Function at 0x14002fbe0
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
mov r15, r8
mov r14d, edx
mov rsi, rcx
mov rax, qword [0x1400a9028]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov dword [rcx], edx
movabs rax, 0x700000002
mov qword [rcx + 4], rax
mov dword [rcx + 0xc], 0
call fcn.140023e00
test al, al
je 0x14002fcf7
call fcn.140023bd0
mov ecx, 7
lea rdi, [rsp + 0x138]
mov qword [rdi + 0x18], rcx
mov qword [rdi + 0x10], rcx
mov rcx, qword [0x1400a0148]
mov qword [rdi], rcx
mov rcx, qword [0x1400a014e]
mov qword [rdi + 6], rcx
mov word [rdi + 0xe], 0
mov rcx, rax
mov rdx, rdi
call fcn.140023e50
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x14002fc9e
mov rcx, qword [rsp + 0x138]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140030880
call fcn.140058840
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], 0
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x200]
cmp rax, 7
ja 0x14002fd15
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rdi*2 + 0x200], 0
jmp 0x14002fd20
lea rcx, str.System_is_not_compatible_with_WinToast
lea rdx, str.ShowNotification
mov r8d, 0x1c9
call fcn.14002d890
jmp 0x14003017b
mov rdx, rdi
mov r9, r15
call fcn.14005c1a0
call fcn.140023bd0
lea rdx, [rsp + 0x200]
mov rcx, rax
call fcn.140023ec0
call fcn.140023bd0
mov dword [rax + 0xc], 1
call fcn.140023bd0
mov rcx, qword [rax]
mov rbp, qword [rcx + 8]
lea rdx, [rsp + 0xd4]
mov rcx, rax
mov rax, rbp
call qword [case.0x140058b3e.0]
test al, al
je 0x14002fe63
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.140002650
mov rdi, qword [rdi]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x104
jb 0x1400301a2
lea rcx, str.Failed_to_get_install_directory_when_getting_strings
lea rdx, str.FirefoxInstallIsEnglish
mov r8d, 0x25b
call fcn.14002d890
xor ebx, ebx
test rdi, rdi
je 0x14002fdba
mov rcx, rdi
call fcn.140058840
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0xc0], 0
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.140002650
mov rdi, qword [rdi]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x103
jbe 0x140030406
lea rcx, str.Failed_to_get_install_directory_when_getting_strings
lea rdx, str.GetStrings
mov r8d, 0xb5
call fcn.14002d890
xor r12d, r12d
test rdi, rdi
je 0x14002fe4a
mov rcx, rdi
call fcn.140058840
test r12b, r12b
je 0x14002ffad
test bl, bl
je 0x14002fe93
test r14d, r14d
je 0x14002fec4
lea r12, [rsp + 0x78]
jmp 0x14002fe9b
mov ecx, dword [rsp + 0xd4]
call fcn.140024030
cmp qword [rax + 0x18], 8
jb 0x14002fe79
mov rax, qword [rax]
lea rdx, str.ShowNotification
mov rcx, rax
mov r8d, 0x1d4
call fcn.14002d890
jmp 0x14003014b
lea r12, [rsp + 0xa0]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
test rax, rax
je 0x14002ff24
mov r13, rax
test r14d, r14d
je 0x14002fee4
lea r8, str.FollowupNotificationShown
jmp 0x14002feeb
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
test rax, rax
je 0x14002ff24
mov r13, rax
lea r12, [rsp + 0x50]
lea r8, str.InitialNotificationShown
lea rdi, [rsp + 0x138]
mov rcx, rdi
mov edx, 1
mov r9b, 1
call fcn.140032060
mov eax, dword [rdi]
test eax, eax
je 0x14002ff4b
lea rcx, str.Unable_to_set_notification_as_displayed
lea rdx, str.ShowNotification
mov r8d, 0x1f2
call fcn.14002d890
jmp 0x14002ff9a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_create_event_object:__X
lea rdx, str.ShowNotification
mov r8d, 0x1e5
mov r9d, eax
call fcn.14002d890
xor r13d, r13d
jmp 0x14002ff9a
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.140002650
mov rdi, qword [rdi]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x104
jb 0x14003072f
lea rcx, str.Failed_to_get_install_directory_for_the_image_path
lea rdx, str.ShowNotification
mov r8d, 0x1fa
call fcn.14002d890
test rdi, rdi
je 0x14002ff9a
mov rcx, rdi
call fcn.140058840
lea rax, [r13 + 1]
cmp rax, 2
jb 0x14002ffad
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc0], 0
test rcx, rcx
je 0x14002ffcb
call fcn.140058840
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], 0
test rcx, rcx
je 0x14002ffe9
call fcn.140058840
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x140030007
call fcn.140058840
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], 0
test rcx, rcx
je 0x140030025
call fcn.140058840
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], 0
test rcx, rcx
je 0x140030043
call fcn.140058840
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], 0
test rcx, rcx
je 0x140030061
call fcn.140058840
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], 0
test rcx, rcx
je 0x14003007f
call fcn.140058840
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x14003009d
call fcn.140058840
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x80], 0
test rcx, rcx
je 0x1400300bb
call fcn.140058840
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], 0
test rcx, rcx
je 0x1400300d3
call fcn.140058840
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x1400300eb
call fcn.140058840
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
test rcx, rcx
je 0x140030103
call fcn.140058840
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
test rcx, rcx
je 0x14003011b
call fcn.140058840
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x140030133
call fcn.140058840
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x14003014b
call fcn.140058840
mov rax, qword [rsp + 0x218]
cmp rax, 8
jb 0x14003017b
mov rcx, qword [rsp + 0x200]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x1400308a7
call fcn.140058840
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.140059960
mov rax, rsi
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r12, str._slocale.ini
mov rcx, r12
mov rdx, rdi
call fcn.14005af60
inc eax
movsxd r13, eax
mov rbp, r13
add rbp, r13
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005896c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov rdx, r13
mov r8, 0xffffffffffffffff
mov r9, r12
call fcn.14005afe0
lea r12, [rsp + 0x50]
mov qword [r12], 0
lea r13, [0x14009f8f7]
lea rbp, [rsp + 0x138]
mov rcx, rbp
mov qword [rsp + 0x48], rbx
mov rdx, rbx
mov r8, r13
call fcn.14002bea0
mov rcx, rbp
mov rdx, r13
mov r8, r12
call fcn.14002bfb0
mov rcx, rbp
call fcn.14002c380
mov r12d, eax
test eax, eax
je 0x140030277
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r13
lea rcx, str.Unable_to_retrieve_INI_string:_section_S__key_S__result_d
lea rdx, str.GetString
mov r8d, 0xa9
mov r9, r13
call fcn.14002d890
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x1400302cf
mov rdx, qword [rsp + 0x188]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1400302b4
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x178]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x140030327
mov rdx, qword [rsp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14003030c
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x160]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0x148]
test rbp, rbp
je 0x1400303ba
mov rbx, qword [rsp + 0x150]
cmp rbp, rbx
je 0x14003036c
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x14003035b
call fcn.140058840
add rbp, 8
cmp rbp, rbx
jne 0x140030345
mov rbp, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x158]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x14003039c
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x148]
mov rcx, rbp
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], 0
test rcx, rcx
je 0x1400303d8
call fcn.140058840
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 0x138], 0
test rcx, rcx
je 0x1400303f6
call fcn.140058840
test r12d, r12d
je 0x1400306e8
xor ebx, ebx
jmp 0x140030705
mov dword [rsp + 0x48], ebx
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r12, str._sdefaultagent.ini
mov rcx, r12
mov rdx, rdi
call fcn.14005af60
inc eax
movsxd rbx, eax
mov rbp, rbx
add rbp, rbx
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005896c
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, r13
mov rdx, rbx
mov r8, 0xffffffffffffffff
mov r9, r12
call fcn.14005afe0
lea rbp, [rsp + 0x138]
mov rcx, rbp
mov rdx, r13
xor r8d, r8d
call fcn.14002bea0
lea r12, str.DefaultBrowserNotificationTitle
lea r8, [rsp + 0x50]
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
lea r8, [rsp + 0x78]
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
lea r8, [rsp + 0x58]
lea r12, str.DefaultBrowserNotificationText
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
lea r8, [rsp + 0x80]
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
lea r8, [rsp + 0x60]
lea rdx, str.DefaultBrowserNotificationRemindMeLater
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0x88]
lea rdx, str.DefaultBrowserNotificationDontShowAgain
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0x68]
lea r12, str.DefaultBrowserNotificationMakeFirefoxDefault
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
lea r8, [rsp + 0x90]
mov rcx, rbp
mov rdx, r12
call fcn.14002bfb0
mov rcx, rbp
call fcn.14002c380
test eax, eax
je 0x1400308ce
lea rcx, str.Unable_to_read_English_strings:__d
lea rdx, str.GetStrings
mov r8d, 0xd3
mov r9d, eax
call fcn.14002d890
xor r12d, r12d
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x1400305b0
mov rdx, qword [rsp + 0x188]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030595
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x178]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x140030608
mov rdx, qword [rsp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1400305ed
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x160]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0x148]
test rbp, rbp
je 0x14003069b
mov rbx, qword [rsp + 0x150]
cmp rbp, rbx
je 0x14003064d
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x14003063c
call fcn.140058840
add rbp, 8
cmp rbp, rbx
jne 0x140030626
mov rbp, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x158]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x14003067d
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x148]
mov rcx, rbp
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], 0
test rcx, rcx
je 0x1400306b9
call fcn.140058840
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 0x138], 0
test rcx, rcx
mov ebx, dword [rsp + 0x48]
je 0x1400306db
call fcn.140058840
mov rcx, r13
call fcn.140058840
jmp 0x14002fe3d
mov rcx, qword [rsp + 0x50]
lea rdx, [0x1400a2452]
mov r8d, 3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
sete bl
mov rbp, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x140030722
call fcn.140058840
mov rcx, rbp
call fcn.140058840
jmp 0x14002fdad
mov dword [rsp + 0x48], ebx
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov r8, qword [r12 + 0x20]
lea rcx, str._s_s
mov rdx, rdi
call fcn.14005af60
inc eax
movsxd rbp, eax
mov qword [rsp + 0x40], rbp
add rbp, rbp
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005896c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov rax, qword [r12 + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x38], rbx
mov rcx, rbx
mov rdx, qword [rsp + 0x40]
mov r8, 0xffffffffffffffff
lea r9, str._s_s
call fcn.14005afe0
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400a9070], rax
test rax, rax
je 0x1400309d9
mov byte [0x1400a9454], 0
mov qword [rsp + 0x40], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x14003080a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_release_mutex_ownership:__X
lea rdx, str.ShowNotification
mov r8d, 0x216
mov r9d, eax
call fcn.14002d890
lea rcx, [rsp + 0x138]
mov edx, 1
call fcn.140029b10
mov rbp, qword [r12]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbx, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140030d9f
mov qword [rcx + 0x10], rbx
mov r8, rbx
add r8, rbx
mov rdx, rbp
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbx*2 + 0x220], 0
jmp 0x140030daa
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x14002fc99
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x140030176
mov qword [rsp + 0x38], r13
lea r13, str._sdefaultagent_localized.ini
mov rcx, r13
mov rdx, rdi
call fcn.14005af60
inc eax
movsxd r12, eax
mov rbp, r12
add rbp, r12
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005896c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov rdx, r12
mov r8, 0xffffffffffffffff
mov r9, r13
call fcn.14005afe0
lea rbp, [rsp + 0x220]
mov rcx, rbp
mov qword [rsp + 0x40], rbx
mov rdx, rbx
xor r8d, r8d
call fcn.14002bea0
lea r8, [rsp + 0xa0]
lea rdx, str.DefaultBrowserNotificationTitle
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0xa8]
lea rdx, str.DefaultBrowserNotificationText
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0xb0]
lea rdx, str.DefaultBrowserNotificationYesButtonText
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0xb8]
lea rdx, str.DefaultBrowserNotificationNoButtonText
mov rcx, rbp
call fcn.14002bfb0
mov rcx, rbp
call fcn.14002c380
test eax, eax
je 0x140030a05
lea rcx, str.Unable_to_read_localized_strings:__d
lea rdx, str.GetStrings
mov r8d, 0xea
mov r9d, eax
call fcn.14002d890
xor r12d, r12d
mov r13, qword [rsp + 0x38]
jmp 0x140030c11
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_create_mutex:__X
lea rdx, str.ShowNotification
mov r8d, 0x209
mov r9d, eax
call fcn.14002d890
mov r12, qword [rsp + 0x38]
jmp 0x140031257
lea r8, str.Nonlocalized
lea rbp, [rsp + 0xd8]
mov rcx, rbp
mov r13, qword [rsp + 0x38]
mov rdx, r13
call fcn.14002bea0
lea r8, [rsp + 0x70]
lea rdx, str.InitialToastRelativeImagePath
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0x98]
lea rdx, str.FollowupToastRelativeImagePath
mov rcx, rbp
call fcn.14002bfb0
lea r8, [rsp + 0xc0]
lea rdx, str.LocalizedToastRelativeImagePath
mov rcx, rbp
call fcn.14002bfb0
mov rcx, rbp
call fcn.14002c380
test eax, eax
sete r12b
je 0x140030a92
lea rcx, str.Unable_to_read_non_localized_strings:__d
lea rdx, str.GetStrings
mov r8d, 0xf9
mov r9d, eax
call fcn.14002d890
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x140030aea
mov rdx, qword [rsp + 0x128]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030acf
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x118]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x140030b42
mov rdx, qword [rsp + 0x110]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030b27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x100]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0xe8]
test rbp, rbp
je 0x140030bd5
mov rbx, qword [rsp + 0xf0]
cmp rbp, rbx
je 0x140030b87
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x140030b76
call fcn.140058840
add rbp, 8
cmp rbp, rbx
jne 0x140030b60
mov rbp, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xf8]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x140030bb7
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0xe8]
mov rcx, rbp
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], 0
test rcx, rcx
je 0x140030bf3
call fcn.140058840
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0xd8], 0
test rcx, rcx
je 0x140030c11
call fcn.140058840
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x140030c69
mov rdx, qword [rsp + 0x270]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030c4e
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x260]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x248]
test rcx, rcx
je 0x140030cc1
mov rdx, qword [rsp + 0x258]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030ca6
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x248]
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0x230]
test rbp, rbp
je 0x140030d54
mov rbx, qword [rsp + 0x238]
cmp rbp, rbx
je 0x140030d06
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x140030cf5
call fcn.140058840
add rbp, 8
cmp rbp, rbx
jne 0x140030cdf
mov rbp, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x240]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x140030d36
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x1400313f9
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x230]
mov rcx, rbp
call fcn.140058840
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x228]
mov qword [rsp + 0x228], 0
test rcx, rcx
je 0x140030d72
call fcn.140058840
mov rcx, qword [rsp + 0x220]
mov qword [rsp + 0x220], 0
test rcx, rcx
je 0x140030d90
call fcn.140058840
mov rcx, qword [rsp + 0x40]
call fcn.140058840
jmp 0x140030558
mov rdx, rbx
mov r9, rbp
call fcn.14005c1a0
lea rcx, [rsp + 0x138]
lea rbp, [rsp + 0x220]
mov rdx, rbp
xor r8d, r8d
call fcn.14002a0b0
mov rax, qword [rbp + 0x18]
cmp rax, 8
jb 0x140030df1
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140031338
call fcn.140058840
mov rbx, qword [r12 + 8]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbp, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140030e4f
mov qword [rcx + 0x10], rbp
mov r8, rbp
add r8, rbp
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbp*2 + 0x220], 0
jmp 0x140030e5a
mov rdx, rbp
mov r9, rbx
call fcn.14005c1a0
lea rcx, [rsp + 0x138]
lea rbp, [rsp + 0x220]
mov rdx, rbp
mov r8d, 1
call fcn.14002a0b0
mov rax, qword [rbp + 0x18]
cmp rax, 8
jb 0x140030ea4
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x14003135f
call fcn.140058840
mov rbx, qword [r12 + 0x10]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbp, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140030f02
mov qword [rcx + 0x10], rbp
mov r8, rbp
add r8, rbp
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbp*2 + 0x220], 0
jmp 0x140030f0d
mov rdx, rbp
mov r9, rbx
call fcn.14005c1a0
lea rcx, [rsp + 0x138]
lea rbp, [rsp + 0x220]
mov rdx, rbp
call fcn.14002a2a0
mov rax, qword [rbp + 0x18]
cmp rax, 8
jb 0x140030f51
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140031386
call fcn.140058840
mov rbx, qword [r12 + 0x18]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbp, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140030faf
mov qword [rcx + 0x10], rbp
mov r8, rbp
add r8, rbp
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbp*2 + 0x220], 0
jmp 0x140030fba
mov rdx, rbp
mov r9, rbx
call fcn.14005c1a0
mov r12, qword [rsp + 0x38]
lea rcx, [rsp + 0x138]
lea rbp, [rsp + 0x220]
mov rdx, rbp
call fcn.14002a2a0
mov rax, qword [rbp + 0x18]
cmp rax, 8
jb 0x140031003
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x1400313a9
call fcn.140058840
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbp, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x14003105c
mov qword [rcx + 0x10], rbp
mov r8, rbp
add r8, rbp
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rbp*2 + 0x220], 0
jmp 0x140031067
mov rdx, rbp
mov r9, r12
call fcn.14005c1a0
lea rcx, [rsp + 0x138]
lea rbp, [rsp + 0x220]
mov rdx, rbp
call fcn.140023ec0
mov rax, qword [rbp + 0x18]
cmp rax, 8
jb 0x1400310ab
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x1400313d1
call fcn.140058840
lea rcx, [rsp + 0x138]
mov edx, 3
call fcn.14002a120
mov ecx, 0x38
call fcn.140058850
mov rbp, rax
lea rax, [0x14006a8c0]
mov qword [rbp], rax
mov dword [rbp + 8], r14d
mov eax, dword [rsp + 0x48]
xor al, 1
mov byte [rbp + 0xc], al
mov qword [rbp + 0x10], r13
lea r14, [rbp + 0x18]
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], 0
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbx, rax
cmp rax, 7
ja 0x14003112f
mov qword [rbp + 0x28], rbx
mov r8, rbx
add r8, rbx
mov rcx, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx*2 + 0x18], 0
jmp 0x14003113d
mov rcx, r14
mov rdx, rbx
mov r9, r15
call fcn.14005c1a0
call fcn.140023bd0
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
lea rdx, [rsp + 0x138]
lea r9, [rsp + 0xd4]
mov rcx, rax
mov r8, rbp
mov rax, rbx
call qword [case.0x140058b3e.0]
test rax, rax
js 0x1400311b2
mov rbx, rax
mov rcx, r13
mov edx, 0x2932e00
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x1400311df
cmp eax, 0xffffffff
jne 0x140031264
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_wait_on_event_object:__X
lea rdx, str.ShowNotification
mov r8d, 0x22f
mov r9d, eax
call fcn.14002d890
jmp 0x1400311f8
mov ecx, dword [rsp + 0xd4]
call fcn.140024030
cmp qword [rax + 0x18], 8
jb 0x1400311c8
mov rax, qword [rax]
mov rbx, qword [rsp + 0x40]
lea rdx, str.ShowNotification
mov rcx, rax
mov r8d, 0x228
jmp 0x140031230
lea rcx, str.Timed_out_waiting_for_event_object
lea rdx, str.ShowNotification
mov r8d, 0x231
call fcn.14002d890
call fcn.140023bd0
mov rcx, qword [rax]
mov rbp, qword [rcx + 0x18]
mov rcx, rax
mov rdx, rbx
mov rax, rbp
call qword [case.0x140058b3e.0]
test al, al
mov rbx, qword [rsp + 0x40]
jne 0x140031235
lea rcx, str.Failed_to_hide_notification
lea rdx, str.ShowNotification
mov r8d, 0x24f
call fcn.14002d890
lea rcx, [rsp + 0x138]
call fcn.140029cd0
mov rax, rbx
inc rax
cmp rax, 2
jb 0x140031257
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r12
call fcn.140058840
jmp 0x14002ff8d
mov rcx, qword [0x1400a9070]
mov edx, 0x927c0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x1400312a2
cmp eax, 0x80
je 0x1400312c1
cmp eax, 0x102
jne 0x1400312ec
lea rcx, str.Unable_to_obtain_mutex_ownership
lea rdx, str.ShowNotification
mov r8d, 0x235
jmp 0x1400311f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Failed_to_wait_on_mutex:__X
lea rdx, str.ShowNotification
mov r8d, 0x238
jmp 0x1400311a8
lea rcx, str.Found_abandoned_mutex
lea rdx, str.ShowNotification
mov r8d, 0x23b
call fcn.14002d890
mov rcx, qword [0x1400a9070]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400311f8
cmp byte [0x1400a9454], 0
je 0x1400312ff
movups xmm0, xmmword [0x1400a9444]
movups xmmword [rsi], xmm0
mov rcx, qword [0x1400a9070]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
mov r12, qword [rsp + 0x38]
jne 0x1400311f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_release_mutex_ownership:__X
lea rdx, str.ShowNotification
mov r8d, 0x249
jmp 0x1400311a8
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x140030dec
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x140030e9f
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x140030f4c
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
mov r12, qword [rsp + 0x38]
jmp 0x140030ffe
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400313f9
add rax, rax
add rax, 0x29
mov rdx, rax
mov r12, qword [rsp + 0x38]
jmp 0x1400310a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3