Function at 0x14002ee80
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
movaps xmmword [rsp + 0x270], xmm6
mov r14, r8
mov ebp, edx
mov rdi, rcx
mov rax, qword [0x1400ac070]
xor rax, rsp
mov qword [rsp + 0x268], rax
mov dword [rcx], edx
movabs rax, 0x700000002
mov qword [rcx + 4], rax
call fcn.140023d00
movq xmm0, qword [0x1400ac428]
movq xmm1, qword [0x1400ac430]
punpcklqdq xmm1, xmm0
movq xmm0, qword [0x1400ac440]
movq xmm2, qword [0x1400ac438]
punpcklqdq xmm2, xmm0
pxor xmm0, xmm0
pcmpeqd xmm2, xmm0
pshufd xmm3, xmm2, 0xb1
pand xmm3, xmm2
pcmpeqd xmm1, xmm0
pshufd xmm0, xmm1, 0xb1
pand xmm0, xmm1
packssdw xmm0, xmm3
movmskps eax, xmm0
test eax, eax
jne 0x14002ef8d
cmp qword [0x1400ac448], 0
je 0x14002ef8d
call fcn.140023c10
mov r8d, 7
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x130], r8
movabs rax, 0x65007200690046
mov qword [rsp + 0x120], rax
movabs rcx, 0x78006f00660065
mov qword [rsp + 0x126], rcx
mov word [rsp + 0x12e], 0
mov rdx, qword [0x1400ac3e8]
cmp rdx, r8
jb 0x14002f20a
cmp rdx, 7
je 0x14002efb2
mov rdx, qword [0x1400ac3d0]
jmp 0x14002efb9
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.System_is_not_compatible_with_WinToast
lea r8, str.ShowNotification
mov r9d, 0x1b2
call fcn.14002c3b0
jmp 0x14002f48d
lea rdx, [0x1400ac3d0]
mov qword [0x1400ac3e0], 7
mov qword [rdx + 6], rcx
mov qword [rdx], rax
mov word [rdx + 0xe], 0
xor eax, eax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rsi, rax
lea rcx, [rsp + 0x1e8]
cmp rax, 7
ja 0x14002f228
mov qword [rcx + 0x10], rsi
mov r8, rsi
add r8, rsi
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rsi*2 + 0x1e8], 0
call fcn.140023c10
mov rsi, qword [rsp + 0x1f8]
cmp qword [rsp + 0x200], 8
jb 0x14002f055
mov rax, qword [rsp + 0x1e8]
jmp 0x14002f05d
lea rax, [rsp + 0x1e8]
mov rcx, qword [0x1400ac408]
cmp rcx, rsi
jb 0x14002f238
cmp rcx, 8
jb 0x14002f07c
mov rbx, qword [0x1400ac3f0]
jmp 0x14002f083
lea rbx, [0x1400ac3f0]
mov qword [0x1400ac400], rsi
lea r8, [rsi + rsi]
mov rcx, rbx
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi*2], 0
call fcn.140023c10
mov dword [0x1400ac3cc], 1
lea rsi, [0x1400ac3c0]
call fcn.140023c10
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 8]
lea rdx, [rsp + 0xbc]
mov rcx, rsi
call qword [0x1400b0010]
test al, al
je 0x14002f1a9
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0xb0], 0
lea rsi, [rsp + 0x120]
mov rcx, rsi
call fcn.1400010c0
mov rsi, qword [rsi]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002f517
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_when_getting_strings
lea r8, str.GetStrings
mov r9d, 0x93
call fcn.14002c3b0
xor r15d, r15d
test rsi, rsi
je 0x14002f171
mov rcx, rsi
call fcn.140055ae4
test r15b, r15b
je 0x14002f2ad
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rsi, rax
test rax, rax
je 0x14002f1e0
test ebp, ebp
je 0x14002f24f
lea r8, str.FollowupNotificationShown
jmp 0x14002f256
mov ecx, dword [rsp + 0xbc]
call fcn.140029f50
cmp qword [rax + 0x18], 8
jb 0x14002f1bf
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x1bd
call fcn.14002c3b0
jmp 0x14002f43f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x1ce
jmp 0x14002f293
lea rcx, [0x1400ac3d0]
lea r8, [rsp + 0x120]
mov edx, 7
call fcn.140059dc0
jmp 0x14002efd1
mov rdx, rsi
mov r8, r14
call fcn.140059dc0
jmp 0x14002f033
lea rcx, [0x1400ac3f0]
mov rdx, rsi
mov r8, rax
call fcn.140059dc0
jmp 0x14002f09f
lea r8, str.InitialNotificationShown
lea rbx, [rsp + 0x120]
mov rcx, rbx
mov edx, 1
mov r9b, 1
call fcn.140030c00
mov eax, dword [rbx]
test eax, eax
je 0x14002f4b9
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_set_notification_as_displayed
lea r8, str.ShowNotification
mov r9d, 0x1db
call fcn.14002c3b0
mov rax, rsi
inc rax
cmp rax, 2
jb 0x14002f2ad
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x14002f2cb
call fcn.140055ae4
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], 0
test rcx, rcx
je 0x14002f2e9
call fcn.140055ae4
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], 0
test rcx, rcx
je 0x14002f307
call fcn.140055ae4
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], 0
test rcx, rcx
je 0x14002f325
call fcn.140055ae4
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], 0
test rcx, rcx
je 0x14002f343
call fcn.140055ae4
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x14002f361
call fcn.140055ae4
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x80], 0
test rcx, rcx
je 0x14002f37f
call fcn.140055ae4
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], 0
test rcx, rcx
je 0x14002f397
call fcn.140055ae4
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x14002f3af
call fcn.140055ae4
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
test rcx, rcx
je 0x14002f3c7
call fcn.140055ae4
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
test rcx, rcx
je 0x14002f3df
call fcn.140055ae4
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x14002f3f7
call fcn.140055ae4
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x14002f40f
call fcn.140055ae4
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], 0
test rcx, rcx
je 0x14002f427
call fcn.140055ae4
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], 0
test rcx, rcx
je 0x14002f43f
call fcn.140055ae4
mov rax, qword [rsp + 0x200]
cmp rax, 8
jb 0x14002f48d
mov rcx, qword [rsp + 0x1e8]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f488
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov rcx, qword [rsp + 0x268]
xor rcx, rsp
call fcn.140056a50
movaps xmm6, xmmword [rsp + 0x270]
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.1400010c0
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002f6cf
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_for_the_image_path
lea r8, str.ShowNotification
mov r9d, 0x1e3
call fcn.14002c3b0
test rbx, rbx
je 0x14002f298
mov rcx, rbx
call fcn.140055ae4
jmp 0x14002f298
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r15, str._sdefaultagent.ini
mov rcx, r15
mov rdx, rsi
call fcn.1400589e0
cdqe
lea r12, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140055adc
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov rdx, r12
mov r9, r15
call fcn.140058a60
lea r15, [rsp + 0x120]
mov byte [r15 + 0x5c], 0
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15 + 0x20], xmm6
movups xmmword [r15 + 0x30], xmm6
movups xmmword [r15 + 0x40], xmm6
movups xmmword [r15 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea r13, [rax + rax]
add r13, 2
inc rax
mov rax, 0xffffffffffffffff
cmovs r13, rax
mov rcx, r13
call fcn.140055adc
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [r15], r12
mov rcx, r12
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r15 + 8], 0
lea r12, str.DefaultBrowserNotificationTitle
lea r8, [rsp + 0x40]
mov rcx, r15
mov rdx, r12
call fcn.14002ab90
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x68]
call fcn.14002ab90
lea r12, str.DefaultBrowserNotificationText
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x48]
call fcn.14002ab90
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x70]
call fcn.14002ab90
lea r12, str.DefaultBrowserNotificationMakeFirefoxDefault
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x50]
call fcn.14002ab90
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x78]
call fcn.14002ab90
lea r12, str.DefaultBrowserNotificationDontShowAgain
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x58]
call fcn.14002ab90
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x80]
call fcn.14002ab90
mov rcx, r15
call fcn.14002af50
test eax, eax
je 0x14002fa1b
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_English_strings:__d
lea r8, str.GetStrings
mov r9d, 0xb1
call fcn.14002c3b0
xor r15d, r15d
lea rcx, [rsp + 0x120]
call fcn.140030ea0
mov rcx, rbx
call fcn.140055ae4
jmp 0x14002f164
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov r8, qword [rsp + 0xb0]
lea rcx, str._s_s
mov rdx, rbx
call fcn.1400589e0
cdqe
lea r15, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140055adc
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], r12
mov rcx, r12
mov rdx, r15
lea r9, str._s_s
call fcn.140058a60
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400ac088], rax
test rax, rax
je 0x14002fb81
mov byte [0x1400ac4c4], 0
mov qword [rsp + 0x38], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x14002f7a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x1ff
call fcn.14002c3b0
xorps xmm6, xmm6
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
xor r15d, r15d
mov qword [rsp + 0x150], r15
mov qword [rsp + 0x160], r15
mov r12d, 7
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r12
mov word [rsp + 0x170], r15w
mov qword [rsp + 0x190], r15
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], r12
mov word [rsp + 0x190], r15w
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0x1c0], r12
movabs rax, 0x61006600650044
mov qword [rsp + 0x1b0], rax
movabs rax, 0x74006c00750061
mov qword [rsp + 0x1b6], rax
mov word [rsp + 0x1be], r15w
mov qword [rsp + 0x1d0], r15
movabs rax, 0x100000000
mov qword [rsp + 0x1d8], rax
mov dword [rsp + 0x1e0], 0
mov ecx, 0x40
call fcn.140055aa0
mov r13, rax
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r12
movups xmmword [rax + 0x20], xmm6
mov qword [rax + 0x30], r15
mov qword [rax + 0x38], r12
mov r12, qword [rsp + 0x120]
test r12, r12
je 0x14002f96d
mov r15, qword [rsp + 0x128]
cmp r12, r15
je 0x14002f934
mov rax, qword [r12 + 0x18]
cmp rax, 8
jb 0x14002f90a
mov rcx, qword [r12]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f905
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 7
mov word [r12], 0
add r12, 0x20
cmp r12, r15
jne 0x14002f8c3
mov r12, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, r12
cmp rdx, 0x1000
jb 0x14002f965
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x14003090a
add rdx, 0x27
mov r12, rax
mov rcx, r12
call fcn.140055ae4
mov rax, r13
add rax, 0x40
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
mov r12, qword [rsp + 0x90]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030339
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002fbb5
mov rax, qword [rsp + 0x208]
jmp 0x14002fbbd
lea rcx, str._sdefaultagent_localized.ini
mov rdx, rsi
call fcn.1400589e0
cdqe
lea r13, [rax + 1]
lea r15, [rax + rax]
add r15, 2
mov rcx, r15
call fcn.140055adc
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, r12
mov rdx, r13
lea r9, str._sdefaultagent_localized.ini
mov qword [rsp + 0x30], r12
call fcn.140058a60
lea r13, [rsp + 0x208]
mov byte [r13 + 0x5c], 0
xorps xmm6, xmm6
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13 + 0x20], xmm6
movups xmmword [r13 + 0x30], xmm6
movups xmmword [r13 + 0x40], xmm6
movups xmmword [r13 + 0x49], xmm6
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r12, 0xffffffffffffffff
cmovns r12, rcx
mov rcx, r12
call fcn.140055adc
mov r15, rax
mov rcx, rax
xor edx, edx
mov r8, r12
mov r12, qword [rsp + 0x30]
call sub.VCRUNTIME140.dll_memset
mov qword [r13], r15
mov rcx, r15
mov rdx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r13 + 8], 0
lea rdx, str.DefaultBrowserNotificationHeaderText
mov rcx, r13
lea r8, [rsp + 0x90]
call fcn.14002ab90
lea rdx, str.DefaultBrowserNotificationBodyText
mov rcx, r13
lea r8, [rsp + 0x98]
call fcn.14002ab90
lea rdx, str.DefaultBrowserNotificationYesButtonText
mov rcx, r13
lea r8, [rsp + 0xa0]
call fcn.14002ab90
lea rdx, str.DefaultBrowserNotificationNoButtonText
mov rcx, r13
lea r8, [rsp + 0xa8]
call fcn.14002ab90
mov rcx, r13
call fcn.14002af50
test eax, eax
je 0x140030180
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xc8
call fcn.14002c3b0
xor r15d, r15d
jmp 0x1400302ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x1f2
call fcn.14002c3b0
mov r15, qword [rsp + 0x30]
jmp 0x1400308ea
lea rax, [rsp + 0x208]
mov rcx, qword [r13 + 0x18]
cmp rcx, r12
jb 0x1400303e6
mov r15, r13
cmp rcx, 8
jb 0x14002fbd7
mov r15, qword [r13]
mov qword [r13 + 0x10], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002fc3f
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fc3a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov r12, qword [rsp + 0x98]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030362
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov rcx, qword [rsp + 0x120]
lea r12, [rcx + 0x20]
lea rax, [rsp + 0x208]
cmp r12, rax
je 0x14002fd11
mov r13, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002fcde
mov rax, qword [rsp + 0x208]
mov rdx, qword [rcx + 0x38]
cmp rdx, r13
jb 0x1400308f7
cmp rdx, 8
jb 0x14002fcf5
mov r12, qword [rcx + 0x20]
mov qword [rcx + 0x30], r13
mov r8, r13
add r8, r13
mov rcx, r12
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r12 + r13*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002fd5f
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fd5a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov r12, qword [rsp + 0xa0]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030372
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r15, [rsp + 0x208]
mov rdx, r15
call fcn.14002aa90
mov rax, qword [r15 + 0x18]
cmp rax, 8
jb 0x14002fe2c
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fe27
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov r12, qword [rsp + 0xa8]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030382
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r13, [rsp + 0x208]
mov rdx, r13
call fcn.14002aa90
mov rax, qword [r13 + 0x18]
cmp rax, 8
mov r12, qword [rsp + 0x30]
jb 0x14002fefe
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fef9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030392
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002ff7c
mov r13, qword [rsp + 0x208]
lea r15, [rsp + 0x150]
mov rax, qword [r15 + 0x18]
cmp rax, r12
jb 0x1400303a2
cmp rax, 8
jb 0x14002ff9f
mov r15, qword [rsp + 0x150]
mov qword [rsp + 0x160], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14003000b
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030006
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
cmp qword [rsp + 0x1c8], 8
jb 0x1400303b5
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c0], 8
movups xmm0, xmmword [str.Reminder]
movups xmmword [rax], xmm0
mov word [rax + 0x10], 0
mov ecx, 0x38
call fcn.140055aa0
mov r12, rax
lea rax, [0x14006c430]
mov qword [r12], rax
mov dword [r12 + 8], ebp
mov qword [r12 + 0x10], rsi
lea r13, [r12 + 0x18]
xor eax, eax
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x28], rax
mov qword [r12 + 0x30], 7
mov word [r12 + 0x18], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
cmp rax, 7
ja 0x1400303d3
mov qword [r12 + 0x28], r15
mov r8, r15
add r8, r15
mov rcx, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [r12 + r15*2 + 0x18], 0
call fcn.140023c10
lea rcx, [0x1400ac3c0]
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 0x20]
lea rdx, [rsp + 0x120]
lea r9, [rsp + 0xbc]
mov r8, r12
call qword [0x1400b0010]
test rax, rax
js 0x140030144
mov r14, rax
mov rcx, rsi
mov edx, 0x2932e00
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
je 0x1400302c8
cmp eax, 0xffffffff
jne 0x1400302e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_wait_on_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x218
jmp 0x1400304ae
mov ecx, dword [rsp + 0xbc]
call fcn.140029f50
cmp qword [rax + 0x18], 8
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jb 0x140030164
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x211
jmp 0x1400304f2
lea r12, [rsp + 0xc0]
mov byte [r12 + 0x5c], 0
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12 + 0x20], xmm6
movups xmmword [r12 + 0x30], xmm6
movups xmmword [r12 + 0x40], xmm6
movups xmmword [r12 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r15, 0xffffffffffffffff
cmovns r15, rcx
mov rcx, r15
call fcn.140055adc
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [r12], r13
mov rcx, r13
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov ecx, 0xd
call fcn.140055adc
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 5], rcx
mov qword [r12 + 8], rax
movabs rcx, 0x64657a696c6163
mov qword [rax + 5], rcx
movabs rcx, 0x6c61636f6c6e6f4e
mov qword [rax], rcx
lea rdx, str.InitialToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x60]
call fcn.14002ab90
lea rdx, str.FollowupToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x88]
call fcn.14002ab90
lea rdx, str.LocalizedToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0xb0]
call fcn.14002ab90
mov rcx, r12
call fcn.14002af50
test eax, eax
sete r15b
je 0x14003029c
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_non_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xd7
call fcn.14002c3b0
lea rcx, [rsp + 0xc0]
call fcn.140030ea0
mov r12, qword [rsp + 0x30]
lea rcx, [rsp + 0x208]
call fcn.140030ea0
mov rcx, r12
call fcn.140055ae4
jmp 0x14002f6b5
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Timed_out_waiting_for_event_object
lea r8, str.ShowNotification
mov r9d, 0x21a
jmp 0x1400304ae
mov rcx, qword [0x1400ac088]
mov edx, 0x927c0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x1400303f9
cmp eax, 0x80
je 0x140030423
cmp eax, 0x102
jne 0x140030452
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_obtain_mutex_ownership
lea r8, str.ShowNotification
mov r9d, 0x21e
jmp 0x1400304ae
mov rdx, r15
mov r8, r12
call fcn.140059dc0
mov r13, qword [rsp + 0x120]
lea rax, [rsp + 0x208]
cmp r13, rax
jne 0x14002f9f7
jmp 0x14002fbf1
mov rdx, r15
mov r8, r12
call fcn.140059dc0
jmp 0x14002fcaa
mov rdx, r15
mov r8, r12
call fcn.140059dc0
jmp 0x14002fdca
mov rdx, r15
mov r8, r12
call fcn.140059dc0
jmp 0x14002fe97
mov rdx, r15
mov r8, r12
call fcn.140059dc0
jmp 0x14002ff61
mov rcx, r15
mov rdx, r12
mov r8, r13
call fcn.140059dc0
jmp 0x14002ffbd
lea rcx, [rsp + 0x1b0]
lea r8, str.Reminder
mov edx, 8
call fcn.140059dc0
jmp 0x14003003e
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.140059dc0
jmp 0x1400300b6
mov rcx, r13
mov rdx, r12
mov r8, rax
call fcn.140059dc0
jmp 0x14002fbf1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Failed_to_wait_on_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x221
jmp 0x1400304ae
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Found_abandoned_mutex
lea r8, str.ShowNotification
mov r9d, 0x224
call fcn.14002c3b0
mov rcx, qword [0x1400ac088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400304b3
cmp byte [0x1400ac4c4], 0
je 0x14003046e
mov eax, dword [0x1400ac4c0]
mov dword [rdi + 8], eax
mov rax, qword [0x1400ac4b8]
mov qword [rdi], rax
mov rcx, qword [0x1400ac088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jne 0x1400304b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x232
call fcn.14002c3b0
call fcn.140023c10
lea rcx, [0x1400ac3c0]
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 0x18]
mov rdx, r14
call qword [0x1400b0010]
test al, al
jne 0x1400304f7
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_hide_notification
lea r8, str.ShowNotification
mov r9d, 0x238
call fcn.14002c3b0
mov r14, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x128]
cmp r14, rdi
je 0x140030578
mov rax, qword [r14 + 0x18]
cmp rax, 8
jb 0x140030551
mov rcx, qword [r14]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14003054c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 7
mov word [r14], 0
add r14, 0x20
cmp r14, rdi
jne 0x14003050c
mov rdi, qword [rsp + 0x120]
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1c8]
cmp rax, 8
jb 0x1400305ce
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400305c9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], 0
mov rax, qword [rsp + 0x1a8]
cmp rax, 8
jb 0x14003063e
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030639
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], 0
mov rax, qword [rsp + 0x188]
cmp rax, 8
jb 0x1400306ae
mov rcx, qword [rsp + 0x170]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400306a9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], 0
mov rax, qword [rsp + 0x168]
cmp rax, 8
jb 0x14003071e
mov rcx, qword [rsp + 0x150]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030719
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], 0
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x140030818
mov r14, qword [rsp + 0x140]
cmp rdi, r14
je 0x1400307c9
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400307a3
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14003079e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x14003075e
mov rdi, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x148]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x1400307f9
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14003090a
add rdx, 0x27
mov rdi, rax
lea r14, [rsp + 0x138]
mov rcx, rdi
call fcn.140055ae4
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov rdi, qword [rsp + 0x120]
test rdi, rdi
je 0x1400308d5
mov r14, qword [rsp + 0x128]
cmp rdi, r14
je 0x1400308a1
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x14003087b
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030876
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003090a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055ae4
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x140030836
mov rdi, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x1400308cd
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14003090a
add rdx, 0x27
mov rdi, rax
mov rcx, rdi
call fcn.140055ae4
mov rax, r12
inc rax
cmp rax, 2
jb 0x1400308ea
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r15
call fcn.140055ae4
jmp 0x14002f501
mov rcx, r12
mov rdx, r13
mov r8, rax
call fcn.140059dc0
jmp 0x14002fd11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3