Function at 0x412ff0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x300
mov eax, dword [0x5d5440]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x8007
mov dword [ebp - 0x300], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 2
call fcn.0046b1b0
add esp, 4
lea ecx, [ebp - 0x2e1]
call fcn.00412870
push 0
push 0
push str.intercept_bs_ui
call fcn.00411cf0
push 0x208
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00553b10
add esp, 0x18
lea eax, [ebp - 0x270]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x270]
push eax
call edi
mov esi, 2
nop dword [eax]
lea eax, [ebp - 0x270]
push eax
call edi
sub esi, 1
jne 0x413090
push str.UtilsDumpUper.exe
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4130f9
lea ecx, [ebp - 0x270]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4130d0
sub ecx, edx
lea eax, [ebp - 0x270]
sar ecx, 1
push ecx
push eax
push 0x104
push 0x5dfd78
call fcn.00560aef
add esp, 0x10
push 0x30
lea eax, [ebp - 0x2ac]
push 0
push eax
call fcn.00553b10
add esp, 0xc
lea ecx, [ebp - 0x2ac]
call fcn.00475c70
lea eax, [ebp - 0x274]
mov dword [ebp - 0x274], 0
push 2
push eax
call fcn.0044dfd0
add esp, 8
lea ecx, [ebp - 0x274]
push 0x18
push str.Logintercept_bs_ui.log
call fcn.00411440
push 0x595e58
push 0x6400000
push 0
push 0
push dword [ebp - 0x274]
call fcn.004452c0
push str.http:__s.ludashi.com_url3_pidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionactionappappex_ary_ex_flag_value_added
push 0x5967fc
push 2
call fcn.00411c40
mov ecx, eax
call fcn.0046e1a0
push 0
mov dword [ebp - 0x278], 0x80004005
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, eax
mov dword [ebp - 0x2e0], esi
test esi, esi
jns 0x413268
call fcn.00444b30
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x413973
push 0x67
push str.d:jenkins.jenkinsworkspacegroup_cleanintercept_bsintercept_bsintercept_bs_ui_srcintercept_bs.cc
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], al
call fcn.00407340
push 3
push 0x5957fc
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
call fcn.00407340
call fcn.00444b30
mov edi, eax
lea ecx, [ebp - 0x100]
push 0x43
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.00404340
mov esi, eax
push str.CoInitialize_fail
push esi
call fcn.00405420
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x100]
call fcn.004056b0
lea ecx, [ebp - 0x2dc]
call fcn.00404e30
lea ecx, [ebp - 0x2c4]
call fcn.00404e30
jmp 0x41396d
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x27c], 8
push eax
mov dword [ebp - 0x278], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push ebx
mov ecx, 0x5e03a0
call fcn.0044f5f0
mov dword [ebp - 0x278], eax
mov dword [0x5e039c], ebx
test eax, eax
jns 0x413366
call fcn.00444b30
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x413973
push 0x67
push str.d:jenkins.jenkinsworkspacegroup_cleanintercept_bsintercept_bsintercept_bs_ui_srcintercept_bs.cc
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], al
call fcn.00407340
push 3
push 0x5957fc
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
call fcn.00407340
call fcn.00444b30
mov edi, eax
lea ecx, [ebp - 0x100]
push 0x4b
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.00404340
push str.AppModuleEx_init_fail
mov esi, eax
push esi
call fcn.00405420
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
jmp 0x413242
push str....._netul.dll
call fcn.00451d40
add esp, 4
mov esi, eax
call fcn.00444b30
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
test esi, esi
jne 0x413416
sub eax, 1
jne 0x41396d
push 0x67
push str.d:jenkins.jenkinsworkspacegroup_cleanintercept_bsintercept_bsintercept_bs_ui_srcintercept_bs.cc
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], al
call fcn.00407340
push 3
push 0x5957fc
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
call fcn.00407340
call fcn.00444b30
mov edi, eax
lea ecx, [ebp - 0x100]
push 0x4f
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.00404340
push str.InitNet_failed
jmp 0x41334e
sub eax, 1
jne 0x4136b0
push 0x67
push str.d:jenkins.jenkinsworkspacegroup_cleanintercept_bsintercept_bsintercept_bs_ui_srcintercept_bs.cc
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], al
call fcn.00407340
push 3
push 0x5957fc
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
call fcn.00407340
call fcn.00444b30
push 1
push 2
lea ecx, [ebp - 0x100]
mov ebx, eax
call fcn.0040d9e0
push 0xffffffffffffffff
push 0x5958bc
lea ecx, [ebp - 0x2dc]
call fcn.0040a3d0
push 0xffffffffffffffff
push 0x5958c0
lea ecx, [ebp - 0x2dc]
mov edi, eax
call fcn.0040a3d0
push 0x64
mov esi, eax
lea eax, [ebp - 0x68]
push 0
push eax
call fcn.00553b10
add esp, 0xc
cmp esi, 0xffffffff
je 0x4135b0
lea eax, [esi - 1]
cmp edi, eax
jae 0x4135b0
mov eax, dword [ebp - 0x2cc]
lea edx, [edi + 1]
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
cmp eax, edx
jb 0x4139e4
sub esi, edi
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x2c8], 0x10
lea eax, [ebp - 0x2dc]
cmovae eax, dword [ebp - 0x2dc]
push ecx
add eax, edx
lea ecx, [ebp - 0x2fc]
push eax
call fcn.00407340
cmp dword [ebp - 0x2e8], 0x10
lea eax, [ebp - 0x2fc]
cmovae eax, dword [ebp - 0x2fc]
push eax
push 0x52
lea eax, [ebp - 0x68]
push str.__4d___s_
push eax
call fcn.00403cd0
mov edx, dword [ebp - 0x2e8]
add esp, 0x10
cmp edx, 0x10
jb 0x413593
mov ecx, dword [ebp - 0x2fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413589
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139e9
push edx
push ecx
call fcn.004671e6
add esp, 8
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
jmp 0x4135c3
push 0x52
lea eax, [ebp - 0x68]
push str.__4d_
push eax
call fcn.00403cd0
add esp, 0xc
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
cmovae eax, dword [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00405420
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00405420
lea eax, [ebp - 0x100]
push str.Start_Run
push eax
call fcn.00405420
mov eax, dword [ebx]
lea ecx, [ebp - 0x100]
add esp, 0x18
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x100]
call fcn.004056b0
mov edx, dword [ebp - 0x2b0]
cmp edx, 0x10
jb 0x41365b
mov ecx, dword [ebp - 0x2c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413651
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139ee
push edx
push ecx
call fcn.004671e6
add esp, 8
mov edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
cmp edx, 0x10
jb 0x4136b0
mov ecx, dword [ebp - 0x2dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4136a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139ee
push edx
push ecx
call fcn.004671e6
add esp, 8
push dword [ebp - 0x300]
call fcn.00411f00
call fcn.00444b30
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x413968
push 0x67
push str.d:jenkins.jenkinsworkspacegroup_cleanintercept_bsintercept_bsintercept_bs_ui_srcintercept_bs.cc
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], al
call fcn.00407340
push 3
push 0x5957fc
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
call fcn.00407340
call fcn.00444b30
push 1
push 2
lea ecx, [ebp - 0x100]
mov ebx, eax
call fcn.0040d9e0
push 0xffffffffffffffff
push 0x5958bc
lea ecx, [ebp - 0x2fc]
call fcn.0040a3d0
push 0xffffffffffffffff
push 0x5958c0
lea ecx, [ebp - 0x2fc]
mov edi, eax
call fcn.0040a3d0
push 0x64
mov esi, eax
lea eax, [ebp - 0x68]
push 0
push eax
call fcn.00553b10
add esp, 0xc
cmp esi, 0xffffffff
je 0x413868
lea eax, [esi - 1]
cmp edi, eax
jae 0x413868
mov eax, dword [ebp - 0x2ec]
lea edx, [edi + 1]
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
cmp eax, edx
jb 0x4139f3
sub esi, edi
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x2e8], 0x10
lea eax, [ebp - 0x2fc]
cmovae eax, dword [ebp - 0x2fc]
push ecx
add eax, edx
lea ecx, [ebp - 0x2dc]
push eax
call fcn.00407340
cmp dword [ebp - 0x2c8], 0x10
lea eax, [ebp - 0x2dc]
cmovae eax, dword [ebp - 0x2dc]
push eax
push 0x54
lea eax, [ebp - 0x68]
push str.__4d___s_
push eax
call fcn.00403cd0
mov edx, dword [ebp - 0x2c8]
add esp, 0x10
cmp edx, 0x10
jb 0x41384b
mov ecx, dword [ebp - 0x2dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413841
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139f8
push edx
push ecx
call fcn.004671e6
add esp, 8
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
jmp 0x41387b
push 0x54
lea eax, [ebp - 0x68]
push str.__4d_
push eax
call fcn.00403cd0
add esp, 0xc
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
cmovae eax, dword [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00405420
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00405420
lea eax, [ebp - 0x100]
push str.End_Run
push eax
call fcn.00405420
mov eax, dword [ebx]
lea ecx, [ebp - 0x100]
add esp, 0x18
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x100]
call fcn.004056b0
mov edx, dword [ebp - 0x2b0]
cmp edx, 0x10
jb 0x413913
mov ecx, dword [ebp - 0x2c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413909
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139fd
push edx
push ecx
call fcn.004671e6
add esp, 8
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
cmp edx, 0x10
jb 0x413968
mov ecx, dword [ebp - 0x2fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41395e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4139fd
push edx
push ecx
call fcn.004671e6
add esp, 8
call fcn.00452120
mov esi, dword [ebp - 0x2e0]
call fcn.00411c40
mov ecx, eax
call fcn.0046e240
call fcn.00445d30
cmp dword [ebp - 0x278], 0
jl 0x413997
mov ecx, 0x5e03a0
call fcn.00450c80
pop edi
test esi, esi
pop esi
pop ebx
js 0x4139a4
call dword [sym.imp.ole32.dll_CoUninitialize]
call fcn.0046b5a0
mov edx, dword [ebp - 0x274]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4139c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2ac]
call fcn.00478840
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
call fcn.0046748e
mov esp, ebp
pop ebp
ret 0x10
call fcn.00406da0
call fcn.0055718a
call fcn.0055718a
call fcn.00406da0
call fcn.0055718a
call fcn.0055718a
int3