Function at 0x4252e1
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x45cb41
call fcn.004485c4
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, str.fs::KillApp_2878
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call fcn.004468a0
mov dword [ebp - 0x18], eax
push dword [ebp + 8]
mov byte [ebp - 4], 1
push esi
push str.___s__app_d_
push ebx
call fcn.00437bbc
mov eax, dword [ebp + 8]
imul eax, eax, 0x1c
add esp, 0x14
lea esi, [eax + edi + 0x88]
call fcn.0040123c
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x425609
dec eax
je 0x425380
dec eax
jne 0x42566b
mov esi, str.chrome.exe
push esi
call fcn.00444440
test al, al
pop ecx
je 0x42566b
push 0x469a0c
push str.__kill__s_proc
push ebx
call fcn.00437bbc
push 1
push esi
call fcn.00425c3c
lea esi, [edi + 0x114]
jmp 0x425663
cmp dword [ebp + 0x20], ebx
jne 0x4253e7
push str._FFProfile_
lea ecx, [ebp - 0xc0]
call fcn.00418739
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 3
call fcn.0041d3e2
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.00417328
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.00417a85
push ebx
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.00417a85
cmp dword [ebp + 0x20], ebx
je 0x425600
mov esi, str.firefox.exe
push esi
call fcn.00444440
test al, al
pop ecx
je 0x425600
push 0x46ab20
push str.__kill__s_proc
push ebx
call fcn.00437bbc
push 1
push esi
call fcn.00425c3c
add esp, 0x14
lea esi, [edi + 0xf8]
call fcn.0040123c
push 0x4693f8
lea ecx, [ebp - 0xdc]
call fcn.00418739
push str.user_pref__browser.sessionstore.resume_session_once____1__
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.00418739
push ebx
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 6
call fcn.00423df4
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.00417a85
push ebx
push 1
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.00417a85
mov esi, str._sessionstore.js
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004152b2
add esp, 0xc
cmp dword [eax + 0x18], 0x10
jb 0x4254a8
mov eax, dword [eax + 4]
jmp 0x4254ab
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push ebx
push 1
lea ecx, [ebp - 0x130]
mov edi, eax
call fcn.00417a85
cmp edi, ebx
je 0x425600
push str.__fix_sessionstore.js
push ebx
mov byte [ebp - 4], 7
call fcn.00437bbc
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xf
call fcn.004173b7
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 8
call fcn.004152b2
add esp, 0xc
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0041c7c8
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 8
call fcn.00417a85
push str.state:_stopped_
lea ecx, [ebp - 0xa4]
call fcn.00418739
push str.state:_running_
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.00418739
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xb
call fcn.00444180
add esp, 0xc
push ebx
cmp eax, ebx
push edi
lea ecx, [ebp - 0x50]
setg byte [ebp + 0xb]
call fcn.00417a85
push ebx
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 8
call fcn.00417a85
cmp byte [ebp + 0xb], bl
je 0x4255b8
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004152b2
add esp, 0xc
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.0041c961
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.00417a85
push ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.00417a85
jmp 0x425600
mov dword [ebp - 4], 1
jmp 0x42566b
lea esi, [edi + 0xdc]
push esi
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
mov byte [ebp - 4], 2
call fcn.004258e5
test al, al
je 0x42562d
inc dword [esi + 0x18]
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, str.iexplore.exe
push edi
call fcn.00444440
test al, al
pop ecx
je 0x42566b
push 0x46ab24
push str.__kill__s_proc
push ebx
call fcn.00437bbc
push 1
push edi
call fcn.00425c3c
mov esi, dword [ebp + 8]
add esp, 0x14
call fcn.0040123c
lea esi, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0041836d
push ebx
push 1
lea ecx, [ebp + 0xc]
call fcn.00417a85
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20