Function at 0x42ac18
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x466746
call fcn.00451324
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, str.fs::KillApp_3186
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call fcn.0044f750
mov dword [ebp - 0x18], eax
push dword [ebp + 8]
mov byte [ebp - 4], 1
push esi
push str.___s__app_d_
push ebx
call fcn.0043fb8a
mov eax, dword [ebp + 8]
imul eax, eax, 0x1c
add esp, 0x14
lea esi, [eax + edi + 0x88]
call fcn.004014e7
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x42af40
dec eax
je 0x42acb7
dec eax
jne 0x42afa2
mov esi, str.chrome.exe
push esi
call fcn.0044d1f0
test al, al
pop ecx
je 0x42afa2
push 0x47547c
push str.__kill__s_proc
push ebx
call fcn.0043fb8a
push 1
push esi
call fcn.0042b573
lea esi, [edi + 0x114]
jmp 0x42af9a
cmp dword [ebp + 0x20], ebx
jne 0x42ad1e
push str._FFProfile_
lea ecx, [ebp - 0xc0]
call fcn.0041b5d0
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 3
call fcn.00421dee
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.0041a38e
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.0041a87c
push ebx
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.0041a87c
cmp dword [ebp + 0x20], ebx
je 0x42af37
mov esi, str.firefox.exe
push esi
call fcn.0044d1f0
test al, al
pop ecx
je 0x42af37
push 0x476684
push str.__kill__s_proc
push ebx
call fcn.0043fb8a
push 1
push esi
call fcn.0042b573
add esp, 0x14
lea esi, [edi + 0xf8]
call fcn.004014e7
push 0x474e4c
lea ecx, [ebp - 0xdc]
call fcn.0041b5d0
push str.user_pref__browser.sessionstore.resume_session_once____1__
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0041b5d0
push ebx
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 6
call fcn.0042955b
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.0041a87c
push ebx
push 1
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.0041a87c
mov esi, str._sessionstore.js
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.00417e9b
add esp, 0xc
cmp dword [eax + 0x18], 0x10
jb 0x42addf
mov eax, dword [eax + 4]
jmp 0x42ade2
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push ebx
push 1
lea ecx, [ebp - 0x130]
mov edi, eax
call fcn.0041a87c
cmp edi, ebx
je 0x42af37
push str.__fix_sessionstore.js
push ebx
mov byte [ebp - 4], 7
call fcn.0043fb8a
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xf
call fcn.0041a131
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 8
call fcn.00417e9b
add esp, 0xc
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00420f66
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 8
call fcn.0041a87c
push str.state:_stopped_
lea ecx, [ebp - 0xa4]
call fcn.0041b5d0
push str.state:_running_
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.0041b5d0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xb
call fcn.0044c300
add esp, 0xc
push ebx
cmp eax, ebx
push edi
lea ecx, [ebp - 0x50]
setg byte [ebp + 0xb]
call fcn.0041a87c
push ebx
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 8
call fcn.0041a87c
cmp byte [ebp + 0xb], bl
je 0x42aeef
push esi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00417e9b
add esp, 0xc
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.004210ff
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.0041a87c
push ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.0041a87c
jmp 0x42af37
mov dword [ebp - 4], 1
jmp 0x42afa2
lea esi, [edi + 0xdc]
push esi
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push edi
mov byte [ebp - 4], 2
call fcn.0042b21c
test al, al
je 0x42af64
inc dword [esi + 0x18]
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov edi, str.iexplore.exe
push edi
call fcn.0044d1f0
test al, al
pop ecx
je 0x42afa2
push 0x476688
push str.__kill__s_proc
push ebx
call fcn.0043fb8a
push 1
push edi
call fcn.0042b573
mov esi, dword [ebp + 8]
add esp, 0x14
call fcn.004014e7
lea esi, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0041b202
push ebx
push 1
lea ecx, [ebp + 0xc]
call fcn.0041a87c
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20