Function at 0x414600
Capabilities:
Check if file exists
Get common file path

Disassembly:
mov eax, 0x1ce8
call fcn.00429600
mov eax, dword [0x4382c4]
xor eax, esp
mov dword [esp + 0x1ce4], eax
push ebx
push edi
xor ebx, ebx
push 0x103
lea eax, [esp + 0x1be5]
push ebx
push eax
mov byte [esp + 0x1bec], bl
call fcn.00420f50
add esp, 0xc
push 0x104
lea ecx, [esp + 0x1be4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x103
lea edx, [esp + 0x1add]
push ebx
push edx
mov byte [esp + 0x1ae4], bl
call fcn.00420f50
add esp, 0xc
lea eax, [esp + 0x1be0]
push eax
push str._sdriversetchosts
lea ecx, [esp + 0x1ae0]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0xe8d]
push ebx
push edx
mov byte [esp + 0xe94], bl
call fcn.00420f50
add esp, 0x1c
push 0x103
lea eax, [esp + 0xd]
push ebx
push eax
mov byte [esp + 0x14], bl
call fcn.00420f50
add esp, 0xc
lea edi, [esp + 8]
call fcn.00413aa0
push 0x103
lea ecx, [esp + 0xc6d]
push ebx
push ecx
mov byte [esp + 0xc74], bl
call fcn.00420f50
add esp, 0xc
push str.ieagentlog0.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0xc78]
push 0x104
push eax
call fcn.0041af4d
push 0x103
lea ecx, [esp + 0x14c5]
push ebx
push ecx
mov byte [esp + 0x14cc], bl
call fcn.00420f50
add esp, 0x24
push str.ieagentlog1.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0x14b8]
push 0x104
push eax
call fcn.0041af4d
push 0x103
push ebx
lea ecx, [esp + 0x551]
mov byte [esp + 0x550], bl
push ecx
call fcn.00420f50
add esp, 0x24
push 0x103
lea edx, [esp + 0x955]
push ebx
push edx
mov byte [esp + 0x95c], bl
call fcn.00420f50
add esp, 0xc
push str.NpsvnPluginlog0.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0x960]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0x18e5]
push ebx
push edx
mov byte [esp + 0x18ec], bl
call fcn.00420f50
add esp, 0x24
push str.NpsvnPluginlog1.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0x18d8]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0x33d]
push ebx
push edx
mov byte [esp + 0x344], bl
call fcn.00420f50
add esp, 0x24
push 0x103
lea eax, [esp + 0x108d]
push ebx
push eax
mov byte [esp + 0x1094], bl
call fcn.00420f50
add esp, 0xc
push str.SVNClientMgr0.txt
push str.log_
mov ecx, edi
push ecx
push str._s_s_s
lea edx, [esp + 0x1098]
push 0x104
push edx
call fcn.0041af4d
push 0x103
lea eax, [esp + 0x16d5]
push ebx
push eax
mov byte [esp + 0x16dc], bl
call fcn.00420f50
add esp, 0x24
push str.SVNClientMgr1.txt
push str.log_
mov ecx, edi
push ecx
push str._s_s_s
lea edx, [esp + 0x16c8]
push 0x104
push edx
call fcn.0041af4d
push 0x103
lea eax, [esp + 0x75d]
push ebx
push eax
mov byte [esp + 0x764], bl
call fcn.00420f50
add esp, 0x24
mov byte [esp + 0x1298], bl
push 0x103
lea ecx, [esp + 0x129d]
push ebx
push ecx
call fcn.00420f50
add esp, 0xc
push str.nemservicelog0.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0x12a8]
push 0x104
push eax
call fcn.0041af4d
push 0x103
lea ecx, [esp + 0xa75]
push ebx
push ecx
mov byte [esp + 0xa7c], bl
call fcn.00420f50
add esp, 0x24
push str.nemservicelog0.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0xa68]
push 0x104
push eax
call fcn.0041af4d
push 0x103
lea ecx, [esp + 0x12d]
push ebx
push ecx
mov byte [esp + 0x134], bl
call fcn.00420f50
add esp, 0x24
push 0x103
lea edx, [esp + 0xb65]
push ebx
push edx
mov byte [esp + 0xb6c], bl
call fcn.00420f50
add esp, 0xc
push str.proxysetlog0.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0xb70]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0xd8d]
push ebx
push edx
mov byte [esp + 0xd94], bl
call fcn.00420f50
add esp, 0x24
push str.proxysetlog1.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0xd80]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0x235]
push ebx
push edx
mov byte [esp + 0x23c], bl
call fcn.00420f50
add esp, 0x24
push 0x103
mov byte [esp + 0xf84], bl
push ebx
lea eax, [esp + 0xf89]
push eax
call fcn.00420f50
add esp, 0xc
push str.SVNHostID0.txt
push str.log_
mov ecx, edi
push ecx
push str._s_s_s
lea edx, [esp + 0xf90]
push 0x104
push edx
call fcn.0041af4d
push 0x103
lea eax, [esp + 0x11ad]
push ebx
push eax
mov byte [esp + 0x11b4], bl
call fcn.00420f50
add esp, 0x24
push str.SVNHostID1.txt
push str.log_
mov ecx, edi
push ecx
push str._s_s_s
lea edx, [esp + 0x11a0]
push 0x104
push edx
call fcn.0041af4d
push 0x103
lea eax, [esp + 0x445]
push ebx
push eax
mov byte [esp + 0x44c], bl
call fcn.00420f50
add esp, 0x24
push 0x103
lea ecx, [esp + 0x13a5]
push ebx
push ecx
mov byte [esp + 0x13ac], bl
call fcn.00420f50
add esp, 0xc
push str.CepsLog0.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0x13b0]
push 0x104
push eax
call fcn.0041af4d
push 0x103
lea ecx, [esp + 0x15cd]
push ebx
push ecx
mov byte [esp + 0x15d4], bl
call fcn.00420f50
add esp, 0x24
push str.CepsLog1.txt
push str.log_
mov edx, edi
push edx
push str._s_s_s
lea eax, [esp + 0x15c0]
push 0x104
push eax
call fcn.0041af4d
push 0x103
lea ecx, [esp + 0x655]
push ebx
push ecx
mov byte [esp + 0x65c], bl
call fcn.00420f50
add esp, 0x24
push 0x103
lea edx, [esp + 0x17c5]
push ebx
push edx
mov byte [esp + 0x17cc], bl
call fcn.00420f50
add esp, 0xc
push str.nemclientlog0.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0x17d0]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0x19ed]
push ebx
push edx
mov byte [esp + 0x19f4], bl
call fcn.00420f50
add esp, 0x24
push str.nemclientlog1.txt
push str.log_
mov eax, edi
push eax
push str._s_s_s
lea ecx, [esp + 0x19e0]
push 0x104
push ecx
call fcn.0041af4d
push 0x103
lea edx, [esp + 0x865]
push ebx
push edx
mov byte [esp + 0x86c], bl
call fcn.00420f50
add esp, 0x24
cmp dword [esp + 0x1cf4], 1
lea eax, [esp + 0xe78]
jne 0x414ca5
push 0x4327b0
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push 0x4327c8
lea ecx, [esp + 0x534]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push str.Firefox
lea edx, [esp + 0x324]
push 0x104
push edx
call fcn.0041af4d
add esp, 0xc
push 0x4327e4
lea eax, [esp + 0x744]
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push 0x4327f4
lea ecx, [esp + 0x114]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push 0x432808
lea edx, [esp + 0x21c]
push 0x104
push edx
call fcn.0041af4d
add esp, 0xc
push 0x432818
lea eax, [esp + 0x42c]
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push 0x432828
lea ecx, [esp + 0x63c]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push 0x432838
jmp 0x414d73
push str.Local_ip_and_host_name_map_file
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push str.IE_agent_log_file
lea ecx, [esp + 0x534]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push str.Firefox_plug_in_log_file
lea edx, [esp + 0x324]
push 0x104
push edx
call fcn.0041af4d
add esp, 0xc
push str.Client_manager_log_file
lea eax, [esp + 0x744]
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push str.Network_extension_service_log_file
lea ecx, [esp + 0x114]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push str.Proxyset_log_file
lea edx, [esp + 0x21c]
push 0x104
push edx
call fcn.0041af4d
add esp, 0xc
push str.Host_ID_log_file
lea eax, [esp + 0x42c]
push 0x104
push eax
call fcn.0041af4d
add esp, 0xc
push str.EPS_log_file
lea ecx, [esp + 0x63c]
push 0x104
push ecx
call fcn.0041af4d
add esp, 0xc
push str.SVN_client_log_file
lea edx, [esp + 0x84c]
push 0x104
push edx
call fcn.0041af4d
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
add esp, 0xc
lea eax, [esp + 0x1ad8]
push eax
call ebx
test eax, eax
mov edi, dword [sym.imp.SSLVPNDump.DLL_AddFile2FaultReport]
je 0x414db8
lea ecx, [esp + 0xe78]
push ecx
lea edx, [esp + 0x1adc]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0xc68]
push eax
call ebx
test eax, eax
je 0x414ddc
lea ecx, [esp + 0x530]
push ecx
lea edx, [esp + 0xc6c]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x14a8]
push eax
call ebx
test eax, eax
je 0x414e00
lea ecx, [esp + 0x530]
push ecx
lea edx, [esp + 0x14ac]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x950]
push eax
call ebx
test eax, eax
je 0x414e24
lea ecx, [esp + 0x320]
push ecx
lea edx, [esp + 0x954]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x18c8]
push eax
call ebx
test eax, eax
je 0x414e48
lea ecx, [esp + 0x320]
push ecx
lea edx, [esp + 0x18cc]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x1088]
push eax
call ebx
test eax, eax
je 0x414e6c
lea ecx, [esp + 0x740]
push ecx
lea edx, [esp + 0x108c]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x16b8]
push eax
call ebx
test eax, eax
je 0x414e90
lea ecx, [esp + 0x740]
push ecx
lea edx, [esp + 0x16bc]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x1298]
push eax
call ebx
test eax, eax
je 0x414eb4
lea ecx, [esp + 0x110]
push ecx
lea edx, [esp + 0x129c]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0xa58]
push eax
call ebx
test eax, eax
je 0x414ed8
lea ecx, [esp + 0x110]
push ecx
lea edx, [esp + 0xa5c]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0xb60]
push eax
call ebx
test eax, eax
je 0x414efc
lea ecx, [esp + 0x218]
push ecx
lea edx, [esp + 0xb64]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0xd70]
push eax
call ebx
test eax, eax
je 0x414f20
lea ecx, [esp + 0x218]
push ecx
lea edx, [esp + 0xd74]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0xf80]
push eax
call ebx
test eax, eax
je 0x414f44
lea ecx, [esp + 0x428]
push ecx
lea edx, [esp + 0xf84]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x1190]
push eax
call ebx
test eax, eax
je 0x414f68
lea ecx, [esp + 0x428]
push ecx
lea edx, [esp + 0x1194]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x13a0]
push eax
call ebx
test eax, eax
je 0x414f8c
lea ecx, [esp + 0x638]
push ecx
lea edx, [esp + 0x13a4]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x15b0]
push eax
call ebx
test eax, eax
je 0x414fb0
lea ecx, [esp + 0x638]
push ecx
lea edx, [esp + 0x15b4]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x17c0]
push eax
call ebx
test eax, eax
je 0x414fd4
lea ecx, [esp + 0x848]
push ecx
lea edx, [esp + 0x17c4]
push edx
push esi
call edi
add esp, 0xc
lea eax, [esp + 0x19d0]
push eax
call ebx
test eax, eax
je 0x414ff8
lea ecx, [esp + 0x848]
push ecx
lea edx, [esp + 0x19d4]
push edx
push esi
call edi
add esp, 0xc
mov ecx, dword [esp + 0x1cec]
pop edi
pop ebx
xor ecx, esp
call fcn.0041aec3
add esp, 0x1ce8
ret