Function at 0x427738
Capabilities:
Check if file exists
Get common file path
Get file attributes
Link many functions at runtime
Set current directory

Disassembly:
push 0x14
mov eax, 0x4ad0b8
call fcn.00468c18
mov edi, ecx
cmp dword [0x51441c], 0
jne 0x427a26
test edi, edi
je 0x427a26
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xor ecx, ecx
push 2
pop edx
lea esi, [eax + 0x13]
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0044e692
pop ecx
push eax
push esi
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov eax, dword [edi + 0x68]
sub eax, 0x10
push eax
call fcn.00402d9f
add eax, 0x10
pop ecx
mov dword [ebp - 0x14], eax
mov ecx, edi
mov dword [ebp - 4], ebx
call fcn.004031f2
test eax, eax
mov ecx, str.Acrobat_
mov esi, str.Reader_
cmove esi, ecx
push esi
call fcn.0048477d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x14]
call fcn.004025c6
mov edi, dword [ebp - 0x14]
lea eax, [edi - 0x10]
push eax
mov dword [ebp - 0x20], eax
call fcn.00402d9f
add eax, 0x10
pop ecx
mov dword [ebp - 0x10], eax
mov esi, str.logsession.dll
mov byte [ebp - 4], 1
push esi
call fcn.0048477d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10]
call fcn.004025c6
mov esi, dword [ebp - 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x42783e
push ecx
push edi
push str.Agent
mov edx, str.SoftwareAdobeCommonFilesUsageCC_
mov ecx, SysReAllocString
call fcn.00443686
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, dword [ebp - 0x1c]
push edi
mov dword [0x51441c], eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
jmp 0x427876
push str.Unable_to_find_Logsession.dll:
lea ecx, [ebp - 0x18]
call fcn.00402829
push ebx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 2
push eax
push 2
lea edx, [ebp - 0x18]
pop ecx
call fcn.00414570
pop ecx
pop ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x1c]
push edi
call fcn.0044e68d
mov eax, dword [0x51441c]
pop ecx
test eax, eax
jne 0x4278bc
push str.LoadLibrary_failed:
lea ecx, [ebp - 0x1c]
call fcn.00402829
push ebx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 3
push eax
push 2
lea edx, [ebp - 0x1c]
pop ecx
call fcn.00414570
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
lea ecx, [eax - 0x10]
call fcn.00402e64
mov esi, dword [ebp - 0x10]
jmp 0x427a0f
mov ecx, dword [0x513dd4]
cmp ecx, 1
jne 0x4278ef
push str.UTInitialize
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x514420], eax
test eax, eax
jne 0x427951
push str.Failed_to_export_UTInitialize_from_Logsession_HB
lea ecx, [ebp - 0x1c]
call fcn.00402829
mov byte [ebp - 4], 4
jmp 0x42791e
cmp ecx, 2
jne 0x4279e6
push str.UTInitialize
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x514424], eax
test eax, eax
jne 0x427951
push str.Failed_to_export_UTInitialize_from_Logsession_NGL
lea ecx, [ebp - 0x1c]
call fcn.00402829
mov byte [ebp - 4], 5
push ebx
push 2
lea edx, [ebp - 0x1c]
pop ecx
call fcn.00414ca1
pop ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [0x51441c]
test eax, eax
je 0x427946
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x51441c], ebx
jmp 0x427a0f
push str.UTStartSession
push dword [0x51441c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.UTLogEvent
push dword [0x51441c]
mov dword [0x514428], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.UTNewDataGroup
push dword [0x51441c]
mov dword [0x51442c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.UTAddToGroup
push dword [0x51441c]
mov dword [0x514430], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.UTCloseSession
push dword [0x51441c]
mov dword [0x514434], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.UTDisableRealTime
push dword [0x51441c]
mov dword [0x514438], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [esi - 0x10]
mov dword [0x51443c], eax
call fcn.00402e64
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
jmp 0x427a55
push str.Not_valid_LogsessionType_in_HB::AVUsageMeasureInitialized
lea ecx, [ebp - 0x1c]
call fcn.00402829
push ebx
push 2
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 6
pop ecx
call fcn.00414ca1
mov eax, dword [ebp - 0x1c]
pop ecx
lea ecx, [eax - 0x10]
call fcn.00402e64
lea ecx, [esi - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x20]
call fcn.00402e64
xor al, al
jmp 0x427ad0
push str.No_condition_to_load_library
lea ecx, [ebp - 0x20]
call fcn.00402829
xor ebx, ebx
mov dword [ebp - 4], 7
push ebx
push 2
pop eax
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.00414ca1
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [0x514428], 0
je 0x427a8c
cmp dword [0x51442c], 0
je 0x427a8c
cmp dword [0x514430], 0
je 0x427a8c
cmp dword [0x514434], 0
je 0x427a8c
cmp dword [0x514438], 0
je 0x427a8c
xor eax, eax
inc eax
jmp 0x427ad0
push str.One_of_the_exports_failed
lea ecx, [ebp - 0x18]
call fcn.00402829
push ebx
push 2
lea edx, [ebp - 0x18]
mov dword [ebp - 4], 8
pop ecx
call fcn.00414ca1
pop ecx
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [0x51441c]
test eax, eax
je 0x427ac8
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x51441c], ebx
mov al, bl
call fcn.00468be1
ret