Function at 0x427a0c
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x45f98a
call fcn.0044b154
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, str.fs::KillApp_2939
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call fcn.00449520
mov dword [ebp - 0x18], eax
push dword [ebp + 8]
mov byte [ebp - 4], 1
push esi
push str.___s__app_d_
push ebx
call fcn.0043a6e3
mov eax, dword [ebp + 8]
imul eax, eax, 0x1c
add esp, 0x14
lea esi, [eax + edi + 0x88]
call fcn.004014e7
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x427d34
dec eax
je 0x427aab
dec eax
jne 0x427d96
mov esi, str.chrome.exe
push esi
call fcn.00446fd0
test al, al
pop ecx
je 0x427d96
push 0x46cddc
push str.__kill__s_proc
push ebx
call fcn.0043a6e3
push 1
push esi
call fcn.00428367
lea esi, [edi + 0x114]
jmp 0x427d8e
cmp dword [ebp + 0x20], ebx
jne 0x427b12
push str._FFProfile_
lea ecx, [ebp - 0xc0]
call fcn.00419fe3
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 3
call fcn.0041f693
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.00418bb2
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.004192fd
push ebx
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.004192fd
cmp dword [ebp + 0x20], ebx
je 0x427d2b
mov esi, str.firefox.exe
push esi
call fcn.00446fd0
test al, al
pop ecx
je 0x427d2b
push 0x46df24
push str.__kill__s_proc
push ebx
call fcn.0043a6e3
push 1
push esi
call fcn.00428367
add esp, 0x14
lea esi, [edi + 0xf8]
call fcn.004014e7
push 0x46c7bc
lea ecx, [ebp - 0xdc]
call fcn.00419fe3
push str.user_pref__browser.sessionstore.resume_session_once____1__
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.00419fe3
push ebx
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 6
call fcn.004265a1
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.004192fd
push ebx
push 1
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.004192fd
mov esi, str._sessionstore.js
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.0041691c
add esp, 0xc
cmp dword [eax + 0x18], 0x10
jb 0x427bd3
mov eax, dword [eax + 4]
jmp 0x427bd6
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push ebx
push 1
lea ecx, [ebp - 0x130]
mov edi, eax
call fcn.004192fd
cmp edi, ebx
je 0x427d2b
push str.__fix_sessionstore.js
push ebx
mov byte [ebp - 4], 7
call fcn.0043a6e3
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xf
call fcn.00418c41
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 8
call fcn.0041691c
add esp, 0xc
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0041e995
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 8
call fcn.004192fd
push str.state:_stopped_
lea ecx, [ebp - 0xa4]
call fcn.00419fe3
push str.state:_running_
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.00419fe3
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xb
call fcn.00446d10
add esp, 0xc
push ebx
cmp eax, ebx
push edi
lea ecx, [ebp - 0x50]
setg byte [ebp + 0xb]
call fcn.004192fd
push ebx
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 8
call fcn.004192fd
cmp byte [ebp + 0xb], bl
je 0x427ce3
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.0041691c
add esp, 0xc
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.0041eb2e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.004192fd
push ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.004192fd
jmp 0x427d2b
mov dword [ebp - 4], 1
jmp 0x427d96
lea esi, [edi + 0xdc]
push esi
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push edi
mov byte [ebp - 4], 2
call fcn.00428010
test al, al
je 0x427d58
inc dword [esi + 0x18]
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov edi, str.iexplore.exe
push edi
call fcn.00446fd0
test al, al
pop ecx
je 0x427d96
push 0x46df28
push str.__kill__s_proc
push ebx
call fcn.0043a6e3
push 1
push edi
call fcn.00428367
mov esi, dword [ebp + 8]
add esp, 0x14
call fcn.004014e7
lea esi, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00419c15
push ebx
push 1
lea ecx, [ebp + 0xc]
call fcn.004192fd
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20