mov esp, ebp
pop ebp
ret
lea edi, [esp + 0x60]
lea ecx, [esp + 0xd0]
call fcn.00403a50
mov esi, dword [esp + 0x3c]
mov edi, eax
mov byte [esp + 0x360], 0xd
call fcn.00402dc0
mov esi, 8
cmp dword [esp + 0xe4], esi
jb 0x402790
mov ecx, dword [esp + 0xd0]
push ecx
call fcn.00404547
add esp, 4
cmp dword [esp + 0x74], esi
jb 0x4027a3
mov edx, dword [esp + 0x60]
push edx
call fcn.00404547
add esp, 4
xor edi, edi
xor eax, eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], edi
mov word [esp + 0x60], ax
cmp dword [esp + 0x58], esi
jb 0x4027c7
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00404547
add esp, 4
xor edx, edx
lea ebx, [esp + 0x1c]
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], edi
mov word [esp + 0x44], dx
call fcn.00403080
lea ebx, [esp + 0x2c]
call fcn.00403160
cmp dword [esp + 0xac], esi
jb 0x402805
mov eax, dword [esp + 0x98]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov ebx, 7
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edi
mov word [esp + 0x98], cx
cmp dword [esp + 0x90], esi
jb 0x402838
mov edx, dword [esp + 0x7c]
push edx
call fcn.00404547
add esp, 4
xor eax, eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], ax
cmp dword [esp + 0xc8], esi
jb 0x402135
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.00404547
add esp, 4
mov eax, 1
jmp 0x40272b
lea edi, [esp + 0x60]
lea ecx, [esp + 0xd0]
call fcn.00403a50
mov esi, eax
mov edi, dword [esp + 0x3c]
cmp edi, esi
je 0x4028ed
cmp dword [edi + 0x14], 8
jb 0x40289f
mov eax, dword [edi]
push eax
call fcn.00404547
add esp, 4
xor ebx, ebx
xor ecx, ecx
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], ebx
mov word [edi], cx
cmp dword [esi + 0x14], 8
jae 0x4028ca
mov edx, dword [esi + 0x10]
lea eax, [edx + edx + 2]
push eax
push esi
push edi
call fcn.00404f90
add esp, 0xc
jmp 0x4028d0
mov ecx, dword [esi]
mov dword [edi], ecx
mov dword [esi], ebx
mov edx, dword [esi + 0x10]
mov dword [edi + 0x10], edx
mov eax, dword [esi + 0x14]
mov dword [edi + 0x14], eax
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
mov word [esi], cx
jmp 0x4028ef
xor ebx, ebx
cmp dword [esp + 0xe4], 8
jb 0x402909
mov edx, dword [esp + 0xd0]
push edx
call fcn.00404547
add esp, 4
cmp dword [esp + 0x74], 8
jb 0x40291d
mov eax, dword [esp + 0x60]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
cmp dword [esp + 0x58], 8
mov dword [esp + 0x74], 7
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], cx
jb 0x402944
mov edx, dword [esp + 0x44]
push edx
call fcn.00404547
add esp, 4
mov dword [esp + 0x54], ebx
xor eax, eax
lea ebx, [esp + 0x1c]
mov dword [esp + 0x58], 7
mov word [esp + 0x44], ax
call fcn.00403080
lea ebx, [esp + 0x2c]
call fcn.00403160
mov esi, 8
cmp dword [esp + 0xac], esi
jb 0x402987
mov ecx, dword [esp + 0x98]
push ecx
call fcn.00404547
add esp, 4
xor edi, edi
xor edx, edx
mov ebx, 7
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edi
mov word [esp + 0x98], dx
cmp dword [esp + 0x90], esi
jb 0x4029bc
mov eax, dword [esp + 0x7c]
push eax
call fcn.00404547
add esp, 4
xor ecx, ecx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], cx
cmp dword [esp + 0xc8], esi
jb 0x402135
mov edx, dword [esp + 0xb4]
push edx
call fcn.00404547
add esp, 4
mov eax, 1
jmp 0x40272b