Function at 0x4393e0
Capabilities:
Check mutex on windows
Create process on windows
Create process suspended
Enumerate process modules
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x44a746
push eax
mov eax, dword [0x45826c]
mov dword fs:[0], esp
sub esp, 0x520
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
push edi
jne 0x43940f
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [esp + 0x6c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x7c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ebp, dword [sym.imp.MSVCRT.dll_wcslen]
push 0x457dd4
call ebp
add esp, 4
lea ecx, [esp + 0x78]
push eax
push 0x457dd4
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x9c]
mov dword [esp + 0x538], ebx
rep stosd dword es:[edi], eax
mov cl, byte [esp + 0x13]
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x28], cl
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x58], ebx
mov byte [esp + 0x54], dl
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov eax, dword [0x457ed4]
mov byte [esp + 0x538], 2
cmp eax, 1
mov dword [esp + 0x70], ebx
jne 0x439568
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.Maxthon2_Frame
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.Maxthon2_Frame
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 3
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MaxthonCls_CrashReport
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.MaxthonCls_CrashReport
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 4
call fcn.00419fa0
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x18]
jmp 0x4398ae
cmp eax, 2
jne 0x439628
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.SkyFile_MainWindow
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.SkyFile_MainWindow
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 5
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MaxthonCls_CrashReport
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.MaxthonCls_CrashReport
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 6
call fcn.00419fa0
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x18]
jmp 0x4398ae
cmp eax, 3
jne 0x4396e8
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.SkyFile_MainWindow
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.SkyFile_MainWindow
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 7
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MaxthonCls_CrashReport
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.MaxthonCls_CrashReport
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 8
call fcn.00419fa0
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x18]
jmp 0x4398ae
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MxLite30_MainFrm
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.MxLite30_MainFrm
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 9
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.Maxthon3Cls_MainFrm
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.Maxthon3Cls_MainFrm
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 0xa
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MaxthonCls_CrashReport
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.MaxthonCls_CrashReport
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 0xb
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.Mx3_DownloadMgrWnd
call ebp
add esp, 4
push eax
push str.Mx3_DownloadMgrWnd
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 0xc
call fcn.00419fa0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.Maxthon3Cls_Download
call ebp
add esp, 4
lea ecx, [esp + 0x14]
push eax
push str.Maxthon3Cls_Download
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x540], 0xd
call fcn.00419fa0
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x18]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [esp + 0x2c]
cmp eax, ebx
jne 0x4398c0
xor edi, edi
jmp 0x4398c9
mov edi, dword [esp + 0x30]
sub edi, eax
sar edi, 4
cmp esi, 0xb7
mov dword [esp + 0x74], edi
je 0x4398e4
cmp esi, 5
je 0x4398e4
cmp dword [esp + 0x6c], ebx
jne 0x439ecd
cmp edi, ebx
mov dword [esp + 0x4c], ebx
jle 0x439c3d
lea ecx, [esp + 0xc4]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x50], ecx
jmp 0x439905
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x68]
mov eax, dword [eax + edx + 4]
cmp eax, ebx
jne 0x439916
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push ebx
push eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
mov eax, dword [esp + 0x50]
push esi
mov dword [eax], esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x439b91
lea ecx, [esp + 0x98]
mov dword [esp + 0x98], ebx
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0x98]
push edx
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, ebx
mov dword [esp + 0x24], eax
je 0x439d53
lea ecx, [esp + 0x48]
lea edx, [esp + 0x64]
push ecx
push 4
push edx
push eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x58], ebx
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x439df3
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x32a]
mov word [esp + 0x328], bx
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x24]
stosw word es:[edi], ax
lea eax, [esp + 0x328]
push 0x104
push eax
push ecx
push edx
call sub.PSAPI.DLL_GetModuleFileNameExW
mov eax, dword [esp + 0x68]
cmp eax, ebx
je 0x4399d4
cmp eax, 0x10
jne 0x439aa9
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
lea ecx, [esp + 0x328]
push ecx
call ebp
add esp, 4
lea edx, [esp + 0x328]
lea ecx, [esp + 0x38]
push eax
push edx
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
push 0x4553bc
mov byte [esp + 0x53c], 0xe
mov esi, dword [eax]
call ebp
add esp, 4
lea ecx, [esp + 0x38]
push eax
push esi
push 0x4553bc
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::find_last_of_unsigned_short_int_const___unsigned_int__unsigned_int_const]
push eax
lea ecx, [esp + 0xb8]
push ebx
push ecx
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov byte [esp + 0x538], 0xf
mov ecx, dword [edx]
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0x53c], 0xe
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
lea ecx, [esp + 0x38]
mov eax, dword [edx]
push eax
push ebx
push ecx
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0x53c], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x122]
mov word [esp + 0x120], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x45825c]
cmp eax, ebx
jne 0x439ad1
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x328]
push eax
push edx
lea eax, [esp + 0x128]
push str._s__s
push eax
call dword [sym.imp.MSVCRT.dll_swprintf]
mov cl, byte [esp + 0x23]
add esp, 0x10
mov byte [esp + 0x88], cl
lea ecx, [esp + 0x88]
push ebx
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
lea edx, [esp + 0x120]
push edx
call ebp
add esp, 4
mov esi, eax
lea ecx, [esp + 0x88]
push 1
push esi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x439b53
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x120]
push esi
push eax
push ecx
call fcn.00401270
add esp, 0xc
lea ecx, [esp + 0x88]
push esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x88]
push edx
push 1
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x544], 0x10
call fcn.004151d0
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x8c]
jmp 0x439c0a
mov dl, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.invalid
call ebp
add esp, 4
mov esi, eax
lea ecx, [esp + 0x14]
push 1
push esi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x439bdf
mov eax, dword [esp + 0x18]
push esi
push str.invalid
push eax
call fcn.00401270
add esp, 0xc
lea ecx, [esp + 0x14]
push esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
mov edx, dword [esp + 0x5c]
lea ecx, [esp + 0x14]
push ecx
push 1
push edx
lea ecx, [esp + 0x60]
mov byte [esp + 0x544], 0x11
call fcn.004151d0
mov byte [esp + 0x538], 2
push 1
lea ecx, [esp + 0x18]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [esp + 0x4c]
mov esi, dword [esp + 0x68]
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x74]
inc eax
add esi, 0x10
add edx, 4
cmp eax, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x50], edx
jl 0x439901
mov edi, ecx
xor esi, esi
cmp edi, ebx
mov dword [esp + 0x4c], esi
jle 0x439ecd
mov dword [esp + 0x50], ebx
mov edx, dword [esp + esi*4 + 0xc4]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x439eb5
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
push ebx
mov dl, byte [eax + ecx]
lea esi, [eax + ecx]
lea ecx, [esp + 0x8c]
mov byte [esp + 0x8c], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov ecx, dword [eax]
push ecx
push ebx
push esi
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov esi, dword [esp + 0x8c]
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x120]
cmp esi, ebx
rep stosd dword es:[edi], eax
jne 0x439cc0
mov esi, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov edx, dword [esp + 0x90]
lea edi, [esp + 0x120]
lea ecx, [edx + edx]
lea edx, [esp + 0x14]
mov eax, ecx
push edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x11
lea edi, [esp + 0xe0]
rep stosd dword es:[edi], eax
xor ecx, ecx
lea eax, [esp + 0xe0]
mov dword [esp + 0x18], ecx
push eax
mov dword [esp + 0x20], ecx
push ebx
mov dword [esp + 0x28], ecx
push ebx
push ebx
mov dword [esp + 0x34], ecx
push ebx
push ebx
lea ecx, [esp + 0x13c]
push ebx
push ecx
push ebx
mov dword [esp + 0x104], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x439e93
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x9c], edx
mov eax, dword [esp + 0x70]
inc eax
mov dword [esp + 0x70], eax
jmp 0x439e9e
mov eax, dword [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
cmp esi, edi
mov byte [esp + 0x538], 1
je 0x439d85
push ebx
mov ecx, esi
call fcn.00415830
add esi, 0x10
cmp esi, edi
jne 0x439d72
mov esi, dword [esp + 0x58]
push esi
call fcn.0043c8a0
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
add esp, 4
cmp esi, edi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov byte [esp + 0x538], bl
je 0x439dc0
push ebx
mov ecx, esi
call fcn.00415830
add esi, 0x10
cmp esi, edi
jne 0x439dad
mov esi, dword [esp + 0x2c]
push esi
call fcn.0043c8a0
add esp, 4
lea ecx, [esp + 0x78]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push 1
mov dword [esp + 0x38], ebx
mov dword [esp + 0x53c], 0xffffffff
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
xor eax, eax
jmp 0x43a5ae
mov ecx, dword [esp + 0x6c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
cmp esi, edi
mov byte [esp + 0x538], 1
je 0x439e25
push ebx
mov ecx, esi
call fcn.00415830
add esi, 0x10
cmp esi, edi
jne 0x439e12
mov esi, dword [esp + 0x58]
push esi
call fcn.0043c8a0
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
add esp, 4
cmp esi, edi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov byte [esp + 0x538], bl
je 0x439e60
push ebx
mov ecx, esi
call fcn.00415830
add esi, 0x10
cmp esi, edi
jne 0x439e4d
mov esi, dword [esp + 0x2c]
push esi
call fcn.0043c8a0
add esp, 4
lea ecx, [esp + 0x78]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push 1
mov dword [esp + 0x38], ebx
mov dword [esp + 0x53c], 0xffffffff
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
xor eax, eax
jmp 0x43a5ae
mov ecx, dword [esp + 0x4c]
mov dword [esp + ecx*4 + 0x9c], ebx
push 1
lea ecx, [esp + 0x8c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x74]
mov ecx, dword [esp + 0x50]
inc esi
add ecx, 0x10
cmp esi, edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], ecx
jl 0x439c4f
mov edx, dword [esp + 0x6c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x70]
lea ecx, [eax*4]
push ecx
call fcn.0043c870
add esp, 4
xor edx, edx
cmp edi, ebx
mov dword [esp + 0x64], eax
jle 0x439f28
lea esi, [esp + 0x9c]
mov dword [esp + 0x24], edi
mov ecx, dword [esi]
cmp ecx, ebx
je 0x439f16
mov edi, dword [esp + 0x70]
dec edi
cmp edx, edi
jg 0x439f16
mov dword [eax], ecx
inc edx
add eax, 4
mov ecx, dword [esp + 0x24]
add esi, 4
dec ecx
mov dword [esp + 0x24], ecx
jne 0x439f01
mov eax, dword [esp + 0x64]
push 0x2710
push 1
push eax
push edx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov eax, dword [0x457ed4]
cmp eax, ebx
jne 0x43a0bb
mov dl, byte [esp + 0x78]
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
lea edx, [esp + 0x78]
mov ecx, dword [eax]
push ecx
push ebx
push edx
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x538], 0x12
cmp eax, ebx
jne 0x439fb1
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov ecx, dword [eax]
push ecx
push ebx
push 0x4582c0
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 0x457994
call ebp
add esp, 4
lea ecx, [esp + 0x38]
push eax
push 0x457994
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov dl, byte [esp + 0x13]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov ecx, esi
mov byte [esi], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.Maxthon.exe
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x439fff
mov eax, dword [esi + 4]
push edi
push str.Maxthon.exe
push eax
call fcn.00401270
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
sub esp, 0x10
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
mov byte [esp + 0x55c], 0x13
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x12
call fcn.0043a5d0
mov cl, byte [esp + 0x33]
add esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov byte [esi], cl
mov ecx, esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MxDownloader.exe
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a076
mov eax, dword [esi + 4]
push edi
push str.MxDownloader.exe
push eax
call fcn.00401270
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x14
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x12
call fcn.0043a5d0
add esp, 0x20
lea ecx, [esp + 0x38]
mov byte [esp + 0x538], 2
push 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
jmp 0x43a4ed
cmp eax, 2
jne 0x43a223
mov al, byte [esp + 0x78]
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
lea eax, [esp + 0x78]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x538], 0x15
cmp eax, ebx
jne 0x43a119
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push 0x4582c0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov al, byte [esp + 0x13]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.SkyFile.exe
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a167
mov eax, dword [esi + 4]
push edi
push str.SkyFile.exe
push eax
call fcn.00401270
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x16
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x15
call fcn.0043a5d0
mov al, byte [esp + 0x33]
add esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MxCrashReport.exe
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a1de
mov eax, dword [esi + 4]
push edi
push str.MxCrashReport.exe
push eax
call fcn.00401270
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x17
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x15
call fcn.0043a5d0
add esp, 0x20
lea ecx, [esp + 0x38]
mov byte [esp + 0x538], 2
push 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
jmp 0x43a4ed
cmp eax, 3
mov al, byte [esp + 0x78]
jne 0x43a3a3
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
lea eax, [esp + 0x78]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x538], 0x18
cmp eax, ebx
jne 0x43a281
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push 0x4582c0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov al, byte [esp + 0x13]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.V_drive.exe
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a2d3
mov eax, dword [esi + 4]
push edi
push str.V_drive.exe
push eax
call fcn.00401270
mov ecx, dword [esi + 4]
mov dword [esi + 8], edi
add esp, 0xc
mov word [ecx + edi*2], bx
lea eax, [ecx + edi*2]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x19
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x18
call fcn.0043a5d0
mov al, byte [esp + 0x33]
add esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push ebx
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push str.MxCrashReport.exe
call ebp
add esp, 4
mov ebp, eax
mov ecx, esi
push 1
push ebp
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a34e
mov eax, dword [esi + 4]
push ebp
push str.MxCrashReport.exe
push eax
call fcn.00401270
mov ecx, dword [esi + 4]
mov dword [esi + 8], ebp
add esp, 0xc
mov word [ecx + ebp*2], bx
lea ebp, [ecx + ebp*2]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x1a
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x18
call fcn.0043a5d0
mov ecx, dword [esp + 0x5c]
add esp, 0x20
cmp ecx, ebx
je 0x43a4ed
mov al, byte [ecx - 1]
cmp al, bl
je 0x43a4e1
cmp al, 0xff
je 0x43a4e1
dec al
mov byte [ecx - 1], al
jmp 0x43a4ed
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
lea eax, [esp + 0x78]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x538], 0x1b
cmp eax, ebx
jne 0x43a3f4
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov edx, dword [ecx]
lea ecx, [esp + 0x38]
push edx
push ebx
push 0x4582c0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
mov al, byte [esp + 0x13]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push str.Maxthon.exe
mov byte [esi], al
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
call ebp
add esp, 4
mov ecx, esi
push eax
push str.Maxthon.exe
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x1c
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x1b
call fcn.0043a5d0
mov al, byte [esp + 0x33]
add esp, 0x10
mov esi, esp
mov dword [esp + 0x58], esp
push str.MxCrashReport.exe
mov byte [esi], al
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
call ebp
add esp, 4
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x43a49b
mov eax, dword [esi + 4]
push edi
push str.MxCrashReport.exe
push eax
call fcn.00401270
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
sub esp, 0x10
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x55c], 0x1d
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov byte [esp + 0x558], 0x1b
call fcn.0043a5d0
mov ecx, dword [esp + 0x5c]
add esp, 0x20
cmp ecx, ebx
je 0x43a4ed
mov al, byte [ecx - 1]
cmp al, bl
je 0x43a4e1
cmp al, 0xff
je 0x43a4e1
dec al
mov byte [ecx - 1], al
jmp 0x43a4ed
lea eax, [ecx - 2]
push eax
call fcn.0043c8a0
add esp, 4
mov eax, dword [esp + 0x64]
push eax
call fcn.0043c8a0
add esp, 4
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
cmp esi, edi
mov byte [esp + 0x538], 1
je 0x43a52e
push 1
mov ecx, esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
add esi, 0x10
cmp esi, edi
jne 0x43a519
mov esi, dword [esp + 0x58]
push esi
call fcn.0043c8a0
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
add esp, 4
cmp esi, edi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov byte [esp + 0x538], bl
je 0x43a56b
push 1
mov ecx, esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
add esi, 0x10
cmp esi, edi
jne 0x43a556
mov esi, dword [esp + 0x2c]
push esi
call fcn.0043c8a0
mov ecx, dword [esp + 0x80]
add esp, 4
cmp ecx, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
je 0x43a5a9
mov al, byte [ecx - 1]
cmp al, bl
je 0x43a59d
cmp al, 0xff
je 0x43a59d
dec al
mov byte [ecx - 1], al
jmp 0x43a5a9
add ecx, 0xfffffffe
push ecx
call fcn.0043c8a0
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x530]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x52c
ret