Function at 0x7d221604
Capabilities:
Accept command line arguments

Disassembly:
jmp 0x7d252d80
sub esp, 0x14
push 0x7d2de450
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [str.Sandbox]
xorps xmm0, xmm0
movq qword [0x7d2de468], xmm0
mov dword [0x7d2de470], 0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x7d252db0
sub ecx, edx
mov edx, dword [0x7d2b730c]
push esi
sar ecx, 1
lea esi, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x7d252dd0
sub edx, esi
sar edx, 1
lea eax, [edx + ecx]
lea esi, [eax*2 + 6]
push esi
call fcn.7d2217b2
push dword [0x7d2b730c]
shr esi, 1
push dword [0x7d2b6310]
mov dword [0x7d2de444], eax
push str._s:_s:
push esi
push eax
call sym.SbieDll.dll_Sbie_snwprintf
mov ecx, dword [0x7d2de444]
add esp, 0x14
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x7d252e20
sub ecx, edx
sar ecx, 1
push ebx
mov dword [0x7d2de44c], ecx
lea esi, [ecx + 1]
push esi
call fcn.7d2217b2
mov ecx, dword [0x7d2de444]
mov edx, eax
mov dword [0x7d2de448], edx
lea ebx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x7d252e50
push 0
push 0
push esi
push edx
sub ecx, ebx
sar ecx, 1
push ecx
push dword [0x7d2de444]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [0x7d2de448]
pop ebx
mov byte [eax + esi - 1], 0
mov eax, dword [0x7d2b7348]
and eax, 0x2000
or eax, 0
je 0x7d252ea7
mov byte [0x7d2de440], 1
mov byte [0x7d2b6304], 0
mov al, 1
pop esi
add esp, 0x14
ret 4
xor esi, esi
nop dword [eax]
push 0x10
lea eax, [esp + 8]
push eax
mov eax, esi
or eax, 0x20000000
push eax
push str.OpenWinClass
push 0
call sym.SbieDll.dll_SbieApi_QueryConf
inc esi
test eax, eax
jne 0x7d252ef2
mov ax, word [esp + 4]
cmp ax, 0x2a
je 0x7d252ee1
cmp ax, 0x23
jne 0x7d252eb0
cmp word [esp + 6], 0
jne 0x7d252eb0
xor al, al
mov byte [0x7d2b6304], al
jmp 0x7d252f3e
cmp eax, 0xc0000023
je 0x7d252eb0
mov al, byte [0x7d2b6304]
test al, al
je 0x7d252f3e
push 0
push 0x7d2de468
push str.NoRenameWinClass
push 0
call fcn.7d221870
mov esi, dword [0x7d2de468]
test esi, esi
je 0x7d252f39
nop
push esi
call fcn.7d221479
cmp word [eax], 0x2a
jne 0x7d252f33
cmp word [eax + 2], 0
je 0x7d252ee9
mov esi, dword [esi]
test esi, esi
jne 0x7d252f20
mov al, byte [0x7d2b6304]
cmp byte [0x7d2de440], 0
jne 0x7d252f95
test al, al
jne 0x7d252f99
cmp dword [0x7d2b7358], 0x16
jne 0x7d252fe7
push str.maxthon.exe
push dword [0x7d2b7310]
call sub.ntdll.dll__wcsicmp
add esp, 8
test eax, eax
jne 0x7d252f90
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push str._Run
push eax
call sub.ntdll.dll_wcsstr
add esp, 8
test eax, eax
je 0x7d252f90
mov byte [0x7d2b6304], 1
jmp 0x7d252f99
mov al, byte [0x7d2b6304]
test al, al
je 0x7d252fda
cmp dword [0x7d2b7358], 0x16
jne 0x7d252fda
push str.vivaldi.exe
push dword [0x7d2b7310]
call sub.ntdll.dll__wcsicmp
add esp, 8
test eax, eax
jne 0x7d252fda
push 1
push str.UseVivaldiWorkaround
push eax
call sym.SbieDll.dll_SbieApi_QueryConfBool
movzx ecx, byte [0x7d2b6304]
xor edx, edx
test al, al
cmovne ecx, edx
mov byte [0x7d2b6304], cl
cmp byte [0x7d2de440], 0
jne 0x7d252e9e
mov esi, dword [esp + 0x1c]
push esi
push 0x7d252a50
push dword [0x7d2de2c0]
push str.GetClassNameA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2c0], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d252b90
push dword [0x7d2de2c4]
push str.GetClassNameW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2c4], eax
test eax, eax
je 0x7d253190
cmp byte [0x7d2b6304], 0
je 0x7d252e9e
push esi
push 0x7d252780
push dword [0x7d2de2b0]
push str.GetClassInfoA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2b0], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d252900
push dword [0x7d2de2b4]
push str.GetClassInfoW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2b4], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d252800
push dword [0x7d2de2b8]
push str.GetClassInfoExA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2b8], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d252880
push dword [0x7d2de2bc]
push str.GetClassInfoExW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2bc], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d253690
push dword [0x7d2de298]
push str.RegisterClassA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de298], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d2539c0
push dword [0x7d2de29c]
push str.RegisterClassW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de29c], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d2537a0
push dword [0x7d2de2a0]
push str.RegisterClassExA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2a0], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d2538b0
push dword [0x7d2de2a4]
push str.RegisterClassExW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2a4], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d253b10
push dword [0x7d2de2a8]
push str.UnregisterClassA
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2a8], eax
test eax, eax
je 0x7d253190
push esi
push 0x7d253b70
push dword [0x7d2de2ac]
push str.UnregisterClassW
call sym.SbieDll.dll_SbieDll_Hook
mov dword [0x7d2de2ac], eax
test eax, eax
jne 0x7d252e9e
xor al, al
pop esi
add esp, 0x14
ret 4