Function at 0x42bd30
Capabilities:
Check mutex on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x170
mov edi, edx
mov esi, ecx
mov eax, dword [0x49503c]
xor eax, ebp
mov dword [esp + 0x168], eax
mov dword [ecx], edx
mov dword [ecx + 4], 2
mov dword [ecx + 8], 7
call fcn.00421f40
test al, al
je 0x42be37
mov dword [esp + 0xc], edi
call fcn.00421df0
lea edi, [esp + 0xa0]
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 7
movsd xmm0, qword [0x48e9e0]
movsd qword [edi], xmm0
movsd xmm0, qword [0x48e9e6]
movsd qword [edi + 6], xmm0
mov word [edi + 0xe], 0
mov ecx, eax
push edi
call fcn.00421f80
mov ecx, dword [edi + 0x14]
cmp ecx, 8
jb 0x42bdde
mov eax, dword [esp + 0xa0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d2f0
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov edi, dword [ebp + 8]
mov eax, 7
mov dword [esp + 0x130], eax
mov dword [esp + 0x12c], 0
mov word [esp + 0x11c], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov ebx, eax
cmp eax, 7
ja 0x42be53
lea eax, [esp + 0x11c]
mov dword [eax + 0x10], ebx
mov ecx, ebx
add ecx, ebx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esp + ebx*2 + 0x11c], 0
jmp 0x42be74
push 0x1b4
push str.ShowNotification
push str.System_is_not_compatible_with_WinToast
call fcn.00429d90
add esp, 0xc
jmp 0x42c281
sub esp, 0xc
mov al, byte [esp + 0xac]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], ebx
lea ecx, [esp + 0x128]
call fcn.00452270
call fcn.00421df0
lea edx, [esp + 0x11c]
mov ecx, eax
push edx
call fcn.00422000
call fcn.00421df0
mov dword [eax + 8], 1
call fcn.00421df0
mov ebx, eax
mov eax, dword [eax]
mov edi, dword [eax + 4]
mov ecx, edi
call dword [section..00cfg]
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
call edi
test al, al
je 0x42bf9c
lea ebx, [esp + 0x20]
mov dword [ebx], 0
push ebx
call fcn.004510d0
add esp, 4
test al, al
jne 0x42c299
push 0x245
push str.FirefoxInstallIsEnglish
push str.Failed_to_get_install_directory_when_getting_strings
call fcn.00429d90
add esp, 0xc
mov dword [esp + 0x10], 0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], 0
test eax, eax
je 0x42bf10
push eax
call fcn.0044fc0e
add esp, 4
xorps xmm0, xmm0
movups xmmword [esp + 0x4c], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
movaps xmmword [esp + 0x20], xmm0
lea eax, [esp + 0x9c]
mov dword [eax], 0
push eax
call fcn.004510d0
add esp, 4
test al, al
mov dword [esp + 0x1c], esi
jne 0x42c4d5
mov esi, ebx
push 0xa3
push str.GetStrings
push str.Failed_to_get_install_directory_when_getting_strings
call fcn.00429d90
add esp, 0xc
xor ebx, ebx
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x9c], 0
test eax, eax
je 0x42bf83
push eax
call fcn.0044fc0e
add esp, 4
test bl, bl
je 0x42c0d7
cmp byte [esp + 0x10], 0
je 0x42bfc8
test edi, edi
je 0x42c003
lea eax, [esp + 0x34]
jmp 0x42bfcc
push dword [esp + 0x64]
call fcn.00422140
add esp, 4
cmp dword [eax + 0x14], 7
jbe 0x42bfb0
mov eax, dword [eax]
push 0x1bf
push str.ShowNotification
push eax
call fcn.00429d90
add esp, 0xc
jmp 0x42c252
lea eax, [esp + 0x48]
mov dword [esp + 8], eax
sub esp, 0x10
movaps xmm0, xmmword [0x461870]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x42c05b
mov ebx, eax
test edi, edi
je 0x42c021
lea edi, [esp + 0xa0]
xor edx, edx
inc edx
mov ecx, edi
push 1
push str.FollowupNotificationShown
jmp 0x42c034
mov dword [esp + 8], esi
sub esp, 0x10
movaps xmm0, xmmword [0x461870]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ebx, eax
test eax, eax
je 0x42c05b
lea edi, [esp + 0xa0]
xor edx, edx
inc edx
mov ecx, edi
push 1
push str.InitialNotificationShown
call fcn.0042dd70
add esp, 8
mov eax, dword [edi]
test eax, eax
je 0x42c07d
push 0x1dd
push str.ShowNotification
push str.Unable_to_set_notification_as_displayed
call fcn.00429d90
add esp, 0xc
jmp 0x42c0c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1d0
push str.ShowNotification
push str.Unable_to_create_event_object:__X
call fcn.00429d90
add esp, 0x10
xor ebx, ebx
jmp 0x42c0c8
lea eax, [esp + 0x68]
mov dword [eax], 0
push eax
call fcn.004510d0
add esp, 4
test al, al
jne 0x42c7c6
push 0x1e5
push str.ShowNotification
push str.Failed_to_get_install_directory_for_the_image_path
call fcn.00429d90
add esp, 0xc
mov eax, dword [esp + 0x68]
mov dword [esp + 0x68], 0
test eax, eax
je 0x42c0c8
push eax
call fcn.0044fc0e
add esp, 4
lea eax, [ebx + 1]
cmp eax, 2
jb 0x42c0d7
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x58], 0
test eax, eax
je 0x42c0f0
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x54], 0
test eax, eax
mov esi, dword [esp + 0x1c]
je 0x42c10d
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp + 0x50], 0
test eax, eax
je 0x42c126
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x4c], 0
test eax, eax
je 0x42c13f
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x48]
mov dword [esp + 0x48], 0
test eax, eax
je 0x42c158
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp + 0x44], 0
test eax, eax
je 0x42c171
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x40], 0
test eax, eax
je 0x42c18a
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x3c], 0
test eax, eax
je 0x42c1a3
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], 0
test eax, eax
je 0x42c1bc
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x34], 0
test eax, eax
je 0x42c1d5
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x30]
mov dword [esp + 0x30], 0
test eax, eax
je 0x42c1ee
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], 0
test eax, eax
je 0x42c207
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], 0
test eax, eax
je 0x42c220
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], 0
test eax, eax
je 0x42c239
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], 0
test eax, eax
je 0x42c252
push eax
call fcn.0044fc0e
add esp, 4
mov ecx, dword [esp + 0x130]
cmp ecx, 8
jb 0x42c281
mov eax, dword [esp + 0x11c]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d30f
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov ecx, dword [esp + 0x168]
xor ecx, ebp
call fcn.004503b0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, str._slocale.ini
push dword [esp + 0x20]
push eax
call fcn.00451240
add esp, 8
mov edi, eax
inc edi
mov dword [esp + 0x10], edi
xor ecx, ecx
dec ecx
add edi, edi
cmovb edi, ecx
push edi
call fcn.0044fc05
add esp, 4
mov ebx, eax
xor eax, eax
push edi
push eax
xor edi, edi
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0x20]
mov eax, str._slocale.ini
push eax
push 0xffffffffffffffff
push dword [esp + 0x1c]
push ebx
call fcn.004512a0
add esp, 0x14
lea eax, [esp + 0x134]
mov dword [eax], edi
mov eax, 0x48e1d3
lea edi, [esp + 0xa0]
mov ecx, edi
push eax
mov dword [esp + 0xc], ebx
push ebx
mov ebx, 0x48e1d3
call fcn.004285e0
mov ecx, edi
lea eax, [esp + 0x134]
push eax
push ebx
call fcn.004286d0
mov ecx, edi
call fcn.00428a90
mov edi, eax
test eax, eax
je 0x42c34b
push edi
push ebx
push ebx
push 0x97
push str.GetString
push str.Unable_to_retrieve_INI_string:_section_S__key_S__result_d
call fcn.00429d90
add esp, 0x18
mov ecx, dword [esp + 0xc0]
test ecx, ecx
lea ebx, [esp + 0x20]
je 0x42c3a1
mov eax, dword [esp + 0xc8]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c380
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x42c3f3
mov eax, dword [esp + 0xbc]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c3d2
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0xa8]
test edi, edi
je 0x42c47b
mov ebx, dword [esp + 0xac]
cmp edi, ebx
je 0x42c430
mov eax, dword [edi]
mov dword [edi], 0
test eax, eax
je 0x42c422
push eax
call fcn.0044fc0e
add esp, 4
add edi, 4
cmp ebx, edi
jne 0x42c40d
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0xb0]
sub eax, edi
cmp eax, 0x1000
lea ebx, [esp + 0x20]
jb 0x42c45a
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x42d3b9
add eax, 0x23
mov edi, ecx
push eax
push edi
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xa4], 0
test eax, eax
je 0x42c49a
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xa0], 0
test eax, eax
mov edi, dword [esp + 0xc]
je 0x42c4bd
push eax
call fcn.0044fc0e
add esp, 4
cmp dword [esp + 0x10], 0
je 0x42c776
mov dword [esp + 0x10], 0
jmp 0x42c796
mov eax, str._sdefaultagent.ini
push dword [esp + 0x9c]
push eax
call fcn.00451240
add esp, 8
mov edi, eax
inc edi
mov dword [esp + 8], edi
xor ecx, ecx
dec ecx
add edi, edi
cmovb edi, ecx
push edi
call fcn.0044fc05
add esp, 4
mov ebx, eax
xor eax, eax
push edi
push eax
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0x9c]
mov eax, str._sdefaultagent.ini
push eax
push 0xffffffffffffffff
push dword [esp + 0x14]
push ebx
call fcn.004512a0
add esp, 0x14
lea edi, [esp + 0xa0]
mov ecx, edi
xor eax, eax
push eax
mov dword [esp + 0xc], ebx
push ebx
call fcn.004285e0
lea eax, [esp + 0x20]
mov ebx, str.DefaultBrowserNotificationTitle
mov ecx, edi
push eax
push ebx
call fcn.004286d0
lea eax, [esp + 0x34]
mov ecx, edi
push eax
push ebx
call fcn.004286d0
lea eax, [esp + 0x24]
mov ebx, str.DefaultBrowserNotificationText
mov ecx, edi
push eax
push ebx
call fcn.004286d0
lea eax, [esp + 0x38]
mov ecx, edi
push eax
push ebx
call fcn.004286d0
lea eax, [esp + 0x28]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationRemindMeLater
call fcn.004286d0
lea eax, [esp + 0x3c]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationDontShowAgain
call fcn.004286d0
lea eax, [esp + 0x2c]
mov ebx, str.DefaultBrowserNotificationMakeFirefoxDefault
mov ecx, edi
push eax
push ebx
call fcn.004286d0
lea eax, [esp + 0x40]
mov ecx, edi
push eax
push ebx
call fcn.004286d0
mov ecx, edi
call fcn.00428a90
test eax, eax
je 0x42c8e3
push eax
push 0xc1
push str.GetStrings
push str.Unable_to_read_English_strings:__d
call fcn.00429d90
add esp, 0x10
mov dword [esp + 0x14], 0
lea ebx, [esp + 0x20]
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x42c647
mov eax, dword [esp + 0xc8]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c626
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x42c699
mov eax, dword [esp + 0xbc]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c678
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov edi, dword [esp + 0xa8]
test edi, edi
je 0x42c71d
mov ebx, dword [esp + 0xac]
cmp edi, ebx
je 0x42c6d2
mov eax, dword [edi]
mov dword [edi], 0
test eax, eax
je 0x42c6c4
push eax
call fcn.0044fc0e
add esp, 4
add edi, 4
cmp ebx, edi
jne 0x42c6af
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0xb0]
sub eax, edi
cmp eax, 0x1000
lea ebx, [esp + 0x20]
jb 0x42c6fc
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x42d3b9
add eax, 0x23
mov edi, ecx
push eax
push edi
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xa4], 0
test eax, eax
je 0x42c73c
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xa0], 0
test eax, eax
mov edi, dword [esp + 0xc]
je 0x42c75f
push eax
call fcn.0044fc0e
add esp, 4
mov esi, ebx
push dword [esp + 8]
call fcn.0044fc0e
add esp, 4
mov ebx, dword [esp + 0x14]
jmp 0x42bf64
push 3
push 0x490ba6
push dword [esp + 0x13c]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
sete al
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x134], 0
test eax, eax
je 0x42c7b5
push eax
call fcn.0044fc0e
add esp, 4
push dword [esp + 8]
call fcn.0044fc0e
add esp, 4
jmp 0x42bef7
mov ecx, str._s_s
mov eax, dword [esp + 8]
push dword [eax + 0x10]
push dword [esp + 0x6c]
push ecx
call fcn.00451240
add esp, 0xc
mov esi, eax
inc esi
xor ecx, ecx
dec ecx
mov edi, esi
add edi, esi
cmovb edi, ecx
push edi
call fcn.0044fc05
add esp, 4
xor ecx, ecx
push edi
mov edi, eax
push ecx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 8]
push dword [eax + 0x10]
push dword [esp + 0x6c]
mov eax, str._s_s
push eax
push 0xffffffffffffffff
push esi
push edi
call fcn.004512a0
add esp, 0x18
xor eax, eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x495068], eax
test eax, eax
je 0x42c9cf
mov dword [esp + 0x14], edi
mov byte [0x495650], 0
mov dword [esp + 0x18], eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x42c872
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x201
push str.ShowNotification
push str.Unable_to_release_mutex_ownership:__X
call fcn.00429d90
add esp, 0x10
lea ecx, [esp + 0xa0]
push 1
call fcn.004267f0
mov eax, dword [esp + 8]
mov edi, dword [eax]
mov eax, 7
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], 0
mov word [esp + 0x134], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov esi, eax
cmp eax, 7
ja 0x42c9f2
lea eax, [esp + 0x134]
mov dword [eax + 0x10], esi
mov ecx, esi
add ecx, esi
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esp + esi*2 + 0x134], 0
jmp 0x42ca13
mov eax, str._sdefaultagent_localized.ini
push dword [esp + 0x9c]
push eax
call fcn.00451240
add esp, 8
mov edi, eax
inc edi
mov dword [esp + 0x14], edi
add edi, edi
mov eax, 0xffffffff
cmovb edi, eax
push edi
call fcn.0044fc05
add esp, 4
mov ebx, eax
push edi
xor eax, eax
push eax
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0x9c]
mov eax, str._sdefaultagent_localized.ini
push eax
push 0xffffffffffffffff
push dword [esp + 0x20]
push ebx
call fcn.004512a0
add esp, 0x14
lea edi, [esp + 0x134]
mov ecx, edi
xor eax, eax
push eax
mov dword [esp + 0x1c], ebx
push ebx
call fcn.004285e0
lea eax, [esp + 0x48]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationTitle
call fcn.004286d0
lea eax, [esp + 0x4c]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationText
call fcn.004286d0
lea eax, [esp + 0x50]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationYesButtonText
call fcn.004286d0
lea eax, [esp + 0x54]
mov ecx, edi
push eax
push str.DefaultBrowserNotificationNoButtonText
call fcn.004286d0
mov ecx, edi
call fcn.00428a90
test eax, eax
je 0x42ce73
push eax
push 0xd8
push str.GetStrings
push str.Unable_to_read_localized_strings:__d
call fcn.00429d90
add esp, 0x10
mov dword [esp + 0x14], 0
lea ebx, [esp + 0x20]
jmp 0x42d029
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1f4
push str.ShowNotification
push str.Unable_to_create_mutex:__X
call fcn.00429d90
add esp, 0x10
jmp 0x42d217
sub esp, 0xc
mov al, byte [esp + 0xa8]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
lea ecx, [esp + 0x140]
call fcn.00452270
lea esi, [esp + 0x134]
lea ecx, [esp + 0xa0]
push 0
push esi
call fcn.00426a00
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x42ca54
mov eax, dword [esp + 0x134]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d32e
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov eax, dword [esp + 8]
mov edi, dword [eax + 4]
mov eax, 7
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], 0
mov word [esp + 0x134], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
cmp eax, 7
ja 0x42caae
mov dword [esp + 0x144], eax
mov ecx, eax
add ecx, eax
push ecx
push edi
push esi
mov edi, eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esp + edi*2 + 0x134], 0
jmp 0x42cacf
sub esp, 0xc
mov cl, byte [esp + 0xa8]
mov byte [esp + 4], cl
mov dword [esp + 8], edi
mov dword [esp], eax
lea ecx, [esp + 0x140]
call fcn.00452270
lea ecx, [esp + 0xa0]
push 1
push esi
call fcn.00426a00
mov ecx, dword [esp + 0x148]
cmp ecx, 8
jb 0x42cb0d
mov eax, dword [esp + 0x134]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d349
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov eax, dword [esp + 8]
mov edi, dword [eax + 8]
mov eax, 7
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], 0
mov word [esp + 0x134], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
cmp eax, 7
ja 0x42cb67
mov dword [esp + 0x144], eax
mov ecx, eax
add ecx, eax
push ecx
push edi
push esi
mov edi, eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esp + edi*2 + 0x134], 0
jmp 0x42cb88
sub esp, 0xc
mov cl, byte [esp + 0xa8]
mov byte [esp + 4], cl
mov dword [esp + 8], edi
mov dword [esp], eax
lea ecx, [esp + 0x140]
call fcn.00452270
lea ecx, [esp + 0xa0]
push esi
call fcn.00426b10
mov ecx, dword [esp + 0x148]
cmp ecx, 8
jb 0x42cbc4
mov eax, dword [esp + 0x134]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d364
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov eax, dword [esp + 8]
mov edi, dword [eax + 0xc]
mov eax, 7
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], 0
mov word [esp + 0x134], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
cmp eax, 7
ja 0x42cc1e
mov dword [esp + 0x144], eax
mov ecx, eax
add ecx, eax
push ecx
push edi
push esi
mov edi, eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esp + edi*2 + 0x134], 0
jmp 0x42cc3f
sub esp, 0xc
mov cl, byte [esp + 0xa8]
mov byte [esp + 4], cl
mov dword [esp + 8], edi
mov dword [esp], eax
lea ecx, [esp + 0x140]
call fcn.00452270
lea ecx, [esp + 0xa0]
push esi
call fcn.00426b10
mov ecx, dword [esp + 0x148]
cmp ecx, 8
jb 0x42cc7b
mov eax, dword [esp + 0x134]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d37f
push edx
push eax
call fcn.0044fbc2
add esp, 8
mov eax, 7
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], 0
mov word [esp + 0x134], 0
mov edi, dword [esp + 0x14]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
cmp eax, 7
ja 0x42ccd9
mov dword [esp + 0x144], eax
mov ecx, eax
add ecx, eax
push ecx
push edi
lea edi, [esp + 0x13c]
push edi
mov esi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esp + esi*2 + 0x134], 0
jmp 0x42cd01
sub esp, 0xc
mov cl, byte [esp + 0xa8]
mov byte [esp + 4], cl
mov dword [esp + 8], edi
mov dword [esp], eax
lea ecx, [esp + 0x140]
call fcn.00452270
lea edi, [esp + 0x134]
lea ecx, [esp + 0xa0]
push edi
call fcn.00426a90
mov ecx, dword [esp + 0x148]
cmp ecx, 8
mov esi, dword [esp + 0xc]
jb 0x42cd41
mov eax, dword [esp + 0x134]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x42d39a
push edx
push eax
call fcn.0044fbc2
add esp, 8
push 0x28
call fcn.0044fbd0
add esp, 4
mov dword [eax], 0x4618e0
mov dword [eax + 4], esi
mov esi, eax
mov eax, dword [esp + 0x10]
xor al, 1
mov byte [esi + 8], al
mov dword [esi + 0xc], ebx
lea eax, [esi + 0x10]
mov dword [esp + 0xc], eax
mov eax, 7
mov dword [esi + 0x24], eax
mov dword [esi + 0x20], 0
mov word [esi + 0x10], 0
mov eax, dword [ebp + 8]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edi, eax
cmp eax, 7
ja 0x42cdb1
mov dword [esi + 0x20], edi
mov eax, edi
add eax, edi
push eax
push dword [ebp + 8]
push dword [esp + 0x14]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esi + edi*2 + 0x10], 0
jmp 0x42cdd2
sub esp, 0xc
mov al, byte [esp + 0x140]
mov byte [esp + 4], al
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, dword [esp + 0x18]
call fcn.00452270
call fcn.00421df0
mov edi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0xc], ecx
call dword [section..00cfg]
mov ecx, edi
lea eax, [esp + 0x64]
push eax
push esi
lea eax, [esp + 0xa8]
push eax
call dword [esp + 0x18]
test edx, edx
js 0x42ce4b
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
push 0x1b7740
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x42d1a2
cmp eax, 0xffffffff
jne 0x42d225
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x219
push str.ShowNotification
push str.Unable_to_wait_on_event_object:__X
call fcn.00429d90
add esp, 0x10
jmp 0x42d1b9
push dword [esp + 0x64]
call fcn.00422140
add esp, 4
cmp dword [eax + 0x14], 7
mov edi, dword [esp + 0x14]
jbe 0x42ce63
mov eax, dword [eax]
push 0x212
push str.ShowNotification
push eax
jmp 0x42d1f0
lea edi, [esp + 0x68]
mov ecx, edi
push str.Nonlocalized
push dword [esp + 0xc]
call fcn.004285e0
lea eax, [esp + 0x30]
mov ecx, edi
push eax
push str.InitialToastRelativeImagePath
call fcn.004286d0
lea eax, [esp + 0x44]
mov ecx, edi
push eax
push str.FollowupToastRelativeImagePath
call fcn.004286d0
lea eax, [esp + 0x58]
mov ecx, edi
push eax
push str.LocalizedToastRelativeImagePath
call fcn.004286d0
mov ecx, edi
call fcn.00428a90
test eax, eax
sete cl
mov dword [esp + 0x14], ecx
lea ebx, [esp + 0x20]
je 0x42cee8
push eax
push 0xe7
push str.GetStrings
push str.Unable_to_read_non_localized_strings:__d
call fcn.00429d90
add esp, 0x10
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x42cf3a
mov eax, dword [esp + 0x90]
sub eax, ecx
cmp eax, 0x1000
jb 0x42cf19
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x42cf86
mov eax, dword [esp + 0x84]
sub eax, ecx
cmp eax, 0x1000
jb 0x42cf68
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov edi, dword [esp + 0x70]
test edi, edi
je 0x42cff7
mov eax, dword [esp + 0x74]
cmp edi, eax
je 0x42cfb8
mov ebx, eax
mov eax, dword [edi]
mov dword [edi], 0
test eax, eax
je 0x42cfad
push eax
call fcn.0044fc0e
add esp, 4
add edi, 4
cmp ebx, edi
jne 0x42cf98
mov edi, dword [esp + 0x70]
mov eax, dword [esp + 0x78]
sub eax, edi
cmp eax, 0x1000
jb 0x42cfdb
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x42d3b9
add eax, 0x23
mov edi, ecx
lea ebx, [esp + 0x20]
push eax
push edi
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], 0
test eax, eax
je 0x42d010
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x68]
mov dword [esp + 0x68], 0
test eax, eax
je 0x42d029
push eax
call fcn.0044fc0e
add esp, 4
mov ecx, dword [esp + 0x154]
test ecx, ecx
je 0x42d07b
mov eax, dword [esp + 0x15c]
sub eax, ecx
cmp eax, 0x1000
jb 0x42d05a
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov ecx, dword [esp + 0x148]
test ecx, ecx
je 0x42d0cd
mov eax, dword [esp + 0x150]
sub eax, ecx
cmp eax, 0x1000
jb 0x42d0ac
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d3b9
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov edi, dword [esp + 0x13c]
test edi, edi
je 0x42d153
mov eax, dword [esp + 0x140]
cmp edi, eax
je 0x42d108
mov ebx, eax
mov eax, dword [edi]
mov dword [edi], 0
test eax, eax
je 0x42d0fa
push eax
call fcn.0044fc0e
add esp, 4
add edi, 4
cmp ebx, edi
jne 0x42d0e5
mov edi, dword [esp + 0x13c]
mov eax, dword [esp + 0x144]
sub eax, edi
cmp eax, 0x1000
lea ebx, [esp + 0x20]
jb 0x42d132
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x42d3b9
add eax, 0x23
mov edi, ecx
push eax
push edi
call fcn.0044fbc2
add esp, 8
xor eax, eax
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x138], 0
test eax, eax
je 0x42d172
push eax
call fcn.0044fc0e
add esp, 4
mov eax, dword [esp + 0x134]
mov dword [esp + 0x134], 0
test eax, eax
je 0x42d191
push eax
call fcn.0044fc0e
add esp, 4
push dword [esp + 0x18]
call fcn.0044fc0e
add esp, 4
jmp 0x42c5f5
push 0x21b
push str.ShowNotification
push str.Timed_out_waiting_for_event_object
call fcn.00429d90
add esp, 0xc
call fcn.00421df0
mov edi, eax
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push dword [esp + 0xc]
push dword [esp + 0x14]
call esi
test al, al
mov edi, dword [esp + 0x14]
jne 0x42d1f8
push 0x239
push str.ShowNotification
push str.Failed_to_hide_notification
call fcn.00429d90
add esp, 0xc
lea ecx, [esp + 0xa0]
call fcn.004269b0
mov ecx, dword [esp + 0x18]
mov eax, ecx
inc eax
cmp eax, 2
jb 0x42d217
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.0044fc0e
add esp, 4
jmp 0x42c0af
push 0x927c0
push dword [0x495068]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x42d285
cmp eax, 0x80
je 0x42d25d
cmp eax, 0x102
jne 0x42d2a0
push 0x21f
push str.ShowNotification
push str.Unable_to_obtain_mutex_ownership
jmp 0x42d1b1
push 0x225
push str.ShowNotification
push str.Found_abandoned_mutex
call fcn.00429d90
add esp, 0xc
push dword [0x495068]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x42d1b9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x222
push str.ShowNotification
push str.Failed_to_wait_on_mutex:__X
jmp 0x42ce3e
cmp byte [0x495650], 0
je 0x42d2c1
mov eax, dword [0x49564c]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 8], eax
movsd xmm0, qword [0x495644]
movsd qword [ecx], xmm0
push dword [0x495068]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x42d1b9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x233
push str.ShowNotification
push str.Unable_to_release_mutex_ownership:__X
jmp 0x42ce3e
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42bdd4
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42c277
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42ca4a
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42cb03
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42cbba
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42cc71
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x42d3b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov esi, dword [esp + 0xc]
jmp 0x42cd37
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3