Function at 0x140030040
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
mov r12, r8
mov r15d, edx
mov rsi, rcx
mov rax, qword [0x1400aa050]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov dword [rcx], edx
movabs rax, 0x700000002
mov qword [rcx + 4], rax
call fcn.140024310
test al, al
je 0x140030156
call fcn.1400240e0
mov ecx, 7
lea rdi, [rsp + 0x138]
mov qword [rdi + 0x18], rcx
mov qword [rdi + 0x10], rcx
movabs rcx, 0x65007200690046
mov qword [rdi], rcx
movabs rcx, 0x78006f00660065
mov qword [rdi + 6], rcx
mov word [rdi + 0xe], 0
mov rcx, rax
mov rdx, rdi
call fcn.140024360
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400300fd
mov rcx, qword [rsp + 0x138]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140030d43
call fcn.140057540
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], 0
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x200]
cmp rax, 7
ja 0x14003017b
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rdi*2 + 0x200], 0
jmp 0x140030186
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.System_is_not_compatible_with_WinToast
lea r8, str.ShowNotification
mov r9d, 0x1b4
call fcn.14002ce90
jmp 0x140030595
mov rdx, rdi
mov r9, r12
call fcn.14005b130
call fcn.1400240e0
lea rdx, [rsp + 0x200]
mov rcx, rax
call fcn.1400243d0
call fcn.1400240e0
mov dword [rax + 0xc], 1
call fcn.1400240e0
mov rcx, qword [rax]
mov rbp, qword [rcx + 8]
lea rdx, [rsp + 0xd4]
mov rcx, rax
mov rax, rbp
call qword [case.0x14005783e.0]
test al, al
je 0x14003030b
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.1400024e0
mov rdi, qword [rdi]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x104
jb 0x14003061b
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_when_getting_strings
lea r8, str.FirefoxInstallIsEnglish
mov r9d, 0x246
call fcn.14002ce90
xor r13d, r13d
test rdi, rdi
je 0x140030228
mov rcx, rdi
call fcn.140057540
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0xc0], 0
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.1400024e0
mov rdi, qword [rdi]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x103
jbe 0x140030884
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_when_getting_strings
lea r8, str.GetStrings
mov r9d, 0xa3
call fcn.14002ce90
xor r14d, r14d
test rdi, rdi
je 0x1400302bf
mov rcx, rdi
call fcn.140057540
test r14b, r14b
je 0x1400303c7
xor eax, eax
test r15d, r15d
mov ecx, 0x28
cmove rcx, rax
test r13b, r13b
mov ebp, 0x50
cmovne rbp, rcx
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r14, rax
test rax, rax
je 0x140030342
test r15d, r15d
je 0x140030369
lea r8, str.FollowupNotificationShown
jmp 0x140030370
mov ecx, dword [rsp + 0xd4]
call fcn.140024540
cmp qword [rax + 0x18], 8
jb 0x140030321
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x1bf
call fcn.14002ce90
jmp 0x140030565
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x1d0
jmp 0x1400303ad
lea r8, str.InitialNotificationShown
lea rdi, [rsp + 0x138]
mov rcx, rdi
mov edx, 1
mov r9b, 1
call fcn.140032600
mov eax, dword [rdi]
test eax, eax
je 0x1400305bc
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_set_notification_as_displayed
lea r8, str.ShowNotification
mov r9d, 0x1dd
call fcn.14002ce90
mov rax, r14
inc rax
cmp rax, 2
jb 0x1400303c7
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc0], 0
test rcx, rcx
je 0x1400303e5
call fcn.140057540
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], 0
test rcx, rcx
je 0x140030403
call fcn.140057540
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x140030421
call fcn.140057540
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], 0
test rcx, rcx
je 0x14003043f
call fcn.140057540
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], 0
test rcx, rcx
je 0x14003045d
call fcn.140057540
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], 0
test rcx, rcx
je 0x14003047b
call fcn.140057540
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], 0
test rcx, rcx
je 0x140030499
call fcn.140057540
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x1400304b7
call fcn.140057540
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x80], 0
test rcx, rcx
je 0x1400304d5
call fcn.140057540
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], 0
test rcx, rcx
je 0x1400304ed
call fcn.140057540
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x140030505
call fcn.140057540
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
test rcx, rcx
je 0x14003051d
call fcn.140057540
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
test rcx, rcx
je 0x140030535
call fcn.140057540
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x14003054d
call fcn.140057540
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x140030565
call fcn.140057540
mov rax, qword [rsp + 0x218]
cmp rax, 8
jb 0x140030595
mov rcx, qword [rsp + 0x200]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140030d6a
call fcn.140057540
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.140058660
mov rax, rsi
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdi, [rsp + 0x138]
mov rcx, rdi
xor edx, edx
call fcn.1400024e0
mov rbx, qword [rdi]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
cmp rax, 0x104
jb 0x140030bba
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_for_the_image_path
lea r8, str.ShowNotification
mov r9d, 0x1e5
call fcn.14002ce90
test rbx, rbx
je 0x1400303b2
mov rcx, rbx
call fcn.140057540
jmp 0x1400303b2
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rbx, str._slocale.ini
mov rcx, rbx
mov rdx, rdi
call fcn.140059f80
inc eax
movsxd r13, eax
mov rbp, r13
add rbp, r13
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005766c
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, r14
mov rdx, r13
mov r8, 0xffffffffffffffff
mov r9, rbx
call fcn.14005a000
lea rbx, [rsp + 0x50]
mov qword [rbx], 0
lea r13, [0x1400a0d65]
lea rbp, [rsp + 0x138]
mov rcx, rbp
mov rdx, r14
mov r8, r13
call fcn.14002c2c0
mov rcx, rbp
mov rdx, r13
mov r8, rbx
call fcn.14002c3d0
mov rcx, rbp
call fcn.14002c7a0
mov ebp, eax
test eax, eax
je 0x1400306f1
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x30], ebp
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea rdx, str.Unable_to_retrieve_INI_string:_section_S__key_S__result_d
lea r8, str.GetString
mov r9d, 0x97
call fcn.14002ce90
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x140030749
mov rdx, qword [rsp + 0x188]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14003072e
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x178]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x1400307a1
mov rdx, qword [rsp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030786
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x160]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov r13d, ebp
mov rbp, qword [rsp + 0x148]
test rbp, rbp
je 0x140030837
mov rbx, qword [rsp + 0x150]
cmp rbp, rbx
je 0x1400307e9
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x1400307d8
call fcn.140057540
add rbp, 8
cmp rbp, rbx
jne 0x1400307c2
mov rbp, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x158]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x140030819
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x140031989
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x148]
mov rcx, rbp
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], 0
test rcx, rcx
je 0x140030855
call fcn.140057540
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 0x138], 0
test rcx, rcx
je 0x140030873
call fcn.140057540
test r13d, r13d
je 0x140030b77
xor r13d, r13d
jmp 0x140030b95
mov dword [rsp + 0x3c], r13d
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r14, str._sdefaultagent.ini
mov rcx, r14
mov rdx, rdi
call fcn.140059f80
inc eax
movsxd r13, eax
mov rbp, r13
add rbp, r13
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005766c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov rdx, r13
mov r8, 0xffffffffffffffff
mov r9, r14
call fcn.14005a000
lea r14, [rsp + 0x138]
mov rcx, r14
mov qword [rsp + 0x40], rbx
mov rdx, rbx
xor r8d, r8d
call fcn.14002c2c0
lea rbp, str.DefaultBrowserNotificationTitle
lea r8, [rsp + 0x50]
mov rcx, r14
mov rdx, rbp
call fcn.14002c3d0
mov rcx, r14
mov rdx, rbp
lea r8, [rsp + 0x78]
call fcn.14002c3d0
lea rbp, str.DefaultBrowserNotificationText
mov rcx, r14
mov rdx, rbp
lea r8, [rsp + 0x58]
call fcn.14002c3d0
mov rcx, r14
mov rdx, rbp
lea r8, [rsp + 0x80]
call fcn.14002c3d0
lea rdx, str.DefaultBrowserNotificationRemindMeLater
mov rcx, r14
lea r8, [rsp + 0x60]
call fcn.14002c3d0
lea rdx, str.DefaultBrowserNotificationDontShowAgain
mov rcx, r14
lea r8, [rsp + 0x88]
call fcn.14002c3d0
lea rbp, str.DefaultBrowserNotificationMakeFirefoxDefault
mov rcx, r14
mov rdx, rbp
lea r8, [rsp + 0x68]
call fcn.14002c3d0
mov rcx, r14
mov rdx, rbp
lea r8, [rsp + 0x90]
call fcn.14002c3d0
mov rcx, r14
call fcn.14002c7a0
test eax, eax
je 0x140030d91
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_English_strings:__d
lea r8, str.GetStrings
mov r9d, 0xc1
call fcn.14002ce90
xor r14d, r14d
mov r13d, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x140030a41
mov rdx, qword [rsp + 0x188]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030a26
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x178]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x140030a99
mov rdx, qword [rsp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030a7e
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x160]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0x148]
test rbp, rbp
je 0x140030b2c
mov rbx, qword [rsp + 0x150]
cmp rbp, rbx
je 0x140030ade
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x140030acd
call fcn.140057540
add rbp, 8
cmp rbp, rbx
jne 0x140030ab7
mov rbp, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x158]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x140030b0e
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x140031989
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x148]
mov rcx, rbp
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], 0
test rcx, rcx
je 0x140030b4a
call fcn.140057540
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 0x138], 0
test rcx, rcx
je 0x140030b68
call fcn.140057540
mov rcx, qword [rsp + 0x40]
call fcn.140057540
jmp 0x1400302b2
mov rcx, qword [rsp + 0x50]
lea rdx, [0x1400a37f0]
mov r8d, 3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
sete r13b
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x140030bad
call fcn.140057540
mov rcx, r14
call fcn.140057540
jmp 0x14003021b
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test r15d, r15d
mov eax, 0x20
mov ecx, 0x48
cmove rcx, rax
mov dword [rsp + 0x3c], r13d
test r13b, r13b
mov eax, 0x70
cmovne rax, rcx
mov qword [rsp + 0x40], rax
mov r8, qword [rsp + rax + 0x50]
lea rcx, str._s_s
mov rdx, rbx
call fcn.140059f80
inc eax
movsxd rdi, eax
mov qword [rsp + 0x48], rdi
add rdi, rdi
mov rax, 0xffffffffffffffff
cmovb rdi, rax
mov rcx, rdi
call fcn.14005766c
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + rax + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x40], r13
mov rcx, r13
mov rdx, qword [rsp + 0x48]
mov r8, 0xffffffffffffffff
lea r9, str._s_s
call fcn.14005a000
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400aa090], rax
test rax, rax
je 0x140030e9f
mov r13, rbx
mov byte [0x1400aa4d0], 0
mov qword [rsp + 0x48], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x140030cc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x201
call fcn.14002ce90
lea rcx, [rsp + 0x138]
mov edx, 1
call fcn.140029ff0
mov rbp, qword [rsp + rbp + 0x50]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
cmp rax, 7
mov ebx, dword [rsp + 0x3c]
lea rcx, [rsp + 0x220]
ja 0x140031287
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rdi*2 + 0x220], 0
jmp 0x140031292
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
jmp 0x1400300f8
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
jmp 0x140030590
lea r14, str._sdefaultagent_localized.ini
mov rcx, r14
mov rdx, rdi
call fcn.140059f80
inc eax
movsxd r13, eax
mov rbp, r13
add rbp, r13
mov rax, 0xffffffffffffffff
cmovb rbp, rax
mov rcx, rbp
call fcn.14005766c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov rdx, r13
mov r8, 0xffffffffffffffff
mov r9, r14
call fcn.14005a000
lea r14, [rsp + 0x220]
mov rcx, r14
mov qword [rsp + 0x48], rbx
mov rdx, rbx
xor r8d, r8d
call fcn.14002c2c0
lea rdx, str.DefaultBrowserNotificationTitle
mov rcx, r14
lea r8, [rsp + 0xa0]
call fcn.14002c3d0
lea rdx, str.DefaultBrowserNotificationText
mov rcx, r14
lea r8, [rsp + 0xa8]
call fcn.14002c3d0
lea rdx, str.DefaultBrowserNotificationYesButtonText
mov rcx, r14
lea r8, [rsp + 0xb0]
call fcn.14002c3d0
lea rdx, str.DefaultBrowserNotificationNoButtonText
mov rcx, r14
lea r8, [rsp + 0xb8]
call fcn.14002c3d0
mov rcx, r14
call fcn.14002c7a0
test eax, eax
je 0x140030ed3
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xd8
call fcn.14002ce90
xor r14d, r14d
mov r13d, dword [rsp + 0x3c]
jmp 0x1400310f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x1f4
call fcn.14002ce90
mov rdi, qword [rsp + 0x40]
jmp 0x1400317b0
lea r13, [rsp + 0x70]
lea r14, [rsp + 0x98]
lea rbx, [rsp + 0xc0]
lea r8, str.Nonlocalized
lea rbp, [rsp + 0xd8]
mov rcx, rbp
mov rdx, qword [rsp + 0x40]
call fcn.14002c2c0
lea rdx, str.InitialToastRelativeImagePath
mov rcx, rbp
mov r8, r13
call fcn.14002c3d0
lea rdx, str.FollowupToastRelativeImagePath
mov rcx, rbp
mov r8, r14
call fcn.14002c3d0
lea rdx, str.LocalizedToastRelativeImagePath
mov rcx, rbp
mov r8, rbx
call fcn.14002c3d0
mov rcx, rbp
call fcn.14002c7a0
test eax, eax
sete r14b
je 0x140030f6e
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_non_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xe7
call fcn.14002ce90
mov rcx, qword [rsp + 0x118]
test rcx, rcx
mov r13d, dword [rsp + 0x3c]
je 0x140030fcc
mov rdx, qword [rsp + 0x128]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140030fb0
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbp, [rsp + 0x118]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 0
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x140031025
mov rdx, qword [rsp + 0x110]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140031009
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbp, [rsp + 0x100]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 0
mov rbp, qword [rsp + 0xe8]
test rbp, rbp
je 0x1400310bd
mov r13, qword [rsp + 0xf0]
cmp rbp, r13
je 0x14003106a
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x140031059
call fcn.140057540
add rbp, 8
cmp rbp, r13
jne 0x140031043
mov rbp, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xf8]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x14003109a
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x140031989
add rdx, 0x27
mov rbp, rax
mov r13d, dword [rsp + 0x3c]
lea rbx, [rsp + 0xe8]
mov rcx, rbp
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], 0
test rcx, rcx
je 0x1400310db
call fcn.140057540
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0xd8], 0
test rcx, rcx
je 0x1400310f9
call fcn.140057540
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x140031151
mov rdx, qword [rsp + 0x270]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140031136
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x260]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x248]
test rcx, rcx
je 0x1400311a9
mov rdx, qword [rsp + 0x258]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14003118e
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140031989
add rdx, 0x27
mov rcx, rax
lea rbx, [rsp + 0x248]
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rbp, qword [rsp + 0x230]
test rbp, rbp
je 0x14003123c
mov rbx, qword [rsp + 0x238]
cmp rbp, rbx
je 0x1400311ee
mov rcx, qword [rbp]
mov qword [rbp], 0
test rcx, rcx
je 0x1400311dd
call fcn.140057540
add rbp, 8
cmp rbp, rbx
jne 0x1400311c7
mov rbp, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x240]
sub rdx, rbp
cmp rdx, 0x1000
jb 0x14003121e
mov rax, qword [rbp - 8]
add rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbp, 0x20
jae 0x140031989
add rdx, 0x27
mov rbp, rax
lea rbx, [rsp + 0x230]
mov rcx, rbp
call fcn.140057540
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rcx, qword [rsp + 0x228]
mov qword [rsp + 0x228], 0
test rcx, rcx
je 0x14003125a
call fcn.140057540
mov rcx, qword [rsp + 0x220]
mov qword [rsp + 0x220], 0
test rcx, rcx
je 0x140031278
call fcn.140057540
mov rcx, qword [rsp + 0x48]
call fcn.140057540
jmp 0x1400309e9
mov rdx, rdi
mov r9, rbp
call fcn.14005b130
lea rcx, [rsp + 0x138]
lea rdi, [rsp + 0x220]
mov rdx, rdi
xor r8d, r8d
call fcn.14002a590
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400312d9
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x1400318b9
call fcn.140057540
test r15d, r15d
mov eax, 8
mov ecx, 0x30
cmove rcx, rax
test bl, bl
mov eax, 0x58
cmovne rax, rcx
mov rbp, qword [rsp + rax + 0x50]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140031353
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rdi*2 + 0x220], 0
jmp 0x14003135e
mov rdx, rdi
mov r9, rbp
call fcn.14005b130
lea rcx, [rsp + 0x138]
lea rdi, [rsp + 0x220]
mov rdx, rdi
mov r8d, 1
call fcn.14002a590
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400313a8
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x1400318e4
call fcn.140057540
test r15d, r15d
mov eax, 0x10
mov ecx, 0x38
cmove rcx, rax
test bl, bl
mov eax, 0x60
cmovne rax, rcx
mov rbp, qword [rsp + rax + 0x50]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140031422
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rdi*2 + 0x220], 0
jmp 0x14003142d
mov rdx, rdi
mov r9, rbp
call fcn.14005b130
lea rcx, [rsp + 0x138]
lea rdi, [rsp + 0x220]
mov rdx, rdi
call fcn.14002a780
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x140031471
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x14003190f
call fcn.140057540
test r15d, r15d
mov eax, 0x18
mov ecx, 0x40
cmove rcx, rax
test bl, bl
mov eax, 0x68
cmovne rax, rcx
mov rbp, qword [rsp + rax + 0x50]
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x1400314eb
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rdi*2 + 0x220], 0
jmp 0x1400314f6
mov rdx, rdi
mov r9, rbp
call fcn.14005b130
lea rcx, [rsp + 0x138]
lea rdi, [rsp + 0x220]
mov rdx, rdi
call fcn.14002a780
mov rax, qword [rdi + 0x18]
cmp rax, 8
mov rbp, qword [rsp + 0x40]
jb 0x14003153f
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140031936
call fcn.140057540
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rdi, rax
lea rcx, [rsp + 0x220]
cmp rax, 7
ja 0x140031598
mov qword [rcx + 0x10], rdi
mov r8, rdi
add r8, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rdi*2 + 0x220], 0
jmp 0x1400315a3
mov rdx, rdi
mov r9, rbp
call fcn.14005b130
lea rcx, [rsp + 0x138]
lea rdi, [rsp + 0x220]
mov rdx, rdi
call fcn.1400243d0
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400315e7
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x140031962
call fcn.140057540
lea rcx, [rsp + 0x138]
mov edx, 3
call fcn.14002a600
mov ecx, 0x38
call fcn.140057550
mov rbp, rax
lea rax, [0x14006ae80]
mov qword [rbp], rax
mov dword [rbp + 8], r15d
xor bl, 1
mov byte [rbp + 0xc], bl
mov qword [rbp + 0x10], r14
lea rdi, [rbp + 0x18]
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], 0
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbx, rax
cmp rax, 7
ja 0x140031668
mov qword [rbp + 0x28], rbx
mov r8, rbx
add r8, rbx
mov rcx, rdi
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx*2 + 0x18], 0
jmp 0x140031676
mov rcx, rdi
mov rdx, rbx
mov r9, r12
call fcn.14005b130
call fcn.1400240e0
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
lea rdx, [rsp + 0x138]
lea r9, [rsp + 0xd4]
mov rcx, rax
mov r8, rbp
mov rax, rbx
call qword [case.0x14005783e.0]
test rax, rax
js 0x1400316ee
mov rbx, rax
mov rcx, r14
mov edx, 0x2932e00
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x140031725
cmp eax, 0xffffffff
jne 0x1400317bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_wait_on_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x21a
jmp 0x140031740
mov ecx, dword [rsp + 0xd4]
call fcn.140024540
cmp qword [rax + 0x18], 8
mov rdi, qword [rsp + 0x40]
jb 0x140031709
mov rax, qword [rax]
mov rbx, r13
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x213
jmp 0x140031787
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Timed_out_waiting_for_event_object
lea r8, str.ShowNotification
mov r9d, 0x21c
call fcn.14002ce90
call fcn.1400240e0
mov rcx, qword [rax]
mov rbp, qword [rcx + 0x18]
mov rcx, rax
mov rdx, rbx
mov rax, rbp
call qword [case.0x14005783e.0]
test al, al
mov rbx, r13
mov rdi, qword [rsp + 0x40]
jne 0x14003178c
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_hide_notification
lea r8, str.ShowNotification
mov r9d, 0x23a
call fcn.14002ce90
lea rcx, [rsp + 0x138]
call fcn.14002a1b0
mov rcx, qword [rsp + 0x48]
mov rax, rcx
inc rax
cmp rax, 2
jb 0x1400317b0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.140057540
jmp 0x140030605
mov rcx, qword [0x1400aa090]
mov edx, 0x927c0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x140031802
cmp eax, 0x80
je 0x14003182c
cmp eax, 0x102
jne 0x14003185e
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_obtain_mutex_ownership
lea r8, str.ShowNotification
mov r9d, 0x220
jmp 0x140031740
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Failed_to_wait_on_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x223
jmp 0x140031740
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Found_abandoned_mutex
lea r8, str.ShowNotification
mov r9d, 0x226
call fcn.14002ce90
mov rcx, qword [0x1400aa090]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x140031745
cmp byte [0x1400aa4d0], 0
je 0x14003187a
mov eax, dword [0x1400aa4cc]
mov dword [rsi + 8], eax
mov rax, qword [0x1400aa4c4]
mov qword [rsi], rax
mov rcx, qword [0x1400aa090]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x140031745
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x234
jmp 0x140031740
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
mov ebx, dword [rsp + 0x3c]
jmp 0x1400312d4
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
mov ebx, dword [rsp + 0x3c]
jmp 0x1400313a3
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
mov ebx, dword [rsp + 0x3c]
jmp 0x14003146c
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
mov ebx, dword [rsp + 0x3c]
mov rbp, qword [rsp + 0x40]
jmp 0x14003153a
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140031989
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbp
mov ebx, dword [rsp + 0x3c]
jmp 0x1400315e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3