Function at 0x428820
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b564d
mov eax, dword fs:[0]
push eax
sub esp, 0x15c
mov eax, dword [0x4e83f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], al
lea esi, [ecx + 0x38]
mov dword [ebp - 4], eax
push str.All_Usersconfigconfig.data
lea eax, [ebp - 0x58]
push esi
push eax
call fcn.00424850
add esp, 0xc
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4289a4
call fcn.0043cc60
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x428f2d
push 0x78
push str.d:jenkins.jenkinsworkspacepay_groupmulti_wechatmulti_wechat_clientclientclientmulti_wechat_srcwechat_helper.cc
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], al
call fcn.00408180
push 3
push 0x4be84c
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 2
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
call fcn.00408180
mov byte [ebp - 4], 3
call fcn.0043cc60
mov edi, eax
lea ecx, [ebp - 0x168]
push 0x146
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004046f0
mov esi, eax
cmp dword [ebp - 0x44], 8
lea edx, [ebp - 0x58]
mov ecx, 0x4be8f8
mov byte [ebp - 4], 4
cmovae edx, dword [ebp - 0x58]
test edx, edx
cmovne ecx, edx
push ecx
push esi
call fcn.00403a80
push str._not_exist
push esi
call fcn.00405680
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x168]
call fcn.004057a0
lea ecx, [ebp - 0xa8]
call fcn.004050d0
lea ecx, [ebp - 0xc8]
jmp 0x428f28
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
cmovae eax, dword [ebp - 0x58]
push ecx
push eax
call fcn.00455ba0
add esp, 8
cmp dword [ebp - 0x18], 0
jne 0x428ad3
call fcn.0043cc60
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x428f25
push 0x78
push str.d:jenkins.jenkinsworkspacepay_groupmulti_wechatmulti_wechat_clientclientclientmulti_wechat_srcwechat_helper.cc
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], al
call fcn.00408180
push 3
push 0x4be84c
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 6
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
call fcn.00408180
mov byte [ebp - 4], 7
call fcn.0043cc60
mov edi, eax
lea ecx, [ebp - 0x168]
push 0x14d
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.004046f0
mov esi, eax
push str.read_config_data_fail__path:
push esi
mov byte [ebp - 4], 8
call fcn.00405680
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x58]
mov eax, 0x4be8f8
cmovae ecx, dword [ebp - 0x58]
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.00403a80
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x168]
call fcn.004057a0
lea ecx, [ebp - 0xc8]
call fcn.004050d0
lea ecx, [ebp - 0xa8]
jmp 0x428f20
cmp dword [esi + 0x14], 8
jb 0x428adb
mov esi, dword [esi]
push 0xfde9
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.00469aa0
add esp, 0xc
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x40]
lea ecx, [ebp - 0x40]
cmovae eax, esi
cmovae ecx, esi
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x30]
add eax, ecx
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0x40]
mov edi, eax
cmovae ecx, esi
xor edx, edx
sub edi, ecx
mov dword [ebp - 0x90], ecx
xor esi, esi
cmp ecx, eax
cmova edi, edx
test edi, edi
je 0x428b51
nop dword [eax]
movsx eax, byte [esi + ecx]
push eax
call fcn.00472f49
mov ecx, dword [ebp - 0xb0]
add esp, 4
mov byte [esi + ecx], al
inc esi
mov ecx, dword [ebp - 0x90]
cmp esi, edi
jne 0x428b30
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
lea edx, [ebp - 0x28]
mov edi, dword [ebp - 0x18]
cmovae eax, esi
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0x28]
cmovae eax, esi
add eax, edi
cmp dword [ebp - 0x14], 0x10
mov ecx, eax
cmovae edx, esi
xor esi, esi
sub ecx, edx
mov dword [ebp - 0xac], edx
cmp edx, eax
cmova ecx, esi
test ecx, ecx
je 0x428bb4
mov edi, ecx
movsx eax, byte [esi + edx]
push eax
call fcn.00472f49
mov ecx, dword [ebp - 0xb0]
add esp, 4
mov edx, dword [ebp - 0xac]
mov byte [esi + ecx], al
inc esi
cmp esi, edi
jne 0x428b90
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x14]
cmp esi, 0x10
push ecx
cmovae eax, dword [ebp - 0x28]
push 0
push edi
push eax
mov byte [ebp - 4], 0xa
call fcn.00425930
add esp, 0x14
mov dword [ebp - 0xac], eax
cmp eax, 0xffffffff
je 0x428f12
push 7
push str.config
cmp esi, 0x10
lea ecx, [ebp - 0x28]
push 0
cmovae ecx, dword [ebp - 0x28]
push edi
push ecx
call fcn.00425930
mov ecx, eax
add esp, 0x14
cmp ecx, 0xffffffff
je 0x428f12
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edi, edx
jb 0x4291b8
sub ecx, edx
lea eax, [ebp - 0x28]
sub edi, edx
cmp edi, ecx
cmovb ecx, edi
cmp esi, 0x10
push ecx
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xa8]
add eax, edx
push eax
call fcn.00408180
mov edx, dword [ebp - 0x74]
mov eax, 0x10
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xcc], eax
cmp edx, eax
jb 0x428cbe
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x428cb4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291bd
push edx
push ecx
call fcn.004395b0
add esp, 8
movups xmm0, xmmword [ebp - 0xa8]
mov esi, dword [ebp - 0x98]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [ebp - 0x98]
movq qword [ebp - 0x78], xmm0
test esi, esi
je 0x428f12
cmp dword [ebp - 0x94], 0x10
lea edx, [ebp - 0x88]
cmovae edx, dword [ebp - 0xa8]
cmp esi, 1
jb 0x428dee
or edi, 0xffffffff
lea eax, [esi - 1]
cmp eax, edi
mov ecx, edi
cmovb ecx, eax
add ecx, edx
cmp byte [ecx], 0x5c
jne 0x428d2c
movzx eax, byte [ecx]
cmp al, 0x5c
jne 0x428d23
xor eax, eax
jmp 0x428d28
sbb eax, eax
or eax, 1
test eax, eax
je 0x428d37
cmp ecx, edx
je 0x428dee
dec ecx
jmp 0x428d13
sub ecx, edx
cmp ecx, 0xffffffff
je 0x428dee
inc ecx
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
cmp esi, ecx
jb 0x4291c2
sub esi, ecx
lea eax, [ebp - 0x88]
cmp esi, 0xffffffff
cmovb edi, esi
cmp dword [ebp - 0x94], 0x10
push edi
cmovae eax, dword [ebp - 0xa8]
add eax, ecx
lea ecx, [ebp - 0xc8]
push eax
call fcn.00408180
mov edx, dword [ebp - 0x5c]
mov eax, 0x30
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xcc], eax
cmp edx, 0x10
jb 0x428dd6
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x428dcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291c7
push edx
push ecx
call fcn.004395b0
add esp, 8
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [ebp - 0xb8]
movq qword [ebp - 0x60], xmm0
mov edx, dword [ebp - 0x74]
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x428e29
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x428e1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291cc
push edx
push ecx
call fcn.004395b0
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x428e76
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x428e6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291d1
push edx
push ecx
call fcn.004395b0
add esp, 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x428ec0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x428eb6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291d6
push edx
push ecx
call fcn.004395b0
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x428f39
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x428f06
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291db
push edx
push ecx
call fcn.004395b0
add esp, 8
jmp 0x428f39
lea ecx, [ebp - 0x88]
call fcn.004050d0
lea ecx, [ebp - 0x40]
call fcn.004050d0
lea ecx, [ebp - 0x28]
call fcn.004050d0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00403110
call fcn.0043cc60
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x429092
push 0x78
push str.d:jenkins.jenkinsworkspacepay_groupmulti_wechatmulti_wechat_clientclientclientmulti_wechat_srcwechat_helper.cc
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], al
call fcn.00408180
push 3
push 0x4be84c
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
call fcn.00408180
mov byte [ebp - 4], 0xc
call fcn.0043cc60
mov edi, eax
lea ecx, [ebp - 0x168]
push 0x169
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004046f0
mov esi, eax
push str.last_login_wx_id:
push esi
mov byte [ebp - 4], 0xd
call fcn.00405680
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
cmovae ecx, dword [ebp - 0x70]
push ecx
push esi
call fcn.00405680
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x168]
call fcn.004057a0
mov edx, dword [ebp - 0x94]
mov byte [ebp - 4], 0xb
cmp edx, 0x10
jb 0x42903f
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429035
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291e0
push edx
push ecx
call fcn.004395b0
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x429092
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429088
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291e5
push edx
push ecx
call fcn.004395b0
add esp, 8
cmp dword [ebp - 0x60], 0
jne 0x4290d7
xor eax, eax
mov dword [ebp - 0xb8], 0
push eax
push 0x4be580
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
call fcn.00403770
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0xc8]
or eax, 1
jmp 0x429102
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
push 0xfde9
cmovae eax, dword [ebp - 0x70]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00469be0
mov ecx, eax
add esp, 0xc
mov eax, dword [ebp - 0x8c]
or eax, 2
mov esi, dword [ebp - 0xd0]
xor edx, edx
or eax, 4
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
test al, 2
je 0x42915a
and eax, 0xfffffffd
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x8c], eax
call fcn.00403110
mov eax, dword [ebp - 0x8c]
test al, 1
je 0x429169
lea ecx, [ebp - 0xc8]
call fcn.00403110
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x429199
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42918f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4291ea
push edx
push ecx
call fcn.004395b0
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004395be
mov esp, ebp
pop ebp
ret 4
call fcn.00407c50
call fcn.0046fe99
call fcn.00407c50
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
call fcn.0046fe99
int3