Function at 0x14002ee00
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
movaps xmmword [rsp + 0x270], xmm6
mov r14, r8
mov ebp, edx
mov rdi, rcx
mov rax, qword [0x1400ac070]
xor rax, rsp
mov qword [rsp + 0x268], rax
mov dword [rcx], edx
movabs rax, 0x700000002
mov qword [rcx + 4], rax
call fcn.140023c80
movq xmm0, qword [0x1400ac428]
movq xmm1, qword [0x1400ac430]
punpcklqdq xmm1, xmm0
movq xmm0, qword [0x1400ac440]
movq xmm2, qword [0x1400ac438]
punpcklqdq xmm2, xmm0
pxor xmm0, xmm0
pcmpeqd xmm2, xmm0
pshufd xmm3, xmm2, 0xb1
pand xmm3, xmm2
pcmpeqd xmm1, xmm0
pshufd xmm0, xmm1, 0xb1
pand xmm0, xmm1
packssdw xmm0, xmm3
movmskps eax, xmm0
test eax, eax
jne 0x14002ef0d
cmp qword [0x1400ac448], 0
je 0x14002ef0d
call fcn.140023b90
mov r8d, 7
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x130], r8
movabs rax, 0x65007200690046
mov qword [rsp + 0x120], rax
movabs rcx, 0x78006f00660065
mov qword [rsp + 0x126], rcx
mov word [rsp + 0x12e], 0
mov rdx, qword [0x1400ac3e8]
cmp rdx, r8
jb 0x14002f18a
cmp rdx, 7
je 0x14002ef32
mov rdx, qword [0x1400ac3d0]
jmp 0x14002ef39
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.System_is_not_compatible_with_WinToast
lea r8, str.ShowNotification
mov r9d, 0x1b2
call fcn.14002c330
jmp 0x14002f40d
lea rdx, [0x1400ac3d0]
mov qword [0x1400ac3e0], 7
mov qword [rdx + 6], rcx
mov qword [rdx], rax
mov word [rdx + 0xe], 0
xor eax, eax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rsi, rax
lea rcx, [rsp + 0x1e8]
cmp rax, 7
ja 0x14002f1a8
mov qword [rcx + 0x10], rsi
mov r8, rsi
add r8, rsi
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rsi*2 + 0x1e8], 0
call fcn.140023b90
mov rsi, qword [rsp + 0x1f8]
cmp qword [rsp + 0x200], 8
jb 0x14002efd5
mov rax, qword [rsp + 0x1e8]
jmp 0x14002efdd
lea rax, [rsp + 0x1e8]
mov rcx, qword [0x1400ac408]
cmp rcx, rsi
jb 0x14002f1b8
cmp rcx, 8
jb 0x14002effc
mov rbx, qword [0x1400ac3f0]
jmp 0x14002f003
lea rbx, [0x1400ac3f0]
mov qword [0x1400ac400], rsi
lea r8, [rsi + rsi]
mov rcx, rbx
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi*2], 0
call fcn.140023b90
mov dword [0x1400ac3cc], 1
lea rsi, [0x1400ac3c0]
call fcn.140023b90
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 8]
lea rdx, [rsp + 0xbc]
mov rcx, rsi
call qword [0x1400b0010]
test al, al
je 0x14002f129
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0xb0], 0
lea rsi, [rsp + 0x120]
mov rcx, rsi
call fcn.1400010c0
mov rsi, qword [rsi]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002f497
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_when_getting_strings
lea r8, str.GetStrings
mov r9d, 0x93
call fcn.14002c330
xor r15d, r15d
test rsi, rsi
je 0x14002f0f1
mov rcx, rsi
call fcn.140055a14
test r15b, r15b
je 0x14002f22d
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rsi, rax
test rax, rax
je 0x14002f160
test ebp, ebp
je 0x14002f1cf
lea r8, str.FollowupNotificationShown
jmp 0x14002f1d6
mov ecx, dword [rsp + 0xbc]
call fcn.140029ed0
cmp qword [rax + 0x18], 8
jb 0x14002f13f
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x1bd
call fcn.14002c330
jmp 0x14002f3bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x1ce
jmp 0x14002f213
lea rcx, [0x1400ac3d0]
lea r8, [rsp + 0x120]
mov edx, 7
call fcn.140059cf0
jmp 0x14002ef51
mov rdx, rsi
mov r8, r14
call fcn.140059cf0
jmp 0x14002efb3
lea rcx, [0x1400ac3f0]
mov rdx, rsi
mov r8, rax
call fcn.140059cf0
jmp 0x14002f01f
lea r8, str.InitialNotificationShown
lea rbx, [rsp + 0x120]
mov rcx, rbx
mov edx, 1
mov r9b, 1
call fcn.140030b80
mov eax, dword [rbx]
test eax, eax
je 0x14002f439
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_set_notification_as_displayed
lea r8, str.ShowNotification
mov r9d, 0x1db
call fcn.14002c330
mov rax, rsi
inc rax
cmp rax, 2
jb 0x14002f22d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x14002f24b
call fcn.140055a14
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], 0
test rcx, rcx
je 0x14002f269
call fcn.140055a14
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], 0
test rcx, rcx
je 0x14002f287
call fcn.140055a14
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], 0
test rcx, rcx
je 0x14002f2a5
call fcn.140055a14
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], 0
test rcx, rcx
je 0x14002f2c3
call fcn.140055a14
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x14002f2e1
call fcn.140055a14
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x80], 0
test rcx, rcx
je 0x14002f2ff
call fcn.140055a14
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], 0
test rcx, rcx
je 0x14002f317
call fcn.140055a14
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x14002f32f
call fcn.140055a14
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
test rcx, rcx
je 0x14002f347
call fcn.140055a14
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
test rcx, rcx
je 0x14002f35f
call fcn.140055a14
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x14002f377
call fcn.140055a14
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
test rcx, rcx
je 0x14002f38f
call fcn.140055a14
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], 0
test rcx, rcx
je 0x14002f3a7
call fcn.140055a14
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], 0
test rcx, rcx
je 0x14002f3bf
call fcn.140055a14
mov rax, qword [rsp + 0x200]
cmp rax, 8
jb 0x14002f40d
mov rcx, qword [rsp + 0x1e8]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f408
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov rcx, qword [rsp + 0x268]
xor rcx, rsp
call fcn.140056980
movaps xmm6, xmmword [rsp + 0x270]
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.1400010c0
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
cmp rax, 0x103
jbe 0x14002f64f
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_get_install_directory_for_the_image_path
lea r8, str.ShowNotification
mov r9d, 0x1e3
call fcn.14002c330
test rbx, rbx
je 0x14002f218
mov rcx, rbx
call fcn.140055a14
jmp 0x14002f218
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea r15, str._sdefaultagent.ini
mov rcx, r15
mov rdx, rsi
call fcn.140058910
cdqe
lea r12, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140055a0c
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov rdx, r12
mov r9, r15
call fcn.140058990
lea r15, [rsp + 0x120]
mov byte [r15 + 0x5c], 0
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15 + 0x20], xmm6
movups xmmword [r15 + 0x30], xmm6
movups xmmword [r15 + 0x40], xmm6
movups xmmword [r15 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea r13, [rax + rax]
add r13, 2
inc rax
mov rax, 0xffffffffffffffff
cmovs r13, rax
mov rcx, r13
call fcn.140055a0c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov qword [r15], r12
mov rcx, r12
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r15 + 8], 0
lea r12, str.DefaultBrowserNotificationTitle
lea r8, [rsp + 0x40]
mov rcx, r15
mov rdx, r12
call fcn.14002ab10
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x68]
call fcn.14002ab10
lea r12, str.DefaultBrowserNotificationText
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x48]
call fcn.14002ab10
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x70]
call fcn.14002ab10
lea r12, str.DefaultBrowserNotificationMakeFirefoxDefault
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x50]
call fcn.14002ab10
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x78]
call fcn.14002ab10
lea r12, str.DefaultBrowserNotificationDontShowAgain
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x58]
call fcn.14002ab10
mov rcx, r15
mov rdx, r12
lea r8, [rsp + 0x80]
call fcn.14002ab10
mov rcx, r15
call fcn.14002aed0
test eax, eax
je 0x14002f99b
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_English_strings:__d
lea r8, str.GetStrings
mov r9d, 0xb1
call fcn.14002c330
xor r15d, r15d
lea rcx, [rsp + 0x120]
call fcn.140030e20
mov rcx, rbx
call fcn.140055a14
jmp 0x14002f0e4
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov r8, qword [rsp + 0xb0]
lea rcx, str._s_s
mov rdx, rbx
call fcn.140058910
cdqe
lea r15, [rax + 1]
lea r13, [rax + rax]
add r13, 2
mov rcx, r13
call fcn.140055a0c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], r12
mov rcx, r12
mov rdx, r15
lea r9, str._s_s
call fcn.140058990
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400ac088], rax
test rax, rax
je 0x14002fb01
mov byte [0x1400ac4c4], 0
mov qword [rsp + 0x38], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x14002f721
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x1ff
call fcn.14002c330
xorps xmm6, xmm6
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
xor r15d, r15d
mov qword [rsp + 0x150], r15
mov qword [rsp + 0x160], r15
mov r12d, 7
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r12
mov word [rsp + 0x170], r15w
mov qword [rsp + 0x190], r15
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], r12
mov word [rsp + 0x190], r15w
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0x1c0], r12
movabs rax, 0x61006600650044
mov qword [rsp + 0x1b0], rax
movabs rax, 0x74006c00750061
mov qword [rsp + 0x1b6], rax
mov word [rsp + 0x1be], r15w
mov qword [rsp + 0x1d0], r15
movabs rax, 0x100000000
mov qword [rsp + 0x1d8], rax
mov dword [rsp + 0x1e0], 0
mov ecx, 0x40
call fcn.1400559d0
mov r13, rax
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r12
movups xmmword [rax + 0x20], xmm6
mov qword [rax + 0x30], r15
mov qword [rax + 0x38], r12
mov r12, qword [rsp + 0x120]
test r12, r12
je 0x14002f8ed
mov r15, qword [rsp + 0x128]
cmp r12, r15
je 0x14002f8b4
mov rax, qword [r12 + 0x18]
cmp rax, 8
jb 0x14002f88a
mov rcx, qword [r12]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002f885
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 7
mov word [r12], 0
add r12, 0x20
cmp r12, r15
jne 0x14002f843
mov r12, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, r12
cmp rdx, 0x1000
jb 0x14002f8e5
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x14003088a
add rdx, 0x27
mov r12, rax
mov rcx, r12
call fcn.140055a14
mov rax, r13
add rax, 0x40
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
mov r12, qword [rsp + 0x90]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x1400302b9
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002fb35
mov rax, qword [rsp + 0x208]
jmp 0x14002fb3d
lea rcx, str._sdefaultagent_localized.ini
mov rdx, rsi
call fcn.140058910
cdqe
lea r13, [rax + 1]
lea r15, [rax + rax]
add r15, 2
mov rcx, r15
call fcn.140055a0c
mov r12, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rsi
mov rcx, r12
mov rdx, r13
lea r9, str._sdefaultagent_localized.ini
mov qword [rsp + 0x30], r12
call fcn.140058990
lea r13, [rsp + 0x208]
mov byte [r13 + 0x5c], 0
xorps xmm6, xmm6
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13 + 0x20], xmm6
movups xmmword [r13 + 0x30], xmm6
movups xmmword [r13 + 0x40], xmm6
movups xmmword [r13 + 0x49], xmm6
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r12, 0xffffffffffffffff
cmovns r12, rcx
mov rcx, r12
call fcn.140055a0c
mov r15, rax
mov rcx, rax
xor edx, edx
mov r8, r12
mov r12, qword [rsp + 0x30]
call sub.VCRUNTIME140.dll_memset
mov qword [r13], r15
mov rcx, r15
mov rdx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov qword [r13 + 8], 0
lea rdx, str.DefaultBrowserNotificationHeaderText
mov rcx, r13
lea r8, [rsp + 0x90]
call fcn.14002ab10
lea rdx, str.DefaultBrowserNotificationBodyText
mov rcx, r13
lea r8, [rsp + 0x98]
call fcn.14002ab10
lea rdx, str.DefaultBrowserNotificationYesButtonText
mov rcx, r13
lea r8, [rsp + 0xa0]
call fcn.14002ab10
lea rdx, str.DefaultBrowserNotificationNoButtonText
mov rcx, r13
lea r8, [rsp + 0xa8]
call fcn.14002ab10
mov rcx, r13
call fcn.14002aed0
test eax, eax
je 0x140030100
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xc8
call fcn.14002c330
xor r15d, r15d
jmp 0x14003022e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_create_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x1f2
call fcn.14002c330
mov r15, qword [rsp + 0x30]
jmp 0x14003086a
lea rax, [rsp + 0x208]
mov rcx, qword [r13 + 0x18]
cmp rcx, r12
jb 0x140030366
mov r15, r13
cmp rcx, 8
jb 0x14002fb57
mov r15, qword [r13]
mov qword [r13 + 0x10], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002fbbf
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fbba
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov r12, qword [rsp + 0x98]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x1400302e2
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
mov rcx, qword [rsp + 0x120]
lea r12, [rcx + 0x20]
lea rax, [rsp + 0x208]
cmp r12, rax
je 0x14002fc91
mov r13, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002fc5e
mov rax, qword [rsp + 0x208]
mov rdx, qword [rcx + 0x38]
cmp rdx, r13
jb 0x140030877
cmp rdx, 8
jb 0x14002fc75
mov r12, qword [rcx + 0x20]
mov qword [rcx + 0x30], r13
mov r8, r13
add r8, r13
mov rcx, r12
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov word [r12 + r13*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002fcdf
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fcda
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov r12, qword [rsp + 0xa0]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x1400302f2
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r15, [rsp + 0x208]
mov rdx, r15
call fcn.14002aa10
mov rax, qword [r15 + 0x18]
cmp rax, 8
jb 0x14002fdac
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fda7
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov r12, qword [rsp + 0xa8]
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030302
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + r15*2 + 0x208], 0
lea rcx, [rsp + 0x120]
lea r13, [rsp + 0x208]
mov rdx, r13
call fcn.14002aa10
mov rax, qword [r13 + 0x18]
cmp rax, 8
mov r12, qword [rsp + 0x30]
jb 0x14002fe7e
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002fe79
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
lea rcx, [rsp + 0x208]
cmp rax, 7
ja 0x140030312
mov qword [rcx + 0x10], r15
mov r8, r15
add r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + r15*2 + 0x208], 0
mov r12, qword [rsp + 0x218]
cmp qword [rsp + 0x220], 8
jb 0x14002fefc
mov r13, qword [rsp + 0x208]
lea r15, [rsp + 0x150]
mov rax, qword [r15 + 0x18]
cmp rax, r12
jb 0x140030322
cmp rax, 8
jb 0x14002ff1f
mov r15, qword [rsp + 0x150]
mov qword [rsp + 0x160], r12
lea r8, [r12 + r12]
mov rcx, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], 0
mov rax, qword [rsp + 0x220]
cmp rax, 8
jb 0x14002ff8b
mov rcx, qword [rsp + 0x208]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002ff86
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
cmp qword [rsp + 0x1c8], 8
jb 0x140030335
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c0], 8
movups xmm0, xmmword [str.Reminder]
movups xmmword [rax], xmm0
mov word [rax + 0x10], 0
mov ecx, 0x38
call fcn.1400559d0
mov r12, rax
lea rax, [0x14006c430]
mov qword [r12], rax
mov dword [r12 + 8], ebp
mov qword [r12 + 0x10], rsi
lea r13, [r12 + 0x18]
xor eax, eax
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x28], rax
mov qword [r12 + 0x30], 7
mov word [r12 + 0x18], 0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r15, rax
cmp rax, 7
ja 0x140030353
mov qword [r12 + 0x28], r15
mov r8, r15
add r8, r15
mov rcx, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov word [r12 + r15*2 + 0x18], 0
call fcn.140023b90
lea rcx, [0x1400ac3c0]
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 0x20]
lea rdx, [rsp + 0x120]
lea r9, [rsp + 0xbc]
mov r8, r12
call qword [0x1400b0010]
test rax, rax
js 0x1400300c4
mov r14, rax
mov rcx, rsi
mov edx, 0x2932e00
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
je 0x140030248
cmp eax, 0xffffffff
jne 0x140030268
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_wait_on_event_object:__X
lea r8, str.ShowNotification
mov r9d, 0x218
jmp 0x14003042e
mov ecx, dword [rsp + 0xbc]
call fcn.140029ed0
cmp qword [rax + 0x18], 8
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jb 0x1400300e4
mov rax, qword [rax]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea r8, str.ShowNotification
mov rdx, rax
mov r9d, 0x211
jmp 0x140030472
lea r12, [rsp + 0xc0]
mov byte [r12 + 0x5c], 0
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12 + 0x20], xmm6
movups xmmword [r12 + 0x30], xmm6
movups xmmword [r12 + 0x40], xmm6
movups xmmword [r12 + 0x49], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rax + rax]
add rcx, 2
inc rax
mov r15, 0xffffffffffffffff
cmovns r15, rcx
mov rcx, r15
call fcn.140055a0c
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
mov qword [r12], r13
mov rcx, r13
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
mov ecx, 0xd
call fcn.140055a0c
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 5], rcx
mov qword [r12 + 8], rax
movabs rcx, 0x64657a696c6163
mov qword [rax + 5], rcx
movabs rcx, 0x6c61636f6c6e6f4e
mov qword [rax], rcx
lea rdx, str.InitialToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x60]
call fcn.14002ab10
lea rdx, str.FollowupToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0x88]
call fcn.14002ab10
lea rdx, str.LocalizedToastRelativeImagePath
mov rcx, r12
lea r8, [rsp + 0xb0]
call fcn.14002ab10
mov rcx, r12
call fcn.14002aed0
test eax, eax
sete r15b
je 0x14003021c
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_read_non_localized_strings:__d
lea r8, str.GetStrings
mov r9d, 0xd7
call fcn.14002c330
lea rcx, [rsp + 0xc0]
call fcn.140030e20
mov r12, qword [rsp + 0x30]
lea rcx, [rsp + 0x208]
call fcn.140030e20
mov rcx, r12
call fcn.140055a14
jmp 0x14002f635
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Timed_out_waiting_for_event_object
lea r8, str.ShowNotification
mov r9d, 0x21a
jmp 0x14003042e
mov rcx, qword [0x1400ac088]
mov edx, 0x927c0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x140030379
cmp eax, 0x80
je 0x1400303a3
cmp eax, 0x102
jne 0x1400303d2
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Unable_to_obtain_mutex_ownership
lea r8, str.ShowNotification
mov r9d, 0x21e
jmp 0x14003042e
mov rdx, r15
mov r8, r12
call fcn.140059cf0
mov r13, qword [rsp + 0x120]
lea rax, [rsp + 0x208]
cmp r13, rax
jne 0x14002f977
jmp 0x14002fb71
mov rdx, r15
mov r8, r12
call fcn.140059cf0
jmp 0x14002fc2a
mov rdx, r15
mov r8, r12
call fcn.140059cf0
jmp 0x14002fd4a
mov rdx, r15
mov r8, r12
call fcn.140059cf0
jmp 0x14002fe17
mov rdx, r15
mov r8, r12
call fcn.140059cf0
jmp 0x14002fee1
mov rcx, r15
mov rdx, r12
mov r8, r13
call fcn.140059cf0
jmp 0x14002ff3d
lea rcx, [rsp + 0x1b0]
lea r8, str.Reminder
mov edx, 8
call fcn.140059cf0
jmp 0x14002ffbe
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.140059cf0
jmp 0x140030036
mov rcx, r13
mov rdx, r12
mov r8, rax
call fcn.140059cf0
jmp 0x14002fb71
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Failed_to_wait_on_mutex:__X
lea r8, str.ShowNotification
mov r9d, 0x221
jmp 0x14003042e
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Found_abandoned_mutex
lea r8, str.ShowNotification
mov r9d, 0x224
call fcn.14002c330
mov rcx, qword [0x1400ac088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x140030433
cmp byte [0x1400ac4c4], 0
je 0x1400303ee
mov eax, dword [0x1400ac4c0]
mov dword [rdi + 8], eax
mov rax, qword [0x1400ac4b8]
mov qword [rdi], rax
mov rcx, qword [0x1400ac088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
jne 0x140030433
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
mov dword [rsp + 0x20], eax
lea rdx, str.Unable_to_release_mutex_ownership:__X
lea r8, str.ShowNotification
mov r9d, 0x232
call fcn.14002c330
call fcn.140023b90
lea rcx, [0x1400ac3c0]
mov rax, qword [0x1400ac3c0]
mov rax, qword [rax + 0x18]
mov rdx, r14
call qword [0x1400b0010]
test al, al
jne 0x140030477
mov rcx, qword [sym.default_browser_agent.exe_gWinEventLogSourceName]
lea rdx, str.Failed_to_hide_notification
lea r8, str.ShowNotification
mov r9d, 0x238
call fcn.14002c330
mov r14, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x128]
cmp r14, rdi
je 0x1400304f8
mov rax, qword [r14 + 0x18]
cmp rax, 8
jb 0x1400304d1
mov rcx, qword [r14]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400304cc
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 7
mov word [r14], 0
add r14, 0x20
cmp r14, rdi
jne 0x14003048c
mov rdi, qword [rsp + 0x120]
mov qword [rsp + 0x128], rdi
mov rax, qword [rsp + 0x1c8]
cmp rax, 8
jb 0x14003054e
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030549
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], 0
mov rax, qword [rsp + 0x1a8]
cmp rax, 8
jb 0x1400305be
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400305b9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], 0
mov rax, qword [rsp + 0x188]
cmp rax, 8
jb 0x14003062e
mov rcx, qword [rsp + 0x170]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030629
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], 0
mov rax, qword [rsp + 0x168]
cmp rax, 8
jb 0x14003069e
mov rcx, qword [rsp + 0x150]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140030699
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], 0
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x140030798
mov r14, qword [rsp + 0x140]
cmp rdi, r14
je 0x140030749
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x140030723
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14003071e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x1400306de
mov rdi, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x148]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x140030779
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14003088a
add rdx, 0x27
mov rdi, rax
lea r14, [rsp + 0x138]
mov rcx, rdi
call fcn.140055a14
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov rdi, qword [rsp + 0x120]
test rdi, rdi
je 0x140030855
mov r14, qword [rsp + 0x128]
cmp rdi, r14
je 0x140030821
mov rax, qword [rdi + 0x18]
cmp rax, 8
jb 0x1400307fb
mov rcx, qword [rdi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400307f6
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003088a
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140055a14
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov word [rdi], 0
add rdi, 0x20
cmp rdi, r14
jne 0x1400307b6
mov rdi, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x14003084d
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x14003088a
add rdx, 0x27
mov rdi, rax
mov rcx, rdi
call fcn.140055a14
mov rax, r12
inc rax
cmp rax, 2
jb 0x14003086a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r15
call fcn.140055a14
jmp 0x14002f481
mov rcx, r12
mov rdx, r13
mov r8, rax
call fcn.140059cf0
jmp 0x14002fc91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3