Function at 0x14002e2a0
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
movaps xmmword [rsp + 0x270], xmm6
mov r14, r8
mov ebp, edx
mov rdi, rcx
mov rax, qword [0x1400ab070]
xor rax, rsp
mov qword [rsp + 0x268], rax
mov dword [rcx], edx
movabs rax, 0x700000002
mov qword [rcx + 4], rax
call fcn.140023120
movq xmm0, qword [0x1400ab428]
movq xmm1, qword [0x1400ab430]
punpcklqdq xmm1, xmm0
movq xmm0, qword [0x1400ab440]
movq xmm2, qword [0x1400ab438]
punpcklqdq xmm2, xmm0
pxor xmm0, xmm0
pcmpeqd xmm2, xmm0
pshufd xmm3, xmm2, 0xb1
pand xmm3, xmm2
pcmpeqd xmm1, xmm0
pshufd xmm0, xmm1, 0xb1
pand xmm0, xmm1
packssdw xmm0, xmm3
movmskps eax, xmm0
test eax, eax
jne 0x14002e3ad
cmp qword [0x1400ab448], 0
je 0x14002e3ad
call fcn.140023030
mov r8d, 7
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x130], r8
movabs rax, 0x65007200690046
mov qword [rsp + 0x120], rax
movabs rcx, 0x78006f00660065
mov qword [rsp + 0x126], rcx
mov word [rsp + 0x12e], 0
mov rdx, qword [0x1400ab3e8]
cmp rdx, r8
jb 0x14002e62a
cmp rdx, 7
je 0x14002e3d2
mov rdx, qword [0x1400ab3d0]
jmp 0x14002e3d9
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.System_is_not_compatible_with_WinToast
lea r8, str.ShowNotification
mov r9d, 0x1b2
call fcn.14002b7d0
jmp 0x14002e8ad
lea rdx, [0x1400ab3d0]
mov qword [0x1400ab3e0], 7
mov qword [rdx + 6], rcx
mov qword [rdx], rax
mov word [rdx + 0xe], 0
xor eax, eax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rsi, rax
lea rcx, [rsp + 0x1e8]
cmp rax, 7
ja 0x14002e648
mov qword [rcx + 0x10], rsi
mov r8, rsi
add r8, rsi
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rsi*2 + 0x1e8], 0
call fcn.140023030
mov rsi, qword [rsp + 0x1f8]
cmp qword [rsp + 0x200], 8
jb 0x14002e475
mov rax, qword [rsp + 0x1e8]
jmp 0x14002e47d
lea rax, [rsp + 0x1e8]
mov rcx, qword [0x1400ab408]
cmp rcx, rsi
jb 0x14002e658
cmp rcx, 8
jb 0x14002e49c
mov rbx, qword [0x1400ab3f0]
jmp 0x14002e4a3
lea rbx, [0x1400ab3f0]
mov qword [0x1400ab400], rsi
lea r8, [rsi + rsi]
mov rcx, rbx
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi*2], 0
call fcn.140023030
mov dword [0x1400ab3cc], 1
lea rsi, [0x1400ab3c0]
call fcn.140023030
mov rax, qword [0x1400ab3c0]
mov rax, qword [rax + 8]
lea rdx, [rsp + 0xbc]
mov rcx, rsi
call qword [0x1400af010]
test al, al
je 0x14002e5c9
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0xb0], 0
lea rsi, [rsp + 0x120]
mov rcx, rsi
call fcn.140001100
mov rsi, qword [rsi]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002e937
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_when_getting_strings
lea r8, str.GetStrings
mov r9d, 0x93
call fcn.14002b7d0
xor r15d, r15d
test rsi, rsi
je 0x14002e591
mov rcx, rsi
call fcn.140054b24
test r15b, r15b
je 0x14002e6cd
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rsi, rax
test rax, rax
je 0x14002e600
test ebp, ebp
je 0x14002e66f
lea r8, str.FollowupNotificationShown
jmp 0x14002e676
mov ecx, dword [rsp + 0xbc]
call fcn.140029370
cmp qword [rax + 0x18], 8
jb 0x14002e5df
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x1bd
call fcn.14002b7d0
jmp 0x14002e85f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x1ce
jmp 0x14002e6b3
lea rcx, [0x1400ab3d0]
lea r8, [rsp + 0x120]
mov edx, 7
call fcn.140058e00
jmp 0x14002e3f1
mov rdx, rsi
mov r8, r14
call fcn.140058e00
jmp 0x14002e453
lea rcx, [0x1400ab3f0]
mov rdx, rsi
mov r8, rax
call fcn.140058e00
jmp 0x14002e4bf
lea r8, str.InitialNotificationShown
lea rbx, [rsp + 0x120]
mov rcx, rbx
mov edx, 1
mov r9b, 1
call fcn.140030020
mov eax, dword [rbx]
test eax, eax
je 0x14002e8d9
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_set_notification_as_displayed
lea r8, str.ShowNotification
mov r9d, 0x1db
call fcn.14002b7d0
mov rax, rsi
inc rax
cmp rax, 2
jb 0x14002e6cd
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x14002e6eb
call fcn.140054b24
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], 0
test rcx, rcx
je 0x14002e709
call fcn.140054b24
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], 0
test rcx, rcx
je 0x14002e727
call fcn.140054b24
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], 0
test rcx, rcx
je 0x14002e745
call fcn.140054b24
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], 0
test rcx, rcx
je 0x14002e763
call fcn.140054b24
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x14002e781
call fcn.140054b24
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x80], 0
test rcx, rcx
je 0x14002e79f
call fcn.140054b24
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], 0
test rcx, rcx
je 0x14002e7b7
call fcn.140054b24
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x14002e7cf
call fcn.140054b24
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
test rcx, rcx
je 0x14002e7e7
call fcn.140054b24
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
test rcx, rcx
je 0x14002e7ff
call fcn.140054b24
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x14002e817
call fcn.140054b24
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x14002e82f
call fcn.140054b24
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], 0
test rcx, rcx
je 0x14002e847
call fcn.140054b24
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], 0
test rcx, rcx
je 0x14002e85f
call fcn.140054b24
mov rax, qword [rsp + 0x200]
cmp rax, 8
jb 0x14002e8ad
mov rcx, qword [rsp + 0x1e8]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002e8a8
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov rcx, qword [rsp + 0x268]
xor rcx, rsp
call fcn.140055a90
movaps xmm6, xmmword [rsp + 0x270]
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.140001100
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002eaef
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_for_the_image_path
lea r8, str.ShowNotification
mov r9d, 0x1e3
call fcn.14002b7d0
test rbx, rbx
je 0x14002e6b8
mov rcx, rbx
call fcn.140054b24
jmp 0x14002e6b8
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r15, str._sdefaultagent.ini
mov rcx, r15
mov rdx, rsi
call fcn.140057a20
cdqe
lea r12, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140054b1c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov rdx, r12
mov r9, r15
call fcn.140057aa0
lea r15, [rsp + 0x120]
mov byte [r15 + 0x5c], 0
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15 + 0x20], xmm6
movups xmmword [r15 + 0x30], xmm6
movups xmmword [r15 + 0x40], xmm6
movups xmmword [r15 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea r13, [rax + rax]
add r13, 2
inc rax
mov rax, 0xffffffffffffffff
cmovs r13, rax
mov rcx, r13
call fcn.140054b1c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [r15], r12
mov rcx, r12
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r15 + 8], 0
lea r12, str.DefaultBrowserNotificationTitle
lea r8, [rsp + 0x40]
mov rcx, r15
mov rdx, r12
call fcn.140029fb0
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x68]
call fcn.140029fb0
lea r12, str.DefaultBrowserNotificationText
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x48]
call fcn.140029fb0
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x70]
call fcn.140029fb0
lea r12, str.DefaultBrowserNotificationMakeFirefoxDefault
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x50]
call fcn.140029fb0
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x78]
call fcn.140029fb0
lea r12, str.DefaultBrowserNotificationDontShowAgain
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x58]
call fcn.140029fb0
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x80]
call fcn.140029fb0
mov rcx, r15
call fcn.14002a370
test eax, eax
je 0x14002ee3b
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_English_strings:__d
lea r8, str.GetStrings
mov r9d, 0xb1
call fcn.14002b7d0
xor r15d, r15d
lea rcx, [rsp + 0x120]
call fcn.1400302c0
mov rcx, rbx
call fcn.140054b24
jmp 0x14002e584
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov r8, qword [rsp + 0xb0]
lea rcx, str._s_s
mov rdx, rbx
call fcn.140057a20
cdqe
lea r15, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140054b1c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], r12
mov rcx, r12
mov rdx, r15
lea r9, str._s_s
call fcn.140057aa0
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400ab088], rax
test rax, rax
je 0x14002efa1
mov byte [0x1400ab4c4], 0
mov qword [rsp + 0x38], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x14002ebc1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x1ff
call fcn.14002b7d0
xorps xmm6, xmm6
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
xor r15d, r15d
mov qword [rsp + 0x150], r15
mov qword [rsp + 0x160], r15
mov r12d, 7
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r12
mov word [rsp + 0x170], r15w
mov qword [rsp + 0x190], r15
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], r12
mov word [rsp + 0x190], r15w
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0x1c0], r12
movabs rax, 0x61006600650044
mov qword [rsp + 0x1b0], rax
movabs rax, 0x74006c00750061
mov qword [rsp + 0x1b6], rax
mov word [rsp + 0x1be], r15w
mov qword [rsp + 0x1d0], r15
movabs rax, 0x100000000
mov qword [rsp + 0x1d8], rax
mov dword [rsp + 0x1e0], 0
mov ecx, 0x40
call fcn.140054ae0
mov r13, rax
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r12
movups xmmword [rax + 0x20], xmm6
mov qword [rax + 0x30], r15
mov qword [rax + 0x38], r12
mov r12, qword [rsp + 0x120]
test r12, r12
je 0x14002ed8d
mov r15, qword [rsp + 0x128]
cmp r12, r15
je 0x14002ed54
mov rax, qword [r12 + 0x18]
cmp rax, 8
jb 0x14002ed2a
mov rcx, qword [r12]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002ed25
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 7
mov word [r12], 0
add r12, 0x20
cmp r12, r15
jne 0x14002ece3
mov r12, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, r12
cmp rdx, 0x1000
jb 0x14002ed85
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x14002fd2a
add rdx, 0x27
mov r12, rax
mov rcx, r12
call fcn.140054b24
mov rax, r13
add rax, 0x40
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
mov r12, qword [rsp + 0x90]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x14002f759
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002efd5
mov rax, qword [rsp + 0x208]
jmp 0x14002efdd
lea rcx, str._sdefaultagent_localized.ini
mov rdx, rsi
call fcn.140057a20
cdqe
lea r13, [rax + 1]
lea r15, [rax + rax]
add r15, 2
mov rcx, r15
call fcn.140054b1c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, r12
mov rdx, r13
lea r9, str._sdefaultagent_localized.ini
mov qword [rsp + 0x30], r12
call fcn.140057aa0
lea r13, [rsp + 0x208]
mov byte [r13 + 0x5c], 0
xorps xmm6, xmm6
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13 + 0x20], xmm6
movups xmmword [r13 + 0x30], xmm6
movups xmmword [r13 + 0x40], xmm6
movups xmmword [r13 + 0x49], xmm6
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r12, 0xffffffffffffffff
cmovns r12, rcx
mov rcx, r12
call fcn.140054b1c
mov r15, rax
mov rcx, rax
xor edx, edx
mov r8, r12
mov r12, qword [rsp + 0x30]
call sub.VCRUNTIME140.dll_memset
mov qword [r13], r15
mov rcx, r15
mov rdx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r13 + 8], 0
lea rdx, str.DefaultBrowserNotificationHeaderText
mov rcx, r13
lea r8, [rsp + 0x90]
call fcn.140029fb0
lea rdx, str.DefaultBrowserNotificationBodyText
mov rcx, r13
lea r8, [rsp + 0x98]
call fcn.140029fb0
lea rdx, str.DefaultBrowserNotificationYesButtonText
mov rcx, r13
lea r8, [rsp + 0xa0]
call fcn.140029fb0
lea rdx, str.DefaultBrowserNotificationNoButtonText
mov rcx, r13
lea r8, [rsp + 0xa8]
call fcn.140029fb0
mov rcx, r13
call fcn.14002a370
test eax, eax
je 0x14002f5a0
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xc8
call fcn.14002b7d0
xor r15d, r15d
jmp 0x14002f6ce
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x1f2
call fcn.14002b7d0
mov r15, qword [rsp + 0x30]
jmp 0x14002fd0a
lea rax, [rsp + 0x208]
mov rcx, qword [r13 + 0x18]
cmp rcx, r12
jb 0x14002f806
mov r15, r13
cmp rcx, 8
jb 0x14002eff7
mov r15, qword [r13]
mov qword [r13 + 0x10], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002f05f
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f05a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov r12, qword [rsp + 0x98]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x14002f782
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov rcx, qword [rsp + 0x120]
lea r12, [rcx + 0x20]
lea rax, [rsp + 0x208]
cmp r12, rax
je 0x14002f131
mov r13, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002f0fe
mov rax, qword [rsp + 0x208]
mov rdx, qword [rcx + 0x38]
cmp rdx, r13
jb 0x14002fd17
cmp rdx, 8
jb 0x14002f115
mov r12, qword [rcx + 0x20]
mov qword [rcx + 0x30], r13
mov r8, r13
add r8, r13
mov rcx, r12
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r12 + r13*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002f17f
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f17a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov r12, qword [rsp + 0xa0]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x14002f792
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r15, [rsp + 0x208]
mov rdx, r15
call fcn.140029eb0
mov rax, qword [r15 + 0x18]
cmp rax, 8
jb 0x14002f24c
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f247
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov r12, qword [rsp + 0xa8]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x14002f7a2
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r13, [rsp + 0x208]
mov rdx, r13
call fcn.140029eb0
mov rax, qword [r13 + 0x18]
cmp rax, 8
mov r12, qword [rsp + 0x30]
jb 0x14002f31e
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f319
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x14002f7b2
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002f39c
mov r13, qword [rsp + 0x208]
lea r15, [rsp + 0x150]
mov rax, qword [r15 + 0x18]
cmp rax, r12
jb 0x14002f7c2
cmp rax, 8
jb 0x14002f3bf
mov r15, qword [rsp + 0x150]
mov qword [rsp + 0x160], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002f42b
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f426
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
cmp qword [rsp + 0x1c8], 8
jb 0x14002f7d5
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c0], 8
movups xmm0, xmmword [str.Reminder]
movups xmmword [rax], xmm0
mov word [rax + 0x10], 0
mov ecx, 0x38
call fcn.140054ae0
mov r12, rax
lea rax, [0x14006b3e0]
mov qword [r12], rax
mov dword [r12 + 8], ebp
mov qword [r12 + 0x10], rsi
lea r13, [r12 + 0x18]
xor eax, eax
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x28], rax
mov qword [r12 + 0x30], 7
mov word [r12 + 0x18], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
cmp rax, 7
ja 0x14002f7f3
mov qword [r12 + 0x28], r15
mov r8, r15
add r8, r15
mov rcx, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [r12 + r15*2 + 0x18], 0
call fcn.140023030
lea rcx, [0x1400ab3c0]
mov rax, qword [0x1400ab3c0]
mov rax, qword [rax + 0x20]
lea rdx, [rsp + 0x120]
lea r9, [rsp + 0xbc]
mov r8, r12
call qword [0x1400af010]
test rax, rax
js 0x14002f564
mov r14, rax
mov rcx, rsi
mov edx, 0x2932e00
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
je 0x14002f6e8
cmp eax, 0xffffffff
jne 0x14002f708
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_wait_on_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x218
jmp 0x14002f8ce
mov ecx, dword [rsp + 0xbc]
call fcn.140029370
cmp qword [rax + 0x18], 8
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jb 0x14002f584
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x211
jmp 0x14002f912
lea r12, [rsp + 0xc0]
mov byte [r12 + 0x5c], 0
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12 + 0x20], xmm6
movups xmmword [r12 + 0x30], xmm6
movups xmmword [r12 + 0x40], xmm6
movups xmmword [r12 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r15, 0xffffffffffffffff
cmovns r15, rcx
mov rcx, r15
call fcn.140054b1c
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [r12], r13
mov rcx, r13
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov ecx, 0xd
call fcn.140054b1c
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 5], rcx
mov qword [r12 + 8], rax
movabs rcx, 0x64657a696c6163
mov qword [rax + 5], rcx
movabs rcx, 0x6c61636f6c6e6f4e
mov qword [rax], rcx
lea rdx, str.InitialToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x60]
call fcn.140029fb0
lea rdx, str.FollowupToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x88]
call fcn.140029fb0
lea rdx, str.LocalizedToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0xb0]
call fcn.140029fb0
mov rcx, r12
call fcn.14002a370
test eax, eax
sete r15b
je 0x14002f6bc
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_non_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xd7
call fcn.14002b7d0
lea rcx, [rsp + 0xc0]
call fcn.1400302c0
mov r12, qword [rsp + 0x30]
lea rcx, [rsp + 0x208]
call fcn.1400302c0
mov rcx, r12
call fcn.140054b24
jmp 0x14002ead5
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Timed_out_waiting_for_event_object
lea r8, str.ShowNotification
mov r9d, 0x21a
jmp 0x14002f8ce
mov rcx, qword [0x1400ab088]
mov edx, 0x927c0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x14002f819
cmp eax, 0x80
je 0x14002f843
cmp eax, 0x102
jne 0x14002f872
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_obtain_mutex_ownership
lea r8, str.ShowNotification
mov r9d, 0x21e
jmp 0x14002f8ce
mov rdx, r15
mov r8, r12
call fcn.140058e00
mov r13, qword [rsp + 0x120]
lea rax, [rsp + 0x208]
cmp r13, rax
jne 0x14002ee17
jmp 0x14002f011
mov rdx, r15
mov r8, r12
call fcn.140058e00
jmp 0x14002f0ca
mov rdx, r15
mov r8, r12
call fcn.140058e00
jmp 0x14002f1ea
mov rdx, r15
mov r8, r12
call fcn.140058e00
jmp 0x14002f2b7
mov rdx, r15
mov r8, r12
call fcn.140058e00
jmp 0x14002f381
mov rcx, r15
mov rdx, r12
mov r8, r13
call fcn.140058e00
jmp 0x14002f3dd
lea rcx, [rsp + 0x1b0]
lea r8, str.Reminder
mov edx, 8
call fcn.140058e00
jmp 0x14002f45e
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.140058e00
jmp 0x14002f4d6
mov rcx, r13
mov rdx, r12
mov r8, rax
call fcn.140058e00
jmp 0x14002f011
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Failed_to_wait_on_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x221
jmp 0x14002f8ce
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Found_abandoned_mutex
lea r8, str.ShowNotification
mov r9d, 0x224
call fcn.14002b7d0
mov rcx, qword [0x1400ab088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x14002f8d3
cmp byte [0x1400ab4c4], 0
je 0x14002f88e
mov eax, dword [0x1400ab4c0]
mov dword [rdi + 8], eax
mov rax, qword [0x1400ab4b8]
mov qword [rdi], rax
mov rcx, qword [0x1400ab088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jne 0x14002f8d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x232
call fcn.14002b7d0
call fcn.140023030
lea rcx, [0x1400ab3c0]
mov rax, qword [0x1400ab3c0]
mov rax, qword [rax + 0x18]
mov rdx, r14
call qword [0x1400af010]
test al, al
jne 0x14002f917
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_hide_notification
lea r8, str.ShowNotification
mov r9d, 0x238
call fcn.14002b7d0
mov r14, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x128]
cmp r14, rdi
je 0x14002f998
mov rax, qword [r14 + 0x18]
cmp rax, 8
jb 0x14002f971
mov rcx, qword [r14]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f96c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 7
mov word [r14], 0
add r14, 0x20
cmp r14, rdi
jne 0x14002f92c
mov rdi, qword [rsp + 0x120]
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1c8]
cmp rax, 8
jb 0x14002f9ee
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f9e9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], 0
mov rax, qword [rsp + 0x1a8]
cmp rax, 8
jb 0x14002fa5e
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fa59
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], 0
mov rax, qword [rsp + 0x188]
cmp rax, 8
jb 0x14002face
mov rcx, qword [rsp + 0x170]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fac9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], 0
mov rax, qword [rsp + 0x168]
cmp rax, 8
jb 0x14002fb3e
mov rcx, qword [rsp + 0x150]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fb39
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], 0
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x14002fc38
mov r14, qword [rsp + 0x140]
cmp rdi, r14
je 0x14002fbe9
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x14002fbc3
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fbbe
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x14002fb7e
mov rdi, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x148]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x14002fc19
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14002fd2a
add rdx, 0x27
mov rdi, rax
lea r14, [rsp + 0x138]
mov rcx, rdi
call fcn.140054b24
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov rdi, qword [rsp + 0x120]
test rdi, rdi
je 0x14002fcf5
mov r14, qword [rsp + 0x128]
cmp rdi, r14
je 0x14002fcc1
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x14002fc9b
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fc96
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002fd2a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140054b24
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x14002fc56
mov rdi, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x14002fced
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14002fd2a
add rdx, 0x27
mov rdi, rax
mov rcx, rdi
call fcn.140054b24
mov rax, r12
inc rax
cmp rax, 2
jb 0x14002fd0a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r15
call fcn.140054b24
jmp 0x14002e921
mov rcx, r12
mov rdx, r13
mov r8, rax
call fcn.140058e00
jmp 0x14002f131
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3