Function at 0x7d221780
Capabilities:
Accept command line arguments

Disassembly:
jmp 0x7d24b770
mov qword [rsp + 0x20], rbx
push r14
sub rsp, 0x60
lea rcx, [0x7d2ac9e0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, qword [0x7d2abf58]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x7d24b793
mov rdx, qword [str.Sandbox]
or rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x7d24b7b0
add eax, ecx
lea ecx, [rax*2 + 6]
call fcn.7d221988
mov r9, qword [0x7d2abf58]
lea rdx, str._s:_s:
mov r8, qword [str.Sandbox]
mov rcx, rax
mov qword [0x7d2ac9c8], rax
call sym.imfsbDll.dll_Sbie_swprintf
mov rcx, qword [0x7d2ac9c8]
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x7d24b800
lea ebx, [rax + 1]
mov dword [0x7d2ac9d8], eax
mov ecx, ebx
call fcn.7d221988
mov r8, qword [0x7d2ac9c8]
or r9, 0xffffffffffffffff
mov qword [0x7d2ac9d0], rax
nop dword [rax]
inc r9
cmp word [r8 + r9*2], 0
jne 0x7d24b830
xor r14d, r14d
xor edx, edx
mov qword [rsp + 0x38], r14
xor ecx, ecx
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rax, qword [0x7d2ac9d0]
lea ecx, [rbx - 1]
mov byte [rcx + rax], r14b
test qword [0x7d2abfa0], 0x2000
je 0x7d24b895
mov byte [0x7d2ac9c0], 1
mov byte [0x7d2aa660], r14b
mov al, 1
mov rbx, qword [rsp + 0x88]
add rsp, 0x60
pop r14
ret
mov ebx, r14d
nop dword [rax + rax]
mov r8d, ebx
mov dword [rsp + 0x20], 0x10
bts r8d, 0x1d
lea r9, [rsp + 0x40]
lea rdx, str.OpenWinClass
xor ecx, ecx
call sym.imfsbDll.dll_SbieApi_QueryConf
inc ebx
test eax, eax
jne 0x7d24b8ef
movzx eax, word [rsp + 0x40]
cmp ax, 0x2a
je 0x7d24b8da
cmp ax, 0x23
jne 0x7d24b8a0
cmp word [rsp + 0x42], r14w
jne 0x7d24b8a0
xor al, al
mov byte [0x7d2aa660], al
jmp 0x7d24b9e1
cmp eax, 0xc0000023
je 0x7d24b8a0
movzx eax, byte [0x7d2aa660]
test al, al
je 0x7d24b9e1
mov qword [rsp + 0x70], rbp
mov ecx, 0x100
mov qword [rsp + 0x78], rsi
call fcn.7d2212da
mov r9, rax
mov dword [rsp + 0x20], 0xf0
xor r8d, r8d
lea rdx, str.NoRenameWinClass
xor ecx, ecx
mov rsi, rax
mov ebp, r14d
call sym.imfsbDll.dll_SbieApi_QueryConf
test eax, eax
js 0x7d24b9c8
mov qword [rsp + 0x80], rdi
nop dword [rax + rax]
inc ebp
mov word [rsi + 0xf0], r14w
or rbx, 0xffffffffffffffff
nop
inc rbx
cmp word [rsi + rbx*2], r14w
jne 0x7d24b960
lea ecx, [rbx*2 + 0x12]
call fcn.7d221988
lea r8d, [rbx + 1]
mov rdx, rsi
add r8, r8
mov rdi, rax
lea rcx, [rax + 0xc]
call sub.ntdll.dll_memcpy
mov rcx, qword [0x7d2aca08]
lea rdx, str.NoRenameWinClass
mov qword [rdi], rcx
mov r9, rsi
xor ecx, ecx
mov dword [rdi + 8], ebx
mov r8d, ebp
mov qword [0x7d2aca08], rdi
mov dword [rsp + 0x20], 0xf0
call sym.imfsbDll.dll_SbieApi_QueryConf
test eax, eax
jns 0x7d24b950
mov rdi, qword [rsp + 0x80]
mov rcx, rsi
call fcn.7d221938
movzx eax, byte [0x7d2aa660]
mov rsi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x70]
cmp byte [0x7d2ac9c0], r14b
jne 0x7d24b884
test al, al
jne 0x7d24ba4c
cmp dword [0x7d2abfb0], 0x15
jne 0x7d24ba4c
mov rcx, qword [0x7d2abf60]
lea rdx, str.maxthon.exe
call sub.ntdll.dll__wcsicmp
test eax, eax
jne 0x7d24ba3f
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, str._Run
call sub.ntdll.dll_wcsstr
movzx ecx, byte [0x7d2aa660]
test rax, rax
mov edx, 1
cmovne ecx, edx
mov byte [0x7d2aa660], cl
cmp byte [0x7d2ac9c0], r14b
jne 0x7d24b884
mov rdx, qword [0x7d2ac710]
lea r8, [0x7d24b2a0]
lea rcx, str.GetClassNameA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac710], rax
test rax, rax
jne 0x7d24ba83
xor al, al
mov rbx, qword [rsp + 0x88]
add rsp, 0x60
pop r14
ret
mov rdx, qword [0x7d2ac718]
lea r8, [0x7d24b480]
lea rcx, str.GetClassNameW
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac718], rax
test rax, rax
je 0x7d24ba72
cmp byte [0x7d2aa660], r14b
je 0x7d24b884
mov rdx, qword [0x7d2ac6f0]
lea r8, [0x7d24afa0]
lea rcx, str.GetClassInfoA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6f0], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6f8]
lea r8, [0x7d24b1e0]
lea rcx, str.GetClassInfoW
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6f8], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac700]
lea r8, [0x7d24b060]
lea rcx, str.GetClassInfoExA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac700], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac708]
lea r8, [0x7d24b120]
lea rcx, str.GetClassInfoExW
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac708], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6b0]
lea r8, [0x7d24c2c0]
lea rcx, str.RegisterClassA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6b0], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6b8]
lea r8, [0x7d24c680]
lea rcx, str.RegisterClassW
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6b8], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6c8]
lea r8, [0x7d24c400]
lea rcx, str.RegisterClassExA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6c8], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6d8]
lea r8, [0x7d24c540]
lea rcx, str.RegisterClassExW
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6d8], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6e0]
lea r8, [0x7d24c810]
lea rcx, str.UnregisterClassA
call sym.imfsbDll.dll_SbieDll_Hook
mov qword [0x7d2ac6e0], rax
test rax, rax
je 0x7d24ba72
mov rdx, qword [0x7d2ac6e8]
lea r8, [0x7d24c8a0]
lea rcx, str.UnregisterClassW
call sym.imfsbDll.dll_SbieDll_Hook
mov rbx, qword [rsp + 0x88]
test rax, rax
mov qword [0x7d2ac6e8], rax
setne al
add rsp, 0x60
pop r14
ret