Function at 0x42b681
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x467b77
call fcn.00452544
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, str.fs::KillApp_3340
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call fcn.004508dd
mov dword [ebp - 0x18], eax
push dword [ebp + 8]
mov byte [ebp - 4], 1
push esi
push str.___s__app_d_
push ebx
call fcn.00441366
mov eax, dword [ebp + 8]
imul eax, eax, 0x1c
add esp, 0x14
lea esi, [eax + edi + 0x88]
call fcn.004014e7
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x42b9a9
dec eax
je 0x42b720
dec eax
jne 0x42ba0b
mov esi, str.chrome.exe
push esi
call fcn.0044e410
test al, al
pop ecx
je 0x42ba0b
push 0x47654c
push str.__kill__s_proc
push ebx
call fcn.00441366
push 1
push esi
call fcn.0042bfdc
lea esi, [edi + 0x114]
jmp 0x42ba03
cmp dword [ebp + 0x20], ebx
jne 0x42b787
push str._FFProfile_
lea ecx, [ebp - 0xc0]
call fcn.0041be0b
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 3
call fcn.004227e8
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.0041ab6e
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.0041b05c
push ebx
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.0041b05c
cmp dword [ebp + 0x20], ebx
je 0x42b9a0
mov esi, str.firefox.exe
push esi
call fcn.0044e410
test al, al
pop ecx
je 0x42b9a0
push 0x477774
push str.__kill__s_proc
push ebx
call fcn.00441366
push 1
push esi
call fcn.0042bfdc
add esp, 0x14
lea esi, [edi + 0xf8]
call fcn.004014e7
push 0x475f1c
lea ecx, [ebp - 0xdc]
call fcn.0041be0b
push str.user_pref__browser.sessionstore.resume_session_once____1__
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0041be0b
push ebx
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 6
call fcn.00429fab
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.0041b05c
push ebx
push 1
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.0041b05c
mov esi, str._sessionstore.js
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.0041867b
add esp, 0xc
cmp dword [eax + 0x18], 0x10
jb 0x42b848
mov eax, dword [eax + 4]
jmp 0x42b84b
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push ebx
push 1
lea ecx, [ebp - 0x130]
mov edi, eax
call fcn.0041b05c
cmp edi, ebx
je 0x42b9a0
push str.__fix_sessionstore.js
push ebx
mov byte [ebp - 4], 7
call fcn.00441366
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xf
call fcn.0041a911
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 8
call fcn.0041867b
add esp, 0xc
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00421960
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 8
call fcn.0041b05c
push str.state:_stopped_
lea ecx, [ebp - 0xa4]
call fcn.0041be0b
push str.state:_running_
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.0041be0b
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xb
call fcn.0044dae0
add esp, 0xc
push ebx
cmp eax, ebx
push edi
lea ecx, [ebp - 0x50]
setg byte [ebp + 0xb]
call fcn.0041b05c
push ebx
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 8
call fcn.0041b05c
cmp byte [ebp + 0xb], bl
je 0x42b958
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.0041867b
add esp, 0xc
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.00421af9
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.0041b05c
push ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.0041b05c
jmp 0x42b9a0
mov dword [ebp - 4], 1
jmp 0x42ba0b
lea esi, [edi + 0xdc]
push esi
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push edi
mov byte [ebp - 4], 2
call fcn.0042bc85
test al, al
je 0x42b9cd
inc dword [esi + 0x18]
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov edi, str.iexplore.exe
push edi
call fcn.0044e410
test al, al
pop ecx
je 0x42ba0b
push 0x477778
push str.__kill__s_proc
push ebx
call fcn.00441366
push 1
push edi
call fcn.0042bfdc
mov esi, dword [ebp + 8]
add esp, 0x14
call fcn.004014e7
lea esi, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0041ba42
push ebx
push 1
lea ecx, [ebp + 0xc]
call fcn.0041b05c
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20